Urgent: Global Administrator locked out due to lost Microsoft Authenticator access – Unable to reach Microsoft Support from Bangladesh

shahadat 0 Reputation points
2026-11-07T06:01:42.0666667+00:00

Hello Microsoft Support Team,

I am the administrator of an Azure tenant belonging to my organization, Icicle.

I am currently unable to access my original Global Administrator account because Microsoft Authenticator was removed from my phone.

Affected account: [<Moderator's note: Personal Identifiable Information removed>******@iciclecorporationgmail.onmicrosoft.com]

Original tenant ID:<Moderator's note: Personal Identifiable Information removed>

Initial domain: iciclecorporationgmail.onmicrosoft.com

I know the administrator password, and Microsoft successfully recognizes the account. However, sign-in requires Microsoft Authenticator approval or a six-digit verification code. I no longer have access to the registered Authenticator account, and no alternative verification methods are available.

I also have another possible administrator account, but it requires MFA as well.

I attempted to contact Microsoft Support using the published Bangladesh telephone numbers, but the calls from my Robi mobile network are rejected as invalid numbers.

My original Azure subscription and resources are still important to my organization. I need assistance recovering access to the existing tenant, not creating a replacement tenant.

Request:

Could a Microsoft Employee or External Staff moderator please contact me through private messages and help initiate a case with the Microsoft Entra Data Protection / Tenant Recovery team?

I can provide the tenant ID, subscription ID, original account details, company ownership information and other proof required through a secure private channel.

Country: Bangladesh Time zone: Asia/Dhaka

Thank you for your assistance.

Moderator's note: Moved from Microsoft Security | Microsoft Authenticator

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Austin-H 8,810 Reputation points Microsoft External Staff Moderator
    2026-11-07T06:32:13.3033333+00:00

    Hi shahadat

    Regarding the issue where you are having issue with MFA since you have to reinstall authenticator apps. Please kindly check whether your tenant has another Global Administrator who may be able to assist you with this issue?

    If other user still holds the Global Administrator role, please kindly follow these steps:

    Sign in to the Microsoft Entra Admin Center using an account that has at least the Authentication Administrator role.

    • Navigate to Entra ID > Users.
    • Select the user whose MFA authentication methods you wish to reset, then choose Authentication methods.
    • Select Revoke multifactor authentication sessions, and then select Require re‑register multifactor authentication.
    • After completing these steps, the user will need to set up MFA again. You can do this by signing in and configuring MFA through the Microsoft Authenticator app on mobile device.

    If you are the only administrator in your organization, you will need to contact the Microsoft Data Protection team for further assistance. Please locate the appropriate support phone number for your country or region and contact Microsoft Support so the frontline team can raise a service request on your behalf: Please try to find the related hotline number to call the frontline and let them raise a ticket for you: Customer service phone numbers - Microsoft Support
    User's image

    Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

    (When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help)

    In some regions you may initially interact with an automated system, so here is an example of how you can answer the prompts to reach the right team more quickly:

    • What kind of problem are you experiencing
    • Answer: Authenticator
    • What products do you use?
    • Answer: Office 365 for business
    • Is this for an education or company account
    • Answer: For companies
    • Are you an administrator?
    • Answer: Yes
    • Are there any other administrators in your organization?
    • Answer: No. I am the only admin in my tenant
    • Do you need a... Service request?
    • Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.

    During the call, you will be asked to provide information that verifies your identity and proves ownership of the tenant, such as your organization name, billing information, contact email, phone number, or other subscription‑related details.

    If you are unable to reach support via the phone numbers, there is a workaround you might consider: You can register for a new Microsoft 365 tenant by signing up for a trial subscription here: Microsoft 365 Business Plans and Pricing | Microsoft 365
    User's image

    Once the new tenant is created, you can access the admin center and submit a support ticket from there, requesting to speak with the Data Protection Team on behalf of your original tenant.

    Important notes:

    • This new trial tenant will not give you access to any of the data or settings in your original locked tenant. It is solely a temporary means to contact Microsoft support.
    • The resolution time might be longer as you are contacting support from a different tenant.
    • Remember to cancel the trial subscription for the new tenant once your issue with the original account is resolved to avoid any unintended charges.

    I hope the information provided helps guide you in the right direction. Although I’m unable to take direct action, I sincerely hope that the steps and recommendations I’ve shared can support you through the process.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

  2. AI answer

    2026-11-07T06:02:57.1466667+00:00

    Microsoft Support must open a Data Protection tenant-recovery case and verify ownership; Microsoft Q&A moderators cannot reset MFA, access the tenant, or arrange recovery through private messages.

    Open the recovery case without using the failed Bangladesh phone route

    1. Open the official Contact Microsoft Support flow and select support for a work/business account: ^1^
    2. Describe the issue using these terms:
      • Tenant lockout
      • No accessible Global Administrator
      • All administrator accounts blocked by unavailable MFA
      • Request a Data Protection / tenant recovery case
      • Existing Azure tenant and subscription must be recovered
    3. Provide a reachable alternate email address and telephone number. Do not use an address inside the locked tenant as the only contact method.
    4. State that the published Bangladesh number is rejected by the Robi network and request online or email-based handling.

    Microsoft’s Azure sign-in guidance specifically directs customers who cannot sign in to create a support request through the external support route rather than the Azure portal.^2^

    If the online flow still requires an inaccessible tenant sign-in

    Create a temporary Microsoft 365 trial tenant solely to submit the support request. This does not replace, migrate, or abandon the original tenant; it is only a way to reach support.

    1. Create the temporary trial tenant with an alternate contact address.
    2. Sign in to the Microsoft 365 admin center.
    3. Go to Support → Help & Support.
    4. If Support Assistant prevents case creation, turn it off, enter Support, and select Contact Support.
    5. In the request, identify the locked tenant and ask that the case be routed to the Data Protection team.
    6. Include this summary:

    Existing Azure/Microsoft Entra tenant lockout. No Global Administrator can complete MFA, and no alternate authentication method is available. Please open a Data Protection tenant-recovery case for ownership verification and MFA re-registration. The temporary tenant is only being used to contact support.

    1. Cancel the trial after recovery to avoid charges.

    This workaround has been recommended for the same sole-Global-Administrator, lost-Authenticator scenario when normal support channels are inaccessible.^3^ A closely matched case also confirms that the temporary tenant’s admin-center support request should explicitly request Data Protection assistance for the affected tenant.^4^

    If the Azure subscription was purchased through a Cloud Solution Provider or reseller, ask that provider to open the service request on the organization’s behalf.^3^

    Prepare for ownership verification

    Have the following ready, but submit it only through the official support case:

    • Locked tenant’s tenant ID and initial onmicrosoft.com domain
    • Affected administrator UPN
    • Azure subscription ID
    • Organization name and proof of authority
    • Billing records, invoices, payment details, or subscription information
    • Domain-ownership evidence, if applicable
    • Historical contact details associated with the subscription
    • A reachable alternate email address and phone number

    Matched tenant-lockout cases are transferred to Data Protection, which then contacts the requester by email or phone to verify ownership and restore access.^5^

    Do not post tenant IDs, subscription IDs, administrator addresses, invoices, or ownership documents publicly. Edit the existing question to remove the tenant-specific identifiers already included; public Q&A is not a secure recovery channel.

    After access is restored

    Create at least two cloud-only emergency-access accounts with permanent Global Administrator assignments, store their credentials securely, and monitor their use. Microsoft recommends these accounts specifically to prevent complete lockout when normal administrators cannot complete MFA.^6^

    References

    1. Contact - Microsoft Support
    2. Troubleshoot Azure subscription sign-in issues
    3. Sole Global Admin Tenant Lockout - Lost MFA - Need Data Protection Escalation - Microsoft Q&A
    4. Sole Global Administrator locked out – Authenticator MFA loop / tenant recovery required - Microsoft Q&A
    5. Tenant lockout — I am the only Global Admin and lost Microsoft Authenticator. - Microsoft Q&A
    6. Manage emergency access admin accounts - Microsoft Entra ID
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.