ATTENTION : Data Protection team for tenant administrator lockout recovery.

Jessica McInnes 0 Reputation points
2026-11-06T18:10:12.0366667+00:00

I am the sole Global Administrator of a Microsoft 365 Business tenant purchased directly from Microsoft. I changed iPhones and wiped the old device. My new Microsoft Authenticator app has no working MFA registration. I have successfully verified my identity through my backup email and telephone and reset my password, but every login still requires an Authenticator code. Microsoft telephone support repeatedly redirects me to websites that also require MFA, so I cannot open a support case. I need assistance reaching the Data Protection team for tenant administrator lockout recovery.  

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jay1 Tran 1,910 Reputation points Independent Advisor
    2026-11-06T18:19:30.8233333+00:00

    Hi Jessica McInnes,

    I hope you're doing well.

    I’m truly sorry to hear that you’re currently unable to sign in. If your account is also an admin account and there are no other available global administrators in your tenant, then the only way to regain access is contact Microsoft support. Please try locating the appropriate hotline for your region again at: Customer service phone numbers - Microsoft Support 

    In this situation, the Microsoft Data Protection team has tools and processes in place to verify identity and regain access to administrator accounts. 

    Here are some tips and an example of a prompt to help you navigate the IVR more effectively: 

    (When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)   

    In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:     

    • What kind of problem are you experiencing?        
    • Answer: Authenticator        
    • What products do you use?        
    • Answer: Office 365 for business        
    • Is this for an education or company account?        
    • Answer: For companies        
    • Are you an administrator?        
    • Answer: Yes        
    • Are there any other administrators in your organization?        
    • Answer: No. I am the only admin in my tenant         
    • Do you need a... Service request?         
    • Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.     

    During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account.     

     

    I also recommend calling during business hours. In my experience, it can be difficult to get through to the correct support queue, and automated systems don't always work as expected. If you can't get through on your first try, I suggest trying again later or at a different time.

     

    I know being locked out of the only admin account can be stressful, but contacting the Data Protection team is the correct path forward in this scenario.

    I hope these steps help you create a support ticket successfully and move closer to regaining access to your administrator account. While I’m not able to intervene directly, guiding you to the right support team is the most effective help I can provide here. 

    Hope you're able to get this resolved soon.

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-11-06T18:10:57.12+00:00

    Call Microsoft’s regional business-support number and require the agent to open a Tenant Lockout / Sole Global Administrator MFA Recovery service request for escalation to the Data Protection team. This exact scenario—sole Global Administrator, replaced phone, inaccessible Authenticator registration, and no alternate administrator—requires Microsoft Support intervention.^1^

    1. Find the current number for your country or region on Microsoft’s official customer-support page.^2^
    2. Call and wait through the introductory message until the business-support options are offered.
    3. If presented with numbered choices, select:
      • Business user/business email
      • Technical support
    4. If the automated system asks questions, answer:
      • Problem: Authenticator
      • Product: Office 365 for business
      • Account type: Company account
      • Are you an administrator? Yes
      • Are there other administrators? No
      • Do you need a service request? Yes
    5. When transferred to an agent, use this wording:

    I am the sole Global Administrator of a Microsoft 365 Business tenant purchased directly from Microsoft. The registered Microsoft Authenticator device was wiped, there are no usable alternative authentication methods, and no other administrator can reset MFA. Password recovery succeeded but does not restore the missing MFA method. Please open a Tenant Lockout / Sole Global Administrator MFA Recovery service request and escalate it to the Data Protection team.

    This IVR route and escalation wording are documented in closely matching tenant-lockout cases.^3^

    Have verification information ready

    Prepare the information associated with the subscription:

    • Tenant’s initial domain and custom domain
    • Locked administrator sign-in address
    • Company name and address
    • Subscription and billing details
    • Recent invoice or payment information
    • Registered telephone number
    • An accessible alternate email address
    • Any existing support-reference numbers

    Microsoft’s business-support process requires account details when calling. It can also use PIN-based verification through the email address or phone number registered in the organization profile.^4^

    Identity verification through the backup email or telephone and a successful password reset do not remove the tenant’s MFA requirement. MFA remains a separate sign-in verification step, so repeating password recovery will not register the new Authenticator installation.^5^

    If phone support still redirects to an MFA-protected website

    Create a temporary Microsoft 365 trial tenant under a different accessible account, then:

    1. Sign in to that temporary tenant’s Microsoft 365 admin center.
    2. Open Help & support.
    3. Submit a service request identifying the locked tenant and requesting escalation to the Data Protection team.
    4. State clearly that the temporary tenant is only being used because the sole administrator cannot authenticate to the original tenant.
    5. Cancel the trial after the original tenant has been recovered to avoid charges.

    The temporary tenant does not grant access to the locked tenant; it only provides an authenticated channel for opening the support request.^3^

    After recovery, register the new Authenticator and establish at least one additional appropriately secured administrative recovery account. Microsoft recommends more than one emergency-access account to prevent a future sole-administrator lockout.^6^

    References

    1. Sole Global Administrator Locked Out – Lost Microsoft Authenticator Access After New Phone - Microsoft Q&A
    2. Contact Microsoft customer support
    3. Sole Global Administrator locked out by Microsoft Authenticator – Tenant Recovery needed - Microsoft Q&A
    4. Get support for Microsoft 365 for business
    5. Set up multifactor authentication for your Microsoft 365 account | Microsoft Support
    6. Admin account security in Microsoft 365 for business
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.