Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
If you recently changed your phone or reinstalled Microsoft Authenticator, Microsoft may not yet recognize the new app as a trusted authentication method. As a result, you may be unable to sign in.
1. If you still have your old device, try approving the sign-in request from that device.
2. Check whether another verification method is available, such as email.
3. Ask another administrator in your organization to reset your account or authentication methods.
4. If your Microsoft 365 subscription was purchased through a reseller, ask whether the reseller can use delegated administration to help reset the account.
5. If you are the only administrator and have no other way to sign in, contact Microsoft Support and request tenant recovery through the Data Protection team.
If every administrator is locked out
Use Microsoft’s tenant recovery process, often referred to as a Data Protection request. Support will verify that your company owns the tenant before helping restore access to the Global Administrator account.
1. Open a support case from a Microsoft 365 tenant that you can access, such as another tenant or a trial tenant. In the Microsoft 365 admin centre, go to Help & support and state: “Sole Global Administrator locked out; requesting tenant recovery for a different tenant.” Make it clear from the beginning that the case concerns another tenant.
2. Prepare the locked tenant’s tenant ID, domain name, former administrator’s user principal name (UPN), and company registration documents. The tenant ID may be available from the OpenID configuration address already provided above.
3. Be prepared to verify ownership of the domain. Support may ask you to add a specific DNS TXT record. After verification, they can guide you through resetting the administrator’s password and multifactor authentication.
4. If phone support is the only available option, ask specifically for “tenant recovery” and the “Data Protection team.” Use a clear phone line and speak slowly when responding to the automated Interactive Voice Response system.
Suggested IVR responses
Problem: Authenticator Product: Office 365 for business Account type: Company or education account, as applicable Are you an administrator? Yes Is another administrator available? No Do you need a service request? Yes
Microsoft customer service phone numbers: https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2
Once access is restored, create a second Global Administrator account and a separate emergency access account so that the organization is not locked out again if one device or authentication method becomes unavailable.