Sole Global Administrator locked out after Microsoft Authenticator loss

Job Chen 0 Reputation points
2026-09-03T14:42:24.4833333+00:00

I am the sole Global Administrator of a Microsoft 365 tenant.

My phone was reset, and the Microsoft Authenticator registration associated with the administrator account is no longer available.

I still know the correct administrator username and password, but I cannot complete the MFA challenge because the only available verification methods require the previous Authenticator registration.

There is no second Global Administrator in the tenant, and I do not have another usable authentication method.

I have already tried the standard MFA recovery and sign-in options, but they all return me to the same unavailable Authenticator verification.

This is a sole Global Administrator tenant lockout, not a password reset issue.

The Microsoft 365 subscription was purchased directly from Microsoft, not through a reseller or CSP.

Could a Microsoft support representative please advise how I can start the tenant ownership verification process and have the administrator MFA registration reset?

I can provide tenant details, billing information, subscription information, and proof of ownership through a private support channel if required.

Thank you.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alina Le 4,920 Reputation points Independent Advisor
    2026-09-03T15:12:08.1533333+00:00

    Hello Job,

    First, I need to clarify that, in this forum, support is provided through thread-based conversations only. I cannot conduct remote sessions or directly access backend customer account data to investigate and resolve the issue as you might expect.

    However, I would like to provide all the information I can to help you reach out to Microsoft Engineering Support. They can verify your account using the information mentioned above (tenant details, billing information, subscription information, and proof of ownership) and assist you in regaining access to your only Global Administrator account.

    After that, I also recommend taking additional preventive measures to help avoid this issue in the future, such as assigning additional Global Administrator accounts within your tenant. This can help ensure easier administration and provide a recovery option if access issues occur again.

    1/ Contacting Microsoft Data Protection team by phone support

    In this situation, the Microsoft Data Protection team has tools and processes in place to verify identity and regain access to administrator accounts.     

    Therefore, if you are the only administrator in your organization, then you need to involve Microsoft data protection team. Please try to find the related hotline number to call the frontline let them raise a ticket for you: Customer service phone numbers - Microsoft Support

    If you can use English, you may prefer these numbers:

    copyImage

    copyImage

    (Important Note: Depending on your country or region, when you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

    In some countries, this is an automated conversation: First, when you call the hotline, they will ask you what kind of problem you are struggling with.

    Answer: Authenticator.

    A: What products do you use?

    B: Office 365 for business.

    Verification: Education or company account?

    B: For companies

    A: Are you an administrator?

    B: Yes.

    A: Are there any other administrators in your organization?

    B: No.

    A: I need one.... Service request?

    B: Yes  

    *Please try "2 or 3"times until you can reach out to an agent.

    2/ Another work around

    If you still cannot reach to agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.   

    For detailed guidance, to set up a new tenant, please follow these steps:    

    User's image User's image

    Once your tenant is created, you should be able to access the support portal and submit your ticket without further issues 

    Ticket Support: In the Microsoft 365 Admin Center->Support->Help & Support. You can raise support ticket In Microsoft Admin Center by this link:

    https://admin.microsoft.com/#/support/requests

    User's image

    User's image User's image User's image

    Tips: You can switch off the Support Assistant as shown in the screenshot, then type "Contact Support" into the search box and select "Contact Support" or the "earphone symbol" above..

    • Choose "Phone" support and fill all the details of this issue.
    • Click "Contact me"

    After completing them, you will receive an email appointment for a meeting to review this issue professionally together.

    After successfully regaining access to your admin account, to prevent this issue from happening again, consider assigning one or two additional global admins to your tenant. That way, they’ll be able to help reset MFA in similar situations without having to contact customer support. 

    Assign admin roles in the Microsoft 365 admin center - Microsoft 365 admin | Microsoft Learn 

    Manage authentication methods for Microsoft Entra multifactor authentication - Microsoft Entra ID | Microsoft Learn 

    I hope I've been able to help in some way. Please keep me posted.

    Kind regards,

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.