Recover Global Admin Microsoft account with lost MFA Access lockout

ANDREW ECKSTROM 5 Reputation points
2026-05-11T15:37:36.49+00:00

I have become locked out of the Global Admin account for my company's tenant. I need help contacting the Data Protection Team to assist me with gaining access again."

Microsoft Security | Microsoft Entra | Microsoft Entra ID

3 answers

Sort by: Newest
Most helpful Newest Oldest
  1. Mazen Alkadi 20 Reputation points
    2026-10-15T22:34:22.6633333+00:00

    Subject: Global Administrator MFA Lockout – Unable to Access Microsoft Support

    Hello Microsoft Support Team,

    Our nonprofit organization has lost access to its Microsoft 365 Global Administrator accounts due to unavailable multi-factor authentication methods.

    We know the administrator password but cannot complete MFA verification. Attempts to register new authentication methods also fail.

    Unfortunately, all Microsoft 365 support channels we have tried require signing in with the affected administrator account, making it impossible to submit a support request.

    There is currently no accessible Global Administrator who can reset MFA.

    Could a Microsoft moderator please advise how to initiate a secure tenant recovery process or escalate this case to the appropriate Microsoft Data Protection team without requiring authentication to the locked tenant?

    We can provide the tenant details, error correlation ID, and organizational ownership documentation through a private, secure Microsoft support channel.

    Thank you.

    Was this answer helpful?

    0 comments
  2. Rukmini 44,000 Reputation points Microsoft External Staff Moderator
    2026-05-14T11:37:48.3666667+00:00

    Hello ANDREW ECKSTROM

    The issue pertains to a tenant lockout, where no other global admin in the tenant has the necessary permissions to login and make changes in your tenant.

    To resolve this, we have engaged our Data Protection team through a support ticket. They will reach out to you via email or phone to help restore access to the tenant and assist in resolving the issue.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments

  3. AI answer

    2026-05-11T15:38:00.93+00:00

    To regain access to a tenant when the only Global Administrator is locked out due to MFA, the Data Protection Team must be engaged through Microsoft support. Use the following supported paths:

    1. Open a support ticket with Microsoft
      • Go to the Microsoft global customer service phone list: support ticket.
      • Call the number for the region and clearly state:
        • This is a Microsoft 365 / Microsoft Entra ID business tenant.
        • The only Global Administrator is locked out due to MFA (lost or inaccessible authenticator/security info).
        • A request is needed for the Data Protection Team (sometimes called Microsoft 365 Data Protection or Azure Data Protection) to help reset admin credentials / MFA and restore access.
      • The Data Protection Team can:
        1. Reset credentials of an administrator account.
        2. Help claim ownership of the tenant if needed.
    2. If there is another Global Administrator or partner with GDAP
      • If any other Global Administrator exists on the tenant, that admin should reset the locked-out admin’s MFA or promote another user to Global Administrator. If no other GA exists, continue with step 1.
      • If a partner has a Granular Delegated Admin Privileges (GDAP) relationship with appropriate roles (Global Administrator or Privileged Role Administrator), the partner can:
        • Reset passwords or promote a user to Global Administrator.
        • Create a support request on behalf of the customer if they have the Service Support Administrator role.
    3. If no partner and no other GA exist
      • Use the Microsoft support phone channel as in step 1 and request escalation to the Data Protection Team for tenant lockout / admin MFA reset.
      • Be prepared to provide business documentation and domain ownership evidence as requested during identity verification.
    4. If the tenant is owned by the organization but appears unmanaged
      • If the tenant is suspected to be an unmanaged directory created via self-sign-up, a Global Administrator (once access is restored) can later perform an admin takeover as described in Admin takeover of an unmanaged directory.

    The key action is to open a Microsoft support case via the global customer service phone numbers and explicitly request routing to the Data Protection Team for tenant lockout / Global Admin MFA recovery.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.