Locked out of the only Global Administrator account due to MFA issue - Microsoft 365 tenant recovery required

Hi

Thank you for sharing the details.

Error Code 399287 generally indicates that Microsoft was unable to complete the Multi-Factor Authentication (MFA) verification process. In Microsoft 365 environments, this error is commonly associated with authentication methods that are unavailable or failing, such as SMS or phone-based verification being blocked, authentication prompts not being delivered, or registered MFA methods no longer being accessible to the user.

Just to gently clarify before we go any further, forum moderators do not have the ability to access, modify, or recover user accounts. Due to security and privacy requirements, issues such as sign in failures, password recovery, and multi factor authentication can only be addressed by Microsoft’s dedicated support teams, who have the appropriate tools and authorization to manage account level settings securely.    

To move toward a resolution, I suggest the following steps:    

Option 1: Contact Microsoft Data Protection Support by Phone (Primary Method)           

Since you are the only administrator of your tenant and you’re currently unable to sign in, the next essential step is to involve the Microsoft Data Protection team, as they are the only team authorized to help recover an admin account in these circumstances. You can start by calling your regional Microsoft support hotline here: Contact Microsoft customer support | Microsoft Support and choose Work account.   

During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account.            

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:           

Here are some tips and an example of a prompt to help you reach out the Microsoft Data Protection team support more effectively:        

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)          

In some countries, it is an automated conversation like:       

IVR: What kind of problem are you concerned about?             

You: Authenticator.             

IVR: What kind of product do you use?             

You: Office 365 for business.             

IVR confirmation: education or company account?             

You: For companies             

IVR: Are you an administrator?             

You: Yes.             

IVR: Do you have another administrator in your organization?             

You: No.             

IVR: Do you need a... Service request?      

You: Yes. I need to create a ticket. Please send me directly to the Data Protection Team.      

Option 2: Create a Temporary Account (Trial Tenant) to Submit a Support Ticket (Alternative Method)       

If you cannot reach a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription.      

To set up a new tenant, please follow these steps:      

Visit Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.      

Follow the guided setup process to create a new account for a new tenant.      

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues.      

In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt:      

"Hello, I’m currently unable to access my previous Microsoft 365 tenant due to losing MFA access, which prevents me from receiving verification codes. I’m the only global admin, but I’m locked out and unable to generate a QR code or bypass MFA.      

I created this new tenant solely to request assistance. I kindly ask to be connected with the Data Protection team to verify my identity and help me recover access to the original tenant.      

This is urgent, as I rely on Microsoft 365 for my work and have been unable to operate for several days. I’m available to provide any documentation or verification needed to support the recovery process."      

Ticket Support: In the Microsoft 365 Admin Center > Support > Help & Support.      

Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn      

I truly hope this helps you regain access to your account quickly. Even though I can't directly intervene, directing you to the correct and specialized support is the most effective help I can provide from my position.       

Thank you for your kindness and contributions to the forum.      

If the answer is helpful, please click "Yes". If you have extra questions about this answer, please click "Comment".      

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Dear Microsoft Support Team,

I created my Microsoft 365 tenant through the Microsoft 365 Developer Program. My phone was stolen, and I no longer have access to the Microsoft Authenticator app registered on that device.

I am unable to complete MFA verification or access the Microsoft 365 Admin Center. Please help me verify my ownership and reset the affected authentication method so I can register Authenticator on my new phone.

My account details are:

• Affected admin account: ******@nafgeospatial.onmicrosoft.com
• Developer Program registration email: ******@outlook.com

Country: Bangladesh

I have tried contacting phone support, but the automated system disconnected my calls on some attempts. It also provided a link that displayed “Invalid Link” on the Microsoft Support website, so I have been unable to complete my support request. the link was: http://aka.ms/87?ib=c9LRFfo
After sometime I can talk with a real agent. The email address I gave the previous agent is my locked admin account. I cannot access its inbox. Please use ******@outlook.com as my contact email and send my case number there.

Please route my request to the appropriate account recovery or Data Protection team. I can provide my Developer Program registration details, subscription renewal email, and any other information required to verify ownership.

Please contact me at ******@outlook.com, as I cannot access the affected account. I would appreciate assistance by email if possible.

Thank you for your help.

Kind regards, Md Nafiz