Sole Global Administrator locked out due to Microsoft Authenticator MFA

Bini Nandra 0 Reputation points
2026-09-14T10:34:58.8366667+00:00

I am the sole Global Administrator for my Microsoft 365 business tenant.

I am unable to access Microsoft 365, SharePoint or the Admin Centre because MFA is requesting a 6-digit verification code from Microsoft Authenticator.

My Microsoft Entra ID account is present in Authenticator but it is not providing the required 6-digit code. The app shows that 2-step verification needs to be set up but I cannot complete the setup because signing into the Microsoft security setup page also requires the missing MFA code.

I have no alternative administrator account or authentication method available.

Please help reset my MFA registration or escalate this to the appropriate account/tenant recovery team so I can regain access and register Microsoft Authenticator again.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments No comments

1 answer

Sort by: Most helpful
  1. Hin Vo 700 Reputation points Independent Advisor
    2026-09-14T11:06:03.8533333+00:00

    Hi @Bini Nandra

    Based on your description, this is a tenant lockout scenario where the only Global Administrator is unable to complete MFA and there is no alternate administrator available to reset authentication methods. Microsoft's Data Protection Team (DPT) is the only team authorized to validate tenant ownership and assist with recovery of a sole administrator account.

    To regain access, you will need to contact Microsoft Support and request escalation as a Tenant Lockout / Sole Global Administrator MFA Recovery case via phone service number: Contact Microsoft Support

    When calling the support number, you may first hear a recorded message lasting approximately 30 seconds (for example, suggesting that you visit an online support page). You can simply wait for the menu options to be presented. Typically, selecting "1" for business users and then "1" again for technical support will guide you to the appropriate support flow.

    In some regions, the initial interaction may be handled entirely by an automated system. To help you prepare, below is an example of the questions you may receive and the recommended responses:

    What kind of problem are you experiencing?

    Answer: Authenticator

    What product are you using?

    Answer: Office 365 for business

    Is this for an education or company account?

    Answer: For companies

    Are you an administrator?

    Answer: Yes

    Are there any other administrators in your organization?

    Answer: No. I am the only administrator in the tenant.

    Do you need a Service Request?

    Answer: Yes. I need to open a support ticket. Please transfer me to the Data Protection team.

    Please note that this team is always overwhelmed, so you might need to wait for them to call you, this should take 3-10 working days.

    In case the phone support line is unavailable or unable to assist, you could consider to create a separate Microsoft 365 trial tenant and use it solely for submitting a support request.

    Here's how you can do it:

    Go to Microsoft 365 Business Plans & Pricing | Microsoft 365 (select "Try for free" in an enterprise subscription).

    Follow the instructions provided to create a trial tenant.

    Once the new tenant is created, go to the Microsoft 365 Admin Center > Help and Support to submit a support ticket, requesting to speak with the Data Protection Team on behalf of your original tenant.

    In the ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant as a single admin and that you need help from the Data Protection team.

    Note:

    I hope this information helps you successfully escalate your request and regain access to your tenant. If you have any updates or additional questions, please feel free to reply to this thread. I will be happy to continue assisting you.

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.