admin center Mfa Issue

Since you’re the only administrator, I’d avoid trying random MFA resets that could make access harder to recover. First, check whether you can sign in using another browser or an InPrivate window, and make sure your authenticator app and device time are working correctly.

If you’re still blocked, you may need Microsoft’s tenant recovery process for a locked-out administrator. Since there’s no other admin available to reset your MFA, contact Microsoft Support and explain that you’re the sole Global Administrator and can’t complete MFA. Include error code 399287 and the timestamp from the sign-in attempt.

Hello @Islamic Finance House Company ,

I'm sorry to hear that the only admin account is locked out.

First of all, I would like to clarify one point: as a moderator, I do not have the authority or the tools to recover admin access on your behalf.

Based on my findings, error code 399287 typically indicates that SMS authentication has been blocked for the phone number or tenant due to a security or reputation flag. This can occur after repeated failed attempts or suspicious activity is detected. Once blocked, SMS verification may fail even if the number is correct and previously worked.

If you are the only administrator in this tenant, you will need to contact the Microsoft Data Protection team, as they are the only group authorized and equipped with the necessary tools and verification procedures to confirm your identity and restore administrator access. 

Please try to find the related hotline number to call the frontline and let them raise a ticket for you: Customer service phone numbers - Microsoft Support 

Depending on your country or region:

For some countries, when calling the support number, although there are about 30 seconds opening as something "you can visit the link...." But you can ignore this opening and wait until the option, then "1" as a business email user, "1" again for technical help.   

For some countries, it will be an automated conversation like:    

• First, when you call the hotline, it asks what kind of problem you are worried about.   
• Answered: authenticator.   
• A: What kind of product are you using?   
• B: Microsoft 365 for business.   
• A confirmation: education or company account?   
• B: For business
• A: Are you an administrator?   
• B: Yes.   
• A: Do you have the other admin in your organization?   
• B: No.   
• A: You need one.... Service request?   
• B: Yes

Note:

• You may need to call multiple times before you are connected to a live support representative and can successfully create a support request with a ticket number for tracking. 
• If your subscription is from a partner or reseller, contact the reseller's support provider to help open a service request on behalf of you instead. 

If you still have trouble using the phone support, you can try set up a new trial tenant and submit your support request:  Compare Office 365 Enterprise Pricing and Plans | Microsoft 365.

Once the new tenant is created, navigate to Microsoft 365 Admin center and create a support request: Get support - Microsoft 365 admin | Microsoft Learn . 

During the process, you must clearly state that you are locked out of a different, pre-existing Microsoft 365 tenant where you are the administrator. Provide the following information about your locked account:   

• The domain name of your locked tenant     
• Your administrator account. 
• Any error messages you are receiving.    
• Details about the authentication issues you are experiencing.    
• Your proof of ownership. 

Important notes:

• This new trial tenant will not give you access to any of the data or settings in your original locked tenant. It is solely a temporary means to contact Microsoft support.  
• Be prepared for Microsoft support to ask for verification of your identity and administrative rights for the locked tenant. 
• The resolution time might be longer as you are contacting support from a different tenant.    
• Remember to cancel the trial subscription for the new tenant once your issue with the original account is resolved to avoid any unintended charges. You can typically do this within the Microsoft 365 Admin Center under "Billing" -> "Your products." 

I hope this helps. If you need any further assistance, please feel free to leave a comment.

Kind Regards.