Unable to Access School Microsoft 365 Account After Removing Microsoft Authenticator

Question

Unable to Access School Microsoft 365 Account After Removing Microsoft Authenticator

Ahmed Mamdouh 0

Dear Microsoft Support Team,

I am a school administrator in Egypt, and I am experiencing a critical issue accessing my school's official Microsoft 365 account.

Affected Account: [<Moderator's note: Personal Identifiable Information removed>@cvhtjs.emis.gov.eg]

Login Portal: https://student.emis.gov.eg/login

Issue Description:

When I attempt to sign in to the school's portal using my Microsoft account, I successfully enter my credentials. However, Microsoft requires me to complete multi-factor authentication (MFA) through the Microsoft Authenticator application.

The login screen displays a two-digit number that I must enter in the Authenticator app to approve the sign-in request.

Although I receive the authentication notification on my mobile phone, opening it displays the following error:

"Sign-in error: Error finding an account to complete multi-factor authentication. You may need to add the account again."

I subsequently removed the affected account from Microsoft Authenticator in an attempt to resolve the issue. Unfortunately, I am now unable to add it again because the account requires MFA verification before allowing me to access the security settings or generate a new QR code.

Troubleshooting Steps Already Attempted:

Attempted to sign in through the official school portal.

Received Microsoft Authenticator notifications, but encountered the sign-in error.

Removed the account from Microsoft Authenticator.

Attempted to add the account again, but was unable to complete the setup.

Selected "Sign in another way," but the available options were Authenticator approval or a verification code, neither of which I can currently use.

Attempted to access the Microsoft security information page, but MFA verification prevents me from proceeding.

Requested Assistance:

I kindly request your guidance on recovering access to this account.

Specifically, I would like to know:

Is it possible to reset the MFA configuration without access to the previously registered Authenticator?

Can Microsoft Support assist with an MFA reset or authentication method re-registration for a school account managed by the Egyptian Ministry of Education?

If administrator intervention is required, which department or support channel should I contact?

Is there an alternative secure verification process that would allow me to register Microsoft Authenticator again?

This account is essential for managing official school operations, and I would greatly appreciate your assistance in restoring access as soon as possible.

Thank you for your support.

Best regards,

School Administrator Egyptian Ministry of Education

0 comments

3 answers

Your answer

Answer 1

Dear Ahmed Mamdouh

I understand how important this account is for your school's daily operations, and I can appreciate how frustrating it is to be locked out after removing the Microsoft Authenticator registration.

Since you have removed the account from the Microsoft Authenticator app and cannot complete the MFA challenge, you are effectively locked out of the registration process.

Note: As this is a public community forum, no one has access to your tenant and cannot reset MFA or modify authentication methods on your behalf.

If there are any other Global Administrators or Authentication Administrators in your organization, I strongly recommend contacting them. They can reset your MFA methods and require you to re-register Microsoft Authenticator on your device.

For more information and instructions, please ask another IT Admin to follow the Microsoft Official Guide here: Manage authentication methods for Microsoft Entra multifactor authentication - Microsoft Entra ID | Microsoft Learn

However, if you are the only Global Administrator in the organization, in this case, only Microsoft Support's Data Protection team can assist with account ownership verification and administrator recovery. I recommend contacting Microsoft Support and specifically requesting escalation to the Data Protection / Account Recovery team for a Global Administrator lockout.

As a forum member like you, I don't have access to internal Microsoft systems or special escalation channels. The suggestions I provided are based on what I have observed from many similar cases I have seen in the forum community.

Option 1: Try to contact Microsoft Data Protection Support by phone again (Primary Method)

The most direct method is to call Microsoft's support line to raise a request for resetting your authentication method and regain access to your account. For a full list of regional numbers, you can also visit this official page: Customer service phone numbers - Microsoft Support. The support team will assist you as soon as possible. For reference:  Get support | Microsoft Docs   

Note: You may also consider calling a Microsoft support number for a different region if support in your local region is unavailable or unable to route your case appropriately.

(While calling, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore it and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

In some countries, it is an automated conversation like: First, when you call the hotline, it will be asked as follows:

IVR: What kind of problem are you concerned about?

You: Authenticator.

IVR: What kind of product do you use?

You: Office 365 for business.

IVR confirmation: education or company account?

You: For companies

IVR: Are you an administrator?

You: Yes.

IVR: Do you have the other administrator in your organization?

You: No.

IVR: Do you need a... Service request?

You: Yes

This process should connect you with a live agent who will create a service request with the Data Protection team. They will then contact you to help you regain access.

Option 2: Create a Temporary Account (Trial Tenant) to Submit a Support Ticket (Alternative Method)

If the automated phone system does not get you to a human agent, one workaround is to create a separate trial Microsoft 365 tenant and use that tenant to open a support ticket on behalf of the locked tenant.

Sign up for a new Microsoft 365 Business trial using this link: Compare All Microsoft 365 Plans. You will need to use a different, personal email address to register.
Once the trial account is created, log in to its Admin Center > From the Admin Center, open a new Service Request. For reference:  Get support | Microsoft Docs   
In the ticket description, explain that you are locked out of your primary tenant (your.onmicrosoft.com) and that you need to speak with the Data Protection team to regain access.
Remember to provide your locked account's details and a good contact number for them to reach you.

Important:

- Please remember to cancel the trial subscription after your original account issue is resolved to avoid any future charges.

- When creating the support request, I also recommend disabling or bypassing the AI/Support Assistant option if presented and choosing the path that allows you to contact a support engineer directly.

If you have any questions or are stuck on any steps, please feel free to reach out. I'm looking forward to your update.

Answer 2

Ahmed Mamdouh 0

can you please provide me an email to can contact with?

0 comments

Answer 3

An Authentication Administrator for the Egyptian Ministry of Education tenant must require MFA re-registration for the affected account; removing the account from the phone does not remove its existing registration from Microsoft Entra ID.

Required administrator action

Contact the Ministry of Education’s central Microsoft 365/identity-management team—not merely the local school or portal support team—and request:

“Please require re-registration of MFA for my work or school account because the registered Microsoft Authenticator method is no longer available.”

An administrator with at least the Authentication Administrator role should:

Sign in to the Microsoft Entra admin center.
Go to Entra ID → Users.
Select the affected user.
Select Authentication methods.
Select Require re-register MFA.
Confirm the action.

This removes the account’s registered Microsoft Authenticator apps, phone numbers, software OATH tokens, and deactivates hardware OATH tokens. At the next sign-in, Microsoft prompts the user to register a new MFA method.^1^

After the reset:

Start a fresh sign-in.
When prompted to configure security information, choose Microsoft Authenticator.
In Authenticator, select Add account → Work or school account → Scan QR code.
Scan the newly displayed QR code and complete the test approval.

Do not keep trying the old notification or verification-code options: both refer to the deleted app registration, and no usable alternative method is currently available.

Alternative: Temporary Access Pass

If the Ministry has enabled Temporary Access Pass (TAP), its administrator can issue a time-limited passcode that lets you register Authenticator without using the unavailable MFA method. TAP is specifically supported for recovery when a user loses a strong authentication method.^2^

The administrator creates it under:

Entra ID → Users → affected user → Authentication methods.
Select Add authentication method.
Select Temporary Access Pass, configure its activation and duration, and select Add.
Provide the displayed TAP securely; its value cannot be viewed again after the administrator closes the dialog.

You then open Authenticator and select:

Add account → Work or school account.
Sign in.
Enter the account name and the TAP when requested.
Complete Authenticator registration.

TAP is available only if the tenant’s Authentication Methods policy includes your account. Enabling that policy requires an Authentication Policy Administrator, while creating a TAP for a regular member account requires at least an Authentication Administrator.^2^

Who must handle the request

This is an organization-managed school account, so a local Microsoft community moderator cannot change its authentication methods. The reset normally must be performed by the Ministry tenant’s Microsoft 365/Entra identity administrator. A closely matching school-account case likewise directs the user to request “Reset my MFA settings or allow me to re-register for MFA.”^3^

When contacting the Ministry help desk, provide:

The affected username, through its secure support channel.
The exact Authenticator error.
Confirmation that the Authenticator account was removed.
Confirmation that Sign in another way offers no usable method.
The requested action: Require re-register MFA, or issue a Temporary Access Pass if permitted.

Do not post the full account address, password, QR code, TAP, or verification codes publicly.

If this is the tenant’s only accessible administrator

If another Global Administrator or Authentication Administrator can sign in, that person should perform the reset. If all tenant administrators are locked out, the tenant owner’s Global Administrator must contact Microsoft Support for tenant recovery; if the organization has a Microsoft partner with suitable delegated administrative privileges, that partner may be able to restore access or open the service request.^4^

Microsoft publishes its current business-support contact routes and regional numbers, including Egypt, on the customer-support page.^5^ Support will need to validate the tenant and authorized administrator; it is not an alternative method for bypassing identity verification.

After recovery, register more than one permitted MFA method so the loss of one device does not create another lockout. Microsoft’s recovery guidance recommends a TAP or administrator-managed method update when no backup method is available.^6^

References