Sole Global Administrator Locked Out – Lost Authenticator, No Alternative MFA – Tenant Recovery Required

2026-10-13T12:49:31.7133333+00:00

I am the sole Global Administrator of our Microsoft 365 / Microsoft Entra ID tenant and have lost access to my account due to MFA.

My previous phone, which had Microsoft Authenticator installed, is broken and no longer accessible.

There are no usable alternative MFA methods. The sign-in process also prompts for a FIDO2 security key, but I do not have such a key.

As the only Global Administrator, I cannot reset my own MFA registration or create a Temporary Access Pass through the Entra Admin Center.

I am requesting assistance with Tenant Recovery / Global Administrator MFA Reset through Microsoft's Data Protection Team.

I can verify ownership of the tenant and our organization's domain through the appropriate identity verification process.

Please advise whether a Microsoft moderator can help initiate a Data Protection support case or contact me through a private message.

I can provide the Tenant ID, affected administrator UPN, contact information and proof of ownership privately.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments No comments

1 answer

Sort by: Most helpful
  1. Daniel-Vo 6,880 Reputation points Microsoft External Staff Moderator
    2026-10-13T13:33:38.41+00:00

    Hello @Marc Szymendera | Meridian Health ,

    I'm sorry to hear about your tenant locked out situation.

    First of all, I would like to clarify one point: this forum is intended for users to assist one another. No one, including myself, has the authority or the tools to recover admin on your behalf.

    To help, I'd like to share the prompt that has successfully helped many other users reach the Data Protection Team and create a support request:

    1/ Find the related hotline number for your country to call the frontline and let them raise a ticket for you: Customer service phone numbers - Microsoft Support 

    2/ Depending on your country or region:

    For some countries, when calling the support number, although there are about 30 seconds opening as something "you can visit the link...." But you can ignore this opening and wait until the option, then "1" as a business email user, "1" again for technical help.   

    For some countries, it will be an automated conversation like:    

    • First, when you call the hotline, it asks what kind of problem you are worried about.   
    • Answered: authenticator.   
    • A: What kind of product are you using?   
    • B: Microsoft 365 for education.   
    • A confirmation: education or company account?   
    • B: For education
    • A: Are you an administrator?   
    • B: Yes.   
    • A: Do you have the other admin in your organization?   
    • B: No.   
    • A: You need one.... Service request?   
    • B: Yes

    Important note:

    • You may need to call multiple times before you are connected to a live support representative and can successfully create a support request with a ticket number for tracking. 
    • If calling the support line in your region is difficult, you may try another regional support number that offers service in your language, or contact the English support line if you’re comfortable speaking English. 
    • If your subscription is from a partner or reseller, contact the reseller's support provider to help open a service request on behalf of you instead.

    If you still have trouble using the phone support, you can try set up a new trial tenant and submit your support request:  Compare Office 365 Enterprise Pricing and Plans | Microsoft 365.

    User's image

    Once the new tenant is created, navigate to Microsoft 365 Admin center and create a support request: Get support - Microsoft 365 admin | Microsoft Learn . 

    User's image

    User's image

    During the process, you must clearly state that you are locked out of a different, pre-existing Microsoft 365 tenant where you are the administrator. Provide the following information about your locked account:   

    • The domain name of your locked tenant     
    • Your administrator account. 
    • Any error messages you are receiving.    
    • Details about the authentication issues you are experiencing.    
    • Your proof of ownership. 

    Important notes:

    • This new trial tenant will not give you access to any of the data or settings in your original locked tenant. It is solely a temporary means to contact Microsoft support.  
    • Be prepared for Microsoft support to ask for verification of your identity and administrative rights for the locked tenant. 
    • The resolution time might be longer as you are contacting support from a different tenant.    
    • Remember to cancel the trial subscription for the new tenant once your issue with the original account is resolved to avoid any unintended charges. You can typically do this within the Microsoft 365 Admin Center under "Billing" -> "Your products." 

    I hope this helps. If you need any further assistance, please feel free to leave a comment.

    Kind Regards.

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.