Data Protection / Tenant Recovery request — sole Global Admin MFA lockout on a different tenant

Question

Data Protection / Tenant Recovery request — sole Global Admin MFA lockout on a different tenant

Reza Saee 0

Hi Good afternoon,

I cannot access the admin center of my production tenant. Please route this to the Microsoft 365 Data Protection / Tenant Recovery team.

Affected tenant: amsconllc.com (American SAP Consulting LLC)

Affected account: [Moderator note: Personally Identifiable Information removed]@amsconllc.com

Role: Global Administrator — the only Global Administrator in the tenant

Issue:

I replaced my iPhone 16 Pro with an iPhone 18 Pro. After the device migration, Microsoft Authenticator restored my personal accounts normally but my work account restored only as a "Connected account" placeholder with no verification code and no push notification capability. Sign-in prompts me to approve a number-matching request that never arrives on any device.

Steps already attempted, all unsuccessful:

Refreshed and re-opened Authenticator on the new device; no pending requests appear
Opened the account in Authenticator: it shows only "Connected account," with "Create a passkey" and "Set up 2-step verification" as the only options
"Set up 2-step verification" requires a QR code from the security info page, which itself requires MFA to reach
"I can't use my Microsoft Authenticator app right now" loops back to Authenticator; no alternate method is registered
Restored the iPhone 16 Pro from its most recent backup; the work account restored in the same incomplete state
Tapped "Sign in to add your account" on both devices; both route back to the same approval loop
No other Global Administrator account exists
No other device holds a live authenticated session

Request:

Please reset or clear the MFA / authentication method registration for [Moderator note: Personally Identifiable Information removed]@amsconllc.com so I can re-register Microsoft Authenticator on my current device.

Ownership verification:

I control DNS for amsconllc.com and can publish a TXT record on request. I can also provide subscription billing records, the payment method on file, and tenant ID.

I am available for a callback at any time.

0 comments

1 answer

Your answer

Answer 1

Hi,

Since you are the only Global Administrator and have no working alternative verification method or signed-in session, you will need Microsoft Support to review your tenant recovery request.

This is a public user-to-user forum. I cannot reset your authentication methods, route this post to the Data Protection team, or arrange a callback.

1/ Because you are the only administrator in your organization, you will need to contact the Microsoft Data Protection team for further assistance. Please locate the appropriate support phone number for your country or region and contact Microsoft Support so the frontline team can raise a service request on your behalf: Please try to find the related hotline number to call the frontline and let them raise a ticket for you: Customer service phone numbers - Microsoft Support

User's image

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help)

In some regions you may initially interact with an automated system, so here is an example of how you can answer the prompts to reach the right team more quickly:

What kind of problem are you experiencing?
Answer: Authenticator
What products do you use?
Answer: Office 365 for business
Is this for an education or company account?
Answer: For companies
Are you an administrator?
Answer: Yes
Are there any other administrators in your organization?
Answer: No. I am the only admin in my tenant
Do you need a... Service request?
Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.

During the call, you will be asked to provide information that verifies your identity and proves ownership of the tenant, such as your organization name, billing information, contact email, phone number, or other subscription‑related details.

2/ If you are unable to reach support via the phone numbers, there is a workaround you might consider: You can register for a new Microsoft 365 tenant by signing up for a trial subscription here: Microsoft 365 Business Plans and Pricing | Microsoft 365

User's image

Once the new tenant is created, you can access the admin center and submit a support ticket from there, requesting to speak with the Data Protection Team on behalf of your original tenant.

Important notes:

This new trial tenant will not give you access to any of the data or settings in your original locked tenant. It is solely a temporary means to contact Microsoft support.
The resolution time might be longer as you are contacting support from a different tenant.
Remember to cancel the trial subscription for the new tenant once your issue with the original account is resolved to avoid any unintended charges.

I hope the information provided helps guide you in the right direction. Although I’m unable to take direct action, I sincerely hope that the steps and recommendations I’ve shared can support you through the process.