Global Administrator locked out after losing Microsoft Authenticator access - Single Admin Tenant

Hello,

Thank you for explaining what happened and the steps you have already taken.

From your description, this appears to be a sole Global Administrator lockout. Although you can verify your identity using SMS and email, the sign-in process still requires approval through Microsoft Authenticator, which you can no longer access.

Since there is no other Global Administrator who can reset your authentication methods, I recommend requesting assistance through Microsoft's tenant recovery process.

Here is what I suggest:

Request escalation to the Data Protection team.

Contact Microsoft through the official customer support page.

Explain that you are the only Global Administrator, have lost access to your registered Authenticator device, and cannot access the admin center to raise a support request.

Ask the support representative to escalate the case to the Data Protection team for tenant ownership verification and administrator access recovery.

Since you have already contacted support, make it clear that previous attempts resulted in referrals to the admin center, which is inaccessible because of this lockout.

Prepare for ownership verification.

Microsoft may ask for company information, domain ownership evidence, subscription or billing details, and an alternative contact method.

Follow the verification instructions provided by Microsoft Support. Avoid sharing sensitive documents or account information in this public forum.

For additional guidance, see Microsoft's documentation:

Plan for tenant recoverability – Microsoft Learn

One important point: Microsoft Q&A moderators cannot directly reset your MFA methods or restore access to your tenant. The Data Protection team must handle the ownership verification and recovery process.

Once access is restored, consider establishing independently protected emergency access accounts to help prevent a similar situation in the future.

I hope this helps clarify the next steps. I understand that being locked out as the only administrator is particularly difficult, and I hope you can get the appropriate recovery assistance soon.

Kind regards,

Hello Microsoft Team,

I am the only Global Administrator of my Microsoft 365 tenant and I am currently locked out due to MFA.

Tenant information:

• Tenant: [Moderator note: Personally Identifiable Information removed]@stli-logistics.com
• Domain: stli-logistics.com
• Admin account: [Moderator note: Personally Identifiable Information removed]@stli-logistics.com

I have the mobile phone where Microsoft Authenticator was configured. But it does not pop up when i log in.

Current situation:

• I know my password.
• SMS verification works.
• Email verification works.
• Account recovery options work.
• However, after completing all available verification methods, Microsoft still requires approval through Microsoft Authenticator, which I can no longer access.

There are no other Global Administrators in the tenant who can reset my MFA methods.

I have already contacted Microsoft support several times by phone, but I have been redirected to the Microsoft 365 Admin Center, which I cannot access because of this MFA lockout.

I am the owner and administrator of the tenant and can provide:

• Company information.
• Domain ownership verification for stli-logistics.com
• Subscription and billing details.
• Identity verification documents if required.

Could a Microsoft moderator please assist in opening or escalating a Global Administrator MFA Lockout recovery case and provide guidance on the recovery process?

Thank you very much.

Regards,

[Moderator note: Personally Identifiable Information removed]

Thank you for your response.

Unfortunately, this does not resolve my situation.

I have already contacted Microsoft Support several times by phone, but I am repeatedly redirected to the Microsoft 365 Admin Center, which I cannot access because of the MFA lockout.

I am the only Global Administrator of the tenant nestmi.onmicrosoft.com, and I have no alternative administrator who can reset my authentication methods.

SMS and email verification work correctly, but Microsoft still requires approval through my previous Microsoft Authenticator device.

I urgently need a way to open an actual support case with the Data Protection / Tenant Recovery team.

Could a Microsoft moderator please provide a specific procedure for reaching this team without signing in to the affected tenant?

If possible, I would appreciate assistance in escalating this issue or obtaining an official support case number.

I am ready to verify my identity, domain ownership and subscription details through a secure Microsoft channel.

Thank you for your assistance.

Thank you for your response.

Unfortunately, this does not resolve my situation.

I have already contacted Microsoft Support several times by phone, but I am repeatedly redirected to the Microsoft 365 Admin Center, which I cannot access because of the MFA lockout.

I am the only Global Administrator of the tenant nestmi.onmicrosoft.com, and I have no alternative administrator who can reset my authentication methods.

SMS and email verification work correctly, but Microsoft still requires approval through my previous Microsoft Authenticator device.

I urgently need a way to open an actual support case with the Data Protection / Tenant Recovery team.

Could a Microsoft moderator please provide a specific procedure for reaching this team without signing in to the affected tenant?

If possible, I would appreciate assistance in escalating this issue or obtaining an official support case number.

I am ready to verify my identity, domain ownership and subscription details through a secure Microsoft channel.

Thank you for your assistance.