Subject: Sole Global Administrator locked out — MFA recovery required

Iago Santos 0 Reputation points
2026-11-11T12:54:57.33+00:00

Hello Microsoft Support Team,

We need assistance recovering administrative access to our Microsoft 365 tenant.

Our only Global Administrator lost access to the device configured with Microsoft Authenticator. There are no alternative MFA methods available and no other Global Administrator who can reset the authentication methods.

Organization details:

Tenant: ibold.onmicrosoft.com

Affected administrator: [[Moderator note: Personally Identifiable Information removed] @ibold.onmicrosoft.com]

Custom domain: institutobold.com

Alternative contact email: [****[Moderator note: Personally Identifiable Information removed] @institutobold.com]

We have already contacted Microsoft telephone support, but the automated system directs us to online support.

We can sign in with a regular employee account, but this account does not have administrative permissions to open support requests through the Microsoft 365 Admin Center.

Important: Please send any replies, updates, or instructions regarding this recovery request to [****[Moderator note: Personally Identifiable Information removed] @institutobold.com], as we may not be able to receive or monitor messages through the account used to submit this request.

We kindly request assistance in opening a tenant recovery case and escalating it to the Data Protection team.

We can provide proof of domain ownership, organizational information, and subscription billing details through a secure private channel.

Thank you for your assistance.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

3 answers

Sort by: Newest
Most helpful Newest Oldest
  1. Heimerdinger 1,635 Reputation points Independent Advisor
    2026-11-11T13:42:26.1+00:00

    Hi @Iago Santos,

    Thank you for posting your question in the Microsoft Q&A forum.      

    I’m very sorry to hear about your situation. Regarding that you’re unable to log in to your account.  

    If you don't have any other admin account in this situation, the Microsoft Data Protection team has tools and processes in place to verify identity and regain access to administrator accounts.    

    Please note that I'm also a user I have no control over user accounts, especially when it comes to logging in to your account, resetting your password, changing your access, etc.    

    Therefore, If you are the only administrator in your organization, then you need to involve Microsoft data protection team. Please try to find the related hotline number to call the frontline let them raise a ticket for you: Customer service phone numbers - Microsoft Support 

    *(Important Note: Depending on your country or region, when you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)     

    In some countries, this is an automated conversation: First, when you call the hotline, they will ask you what kind of problem you are struggling with.    

    Answer: Authenticator.    

    A: What products do you use?    

    B: Office 365 for business.    

    Verification: Education or company account?    

    B: For companies    

    A: Are you an administrator?    

    B: Yes.    

    A: Are there any other administrators in your organization?    

    B: No.    

    A: I need one.... Service request?    

    B: Yes    

    If your organization's Office 365 Business/Education subscription is from a partner or reseller, and the global administrator is unable to open a service request on your end, contact the reseller's support provider to help open a service request on behalf of you instead.    

    Alternatively, you can try set up a new trial tenant and submit your support request:   

    1. Visit the Microsoft 365 Enterprise Plans page: Go to Compare Office 365 Enterprise Pricing and Plans | Microsoft 365.   
    2. Choose a plan and start a free trial: Select any of the available plans and click "Try for free" to begin the trial setup process.   
    3. Follow the guided setup: Complete the steps to create a new Microsoft account and a new tenant. This will be a separate and independent Microsoft 365 environment.   
    4. Access the Microsoft 365 Admin Center: Once the new tenant is created, navigate to https://admin.microsoft.com/. 
    5. Go to Support: In the left-hand navigation menu, click on "Support" and then "Help & support."   
    6. Raise a support ticket: Describe your issue in detail. Crucially, you must clearly state that you are locked out of a different, pre-existing Microsoft 365 tenant where you are the administrator. Provide the following information about your locked account:    
      • Your administrator account email address for the locked tenant.   
      • The domain name of your locked tenant    
      • Any error messages you are receiving.   
      • Details about the authentication issues you are experiencing.   
      • Confirmation that you are the administrator of the locked tenant.   
    7. Submit your ticket: Follow the prompts to submit your support request. You will likely receive a ticket number for tracking.   

    When you open a support ticket, please make sure to turn off the Support Assistant (AI) in the help panel.  

    Several customers have reported issues when the Support Assistant is turned on  the system sometimes fails to display the “Contact Support” option.  

    As shown in the screenshot, simply switch Support Assistant > Off, then type your issue description.  Once the AI is off, the “Contact Support” button will appear normally, allowing you to submit a ticket directly.  

    User's image

    Important notes:    

    • This new trial tenant will not give you access to any of the data or settings in your original locked tenant. It is solely a temporary means to contact Microsoft support.   
    • Be prepared for Microsoft support to ask for verification of your identity and administrative rights for the locked tenant.   
    • The resolution time might be longer as you are contacting support from a different tenant.   
    • Remember to cancel the trial subscription for the new tenant once your issue with the original account is resolved to avoid any unintended charges. You can typically do this within the Microsoft 365 Admin Center under "Billing" -> "Your products."      

    Thank you again for your time and understanding.  I really appreciate your patience, and I’m here to help. Looking forward to your response.

    Was this answer helpful?

    0 comments
  2. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  3. AI answer

    2026-11-11T12:55:15.4833333+00:00

    This is a tenant lockout scenario for the sole Global Administrator. The supported recovery path is through Microsoft Support with identity verification; tenant recovery or MFA reset can't be completed through this request.

    Recommended next steps:

    1. Try self-service recovery first at the Self Service Password Reset tool if it is still available for the affected admin account.
    2. If self-service recovery doesn't work, contact Microsoft Support directly and state that this is a tenant lockout where the only Global Administrator can't complete MFA.
    3. If phone support routes back to online support, use the public support phone numbers for Microsoft 365 business or Microsoft customer service when portal access isn't available.
    4. Be prepared to complete Microsoft's high-assurance identity verification process. Supported verification can include:
      • official business documentation
      • domain ownership
      • publicly listed nonprofit registration data, where applicable
      • subscription or billing information, if requested by support
    5. If a Microsoft partner manages the tenant or has GDAP with the required roles, that partner should help restore access or promote/create a Global Administrator. If no such partner exists, Microsoft Support is the required path.

    Important limitations:

    • Microsoft doesn't bypass identity verification to restore tenant access.
    • Microsoft for Nonprofits can't provide tenant access directly.
    • Microsoft recovers access to the existing tenant after ownership is verified; it doesn't issue a new tenant.
    • If repeated MFA attempts triggered unusual-activity protection, wait and try again later or use a different MFA method if one exists. An IT administrator can review Microsoft Entra sign-in logs after access is restored.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.