Microsoft 365 Global Admin locked out due to MFA – need MFA reset/account recovery

HR 0 Reputation points
2026-09-14T09:10:27.0766667+00:00

I am the Global Administrator of my Microsoft 365 business tenant.

I am unable to access the Microsoft 365 Admin Center because I cannot complete MFA authentication. I need assistance resetting/re-registering MFA and recovering Global Administrator access.

There is currently no other Global Administrator available who can reset my authentication methods.

I can verify ownership of our organization/domain through the appropriate Microsoft support process if required.

Please advise how I can recover Global Administrator access.

Microsoft Security | Microsoft Authenticator
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Bence Weiszmann 1,810 Reputation points
    2026-09-14T09:19:38.36+00:00

    Dear @HR

    If you don’t have any other alternative authentication method available, you will need to contact the Microsoft Data Protection Team using the following link and the methods described above. They can assist with recovering access when you’re unable to complete the verification process using your existing authentication methods. You can start the following link: https://support.microsoft.com/en-us/support/

    Some countries, the call may be handled by an automated conversation. For example:

    1. What kind of problem are you concerned about?
      1. Authenticator
    2. What kind of product are you using?
      1. Office 365 for business/Azure portal/Entra ID
    3. Is this an education or company account?
      1. Company
    4. Are you an administrator?
      1. Yes
    5. Do you have another administrator in your organization?
      1. No
    6. You need to create a service request
      1. Yes

    Once you reach a support engineer, I would be very explicit:

    “This is a Microsoft Entra tenant lockout. The only Global Administrator account is no longer accessible, and there are no other Global Administrators in the tenant. We need to recover administrative access to the tenant. Please escalate this case to the Data Protection / Tenant Recovery team.”

    Have the following information ready for the ownership verification:

    • Tenant ID
    • Initial *.onmicrosoft.com domain
    • Microsoft 365 subscription and billing information
    • Company information
    • Details about the previous Global Administrator
    • Any other information Microsoft requests to verify ownership

    Other option would be to create a temporary Microsoft 365 tenant using a trial subscription. You can then use this tenant to access the Microsoft 365 Admin Center and contact Microsoft Support. Once the new tenant is set up, sign in to the Microsoft 365 Admin Center and go to Support › Help & Support. Open a new support request and explain that you need help recovering access to your original tenant. In the request, mention that you are the Global Administrator of the original tenant and that you are currently locked out because you no longer have access to the MFA method required to sign in. **One important thing:**the trial tenant is only needed to contact Microsoft Support. After you regain access to your original tenant and the issue has been resolved, remember to CANCEL the trial subscription so you don't accidentally get charged.

    Microsoft's instructions for cancelling a trial subscription can be found here: https://learn.microsoft.com/en-us/microsoft-365/commerce/subscriptions/cancel-your-subscription?view=o365-worldwide&#how-do-i-cancel-my-free-trial

    Best regards,
    Bence

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-09-14T09:10:45.4766667+00:00

    If no other Global Administrator is available, MFA reset for the locked admin account cannot be completed through the admin portals. Recovery must go through Microsoft’s tenant/account recovery and identity verification process.

    Recommended path:

    1. Try another verification method if one was previously registered.
      • On the sign-in prompt, select Other verification options.
      • If another method is available, use it to sign in.
    2. If no alternate MFA method is available, contact Microsoft support through public support channels.
    3. If Microsoft asks for proof of ownership, the verification process can include:
      • Official business documentation
      • Domain ownership
      • Publicly listed organization or nonprofit registration data
    4. If a Microsoft partner created or manages the tenant, contact that partner directly.
      • If the partner has GDAP with password reset roles, the partner can work directly to restore access.
      • If the partner has GDAP but not the required password reset roles, use the Self Service Password Reset tool if it is enabled; otherwise the tenant Global Administrator must contact Microsoft support.
    5. If repeated MFA attempts caused a temporary block, wait and try again later or use a different MFA method.
      • Microsoft Entra multifactor authentication can block additional attempts after unusual repeated sign-ins.
    6. If another admin becomes available later, that admin can check whether the account is blocked from sign-in.
      • In the Azure portal: Microsoft Entra ID > Users > open the affected user > check Block sign in.
      • If enabled, disable it.

    Prevention after access is restored:

    • Keep more than one privileged admin available.
    • Have at least one Privileged Authentication Administrator in case a Global Administrator is locked out.
    • Require administrators to register multiple MFA recovery methods.
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.