Sole global admin locked out by MFA (Authenticator on a lost device, no backup methods) - requesting tenant recovery

Jeroen Haverkorn van Rijsewijk 0 Reputation points
2026-09-15T07:44:29.7666667+00:00

I am the sole global administrator of my Microsoft 365 tenant and I can no longer sign in. I would like to be pointed to the correct admin account recovery path.

What happened: I replaced my phone. The old device is gone, so nothing could be transferred. Microsoft Authenticator with number matching was the only MFA method registered on my admin account.

My password is accepted. The sign-in then stops at the number matching screen. The link "I can't use my Microsoft Authenticator app right now" produces no alternatives, which I take to mean no second method is registered.

Tenant ID: [Moderator note: Personally Identifiable Information removed] Subscription: Microsoft 365 Business Basic, one licence, active and paid up to date.

There is no second global administrator, so there is nobody in the tenant who can reset this for me.

Already ruled out:

  • mysignins.microsoft.com and aka.ms/mfasetup, both blocked at the same MFA prompt
  • existing browser sessions on my Mac, expired
  • Authenticator cloud backup restore on the new phone, no backup exists
  • consumer support by phone, they cannot act on a work or school account

What I am asking for is escalation to the team that handles tenant recovery for a locked out global administrator. I can prove ownership through a DNS TXT record and through the full billing history, including the order number, the invoice numbers and the registered billing details. I will supply the UPN and the billing specifics privately rather than post them here.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Aetherin 1,725 Reputation points Independent Advisor
    2026-09-15T10:56:14.1466667+00:00

    Hi @Jeroen Haverkorn van Rijsewijk,

    First of all, I'm sorry to hear about the situation you're in. Since this is a user-to-user community forum, community members unfortunately cannot create support tickets, make changes to tenant settings, or escalate cases on your behalf.

    The best next step is to contact Microsoft Support by phone so that the frontline support team can create a support case and route it to the Data Protection Team (DPT), which is the team that typically handles tenant ownership verification and administrator account recovery scenarios such as this one.

    You can find the appropriate phone number for your region here: Contact Microsoft customer support

    User's image

    Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

    (When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

    In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:

    What kind of problem are you experiencing?

    Answer: Authenticator

    What products do you use?

    Answer: Office 365 for business

    Is this for an education or company account?

    Answer: For companies

    Are you an administrator?

    Answer: Yes

    Are there any other administrators in your organization?

    Answer: No. I am the only admin in my tenant

    Do you need a... Service request?

    Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.

    During the phone call, you will need to provide the information you have received through your subscription, such as: Your company name, billing information, phone number, alternate email address, etc. Therefore, our privacy team can help you reset your multi-factor authentication, and after the reset, you can add your account back to your authenticator app on your new phone and set it up from scratch or choose a different authentication method to log in to your account.

    I sincerely hope you're able to complete the ownership verification process successfully and regain access to your tenant as soon as possible.

    Best of luck and thank you for taking the time.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.