URGENT: Microsoft 365 business email inaccessible — MFA lockout and support recovery failure

At the MFA prompt, select Sign in another way or Other verification options and use any previously registered method; if none is available and no other administrator can reset MFA, Microsoft Support must handle the tenant-access recovery.

1. Check for an existing alternative MFA method

This is separate from password recovery, which you have already completed.

1. Start a normal Microsoft 365 sign-in.
2. At the Authenticator approval prompt, select Sign in another way or Other verification options.
3. Use any method already shown, such as a registered telephone method or security key.
4. If that link or another method is not displayed, it was not previously configured and cannot be added while locked out. ^1^

2. Determine whether another administrator can restore access

Before opening tenant recovery, check whether any of these exists:

• Another Global Administrator.
• A Privileged Authentication Administrator able to reset authentication methods.
• A Microsoft partner with an active GDAP relationship and the necessary role.

A suitably privileged partner can restore access directly; without another administrator or applicable partner access, the tenant owner must contact Microsoft Support. ^2^

3. Contact Microsoft without using the failed MFA method

Because the automated telephone path has already rejected your administrator status, use either of these public routes rather than repeating password recovery.

Online Contact Microsoft Support route

Open Contact Microsoft customer support, choose the Work account path, describe the issue, and use any offered callback or chat option:

Microsoft 365 Business tenant administrator locked out after replacing MFA device. Password is accepted, but no usable MFA method is available. I cannot access the Microsoft 365 admin center to create a service request. Please help open a tenant-access recovery case.

The available contact choices can vary according to routing and session state, so this route is an option to try rather than a guaranteed unauthenticated case-opening channel. ^3^

Current UK telephone routes

Microsoft’s current work-account support listing gives:

• 0800 026 0329 — toll-free
• 0344 800 6006 — toll

Use the official listing because Microsoft notes that its support numbers can change. ^3^ Microsoft 365 business technical support is provided in English 24 hours a day, seven days a week. ^4^

When connected, state:

This is a Microsoft 365 Business tenant-access lockout, not a password-reset request. The password works, but the administrator cannot complete MFA after a device replacement. There is no usable alternative MFA method.

If applicable: There is no other Global Administrator and no delegated partner able to reset MFA. Please open a support case for the affected tenant and assess whether it must be transferred to the Data Protection or tenant-recovery team.

Microsoft Q&A cases matching a sole-administrator MFA lockout describe Support creating a case and transferring it to the Data Protection team when appropriate. ^5^

4. Prepare for verification

Have these details ready, but provide them only through Microsoft’s private support channel:

• Tenant’s initial *.onmicrosoft.com name and custom domain.
• Locked administrator sign-in name.
• Subscription/order and billing details.
• Original tenant setup confirmation.
• A working external email address and telephone number.
• Any domain-ownership evidence you can provide.
• A concise business-impact statement: email inaccessible and business operations affected.

Telephone support uses PIN-based verification. If calling from a number not recorded in the organization profile, the representative may send a code to the email address or telephone number stored in the Microsoft 365 admin profile. ^4^

Ownership documents do not automatically replace that PIN. If you cannot receive it, tell the representative exactly that and ask which approved verification process is available; do not send tenant identifiers or evidence in this public Q&A thread.

After access is restored

Create at least two emergency-access accounts with the Global Administrator role, secure their credentials separately, monitor their use, and test them periodically. Microsoft recommends these accounts specifically to reduce the risk of complete administrative lockout during MFA or device failures. ^6^

References

1. Use a screen reader to set up and troubleshoot multifactor authentication | Microsoft Support
2. Preventing tenant lockouts
3. Contact Microsoft customer support | Microsoft Support
4. Get support for Microsoft 365 for business
5. Global Administrator Locked Out | MFA Reset request. On behalf of a Microsoft Business 365 Account - Microsoft Q&A
6. Manage emergency access accounts in Microsoft Entra ID