Sole Global Administrator locked out – Microsoft Authenticator MFA reset / tenant recovery required

Question

Sole Global Administrator locked out – Microsoft Authenticator MFA reset / tenant recovery required

Natalia 0

Hello,

We are currently locked out of our Microsoft 365 business tenant because the sole Global Administrator is unable to complete MFA.

The administrator's password is known and accepted successfully. However, Microsoft then requests approval through Microsoft Authenticator. The account appears in the Authenticator app, but it is not receiving the sign-in/number-matching request, so authentication cannot be completed.

We have tried alternative sign-in options, but there is no alternative authentication method available. We also cannot access the Microsoft 365 or Entra Admin Centre to reset/re-register MFA because accessing the Admin Centre itself requires the same Authenticator verification.

We have attempted to contact Microsoft Business Support by telephone several times. The automated system asks for the administrator's email address and then disconnects the call, so we have been unable to get a support case created.

We are not requesting a password reset. We need assistance with a Global Administrator MFA/Authenticator reset and tenant recovery.

There is no other Global Administrator available who can reset the authentication methods.

Could a Microsoft Support representative please assist with opening/escalating a case to the appropriate Data Protection/Tenant Recovery team so that ownership can be verified and the administrator's MFA registration can be reset?

We are happy to provide the tenant ID/domain, administrator username, subscription/billing information and any other ownership verification required through a private channel.

Thank you.

0 comments

1 answer

Your answer

Answer 1

Hi Natalia,

I hope you're doing well.

If you're the only administrator and you've been locked out of the account, you'll need to contact Microsoft's Data Protection team for assistance. They are the only team authorized to help recover access in situations involving the sole administrator account.

You can find Microsoft's support numbers here:

Customer service phone numbers: Contact Microsoft customer support | Microsoft Support and choose Work account.

I understand you have already attempted to contact Microsoft Support by phone and were unable to open a case through the IVR system. Please try the following option, and I sincerely hope it helps resolve the issue for you.

When contacting Microsoft, be prepared to verify ownership of the subscription. You may be asked for information such as:

Organization name
Billing or payment information
Registered phone number
Alternate email address

Once your identity is verified, the privacy team will be able to reset your MFA settings. You can then reset your account in the Microsoft Authenticator app on your new device or choose a different authentication method to sign in.

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:

IVR: What problem is bothering you?
Client: Lost access to the only admin account
IVR: What product do you use?
Customer: Office 365 for business
IVR: School or Business Account?
Client: Companies
IVR: Are you an administrator?
Client: Yes
IVR: Is there another administrator in your organization?
Client: No. I am the only admin in my tenant
IVR: Do you need to create a support ticket?
Client: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.

I also recommend calling during business hours. In my experience, it can be difficult to get through to the correct support queue, and automated systems don't always work as expected. If you can't get through on your first try, I suggest trying again later or at a different time.

In case you are unable to contact the frontline support:

Consider signing up for a trial subscription to create a new tenant: Microsoft 365 Business Plans and Pricing | Microsoft 365

Once set up, you can access the new tenant's admin console and submit a support ticket to speak with the data protection team on behalf of the previous tenant. Once your issue is resolved, please remember to cancel the trial subscription to avoid any unintended charges.

If your organization's subscription is from a partner or reseller: Contact the reseller's support provider to help open a service request on behalf of you instead.

I hope this helps point you in the right direction. If you have any updates or additional questions, feel free to reply back and I'll do my best to assist further.

Best regards.