Subject: URGENT – Sole Global Admin Locked Out of Microsoft 365 – No Access to MFA or Support

Question

Subject: URGENT – Sole Global Admin Locked Out of Microsoft 365 – No Access to MFA or Support

Nicole KAO 0

I am the sole Global Administrator of our company's Microsoft 365 Business tenant, purchased directly from Microsoft Taiwan.

After replacing my iPhone and trading in my old device, I lost access to Microsoft Authenticator.

Both available verification methods require the Authenticator app, which is no longer registered on my new phone.

I cannot access Teams, Outlook, the Microsoft 365 Admin Center, or my company email.

I have also contacted Microsoft Support by phone, but I am unable to reach a live support agent.

I urgently need assistance opening a support case without signing in.

Could a Microsoft support representative please direct me to the Data Protection / Tenant Recovery Team for administrator MFA recovery?

I can provide proof of subscription ownership, billing information, and company registration details.

Please advise how I can initiate the recovery process using an alternative contact email or phone number.

Thank you.

Moderator's note: Moved from Microsoft Security | Microsoft Authenticator

0 comments

3 answers

Your answer

Answer 1

Hello Nicole KAO

First, I'd like to clarify one point: this forum is designed for users to help one another. No one here, including myself, has the authority or the tools to unlock MFA on your behalf.

For this type of issue, only the Microsoft Data Protection Team can provide further assistance.

Based on my experience with similar cases, you will need to contact the Microsoft Data Protection Team by phone, as outlined below. I'd like to share a detailed process that many users have successfully followed to reach Microsoft Support. You may want to give it another try.

Contacting Microsoft Data Protection team by phone support

In this situation, the Microsoft Data Protection team has tools and processes in place to verify identity and regain access to administrator accounts.

Therefore, if you are the only administrator in your organization, then you need to involve Microsoft data protection team. Please try to find the related hotline number to call the frontline let them raise a ticket for you: Customer service phone numbers - Microsoft Support

If you can use English, you may prefer these numbers:

copyImage

(Important Note: Depending on your country or region, when you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

In some countries, this is an automated conversation: First, when you call the hotline, they will ask you what kind of problem you are struggling with.

Answer: Authenticator.

A: What products do you use?

B: Office 365 for business.

Verification: Education or company account?

B: For companies

A: Are you an administrator?

B: Yes.

A: Are there any other administrators in your organization?

B: No.

A: I need one.... Service request?

B: Yes

Please try "2 or 3"times until you can reach out to an agent.

I hope you can reach out to them soon.

Answer 2

Dear Microsoft Support Team,

Thank you for your response and guidance.

I have already tried the suggested recovery methods, but unfortunately, I am still unable to access my Microsoft 365 account.

Every sign-in attempt redirects me to Microsoft Authenticator verification. Since my old iPhone has been traded in and my new device is not registered, I cannot complete either verification method.

I have also tried contacting Microsoft Support by phone, but I was unable to reach a live support agent. The online support process also requires me to sign in, which brings me back to the same MFA verification issue.

As I am the sole Global Administrator, there is no other administrator who can reset my MFA settings.

Could you please help me create a tenant-lockout support case and escalate it directly to the Data Protection / Tenant Recovery Team?

I can provide our company registration documents, subscription details, billing information, and proof of tenant ownership if required.

Please advise how I can proceed without signing in, as all the suggested methods currently lead back to the same authentication issue.

I would greatly appreciate your assistance in resolving this issue as soon as possible, as it is affecting our daily business operations.

Thank you for your understanding and support.

Best regards,[Moderator note: Personally Identifiable Information removed]

Answer 3

Open Microsoft Taiwan’s Contact us page, select 無法登入 (Can’t sign in), choose Microsoft 365, and request a tenant-lockout service case for the Data Protection/Tenant Recovery team using an alternative contact address. ^1^

Primary escalation path

Go to the Taiwan Contact us page and select 無法登入, rather than 登入.
Select Microsoft 365 and enter a description such as:

Sole Global Administrator locked out after replacing phone. No accessible MFA method and no other administrator. Please create a tenant-lockout service request and route it to the Data Protection/Tenant Recovery team. Contact me through the alternative email address and phone number provided.
If the online flow does not offer a usable contact option, call Microsoft Taiwan at +886 0080-1128-000. Microsoft lists this as a toll-free Taiwan number. ^2^
Since the previous general phone attempt did not reach an agent, use the business-support routing:
- Product/problem: Authenticator
- Product: Office 365 for Business
- Account type: Company
- Administrator: Yes
- Other administrators: No
- Request: Create a service request for sole Global Administrator tenant lockout and route it to the Data Protection/Tenant Recovery team

This case requires Microsoft Support because no other administrator exists to reset the registered authentication methods. A newly installed Authenticator app does not itself replace the registration associated with the old device. ^3^

Have these details ready, but provide sensitive information only through the private support channel:

Tenant’s primary domain and *.onmicrosoft.com domain, if known
Locked administrator sign-in name
Subscription/order and billing information
Company registration details
Proof of domain ownership or ability to add a requested DNS record
Registered contact details
A working alternative email address and phone number
A concise business-impact statement

Microsoft’s business-support process may use PIN verification through the email address or telephone number registered in the organization profile. ^4^

If the unauthenticated and phone paths still do not create a case

Create a temporary Microsoft 365 trial tenant, sign in as its new Global Administrator, and open a support request concerning the locked tenant. This workaround is documented in a closely matched sole-admin lockout case. ^5^

From the temporary tenant:

Open Microsoft 365 admin center.
Select Help & support.
If Support Assistant is enabled and blocks the contact form, turn it off.
Enter contact support.
Select Contact support.
Choose Phone or Email and supply the alternative contact details.
State prominently that the request concerns a different, locked tenant, and include its domains and subscription details.
After recovery, cancel/delete the temporary trial before renewal if it is no longer needed.

Microsoft Learn Q&A is a public user-to-user forum; moderators and community members cannot access the tenant, reset MFA, or directly open the recovery case. ^5^

After access is restored

Immediately register the new phone and at least one independent authentication method. Then create at least two cloud-only emergency administrator accounts with distinct credentials and authentication methods; Microsoft recommends administrator redundancy to prevent complete tenant lockout. ^6^

References