Locked Out of Microsoft 365 Developer E5 Sandbox After Reinstalling Microsoft Authenticator

Ahmad Frhat 0 Reputation points
2026-10-22T09:07:46.12+00:00

Hello,

I need help recovering access to my Microsoft 365 Developer E5 Sandbox administrator account.

I have an active Microsoft 365 Developer Program subscription. My developer dashboard is accessible through my personal Microsoft account, and it shows my E5 Sandbox with 61 days remaining.

However, I cannot sign in to my sandbox administrator account because Microsoft Authenticator was deleted from my phone.

When I try to sign in, Microsoft displays this message:

"Enter the code displayed in the Microsoft Authenticator app on your mobile device."

I reinstalled Microsoft Authenticator and added my personal account and my sandbox administrator account. However, the sandbox account still requires additional verification, and I cannot complete the setup because it asks for verification through the existing Authenticator registration.

I also tried phone verification, but Microsoft displayed this error:

"Sorry, we're having trouble verifying your account. Please try again."

I can access the Developer Program dashboard, but I cannot access the sandbox administrator account or its Microsoft 365 services.

My questions are:

Is there an official way to reset MFA for a Microsoft 365 Developer Sandbox administrator account when the Authenticator app has been deleted?

How can I recover access if I am unable to complete any of the available verification methods?

Which Microsoft support team can help with this issue when I cannot sign in to the business account to open a support request?

I would appreciate any official recovery steps or guidance.

Thank you.

Microsoft 365 and Office | Install, redeem, activate | For business | Other
0 comments

2 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-10-22T09:08:37.8266667+00:00

    If this is the sandbox’s only administrator account, contact Microsoft 365 Business Support by phone and request escalation to the Microsoft 365 Data Protection team for a sole-administrator MFA tenant lockout.^1^

    Reinstalling Authenticator does not restore the old tenant registration, and since the alternative phone verification has also failed, repeating those steps will not resolve this lockout.

    If another privileged administrator exists

    Ask that administrator to reset your registered authentication methods:

    1. Sign in to the Microsoft Entra admin center.
    2. Go to Entra ID → Users.
    3. Select the locked sandbox administrator.
    4. Select Authentication methods.
    5. Select Require re-register MFA.

    This removes the registered phone numbers, Authenticator registrations, and software OATH tokens. At your next sign-in, you will be prompted to register a new MFA method.^2^

    The assisting account must have an appropriate authentication-administration role. A normal sandbox user cannot perform this reset.

    If you are the only administrator

    There is no second administrator available to perform the reset, so use the following recovery route:

    1. Open Microsoft’s country/region support-number page and select the appropriate Microsoft 365 Business number.^3^
    2. Tell the automated system or agent:

      Microsoft 365 Developer E5 tenant — sole Global Administrator locked out because the only Microsoft Authenticator registration was lost.

    3. Ask the agent to:
      • create a support case against the affected sandbox tenant; and
      • transfer or escalate it to the Microsoft 365 Data Protection team for tenant-access recovery.
    4. Have these details available, but provide them only through Microsoft’s private support process:
      • sandbox onmicrosoft.com domain;
      • administrator username;
      • personal Microsoft account associated with the Developer Program;
      • Developer Program dashboard details showing the active sandbox;
      • a reachable email address and phone number;
      • any ownership verification Microsoft requests.

    An accepted resolution for the same Microsoft 365 Developer E5 sole-administrator/Auth­enticator lockout directs support to create the case and transfer it to Data Protection.^1^ Another matching case confirms that the Data Protection team handles restoration through a support ticket.^4^

    Access to the Developer Program dashboard through your personal Microsoft account establishes access to the program profile, but it does not provide administrative access to the separate sandbox tenant.

    If the phone channel cannot create the case

    A case-matched Microsoft Q&A resolution suggests creating a temporary Microsoft 365 trial tenant, signing in as its administrator, and using Microsoft 365 admin center → Help & support → Contact Support to request help for the locked tenant.^1^

    This is a fallback rather than the primary route. Online business support normally requires an eligible Microsoft subscription and an administrator account.^5^ Review the trial’s renewal terms and cancel it afterward if it is no longer needed.

    After access is restored

    1. Register at least two independent authentication methods.
    2. Ensure the sandbox MFA recovery phone and email are current; Microsoft’s sandbox setup guidance specifically recommends linking MFA to recovery contact information.^6^
    3. Create additional emergency administrative access. Microsoft recommends two or more emergency-access accounts to reduce the risk of complete tenant lockout.^7^

    References

    1. Single Global Administrator locked out of Microsoft 365 Developer E5 Sandbox after losing Microsoft Authenticator - Microsoft Q&A
    2. Manage user authentication methods for Microsoft Entra multifactor authentication
    3. Contact Microsoft customer support
    4. Lost access to Authenticator app - Microsoft Q&A
    5. Get support for Microsoft 365 for business
    6. Set up a Microsoft 365 developer sandbox subscription
    7. Manage emergency access accounts in Microsoft Entra ID
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. Helen Luu 3,565 Reputation points Independent Advisor
    2026-10-22T09:33:10.7266667+00:00

    Hello @Ahmad Frhat

    Since you are the only user or administrator of the tenant, you will need to contact the Microsoft Support Data Protection team to have your MFA reset. Please locate the appropriate Microsoft support hotline for work account and contact the frontline support team so they can raise a ticket on your behalf: Customer service phone numbers - Microsoft Support    

    Please note that this is a user-to-user support forum. Only Data Protection team can help you to revoke the session and reset your password, account, MFA...

    Data Protection Team will first verify your ownership of the account and revoke your MFA once confirmed. After that, you can set up the Microsoft Authenticator app again on your new device. 

    Here are some tips and an example of a prompt to help you navigate the IVR more effectively:  

    (While calling, you can ignore the 30-second introduction that says "you can visit the link..." and wait until you are presented with the options. Press "1" as a business email user, and again "1" for technical help.)      

    In some regions, the initial interaction may be automated, here’s a general idea of how the conversation might go to help you prepare:

    • What kind of problem are you experiencing?         
    • Answer: Authenticator         
    • What products do you use?         
    • Answer: Office 365 for business         
    • Is this for an education or company account?         
    • Answer: For companies         
    • Are you an administrator?         
    • Answer: Yes         
    • Are there any other administrators in your organization?         
    • Answer: No. I am the only admin in my tenant          
    • Do you need a... Service request?          
    • Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.

    If you can't contact Microsoft Support by phone, you can try creating a new trial tenant using the link below: Microsoft 365 Business Plans and Pricing | Microsoft 365 After you fill out and submit the sign-up form, you'll have access to the Microsoft 365 admin center.

    Once you've gained access, contact the Microsoft support team by following the guidance in the following document to create a support ticket: Get support - Microsoft 365 admin | Microsoft Learn

    When submitting a support ticket, please clearly indicate that the issue involves another tenant and provide as much information as possible about that tenant, including the tenant domain, domain registration details, administrator username... Providing this information upfront will help the support team validate the tenant relationship and investigate the issue more efficiently.

    When providing the case description, you can include something like:

    “I recently switched to a new phone and no longer have access to my Microsoft Authenticator app. I do not have any other MFA method available, so I am unable to access the tenant. I am the only Global Administrator of the tenant.

    I can provide information or documentation to verify that I am the legitimate owner of the tenant.

    Tenant domain: [yourtenant.onmicrosoft.com]

    Global Administrator account: [admin email address]

    Please assist me with restoring access to the tenant or resetting the MFA authentication method.”

    Important: When submitting the support request, please do not share your account password. You can provide the tenant domain and Global Administrator email address, along with any other information requested for ownership verification.

    After the issue is successfully resolved, remember to cancel your trial subscription by following the instructions in the following document: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

    I hope this information helps you move forward with your support request and that the issue can be resolved soon.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.