URGENT – Sole Global Administrator locked out – MFA reset / Tenant Recovery required

Question

URGENT – Sole Global Administrator locked out – MFA reset / Tenant Recovery required

Matheo 0

I am the sole Global Administrator of my Microsoft 365 Business tenant bibous.onmicrosoft.com.

My administrator account is [Moderator note: Personally Identifiable Information removed]@bibous.onmicrosoft.com.

I know my username and password, but I cannot complete MFA because my Microsoft Authenticator registration is no longer accessible.

The only verification methods offered are:

Approve a request in Microsoft Authenticator
Use a verification code from Microsoft Authenticator

Neither method works.

There is another user in the tenant, but this user does not have administrator permissions and therefore cannot reset my authentication methods.

I have already tried Microsoft telephone support several times, but the automated system redirects me to online support and disconnects the call. Microsoft attempted to call me back, but I was unable to answer and I cannot call the agent back.

I still control the company's domain and DNS and can provide proof of domain ownership, billing/subscription information and company information privately.

This is a sole Global Administrator tenant lockout. I need this case escalated to Microsoft Data Protection / Tenant Recovery for ownership verification and a manual MFA reset so that I can re-register Microsoft Authenticator.

Please contact me privately for the tenant information required for verification.

0 comments

1 answer

Your answer

Answer 1

Hi Matheo,

Since you are the only Global Administrator for the tenant and Microsoft Authenticator is currently your only available verification method, you are unfortunately unable to access the tenant or create a support request from within the Microsoft 365 admin center.

In cases like this, the recovery process must be handled by Microsoft Support, specifically the Data Protection/Tenant Recovery team. They have the necessary tools and procedures to verify ownership of the tenant and help restore administrative access.

Although you have already contacted support and have not yet been connected with them, I recommend calling again during your local business hours and explaining upfront that this is a sole Global Administrator MFA lockout situation. Doing so may help ensure your case is routed to the correct team more efficiently.

You can find the Microsoft support phone number for your region here: Customer service phone numbers - Microsoft Support

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:

What kind of problem are you experiencing?
Answer: Authenticator
What products do you use?
Answer: Office 365 for business
Is this for an education or company account?
Answer: For companies
Are you an administrator?
Answer: Yes
Are there any other administrators in your organization?
Answer: No. I am the only admin in my tenant
Do you need a... Service request?
Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.

Once you reach a support representative, I would suggest clearly explaining the situation, for example:

"I cannot sign in because Microsoft Authenticator is unavailable. I am the only Global Administrator in the tenant, and there is no other administrator who can reset my MFA. I need assistance with a tenant recovery or Data Protection case so that administrative access can be restored."

In addition, it would be helpful to have the following information ready, as Microsoft may require it during the verification process:

Tenant domain name
Administrator sign-in address (UPN)
Subscription or billing details
Domain ownership information
Any additional documentation that can help confirm ownership of the tenant

If you're unable to reach a live support agent through your existing tenant, another option is to create a temporary Microsoft 365 trial tenant. This can provide access to the Microsoft 365 Admin Center, where you can open a support request and explain that you need assistance recovering access to a different tenant.

To create a temporary tenant, visit: Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.

Follow the guided setup process to create a new account for a new tenant.

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues.

In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt:

"Hello, I’m currently unable to access my previous Microsoft 365 tenant due to losing MFA access, which prevents me from receiving verification codes. I’m the global admin, but I’m locked out and unable to generate a QR code or bypass MFA.

I created this new tenant solely to request assistance. I kindly ask to be connected with the Data Protection team to verify my identity and help me recover access to the original tenant.

This is urgent, as I rely on Microsoft 365 for my work and have been unable to operate for several days. I’m available to provide any documentation or verification needed to support the recovery process."

Ticket Support: In the Microsoft 365 Admin Center > Support > Help & Support.

Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

If your organization's subscription is from a partner or reseller, you can contact the reseller's support provider to help open a service request on behalf of you instead.

I hope this helps point you in the right direction. If you have any additional questions, feel free to reply back and I'll do my best to assist further.

Best regards,