I have lost access to my .onmicrosoft.com account

Andy Stepas 0 Reputation points
2026-04-26T11:07:42.8566667+00:00

Hi,

I am locked out of my Microsoft Entra ID tenant (andystepas.onmicrosoft.com). I no longer have access to my registered MFA methods (Microsoft Authenticator and the phone number on file, which is no longer active).

I am the only Global Administrator in this tenant, so there is no other admin available to reset or reconfigure MFA.

Please, help.

Thank you, Regards Moved from: Microsoft Security | Microsoft Authenticator

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

2 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-04-26T11:07:59.39+00:00

    Because the tenant andystepas.onmicrosoft.com has only one Global Administrator and that admin has lost all MFA methods, this is a tenant lockout scenario that must be handled by Microsoft’s Data Protection team.

    The recovery path is:

    1. Contact Microsoft support by phone
      • Use the global customer service phone numbers listed here: global support phone numbers or Find Microsoft 365 for business support phone numbers by country or region.
      • When navigating the automated system, clearly state that this is an Authenticator / MFA issue for an Office 365 / Microsoft 365 for business or company account, that this is a tenant administrator account, and that there are no other administrators.
      • Ask explicitly to open a service request and to be routed to the Data Protection team (sometimes called Data Protection / Tenant Recovery) for an admin MFA reset / tenant lockout.
    2. Verify identity with the Data Protection team
      • The Data Protection team has specific tools and processes to verify identity and confirm ownership of the tenant when the only Global Admin is locked out.
      • After verification, they can reset or clear the MFA registration for the admin account so new authentication methods can be configured.
    3. If unable to reach support directly, use a temporary trial tenant (workaround)
      • If phone support cannot be reached or does not correctly route the case, create a new trial Microsoft 365 tenant (separate from andystepas.onmicrosoft.com) as described in the context.
      • Sign in to the admin center of this new trial tenant and open a support ticket from there.
      • In the ticket, clearly state that the issue is with a different existing tenant (andystepas.onmicrosoft.com), that this is a tenant lockout and that the requester is the only Global Administrator who has lost MFA methods. Request escalation to the Data Protection team for admin MFA reset / tenant recovery.

    Once Data Protection completes verification, they can restore access by resetting MFA for the Global Admin on andystepas.onmicrosoft.com. After regaining access, configure multiple MFA methods (for example, Authenticator plus phone, or other methods) and consider adding an additional Global Admin or break-glass account to avoid future lockouts.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. Tamara-Hu 17,960 Reputation points Microsoft External Staff Moderator
    2026-04-26T12:29:22.7633333+00:00

    Hello @Andy Stepas,

    If you are the only administrator in this tenant, you will need to contact the Microsoft Data Protection team, as they are the only group authorized and equipped with the necessary tools and verification procedures to confirm your identity and restore administrator access. 

    Please try to find the related hotline number to call the frontline and let them raise a ticket for you: Customer service phone numbers - Microsoft Support 

    Carefully follow this instruction to ask for Microsoft Data Protection team support:   

    Depending on your country or region. For some countries, when calling the support number, although there are about 30 seconds opening as something "you can visit the link...." But you can ignore this opening and wait until the option, then "1" as a business email user, "1" again for technical help.   

    For some countries, it will be an automated conversation like:    

    • First, when you call the hotline, it asks what kind of problem you are worried about.   
    • Answered: authenticator.   
    • A: What kind of product are you using?   
    • B: Microsoft 365 for business.   
    • A confirmation: education or company account?   
    • B: For companies   
    • A: Are you an administrator?   
    • B: Yes.   
    • A: Do you have the other admin in your organization?   
    • B: No.   
    • A: You need one.... Service request?   
    • B: Yes   

    If your subscription is from a partner or reseller, contact the reseller's support provider to help open a service request on behalf of you instead.   

    Please understand that forum moderators have no control over user accounts, especially when it comes to logging in to your account, resetting your password, changing your access, etc.   

    If you encounter any difficulties in contacting the frontline support, please feel free to let me know. Thank you and I wish you a great day!  

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.