Sole Global Admin locked out of Microsoft 365 tenant – MFA reset / Tenant Recovery required

SATO 0 Reputation points
2026-10-06T04:00:05.93+00:00

I am the only Global Administrator of our Microsoft 365 Business tenant. I know the correct password, but all available MFA methods point to an old company phone number that is no longer available. I do not have access to the old phone, and Microsoft Authenticator is not available for this account on the current device. There is no other administrator in the tenant, so I cannot access the Microsoft 365 Admin Center or create a support case from the affected tenant.

I am posting from a separate Microsoft account because the affected tenant is completely locked out.

Please help escalate this issue to the Microsoft Data Protection / Tenant Recovery team and advise how I can recover access and reset the MFA methods for the sole Global Administrator account.

I can provide tenant/account details privately if required.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Doris V 1,700 Reputation points Microsoft External Staff Moderator
    2026-10-06T04:55:23.4366667+00:00

    Dear SATO,

    Based on your description, this appears to be a tenant lockout scenario where the only Global Administrator still knows the correct password but cannot complete MFA because all registered authentication methods are no longer accessible. In this situation, neither forum users nor forum moderators can reset MFA or modify tenant security settings.

    Since there are no other Global Administrators available to reset your authentication methods, the issue must be handled by Microsoft Data Protection through an identity and ownership verification process. This team is the only group authorized to assist with recovery of a locked Microsoft 365 tenant in this scenario.

    You might need to contact Microsoft Support team via phone service number: Customer service phone numbers - Microsoft Support. The agent will be able to create a ticket for you under the affected tenant and then transfer this ticket to Data Protection team who could help you to regain access.   

    To help you navigate the automated phone system (IVR), here's an example of what the conversation might look like:

    IVR: What kind of problem are you worried about?

    You: Admin account locked

    IVR: What kind of product do you use?

    You: Office 365 for business

    IVR: Does it count for education or business?

    You: For Business

    IVR: Are you an admin?

    You: Yes

    IVR: Do you have another administrator in your organization?

    You: No

    IVR: Need a service request?

    You: Yes

    This should help you connect with a live support agent who can help you directly.

    If you can't create a support ticket during the call, I recommend creating a temporary tenant account and submitting the support request from there. To create a new tenant, follow these steps:

    1. Visit Office 365 E3 - Enterprise Collaboration and Productivity | Microsoft    
    2. Select any plan and click Try for free.    
    3. Complete the setup to create a new tenant.    
    4. Ticket support: In the Microsoft 365 admin center>support>help & support. You can create a support ticket: https://admin.microsoft.com/#/support/requests     

    Important: Please remember to cancel the trial subscription once your issue is resolved to avoid any charges.

    I understand that this issue may take some time to resolve and could impact your workflow. However, the following solutions have been effective in resolving Microsoft Authenticator issues.

    If you have any other questions, please feel free to reach out.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.