Sole Global Admin locked out by MFA loop (Authenticator) - no other admin, phone support unreachable - need Data Protection tenant recovery

Question

Sole Global Admin locked out by MFA loop (Authenticator) - no other admin, phone support unreachable - need Data Protection tenant recovery

Maria del Carmen Lucena Martín 0

The only Global Administrator of our Microsoft 365 tenant (planifiacionfinanciera.onmicrosoft.com) cannot sign in.

Sign-in requires a verification code from Microsoft Authenticator, which she no longer has access to. Choosing "Sign in another way" loops back to the same Authenticator prompt. Self-service password reset works (the recovery code arrives at her registered personal email), but it only resets the password - the MFA prompt still blocks sign-in, so we are stuck in a loop.

There is no other admin account in the tenant, so nobody can reset her MFA methods. We have tried calling Microsoft 365 business support by phone several times, but nobody answers.

The subscription is still active and being billed. We can verify ownership with billing details (invoice/order ID, last 4 digits of the payment card, company name, VAT number and address) and the registered recovery email.

Could a moderator please open a support case and route it to the Data Protection / tenant recovery team so they can reset MFA for the Global Admin? We are happy to share contact details by private message.

Thank you.

0 comments

1 answer

Your answer

Answer 1

Hi @Maria del Carmen Lucena Martín,

Just to gently clarify before going any further, this forum is a user-to-user support forum and separate from Microsoft Support. Forum users, moderators, and Microsoft external staff cannot create support cases, directly escalate requests to the Data Protection team, or perform the verification and recovery steps required to regain access to a Microsoft 365 administrator account.

The affected administrator should contact Microsoft Support by phone so the frontline support team can create a support case and, if appropriate, route it to the Data Protection team for tenant recovery. You can find the correct support phone number for your region here: Contact Microsoft Customer Support.

Microsoft Data Protection team has tools and processes in place to verify identity and regain access to administrator accounts.

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:

What kind of problem are you experiencing?
Answer: Authenticator
What products do you use?
Answer: Office 365 for business
Is this for an education or company account?
Answer: For companies
Are you an administrator?
Answer: Yes
Are there any other administrators in your organization?
Answer: No. I am the only admin in my tenant
Do you need a... Service request?
Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.

During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account.

I hope this helps, and I wish you a smooth recovery process.