locked out of my tenant due to conditional access

Mike Veschi 5 Reputation points
2026-06-09T20:18:17.61+00:00

I have a global policy on all user and cant login due to Conditional access policy. Can you help remove it?

Community Center | Not monitored

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Rukmini 44,000 Reputation points Microsoft External Staff Moderator
    2026-06-09T20:46:19.21+00:00

    Hello @Mike Veschi

    Going forward for Tenant lockout issue, please comment the below and follow up once, post that close it as Redirect support 

    Based on the details you’ve shared, this appears to be a tenant lockout scenario. 

    To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: Customer service phone numbers - Microsoft Support.

    If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

    For future reference and to help prevent tenant lockouts, please check: Preventing tenant lockouts - Microsoft Learn. 

    If neither option is possible, please don’t worry—let us know, we are happy to assist you further!

     

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-06-09T20:18:28.91+00:00

    If sign-in is blocked for all users, including administrators, by a Conditional Access policy, the policy cannot be removed directly from the portal. Use the following supported recovery paths:

    1. Check for any unblocked admin or emergency access account
      • If there is another administrator or a break-glass/emergency access account that is not affected by the policy, sign in with that account.
      • In the Microsoft Entra admin center, go to Entra ID → Protection → Conditional Access and disable or edit the policy that is blocking sign-in.
    2. If all admins are locked out
      • When no administrator can sign in to update Conditional Access, a support request with Microsoft is required.
      • Follow the documented guidance to submit a support request so Microsoft Support can review and, after confirming ownership, update or disable the Conditional Access policies that are preventing access.
    3. Prevent future lockouts
      • Configure at least one emergency access (break-glass) account and exclude it from Conditional Access policies so it can always sign in and recover access if a policy is misconfigured.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.