Sole Global Administrator locked out of Microsoft 365 tenant after losing Authenticator MFA – no alternative admin or MFA method

N P 0 Reputation points
2026-09-10T17:18:02.9266667+00:00

I am the sole Global Administrator of a Microsoft 365 Business tenant.

After replacing my phone, I lost access to the Microsoft Authenticator registration associated with the tenant. I still know the username and password, but I cannot complete MFA.

There is:

  • no second Global Administrator,
  • no alternative MFA method,
  • no working Authenticator registration on the new phone.

Because of this, I cannot access Microsoft 365 Admin Center, Microsoft Entra Admin Center, or Security Info.

I have already contacted Microsoft Support multiple times. The agents confirmed that this is a Microsoft 365 Business tenant recovery / MFA recovery scenario, but the support channels I reached were unable to create or escalate a tenant recovery case. I was repeatedly redirected to other support pages that require authentication to the same locked tenant.

I also managed to create a service request from another Microsoft account, but when attempting to open it, Microsoft displayed:

“Service request is not owned by you.”

I need a concrete recovery path for a sole Global Administrator tenant lockout.

Specifically, I would like to know:

  1. Which Microsoft support team handles sole Global Administrator MFA lockouts?
  2. How can I create a tenant recovery case when I cannot authenticate to the affected tenant?
  3. Can the case be opened from another Microsoft account or another Microsoft 365 tenant?
  4. What ownership verification will Microsoft require, such as DNS/domain verification, billing information, or company details?

I can provide proof of domain ownership and subscription ownership to Microsoft Support when requested.

Please do not suggest signing in to the affected Admin Center, as that is exactly what I am unable to do because of the MFA lockout.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

1 answer

Sort by: Newest
Most helpful Newest Oldest
  1. Ivory 1,155 Reputation points Independent Advisor
    2026-09-10T17:26:41.4133333+00:00

    Hi N P,

    If your account is also an admin account and there are no other available global administrators in your tenant, then the only way to regain access is contact Microsoft support. Please try locating the appropriate hotline for your region here: Customer service phone numbers - Microsoft Support 

    In this situation, the Microsoft Data Protection team has tools and processes in place to verify identity and regain access to administrator accounts. 

    Here are some tips and an example of a prompt to help you navigate the IVR more effectively: 

    (When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)   

    In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:     

    • What kind of problem are you experiencing?        
    • Answer: Authenticator        
    • What products do you use?        
    • Answer: Office 365 for business        
    • Is this for an education or company account?        
    • Answer: For companies        
    • Are you an administrator?        
    • Answer: Yes        
    • Are there any other administrators in your organization?        
    • Answer: No. I am the only admin in my tenant         
    • Do you need a... Service request?         
    • Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.     

    During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account.     

    In case you are unable to contact the frontline support:

    Consider signing up for a trial subscription to create a new tenant. Once set up, you can access the new tenant's admin console and submit a support ticket to speak with the data protection team on behalf of the previous tenant. Once your issue is resolved, please remember to cancel the trial subscription to avoid any unintended charges.

    If your organization's subscription is from a partner or reseller: Contact the reseller's support provider to help open a service request on behalf of you instead.

    I hope this helps point you in the right direction. If you have any updates or additional questions, feel free to reply back and I'll do my best to assist further.

    If the answer is helpful, please click 'Yes' and kindly upvote it.

    Note: Please follow the steps in the forum documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.