Subject: URGENT – Sole Global Admin Locked Out of Microsoft 365 – No Access to MFA or Support

Open Microsoft Taiwan’s Contact us page, select 無法登入 (Can’t sign in), choose Microsoft 365, and request a tenant-lockout service case for the Data Protection/Tenant Recovery team using an alternative contact address. ^1^

Primary escalation path

1. Go to the Taiwan Contact us page and select 無法登入, rather than 登入.
2. Select Microsoft 365 and enter a description such as:

   Sole Global Administrator locked out after replacing phone. No accessible MFA method and no other administrator. Please create a tenant-lockout service request and route it to the Data Protection/Tenant Recovery team. Contact me through the alternative email address and phone number provided.

3. If the online flow does not offer a usable contact option, call Microsoft Taiwan at +886 0080-1128-000. Microsoft lists this as a toll-free Taiwan number. ^2^
4. Since the previous general phone attempt did not reach an agent, use the business-support routing:
   • Product/problem: Authenticator
   • Product: Office 365 for Business
   • Account type: Company
   • Administrator: Yes
   • Other administrators: No
   • Request: Create a service request for sole Global Administrator tenant lockout and route it to the Data Protection/Tenant Recovery team

This case requires Microsoft Support because no other administrator exists to reset the registered authentication methods. A newly installed Authenticator app does not itself replace the registration associated with the old device. ^3^

Have these details ready, but provide sensitive information only through the private support channel:

• Tenant’s primary domain and *.onmicrosoft.com domain, if known
• Locked administrator sign-in name
• Subscription/order and billing information
• Company registration details
• Proof of domain ownership or ability to add a requested DNS record
• Registered contact details
• A working alternative email address and phone number
• A concise business-impact statement

Microsoft’s business-support process may use PIN verification through the email address or telephone number registered in the organization profile. ^4^

If the unauthenticated and phone paths still do not create a case

Create a temporary Microsoft 365 trial tenant, sign in as its new Global Administrator, and open a support request concerning the locked tenant. This workaround is documented in a closely matched sole-admin lockout case. ^5^

From the temporary tenant:

1. Open Microsoft 365 admin center.
2. Select Help & support.
3. If Support Assistant is enabled and blocks the contact form, turn it off.
4. Enter contact support.
5. Select Contact support.
6. Choose Phone or Email and supply the alternative contact details.
7. State prominently that the request concerns a different, locked tenant, and include its domains and subscription details.
8. After recovery, cancel/delete the temporary trial before renewal if it is no longer needed.

Microsoft Learn Q&A is a public user-to-user forum; moderators and community members cannot access the tenant, reset MFA, or directly open the recovery case. ^5^

After access is restored

Immediately register the new phone and at least one independent authentication method. Then create at least two cloud-only emergency administrator accounts with distinct credentials and authentication methods; Microsoft recommends administrator redundancy to prevent complete tenant lockout. ^6^

References

1. 與我們連絡 - 連絡 Microsoft 支援服務 - support.microsoft.com
2. 連絡 Microsoft 客戶支援 | Microsoft Support
3. I am the sole Global Administrator, I have lost access to my MFA methods and I am locked out of my tenant. - Microsoft Q&A
4. Get support - Microsoft 365 admin | Microsoft Learn
5. Sole Global Administrator locked out due to Microsoft Authenticator MFA loop – Tenant Recovery needed - Microsoft Q&A
6. Preventing tenant lockouts