Sole Global Admin locked out of a DIFFERENT Microsoft 365 tenant due to MFA

Question

Sole Global Admin locked out of a DIFFERENT Microsoft 365 tenant due to MFA

benas satkus 0

Hello,

Important: I am posting this question from my personal Microsoft account because I cannot sign in to the affected Microsoft 365 Business administrator account. The account I am posting from is NOT the affected account.

I am the sole Global Administrator of a separate Microsoft 365 Business tenant and I am completely locked out due to Microsoft Authenticator MFA.

I know the password for the affected administrator account. However, Microsoft Authenticator on my phone is no longer correctly registered for that account, so I cannot complete MFA.

When I select “I can't use my Microsoft Authenticator app right now”, Microsoft only offers:

Approve a request on Microsoft Authenticator
Use a verification code from Microsoft Authenticator

Both options depend on the same Authenticator registration that I can no longer access.

There are no other Global Administrators in the affected tenant who can reset my authentication methods or require MFA re-registration.

I can still access some Microsoft 365 resources through existing Office sessions on my Mac, but any new interactive sign-in requires the unavailable Authenticator MFA.

I also tried Microsoft phone support in Lithuania. The automated system asks me to enter an 8-digit extension, but I do not have one because I cannot access the affected Microsoft 365 Admin Center to create a support request.

I have also tried the available self-service recovery options without success.

This appears to be a sole Global Administrator tenant lockout.

Could a Microsoft moderator please help create/escalate a support case to the Microsoft Data Protection / Tenant Recovery team so that my ownership of the affected tenant can be verified and the MFA registration of the sole Global Administrator can be reset?

I can privately provide the affected administrator email address, tenant domain, company details, subscription/billing information, proof of domain/DNS ownership, and any other information required for verification.

Again, the Microsoft account used to post this Q&A question is only my personal contact account and is NOT the locked Microsoft 365 administrator account.

This is urgent because the affected tenant is our company's active Microsoft 365 environment.

Thank you.

benas satkus 0 Reputation points

2026-09-09T18:57:29.93+00:00

Thank you for your response.

Unfortunately, creating a separate trial tenant is not a suitable option for me.

My Microsoft 365 Business Standard subscription was purchased directly from Microsoft, not through a reseller or partner, and I have access to the original Microsoft purchase and subscription renewal emails, including the tenant and order information.

The main problem is that I currently have no way to open a support case for the affected tenant. When I call the official Microsoft support number for Lithuania, the automated system asks me to enter an 8-digit extension, which I do not have because I have not been able to create a support case.

I have found other Microsoft Q&A cases involving a sole Global Administrator MFA lockout where a Microsoft moderator was able to help initiate contact with the Data Protection team.

Is there any way you can help me obtain a support case / callback, or internally direct me to the appropriate Microsoft support channel for a sole Global Administrator tenant lockout, without requiring me to create another Microsoft 365 tenant?

I can provide all tenant, subscription, billing and ownership verification information privately.

Thank you.
Ryan-N 15,910 Reputation points Microsoft External Staff Moderator

2026-09-09T19:06:38.52+00:00

Hi benas,

Thank you for your response.

At this time, moderators on the forum are not able to directly assist you in contacting Microsoft's Data Protection team.

This process can only be initiated by a Global Administrator of a tenant. This requirement is in place to ensure security and prevent individuals from impersonating a Global Administrator when submitting support requests.

In addition, I would like to clarify that the purpose of creating a trial tenant is to allow you to submit a support request to Microsoft through that tenant. Once the support request has been successfully created, a Microsoft support engineer will contact you.

At that point, you can explain to the support engineer that you have lost access to your current tenant. They will guide you through the process of providing the necessary documentation to verify ownership of the tenant. After the verification process has been completed and approved, Microsoft will assist you in restoring access to your tenant.

If you have any questions or need further assistance, please feel free to share them in the comments on this post so I can continue to support you.

I look forward to continuing the conversation.

1 answer

Your answer

benas satkus 0 Reputation points

2026-09-09T18:57:29.93+00:00

Thank you for your response.

Unfortunately, creating a separate trial tenant is not a suitable option for me.

My Microsoft 365 Business Standard subscription was purchased directly from Microsoft, not through a reseller or partner, and I have access to the original Microsoft purchase and subscription renewal emails, including the tenant and order information.

The main problem is that I currently have no way to open a support case for the affected tenant. When I call the official Microsoft support number for Lithuania, the automated system asks me to enter an 8-digit extension, which I do not have because I have not been able to create a support case.

I have found other Microsoft Q&A cases involving a sole Global Administrator MFA lockout where a Microsoft moderator was able to help initiate contact with the Data Protection team.

Is there any way you can help me obtain a support case / callback, or internally direct me to the appropriate Microsoft support channel for a sole Global Administrator tenant lockout, without requiring me to create another Microsoft 365 tenant?

I can provide all tenant, subscription, billing and ownership verification information privately.

Thank you.
Ryan-N 15,910 Reputation points Microsoft External Staff Moderator

2026-09-09T19:06:38.52+00:00

Hi benas,

Thank you for your response.

At this time, moderators on the forum are not able to directly assist you in contacting Microsoft's Data Protection team.

This process can only be initiated by a Global Administrator of a tenant. This requirement is in place to ensure security and prevent individuals from impersonating a Global Administrator when submitting support requests.

In addition, I would like to clarify that the purpose of creating a trial tenant is to allow you to submit a support request to Microsoft through that tenant. Once the support request has been successfully created, a Microsoft support engineer will contact you.

At that point, you can explain to the support engineer that you have lost access to your current tenant. They will guide you through the process of providing the necessary documentation to verify ownership of the tenant. After the verification process has been completed and approved, Microsoft will assist you in restoring access to your tenant.

If you have any questions or need further assistance, please feel free to share them in the comments on this post so I can continue to support you.

I look forward to continuing the conversation.

Answer 1

Hi benas,

Welcome to the Microsoft Q&A forum.

First of all, I hope you understand that the moderators and users on this forum are not able to directly escalate your issue to Microsoft's Data Protection team.

I understand that you mentioned you have already tried contacting Microsoft by phone, but have not achieved the desired result.

I have a workaround that you may want to try:

You can create a trial tenant. Through this trial tenant, you can open a support ticket with Microsoft's Technical Support team. After creating the ticket, you can disable automatic renewal for the trial tenant to avoid being charged when the trial period expires.

To create a trial tenant, please visit the following link:

Microsoft 365 Pricing for Business: Plans & Features

User's image

After creating the trial tenant, please refer to the following documentation for instructions on how to create a support ticket:

Get support - Microsoft 365 admin | Microsoft Learn

Once the support ticket has been created successfully, please follow the instructions in the document below to disable automatic renewal:

Manage recurring billing in the Microsoft 365 admin center | Microsoft Learn

I hope this information is helpful.

If you have any questions or need further assistance, please feel free to share them in the comments on this post so I can continue to support you.

I look forward to continuing the conversation.

If the answer is helpful, please click "Yes" and kindly upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.