Sole Global Administrator locked out by Microsoft Authenticator MFA — Tenant Recovery required

Ghennadi Iacovlev 0 Reputation points
2026-09-14T14:08:16.2266667+00:00

Sole Global Administrator locked out by Microsoft Authenticator MFA — Tenant Recovery required

I am locked out of an existing Microsoft 365 / Microsoft Entra tenant.

The password for the sole Global Administrator is accepted, but MFA cannot be completed.

The only available verification methods are:

  • Approve a request in Microsoft Authenticator
  • Use a verification code

Microsoft Authenticator still shows the Entra ID account as connected, but no usable verification code is displayed and the MFA challenge cannot be completed.

There are no other known Global Administrators and no usable alternative authentication methods.

Microsoft 365 Admin Center and Entra Admin Center therefore cannot be accessed.

This is an existing production tenant and I do not want to create or migrate to another tenant.

I have full control of the tenant's custom domain and DNS and can prove domain ownership through DNS TXT verification. I can also provide subscription/billing and company ownership information privately if required.

Please have a Microsoft External Staff moderator engage the Data Protection / Tenant Recovery team through a support ticket for ownership verification and reset/re-registration of the authentication methods for the sole Global Administrator.

Please contact me via Private Message for Tenant ID, affected administrator UPN, contact email, telephone number, or any other identifying information. I will not publish those details publicly.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

1 answer

Sort by: Oldest
Most helpful Newest Oldest
  1. Jay1 Tran 1,125 Reputation points Independent Advisor
    2026-09-14T15:20:36.11+00:00

    Hi Ghennadi,

    I hope you're doing well.

    I’m truly sorry to hear that you’re currently unable to sign in. If your account is also an admin account and there are no other available global administrators in your tenant, then the only way to regain access is contact Microsoft support. Please try locating the appropriate hotline for your region here: Customer service phone numbers - Microsoft Support 

    As this is a user-to-user support forum, I can only offer guidance based on similar cases. I do not have access to your tenant or account. Only Microsoft Support can verify the tenant status, assist with Global Administrator/MFA recovery, and determine available recovery options.  

    In this situation, the Microsoft Data Protection team has tools and processes in place to verify identity and regain access to administrator accounts. 

    Here are some tips and an example of a prompt to help you navigate the IVR more effectively: 

    (When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)   

    In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:     

    • What kind of problem are you experiencing?        
    • Answer: Authenticator        
    • What products do you use?        
    • Answer: Office 365 for business        
    • Is this for an education or company account?        
    • Answer: For companies        
    • Are you an administrator?        
    • Answer: Yes        
    • Are there any other administrators in your organization?        
    • Answer: No. I am the only admin in my tenant         
    • Do you need a... Service request?         
    • Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.     

    During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account.     

     

    I also recommend calling during business hours. In my experience, it can be difficult to get through to the correct support queue, and automated systems don't always work as expected. If you can't get through on your first try, I suggest trying again later or at a different time.

     

    I know being locked out of the only admin account can be stressful, but contacting the Data Protection team is the correct path forward in this scenario.

    I hope these steps help you create a support ticket successfully and move closer to regaining access to your administrator account. While I’m not able to intervene directly, guiding you to the right support team is the most effective help I can provide here. 

    Hope you're able to get this resolved soon.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.