Locked out of Global Admin Account - Error code: 399287

Mustafizur Rahman 0 Reputation points
2026-10-10T04:27:30.17+00:00

HI

Need help in getting into my Microsoft 365 Admin Account. I am the sole global admin. Whenever I try to access the Security Info or the Admin Center I am being asked to setup the MFA which is followed by the prompt asking me to Call my phone number which never goes through. The error code shown is 399287. Previously it was 500121. I tried to call the Customer Support number where the network was always busy. I need to recover my account urgently for office work. How can I raise a ticket with the support team.

Microsoft 365 and Office | Subscription, account, billing | For education | Windows
0 comments

2 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-10-10T04:31:15.0833333+00:00

    If Other verification options shows a method you previously configured, use it; otherwise, because you are the sole Global Administrator and telephone support has been unreachable, create a temporary Microsoft 365 tenant and open a case requesting escalation to the Data Protection team.

    1. Check for an existing verification method

    On the MFA prompt, select Other verification options or Sign in another way.

    • Use Microsoft Authenticator, SMS, a security key, or another method only if it was already registered.
    • If the failed phone call is the only available method, continue with support recovery. Microsoft’s MFA troubleshooting guidance specifically recommends trying another configured verification option when calls or texts do not arrive.^1^

    Do not repeatedly trigger calls, since that is unlikely to provide a new recovery path.

    2. Try the public online support route

    Open Microsoft customer support, select the Work account or business/education support path, describe the problem, and choose Get Help followed by Contact Support when offered.^2^

    State clearly:

    • You are locked out of a Microsoft 365 work or school tenant.
    • You are the only Global Administrator.
    • MFA voice verification fails with 399287.
    • You cannot access the Microsoft 365 Admin Center to create a normal service request.
    • You need the case escalated to the Data Protection team for tenant administrator recovery.

    Support must verify ownership; an agent cannot simply bypass MFA or change account details without completing the required verification process.[^3^](https://support.microsoft.com/accounts-billing/subscriptions/[Subscription ID] "Microsoft 365 for business")

    3. If online support does not offer a ticket, use a temporary tenant

    This workaround is specifically recommended in matching sole-admin lockout cases where error 399287 prevents access to the original tenant.^4^

    1. Register for a Microsoft 365 trial using a new account. This creates a separate temporary tenant.
    2. Sign in to the new tenant’s Microsoft 365 Admin Center.
    3. Select Support → Help & support.
    4. If the support assistant does not display Contact Support, turn the assistant off and enter the issue again.
    5. Submit the request and ask for transfer to the Data Protection team for the locked, pre-existing tenant.
    6. Record the support ticket number.

    Suggested case description:

    I am the sole Global Administrator of a separate Microsoft 365 tenant and cannot complete MFA. Voice verification fails with error 399287, and I cannot access that tenant’s Admin Center to create a service request. Please escalate this case to the Data Protection team for administrator ownership verification and account recovery.

    Include privately in the ticket:

    • Locked administrator sign-in address
    • Original tenant/domain name
    • Error codes 399287 and previous 500121
    • Approximate timestamps and time zone
    • Request ID and correlation ID, if displayed
    • Reachable phone number and alternate email
    • Confirmation that no other Global Administrator can perform the reset

    Do not post these details publicly. The temporary tenant provides only a way to contact support; it does not provide access to the original tenant. Cancel its trial after recovery to avoid unintended charges.^5^

    Education or reseller-managed subscription

    If the subscription was purchased or provisioned through a school, Microsoft partner, or reseller, ask that organization to open the service request on your behalf. Matching Microsoft 365 Education lockout guidance identifies the provider/reseller as an alternative escalation route when the sole administrator cannot access the Admin Center.^6^

    The earlier 500121 means the MFA prompt was not completed; in this case, the failed verification flow explains why that code appeared, but it does not provide a separate recovery method.^7^

    References

    1. You don't receive a text or voice call that contains the verification code for Microsoft Entra multifactor authentication
    2. Contact Microsoft customer support | Microsoft Support
    3. [Microsoft 365 for business](https://support.microsoft.com/accounts-billing/subscriptions/[Subscription ID])
    4. Sole global administrator locked out – SMS MFA blocked (error 399287) - Microsoft Q&A
    5. Admin account locked by MFA - Microsoft Q&A
    6. Unable to Access Microsoft 365 Admin Account - Error Code 399287 - Microsoft Q&A
    7. How to troubleshoot Microsoft Entra sign-in errors
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. Roebe Ta 1,550 Reputation points Independent Advisor
    2026-10-10T04:34:12.8333333+00:00

    Hello @Mustafizur Rahman,

    I’d like to clarify that I don't represent Microsoft. I do not have the appropriate tool to recover your account or can contact Microsoft Support/Data Protection Team on your behalf. Please consider me an end user as well, providing guidance based on experience and documented processes.  

    I can see that you're having problem using the phone support. To help, I'd like to share the prompt that has successfully helped many other users reach the Data Protection Team and create a support request:

    1. Find the related hotline number for your country to call the frontline and let them raise a ticket for you: Customer service phone numbers - Microsoft Support 

    2. Depending on your country or region:

    For some countries, when calling the support number, although there are about 30 seconds opening as something "you can visit the link...." But you can ignore this opening and wait until the option, then "1" as a business email user, "1" again for technical help.   

    For some countries, it will be an automated conversation like:    

    • First, when you call the hotline, it asks what kind of problem you are worried about.   
    • Answered: authenticator.   
    • A: What kind of product are you using?   
    • B: Microsoft 365 for education.   
    • A confirmation: education or company account?   
    • B: For education
    • A: Are you an administrator?   
    • B: Yes.   
    • A: Do you have the other admin in your organization?   
    • B: No.   
    • A: You need one.... Service request?   
    • B: Yes   

    Important note:

    • You may need to call multiple times before you are connected to a live support representative and can successfully create a support request with a ticket number for tracking. 
    • If calling the support line in your region is difficult, you may try another regional support number that offers service in your language, or contact the English support line if you’re comfortable speaking English. 
    • If your subscription is from a partner or reseller, contact the reseller's support provider to help open a service request on behalf of you instead.   

    If you still have trouble using the phone support, you can try set up a new trial tenant and submit your support request:  Compare Office 365 Enterprise Pricing and Plans | Microsoft 365.

    User's image

    Once the new tenant is created, navigate to Microsoft 365 Admin center and create a support request: Get support - Microsoft 365 admin | Microsoft Learn . 

    User's image

    User's image

    During the process, you must clearly state that you are locked out of a different, pre-existing Microsoft 365 tenant where you are the administrator. Provide the following information about your locked account:   

    • The domain name of your locked tenant     
    • Your administrator account. 
    • Any error messages you are receiving.    
    • Details about the authentication issues you are experiencing.    
    • Your proof of ownership. 

    Important notes:

    • This new trial tenant will not give you access to any of the data or settings in your original locked tenant. It is solely a temporary means to contact Microsoft support.  
    • Be prepared for Microsoft support to ask for verification of your identity and administrative rights for the locked tenant. 
    • The resolution time might be longer as you are contacting support from a different tenant.    
    • Remember to cancel the trial subscription for the new tenant once your issue with the original account is resolved to avoid any unintended charges. You can typically do this within the Microsoft 365 Admin Center under "Billing" -> "Your products." 

    I hope this helps. If you need any further assistance, please feel free to leave a comment.

    Kind Regards.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.