Sole Global Administrator locked out by MFA — Tenant Recovery required

Question

Sole Global Administrator locked out by MFA — Tenant Recovery required

Andrei Matylevich 0

I am the sole Global Administrator of my Microsoft 365 tenant.

My password works and I have successfully reset it, but Microsoft Authenticator MFA no longer works.

Push notifications do not arrive, verification codes are rejected, and “Sign in another way” shows no SMS, email, phone, or other alternative authentication methods.

I therefore cannot access Microsoft 365 Admin Center or Microsoft Entra Admin Center to reset MFA myself.

I also have an active Windows 365 Business subscription that I need to manage/cancel, but I cannot access the tenant because of this MFA lockout.

Phone support only redirects me back to the online support page.

Please assist with escalation to the Microsoft Data Protection / Tenant Recovery team. I can provide tenant ownership, billing information and other verification details privately.

0 comments

2 answers

Your answer

Answer 1

Andrei Matylevich 0

Thank you. I have already tried the Swiss Microsoft support phone line multiple times during business hours. The IVR does not allow me to create a ticket and redirects me back to the online support page / aka.ms, which I cannot use because the tenant admin account is locked by MFA.

I am the sole Global Administrator and there is no second administrator who can reset my authentication methods.

Could a Microsoft Moderator or Microsoft External Staff member please advise how I can get a support case created for the Data Protection / Tenant Recovery team without access to the Admin Center?

I can provide tenant ownership, billing and subscription details privately.

Lin v 1,380 Reputation points Independent Advisor

2026-09-16T15:29:49.6866667+00:00

Hi Andrei,

Thank you for the additional details.

Given that you have already tried contacting the Swiss Microsoft support phone line and were unable to get a case created, I would suggest trying the alternative workaround mentioned earlier: creating a temporary trial Microsoft 365 tenant and using that tenant to open a support case with Microsoft.

Unfortunately, support cases can generally only be created through Microsoft Support channels. No community members on this forum have access to Microsoft's internal ticketing system and cannot create a case on your behalf.

If the phone support route is not working in your region, creating a support ticket via the temporary trial tenant may be the most practical way to reach a Microsoft support engineer and explain that you are locked out of the original tenant and require assistance from the Data Protection team.

Answer 2

Hi Andrei,

From what you've shared, this issue is indeed treated as a tenant ownership or administrator access recovery scenario. In such cases, there is no self-service method to regain control, and the correct path is to request assistance from Microsoft.

Just to briefly clarify before we go any further, independent consultants, including myself, are members of the community and do not have access to user account settings, and cannot assist with logging in, resetting passwords or directly escalate cases to the Data Protection team.

I understand that you’ve already attempted to reach support by phone without success. In this situation, you may consider contacting Global Customer Support again (Work account) and following the script below to help navigate the automated phone system more effectively.

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

IVR: What problem is bothering you?
Customer: Lost access to the only admin account
IVR: What product do you use?
Customer: Office 365 for business
IVR: School or Business Account?
Customer: Companies
IVR: Are you an administrator?
Customer: Yes
IVR: Is there another administrator in your organization?
Customer: No. I am the only admin in my tenant
IVR: Do you need to create a support ticket?
Customer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.

I also recommend calling during business hours. In my experience, it can be difficult to get through to the correct support queue, and automated systems don't always work as expected.

If you still cannot reach a live agent, a possible workaround is to create a separate Microsoft 365 trial tenant and use it solely to submit a support request.

Here's how you can do it:

1/ Go to Microsoft 365 Business Plans & Pricing | Microsoft 365 (select "Try for free" in an enterprise subscription).

2/ Follow the instructions provided to create a trial tenant.

3/ Once the new tenant is created, go to the Microsoft 365 Admin Center > Help and Support to submit a support ticket, requesting to speak with the Data Protection Team on behalf of your original tenant.

4/ In the ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant as a single admin and that you need help from the Data Protection team.

5/ Remember to cancel the trial subscription of the new tenant once the issue with the original account is resolved, to avoid unwanted charges. Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn.

I hope the information provided will help guide you in the right direction. While I can't take direct action, I sincerely hope that the steps and recommendations I've shared can assist you through the process.