Sole Global Admin locked out by MFA – error 399287 – phone support unreachable

Question

Sole Global Admin locked out by MFA – error 399287 – phone support unreachable

Eilev Haukaas 0

Hello,

I am the sole Global Administrator of the tenant dyrket.onmicrosoft.com, and I am completely locked out due to an MFA verification failure. I am requesting escalation to the Data Protection / Tenant Recovery team for an admin MFA reset, as all standard support channels are inaccessible to me.

Situation:

Tenant: dyrket.onmicrosoft.com
Locked account (UPN): [Moderator note: Personally Identifiable Information removed]
I am the only Global Administrator – there is no other admin who can reset my MFA
This is a company (work) account, Microsoft 365 for business

The error:

Every sign-in attempt fails at the MFA verification step with the message "Sorry, we're having trouble verifying your account" (Norwegian: "Beklager, vi har problemer med å bekrefte kontoen din").

Error Code: 399287
Request Id: [Moderator note: Personally Identifiable Information removed]
Correlation Id: [Moderator note: Personally Identifiable Information removed]
Timestamp: 2026-08-17T17:11:28Z

Both available verification methods fail: the verification code option and the SMS option. The error is identical across devices, browsers, and networks, including private/incognito mode, so this does not appear to be a client-side issue.

What I have already tried:

Verification code and SMS – both fail with error 399287
Multiple browsers, incognito mode, different devices and networks – same error
Phone support – calls disconnect every time before I can reach an agent
aka.ms/cloud-admin-recovery – not available for my domain
All web-based support forms – they require signing in to the tenant, which is impossible due to this exact MFA lockout

Because sign-in is blocked by MFA, there is no other Global Admin, and phone support is unreachable, I have no working path to open a support case. I understand this scenario requires the Data Protection / Tenant Recovery team, who can verify tenant ownership and reset MFA registration.

I can provide documentation of ownership (company registration details, domain ownership, billing information) as required.

Could a moderator please escalate this to the Data Protection team, or advise how they can contact me directly?

Thank you.

0 comments

1 answer

Your answer

Answer 1

Hi Eilev,

If you cannot reach a live agent by phone, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription and submit your request from there.

Here are the reference threads showing that this workaround works:

Sole admin recovery and MFA reset

Error 399287 – Administrator Account Locked Out Due to MFA Verification Failure

To set up a new tenant, please follow these steps below:

Visit Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.

Follow the guided setup process to create a new account for a new tenant.

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues

In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt:

"Hello, I’m currently unable to manage my previous Microsoft 365 tenant because my admin account was compromised earlier this year. I was originally the Global Administrator, but my admin privileges were removed and an unauthorized account was granted administrative access. That account has since been blocked, but I remain a standard user and no longer have the permissions required to manage the tenant.

I created this new tenant solely to request assistance. I kindly ask to be connected with the Data Protection team so that tenant ownership and administrator access can be verified and restored. I am available to provide any documentation or verification required to confirm ownership of the tenant and support the recovery process.

This is urgent, as the loss of administrative control is impacting my ability to manage Microsoft 365 services and restore normal operations for the organization."

Ticket Support: In the Microsoft 365 Admin Center > Support > Help & Support. You can raise support ticket at https://admin.microsoft.com/#/support/requests
Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

I truly hope this guidance helps you regain administrative control of your Microsoft 365 tenant as quickly as possible. Even though I can't directly intervene, directing you to the correct and specialized support is the most effective help I can provide from my position.