Tenant Administration Recovery

Because the domain is attached to a managed tenant, request a Microsoft 365 business tenant-recovery case and escalation to the Data Protection/Tenant Recovery team; DNS ownership alone cannot initiate an administrator takeover of a managed tenant.

Open the recovery case without the tenant administrator

1. Open Microsoft’s public customer-support page and select the telephone number for your country or region: ^1^
2. Identify the issue as:
   • Office/Microsoft 365 for business
   • Administrator account locked or unavailable
   • No other administrator exists
   • A service request is required
3. Ask the frontline agent to:
   • Create a tenant access/Global Administrator recovery case.
   • Escalate it to the Data Protection/Tenant Recovery team.
   • Provide the case number and a contact method that does not depend on the inaccessible tenant.

A matching sole-administrator lockout case identifies this as the supported route because only Microsoft’s authorized support teams can validate ownership and perform administrator recovery.^2^

The personal Microsoft 365 account is not the account being recovered. Make clear that the affected identity is a Microsoft Entra work or school tenant, and that no usable tenant administrator credentials are available.

Prepare the verification evidence

Have the following ready before contacting support:

• Legal business registration or ownership documents.
• Proof that the requester is authorized to represent the business.
• Ability to publish a Microsoft-provided DNS TXT record.
• Business domain and organization name.
• Tenant GUID found in Exchange Online headers.
• Any known *.onmicrosoft.com tenant name, former administrator addresses, or registration email addresses.
• Historical invoices, subscription details, reseller records, or payment information, if any exist.
• A safe external email address and telephone number for correspondence.

Microsoft may require both organizational identity evidence and domain-control verification. Domain control is important evidence, but support—not the DNS record by itself—makes the access decision.^2^

Do not characterize the tenant as definitively orphaned based only on the absence of visible billing. Provide that as an observation and let support determine the tenant and subscription state.

If telephone support cannot create the case

A closely matching Microsoft Q&A recovery procedure recommends creating a temporary Microsoft 365 trial tenant, signing in to its Microsoft 365 admin center, and opening a request under Support → Help & support. In that request, state prominently that the case concerns a different, inaccessible managed tenant, and request Data Protection/Tenant Recovery escalation.^2^

If this route is used:

1. Create the temporary tenant with a separate address that is not bound to the affected domain.
2. Open Microsoft 365 admin center → Support → Help & support.
3. Supply the affected domain, tenant GUID, organization name, and evidence list.
4. Record the support-request number.
5. Cancel any trial subscription after the recovery case is resolved to prevent charges.

If a Microsoft partner or reseller originally supplied Microsoft 365, contact that provider instead and ask it to open the tenant-recovery request on the organization’s behalf.^3^

Do not use the DNS “admin takeover” procedure

Microsoft’s internal administrator takeover is specifically for an unmanaged/shadow directory created through self-service signup—a directory without a Global Administrator.^4^

Your UserRealm result identifies the namespace as Managed, and Exchange Online headers indicate an established tenant. Therefore, the Power BI signup/DNS TXT “Become the Admin” workflow is not the applicable recovery mechanism. Likewise, external takeover is documented for an unmanaged directory and has service-plan restrictions; it should not be attempted against this managed tenant.^5^

References

1. Contact Microsoft customer support | Microsoft Support
2. Recovery of Admin account - Microsoft Q&A
3. Lost Global Admin Access to Our Microsoft 365 Business Tenant – Need to Verify Domain Ownership - Microsoft Q&A
4. Internal admin takeover
5. Take over an unmanaged directory as administrator in Microsoft Entra ID