Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
If you are the only administrator who can reset authentication methods, contact Microsoft business support by phone and request a Microsoft 365 Data Protection case for an administrator MFA lockout.^1^
Contact Microsoft now
- Open Microsoft’s country/region support-number directory: ^1^
- Call the business-support number for your location.
- Tell the automated system or representative:
- “Microsoft 365 for business”
- “I am a Global Administrator”
- “I cannot complete Microsoft Authenticator MFA”
- “I need an account-access service request and transfer to the Microsoft 365 Data Protection team”
- Prepare information that can establish ownership of the tenant and subscription:
- Organization and tenant/domain name
- Affected administrator sign-in name
- Subscription and billing information
- Business telephone number
- Alternate email address
- Do not post tenant, billing, or administrator details publicly. Support must verify ownership before resetting the MFA registration. A closely matching administrator-lockout case confirms that the Data Protection team handles identity verification and access restoration when no other Global Administrator is available.^2^
Faster alternatives, if available
Another authorized administrator exists
Ask another Global Administrator or Privileged Authentication Administrator to:
- Sign in to the Microsoft Entra admin center.
- Go to Entra ID → Users.
- Select your administrator account.
- Select Authentication methods → Require re-register MFA.
- Confirm the action.
- Sign in again and register Authenticator or another permitted authentication method.
This removes the registered phone numbers, Authenticator registrations, and software OATH tokens, then prompts for fresh MFA registration at the next sign-in.^3^
Your Microsoft 365 subscription was purchased through a CSP or reseller
Contact that partner. If it has an active GDAP relationship and an appropriately privileged role, it may restore access directly; otherwise, a partner with the Service Support Administrator role can create a Microsoft support request on your behalf.^4^
After access is restored
- Register at least two usable authentication methods.
- Maintain at least two Global Administrator accounts with distinct credentials and MFA methods.
- Configure and monitor emergency-access accounts to prevent another tenant-wide lockout.^4^
References