Sole Global Administrator MFA Lockout

Question

Sole Global Administrator MFA Lockout

Creeper23456 0

Title: Azure / Entra Tenant Lockout – Sole Administrator Lost MFA Access, Cannot Open Support Ticket

Hello Microsoft Support Team,

I am the sole administrator of an Azure / Microsoft Entra tenant that I originally created using my personal Outlook account. I previously had an Azure for Students subscription.

After replacing my phone and securely erasing the old device, I lost access to the previous Microsoft Authenticator registration.

My current situation:

I can access my personal Microsoft account and receive email verification codes.

My new Microsoft Authenticator displays "No notifications found" when Azure requests approval.

I have also configured Google Authenticator, but Azure does not offer a usable alternative verification method.

Azure Portal, Microsoft Entra admin center, and the security information management page all require the unavailable Authenticator approval.

I cannot even access the Azure support ticket system because it requires the same MFA verification.

I have no other administrator account available to reset MFA.

My Azure identity also appears to use the #EXT# guest account format.

Could a Microsoft moderator please help initiate a Data Protection / Tenant Recovery support case for a sole administrator MFA lockout?

I can provide my tenant domain, affected account, contact information, and subscription history through a private message to verify ownership.

Thank you for your assistance.

0 comments

1 answer

Your answer

Answer 1

Please note that this is a public community forum. Community members and moderators cannot create support cases, verify tenant ownership, reset MFA methods, or directly engage the Microsoft Data Protection team. I can only guide you based on documented processes and experience, but I will do my best to point you in the right direction so this can be resolved properly.

Dear @Creeper,

I'm sorry you're experiencing this situation.

Based on your description, this appears to be a classic sole-administrator MFA lockout scenario. Since you no longer have access to the Microsoft Authenticator registration that Azure/Microsoft Entra expects, and there is no second administrator available to reset your authentication methods, there is unfortunately no self-service recovery path available from within the tenant.

Please try to find the related hotline number to call the frontline let them raise a ticket for you: Customer service phone numbers - Microsoft Support

If you choose to contact Microsoft Business Support by phone, you may first be connected to an automated system before contacting a support professional. Based on similar cases of administrator lockouts, the conversation can go something like this:

Automated system: Are you calling as a private individual or a business customer?

You: Business customer.

Automated system: What do you need help with today?

You: Authentication problem.

Automated system: Which Microsoft product or service is affected?

You: Microsoft 365 for business.

Automated system: Can't sign in to the Microsoft 365 Admin Center?

You: Yes.

Automated system: Do you have another administrator in your organization?

You: No, I'm the only administrator.

Automated system: Are you a global administrator for the affected tenant?

You: Yes.

Automated system: Are you calling about an existing support case, or would you like to create a new one? You: I need to create a new support case.

In many cases, the automated system will then indicate that it can connect you with a support representative who can help create a support request and forward the case to the appropriate recovery team.

I would also recommend calling during opening hours when possible. From my experience, it can be difficult to reach the right support queue at times, and automated systems don't always behave as expected. If you can't get through on the first try, consider trying again later or at a different time of day.

If your organization’s Office 365 Business subscription was purchased through a partner or reseller, and you’re unable to open a service request directly, you may also contact the reseller’s support provider and ask them to open a support request on your behalf.

Alternatively, you can try set up a new trial tenant and submit your support request, please follow this link to create a trial tenant: Compare Office 365 Enterprise Pricing and Plans | Microsoft 365 - after that you will be able to access to Microsoft 365 Admin Center to raise the ticket

Assuming that you have already created an account after registering a free trial and you can go to Microsoft 365 admin center and click Support > Help & support icon to raise your ticket. The agent will be able to create a ticket for you under the affected tenant and then transfer this ticket to Data Protection team who could help you to regain access.

User's image

Please mention that you are raising ticket on behalf of the affected tenant that you do not have access to. The support team will help you to create ticket on the affected tenant then later on the Microsoft Data Protection team will assist you.

Note: This process will take more time than usual (7-14 working days) for your account to get access again as Data Protection is always overwhelmed with the number of tickets. As I am forum moderator, I do not have access to Microsoft internal system to assist or push this process to be quicker.

If you do create the trial and it resolves the issue, please remember to cancel the subscription afterward to avoid any related charges. This new trial tenant will not give you access to any of the data or settings in your original locked tenant. It is solely a temporary means to contact Microsoft support.

I hope my information is helpful. Please give me any updates once you get this resolved.

Warm regards,

If the answer is helpful, please select "Yes, accept answer". If you have any questions or new updates, please feel free to comment below.