Sole Global Admin Locked Out – Lost Microsoft Authenticator – Urgent MFA Reset Needed

Question

Sole Global Admin Locked Out – Lost Microsoft Authenticator – Urgent MFA Reset Needed

ירין כהן 0

Hello Microsoft Support,

I am the sole Global Administrator of a Microsoft 365 Business Standard tenant.

I recently changed my phone and lost access to Microsoft Authenticator. I no longer have the old device.

I successfully reset my administrator password using my recovery email, but I still cannot sign in because Microsoft requires verification through the Authenticator app.

I have already tried alternative sign-in methods and restoring an Authenticator backup, but neither worked.

There are no other administrators who can reset my MFA, and I cannot access the Microsoft 365 Admin Center to create a support ticket.

I urgently need assistance with a Sole Global Administrator MFA reset.

Please help me open a private support case with the Microsoft Data Protection / Tenant Recovery team so I can verify ownership and regain access.

I also need to cancel an automatically renewed Microsoft 365 Business Standard subscription and request a refund.

I prefer written communication because my English is limited.

Please explain how I can proceed without signing in to the locked account.

Thank you.

0 comments

1 answer

Your answer

Answer 1

Dear ירין כהן,

I understand how frustrating this is, especially when you are the only Global Administrator and have been unable to access your tenant for an extended period because of an MFA issue.

In this case, only Microsoft Support's Data Protection team can assist with account ownership verification and administrator recovery. I recommend contacting Microsoft Support and specifically requesting escalation to the Data Protection / Account Recovery team for a Global Administrator lockout.

As a forum member, I don't have access to internal Microsoft systems or special escalation channels. The suggestions I provided are based on what I have observed from many similar cases I have seen in the forum community.

Option 1: Try to contact Microsoft Data Protection Support by phone (Primary Method)

The most direct method is to call Microsoft's support line to raise a request to reset your authentication method and regain your account access. For a full list of regional numbers, you can also visit this official page: Customer service phone numbers - Microsoft Support. The support team will assist you as soon as possible. For reference:  Get support | Microsoft Docs   

Note: You may also consider calling a Microsoft support number for a different region if support in your local region is unavailable or unable to route your case appropriately.

(While calling, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore it and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

In some countries, it is an automated conversation like: First, when you call the hotline, it will be asked as follows:

IVR: What kind of problem are you concerned about?

You: Authenticator.

IVR: What kind of product do you use?

You: Office 365 for business.

IVR confirmation: education or company account?

You: For companies

IVR: Are you an administrator?

You: Yes.

IVR: Do you have the other administrator in your organization?

You: No.

IVR: Do you need a... Service request?

You: Yes

This process should connect you with a live agent who will create a service request with the Data Protection team. They will then contact you to help you regain access.

Option 2: Create a Temporary Account (Trial Tenant) to Submit a Support Ticket (Alternative Method)

If the automated phone system does not get you to a human agent, one workaround is to create a separate trial Microsoft 365 tenant and use that tenant to open a support ticket on behalf of the locked tenant.

Sign up for a new Microsoft 365 Business trial using this link: Compare All Microsoft 365 Plans. You will need to use a different, personal email address to register.
Once the trial account is created, log in to its Admin Center > From the Admin Center, open a new Service Request. For reference:  Get support | Microsoft Docs   
In the ticket description, explain that you are locked out of your primary tenant (your.onmicrosoft.com) and that you need to speak with the Data Protection team to regain access.
Remember to provide your locked account's details and a good contact number for them to reach you.

Important:

Please remember to cancel the trial subscription after your original account issue is resolved to avoid any future charges.
When creating the support request, I also recommend disabling or bypassing the AI/Support Assistant option if presented and choosing the path that allows you to contact a support engineer directly.

Thank you for your patience and understanding. If you have any questions or get stuck on any steps, please feel free to reach out. I'm looking forward to your update.