URGENT – Sole Global Admin locked out – MFA reset required – hsbh.nl.

Create a temporary Microsoft 365 trial tenant, open a support request from its admin center, and explicitly ask that the case be associated with the locked tenant and transferred to the Data Protection/Tenant Recovery team.

Open the recovery case from a temporary tenant

Since the normal ticket route is inaccessible and telephone support has already been attempted without success:

1. Register a temporary Microsoft 365 Business Basic trial at: https://www.microsoft.com/en-us/microsoft-365/business/microsoft-365-business-basic?msockid=3eb6980b5c6860e63a588d0c5d1761d6
2. Sign in to the Microsoft 365 admin center with the new trial tenant’s administrator account.
3. Select Help & support (the headset icon).
4. If Support Assistant is enabled, turn it off.
5. Enter contact support, select Contact support, and request contact by phone or email.
6. State clearly:

   This request is being opened from a temporary tenant on behalf of an existing Microsoft 365 Business tenant. The sole Global Administrator is locked out because no usable MFA method exists. There is no other Global Administrator. Please create the case against the affected tenant and escalate it to Data Protection/Tenant Recovery for high-assurance ownership verification and restoration of Global Administrator access.

This workaround has been recommended for the same sole-administrator MFA-lockout scenario when a ticket cannot be opened from the affected tenant.^1^

Microsoft’s documented recovery process is to open a support case, perform high-assurance identity verification, and then restore access to the existing tenant; Microsoft does not replace it with a new tenant.^2^

Information to have ready

Provide sensitive information only through the private support case, not in this public Q&A thread. Prepare:

• Affected tenant’s primary domain and tenant ID, if known
• Locked Global Administrator sign-in name
• An external email address and reachable telephone number
• Domain-ownership evidence, including the ability to add a DNS verification record if requested
• Company registration documents
• Subscription, invoice, order, and billing details
• Payment information requested through Microsoft’s secure verification process
• Approximate tenant creation date and registered business/contact information

Support must verify ownership before changing administrative access. Agents cannot simply bypass MFA or modify account details from a public forum or ordinary chat request.[^3^](https://support.microsoft.com/accounts-billing/subscriptions/[Subscription ID] "Microsoft 365 for business")

Record the new case number immediately and use that number for all follow-ups. Avoid opening duplicate requests unless Microsoft instructs you to do so.

Conditional alternative: ask the Microsoft partner or reseller

If the subscription was purchased through a reseller or managed-service provider, ask that partner to open the request on your behalf.

A partner can submit the case only when it has an active GDAP relationship with the Service Support Administrator role. For a Data Protection case, Microsoft will still work directly with the affected customer, so the partner should include the impacted administrator’s external contact details.^4^

If the partner has an appropriate authentication-administration role, it might be able to restore the MFA methods directly. If it has neither the necessary role nor permission to create support requests, use the temporary-tenant method instead.

Phone route if another attempt becomes necessary

The official support page lists Microsoft customer-support numbers by country or region.^5^ When navigating the automated system, describe the case as:

• Authenticator
• Office 365 for Business
• Company account
• Administrator: Yes
• Other administrators: No
• Create a service request: Yes

Microsoft Q&A moderators and community members cannot access the tenant, reset MFA, create an internal escalation, or accelerate an existing case.^6^

After access is restored, remove or cancel the temporary trial before renewal, and configure at least two Global Administrators with distinct MFA methods and emergency-access arrangements.^4^

References

1. Sole Global Administrator locked out due to Microsoft Authenticator MFA loop – Tenant Recovery needed - Microsoft Q&A
2. Plan for tenant recoverability
3. [Microsoft 365 for business](https://support.microsoft.com/accounts-billing/subscriptions/[Subscription ID])
4. Preventing tenant lockouts
5. Contact Microsoft customer support
6. Microsoft 365 tenant lockout – sole global admin – MFA inaccessible - Microsoft Q&A