Microsoft 365 Business Standard – Sole Administrator Locked Out After Uninstalling Authenticator – Need MFA Recovery

Submit a Microsoft business-support request from an accessible personal account and explicitly request escalation for an existing-tenant sole-administrator MFA lockout to the Data Protection/Tenant Recovery team.

Submit the recovery request without tenant access

1. Open Microsoft Support’s Contact Support route from the personal Yahoo account you can access.
2. Enter this description:

   Microsoft 365 Business Standard — sole Global Administrator locked out after Microsoft Authenticator was uninstalled. No usable alternate MFA method. I need a service request for identity/tenant-ownership verification and escalation to the Data Protection/Tenant Recovery team to reset my MFA registration for my existing tenant.

3. Select Get Help, then Contact Support, and choose the Microsoft 365 for business/account sign-in option. Microsoft’s business guidance directs users who cannot sign in through this Contact Support flow.[^1^](https://support.microsoft.com/accounts-billing/subscriptions/[Subscription ID] "Microsoft 365 for business")
4. When an agent responds, emphasize:
   • This is an organizational Microsoft 365 account, not a personal Microsoft account.
   • The password is known, but the registered Authenticator method is unavailable.
   • There may be no other Global Administrator.
   • You are requesting MFA re-registration/reset, not a password-reset link, new subscription, or new tenant.
   • The automated business phone route has already disconnected repeatedly, so you need a support case created through this alternate channel.

Closely matching Business Standard sole-administrator cases were resolved by opening a support ticket and engaging the Data Protection team.^2^

Prepare ownership evidence

Provide sensitive details only through the private channel established by the support agent—not in this public Q&A. Have these ready:

• Tenant’s onmicrosoft.com domain
• Custom business domain
• Locked administrator username
• Company/legal business name
• Accessible setup/contact email
• Best Buy receipt and Microsoft subscription confirmation
• Subscription/product details and purchase date
• A telephone number and email where the recovery team can reach you
• Evidence that you control the custom domain, if requested
• Any official business documentation requested during identity verification

Tenant access cannot be restored by bypassing identity verification; ownership and access decisions are handled through Microsoft 365 support.^3^

Best Buy’s role

Because the subscription was purchased through Best Buy, Best Buy handles retailer-side subscription billing, cancellation, or refund matters. Microsoft states that third-party retailer purchases must be managed through that retailer for those billing operations.[^4^](https://support.microsoft.com/accounts-billing/subscriptions/[Subscription ID] "Manage your Microsoft 365 subscription purchased through a third party")

However, the problem here is tenant identity and MFA access, so request recovery from Microsoft Support. The Best Buy receipt is useful as ownership evidence, but Best Buy should not be expected to reset the tenant’s MFA registration.

If the web support route cannot create a case

As a last-resort support-entry workaround, a closely matching sole-admin lockout answer recommends creating a temporary Microsoft 365 Business trial using a different personal address, opening a service request from that trial’s Admin Center, and identifying the locked tenant in the case.^5^

This temporary tenant is only a vehicle for contacting support; it does not replace or migrate the existing tenant. Cancel the trial after the recovery case is resolved to avoid charges.

After access is restored

1. Re-register Microsoft Authenticator and test a new sign-in.
2. Add at least one independent backup verification method permitted by the tenant.
3. Assign a separate Privileged Authentication Administrator or another appropriately protected administrator account. Microsoft recommends having this role available because it can reset a locked-out Global Administrator.^6^
4. Record the support case number and recovery configuration securely.

References

1. [Microsoft 365 for business](https://support.microsoft.com/accounts-billing/subscriptions/[Subscription ID])
2. I'm the only admin for a 365 Business Standard account and I need my authentication reset - Microsoft Q&A
3. Tenant access recovery
4. [Manage your Microsoft 365 subscription purchased through a third party | Microsoft Support](https://support.microsoft.com/accounts-billing/subscriptions/[Subscription ID])
5. Microsoft 365 Business sole administrator locked out due to loss of MFA (Authenticator) access - Microsoft Q&A
6. About administrator roles in the Microsoft 365 admin center