MFA Lockout of the sole Global Administrator account

Question

MFA Lockout of the sole Global Administrator account

Josh Coffman 0

I have MFA lock out of the sole Global Administrator account for an existing Microsoft Entra tenant. I know the password.

Access to the only registered Microsoft Authenticator method was lost. There is no other Global Administrator and no usable alternate authentication method.

I need this escalated as a sole Global Administrator tenant lockout to Data Protection / Tenant Recovery so that the authentication methods on the administrator account can be reset.

Ive called the helpdesk, they send me to the website aka.ms/prosupport, when I use the website, the solution is i need to call because Only Microsoft Support (Data Protection Team) can complete the MFA reset and tenant recovery. Its an endless loop

0 comments

1 answer

Your answer

Answer 1

Jay1 Tran 1,700 Independent Advisor

Hi Josh,

I hope you're doing well.

I’m truly sorry to hear that you’re currently unable to sign in. If your account is also an admin account and there are no other available global administrators in your tenant, then the only way to regain access is contact Microsoft support. Please try locating the appropriate hotline for your region here: Customer service phone numbers - Microsoft Support

In this situation, the Microsoft Data Protection team has tools and processes in place to verify identity and regain access to administrator accounts.

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:

What kind of problem are you experiencing?
Answer: Authenticator
What products do you use?
Answer: Office 365 for business
Is this for an education or company account?
Answer: For companies
Are you an administrator?
Answer: Yes
Are there any other administrators in your organization?
Answer: No. I am the only admin in my tenant
Do you need a... Service request?
Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.

During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account.

I also recommend calling during business hours. In my experience, it can be difficult to get through to the correct support queue, and automated systems don't always work as expected. If you can't get through on your first try, I suggest trying again later or at a different time.

I know being locked out of the only admin account can be stressful, but contacting the Data Protection team is the correct path forward in this scenario.

I hope these steps help you create a support ticket successfully and move closer to regaining access to your administrator account. While I’m not able to intervene directly, guiding you to the right support team is the most effective help I can provide here.

Hope you're able to get this resolved soon.

Josh Coffman 0 Reputation points

2026-10-05T19:48:35.03+00:00

I've tried. Calling multiple times. I'm in the United States.

Here's how the call goes:

Thanks for calling microsift

this call may be monitored

Are you calling as home user or business user: business user

What can i help you with: MFA lockout of sole admin

is there another admin: No

please tell me the issue: MFA lockout of sole global admin

hold on while we transfer you

hold music plays

transfers to another AI

It introduces itself and confirms my name and spelling

asks the domain

asks the account

asks alternate email

confirms my phone number

Please describe problem: MFA lockout of sole global admin

Im glad we could assist you today, goodbye. they hang up.
Jay1 Tran 1,700 Reputation points Independent Advisor

2026-10-05T20:09:45.0333333+00:00
Hi Josh,

Thank you for your update.

If you cannot reach a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription and submit your request from there.

To set up a new tenant, please follow these steps below:

Visit Microsoft 365 Business Plans and Pricing | Microsoft 365.

This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.

Follow the guided setup process to create a new account for a new tenant.

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues

In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt:

"Hello, I’m currently unable to access my previous Microsoft 365 tenant due to losing MFA access, which prevents me from receiving verification codes. I’m the global admin, but I’m locked out and unable to generate a QR code or bypass MFA.

I created this new tenant solely to request assistance. I kindly ask to be connected with the Data Protection team to verify my identity and help me recover access to the original tenant.

This is urgent, as I rely on Microsoft 365 for my work and have been unable to operate for several days. I’m available to provide any documentation or verification needed to support the recovery process."

Ticket Support: In the Microsoft 365 Admin Center > Support > Help & Support. You can raise support ticket at https://admin.microsoft.com/#/support/requests

Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

I hope everything gets sorted out soon. Please keep me posted on any updates.
Josh Coffman 0 Reputation points

2026-10-05T20:11:25.6633333+00:00

That's what I did
Josh Coffman 0 Reputation points

2026-10-05T20:17:51.2266667+00:00

Going to the support center and opening the chat then explaining the issues ends in the chat it tells me to contact Data Protection so they can verify my identity and reset my MFA.

Neither the online support nor calling in actually connects me to them and it does not open up a ticket for me to see
Jay1 Tran 1,700 Reputation points Independent Advisor

2026-10-05T21:42:29.1533333+00:00

Hi Josh,

Thank you for your response.

The solution provided earlier was intended to help you create a trial tenant and use the Microsoft 365 admin center within that tenant to submit a support ticket to the Data Protection Team. This process is not completed through the online support chat.

Once the support ticket is created, Microsoft Support can route the request to the appropriate Data Protection Team. They can then complete the required identity and tenant-ownership verification and assist you with regaining administrative access to your previous tenant.

Best regards,