Locked out of Microsoft 365 tenant – Unknown Global Administrator account and Microsoft Authenticator MFA failure

Question

Locked out of Microsoft 365 tenant – Unknown Global Administrator account and Microsoft Authenticator MFA failure

Emma Brincat 0

Hello,

I'm the owner of a small business and have been locked out of my Microsoft 365 account. I'm unable to recover access because whenever I fill out a recovery form it says they don't recognise the username. Therefore, the original Global Administrator email address aooears to be unknown, and Microsoft Authenticator is not working.

My situation:

I purchased my business domain through Bluehost in 2023.

I independently connected my business domain and email to Microsoft 365. I was previously able to send and receive business emails successfully through Outlook.

My Outlook email suddenly stopped working a week ago, and I have been unable to regain access.

When I attempt to sign in, I am prompted to authenticate using Microsoft Authenticator, but I cannot complete the verification.

It seems I may have the incorrect Global Administrator email address that is associated with my Microsoft 365 tenant. I understand this may be an address ending in onmicrosoft.com, and when I try to login using it it doesn't say it's not regonized, but when I email the team to try and recover it they said it wasn't recognized.
When I attempt to recover the account using my usual business email address, Microsoft says something went wrong (see attached image).
I am the business owner and the only person who administered the Microsoft 365 setup. I do not have another administrator who can reset my MFA settings.
My domain's MX record currently points to mail.protection.outlook.com, indicating that the domain was configured to route email through Microsoft's infrastructure.

Previous recovery attempt:

I have already contacted Microsoft Support and submitted an account recovery request.

Unfortunately, Microsoft responded that they could not locate an account or subscription associated with the email address I provided and closed the support request. However, I can clearly see a monthly fee being charged to my bank account.

What I need help with:

How can I identify the original Global Administrator email address or Microsoft 365 tenant associated with my business domain?

Is there a way to recover access when Microsoft Authenticator is the barrier to signing in and I cannot access the administrator account?

Can a Microsoft moderator please advise how to escalate this to the appropriate Microsoft 365 Data Protection / Tenant Recovery team, so that my identity and domain ownership can be verified and my MFA authentication methods reset if appropriate?

I still have full access to my Bluehost hosting account and my domain's DNS settings, so I can demonstrate ownership by adding a DNS TXT verification record if required.

I can also provide any available subscription, billing or business ownership information privately.

This is my business email account, so being unable to access it is affecting my business communications.

I would really appreciate help identifying the correct tenant and administrator recovery process, rather than being redirected to the standard personal Microsoft account recovery form, which I have already tried unsuccessfully.

Thank you for your assistance.

0 comments

1 answer

Your answer

Answer 1

Dear Emma Brincat,

As this is a public community forum, no one here can access your Microsoft 365 tenant, identify your Global Administrator account, reset MFA, or directly escalate a case to the Microsoft 365 Data Protection team on your behalf.

Since you said you are the only administrator and Microsoft Authenticator is blocking access, community members can't resolve this directly. The recovery process typically requires verification by Microsoft Support.

Therefore, I recommend contacting Microsoft Support again and providing your tenant's billing and subscription information. Billing records may help Microsoft Support identify the correct Microsoft 365 subscription or tenant during their verification process.

If you have access to invoice numbers, subscription IDs, order confirmation emails, renewal notices, bank statements showing the Microsoft 365 charges, order numbers, or other billing records, and payment card details (only provided securely to Microsoft Support).

Note: For your privacy and security, please do not post any billing details or personal information publicly in this forum.

If you're unable to access the Microsoft 365 Admin Center, you can try to contact Microsoft Support by phone. For a full list of regional numbers, you can also visit this official page: Customer service phone numbers - Microsoft Support. The support team will assist you as soon as possible. For reference:  Get support | Microsoft Docs   

You may also consider calling a Microsoft support number for a different region if support in your local region is unavailable or unable to route your case appropriately.
While calling, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore it and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.

If the automated phone system does not get you to a human agent, one workaround is to create a separate trial Microsoft 365 tenant and use that tenant to open a support ticket on behalf of the locked tenant.

Sign up for a new Microsoft 365 Business trial using this link: Compare All Microsoft 365 Plans. You will need to use a different, personal email address to register.
Once the trial account is created, log in to its Admin Center > From the Admin Center, open a new Service Request. For reference:  Get support | Microsoft Docs   
In the ticket description, explain that you are locked out of your primary tenant (your.onmicrosoft.com) and that you need to speak with the Microsoft Support team (Data Protection team or Billing team) to regain access.
Remember to provide your tenant information, billing information, and a good contact number for them to reach you.

Important:

Please remember to cancel the trial subscription after your original account issue is resolved to avoid any future charges.
When creating the support request, I also recommend disabling or bypassing the AI/Support Assistant option if presented and choosing the path that allows you to contact a support engineer directly.

The suggestions I provided are based on what I have observed from many similar cases I have seen in the forum community.

If you have any questions or if I have misunderstood anything, please feel free to reach out. I'm looking forward to your update.