MICROSOFT 365 BUSINESS TENANT RECOVERY

Contact Microsoft 365 Business Support by phone and request a service request for a sole Global Administrator tenant lockout, explicitly asking that it be escalated to the Data Protection/Tenant Recovery team.

Open the recovery case

1. Open Microsoft’s customer-support page and select the current business-support number for your country or region: ^1^
2. Tell the agent:

   This is a Microsoft 365 Business tenant lockout. We purchased directly from Microsoft. The sole Global Administrator is locked, there is no other administrator, password recovery failed, and all users have lost email access. Please create a service request for the affected existing tenant and escalate it to the Data Protection/Tenant Recovery team for high-assurance ownership verification and administrator-access recovery. We also need billing reviewed because the subscription has an outstanding payment. Our tenant email is inaccessible, so please record an external reachable phone number and personal email for case communications.

3. Ask the agent to:
   • Read back the affected tenant’s primary domain and locked administrator ID.
   • Record the business impact as a complete company-wide service outage.
   • Provide the service request number before ending the call.
   • Confirm the external callback number and email attached to the case.
   • Include billing/subscription status and data-preservation urgency in the case notes.

Microsoft documents that when portal access is unavailable, the supported tenant-lockout path is to call Support. Microsoft then performs high-assurance ownership verification and helps a designated Global Administrator regain access to the existing tenant rather than creating a replacement tenant.^2^

This Q&A site cannot create, escalate, or track the service request; the number must come from Microsoft Support.

Prepare for ownership verification

Have these available, but provide them only through the private Microsoft Support case, not in this public thread:

• Tenant’s initial *.onmicrosoft.com domain, if known
• Custom domain names and access to their DNS hosting
• Locked Global Administrator sign-in name
• Microsoft order, invoice, subscription, or billing references
• Legal company name and address used for purchase
• Payment-method details requested by the verifier
• Reachable external email and telephone number
• Any alternate email supplied when Microsoft 365 was originally registered

Microsoft 365 Business registration uses an alternate email outside the tenant for important communications such as administrator password recovery.^3^

Phone support can use PIN-based verification. If the call originates from a number not registered in the organization profile, the representative may send the verification code to the registered email or phone number. Explain immediately if neither registered channel is accessible and request the tenant-recovery ownership-verification process instead.^4^

Billing and data preservation

Ask Support to record two coordinated work items:

1. Tenant access recovery — restore or enable a designated Global Administrator.
2. Billing recovery — determine the current subscription lifecycle state and arrange payment/reactivation.

Do not create a replacement paid subscription expecting it to restore the existing tenant’s data. Microsoft 365 Business subscriptions progress through lifecycle states such as Active, Expired, Disabled, and Deleted. For most offers, the documented periods are 30 days in Expired and 90 days in Disabled, but exact timing depends on the agreement and offer. In Disabled status, users cannot access services, while administrators can still access the admin center and data; after deletion, the subscription cannot be reactivated and its associated data is deleted.^5^

Because the current lifecycle state is unknown, ask Support to identify and document:

• Subscription state and termination/deletion dates
• Amount required to restore service
• Whether payment can be processed while tenant recovery is pending
• Whether any data-preservation action is required immediately

If phone support cannot create the case

As a fallback, a Microsoft Q&A recovery answer describes creating a temporary Microsoft 365 trial tenant, opening Microsoft 365 admin center → Help & support, and stating that the ticket is being raised on behalf of a different, inaccessible tenant. Ask the agent to create the case against the affected tenant and transfer it to Data Protection.^6^

Cancel the temporary trial after recovery to prevent unintended charges. Do not migrate domains or recreate users in that temporary tenant.

After access is restored

Immediately:

• Pay or reactivate the affected subscription.
• Create at least two separately secured emergency-access administrator accounts.
• Use distinct credentials and authentication methods.
• Monitor their sign-ins and reserve them for emergencies.

Microsoft recommends two or more emergency-access accounts to reduce the risk of another organization-wide administrative lockout.^7^

References

1. Contact Microsoft customer support
2. Plan for tenant recoverability
3. What is my user ID and why do I need it for Office 365 for business? | Microsoft Support
4. Get support for Microsoft 365 for business
5. What happens to my data and access when my Microsoft 365 for business subscription ends?
6. Microsoft 365 Tenant locked out – no Global Admin access due to MFA – tenant recovery required - Microsoft Q&A
7. Manage emergency access accounts in Microsoft Entra ID