Sole Global Administrator locked out after phone change – MFA reset / Tenant Recovery required

Hello Elena,

Thank you for your detailed instructions.

I have just tried the phone procedure again and followed the recommended sequence.

This time, the first automated system transferred me to a second automated system. The second system asked for my first name, last name, email address, Microsoft tenant/domain name, confirmed my telephone number, and asked me to describe the issue.

I clearly explained that I am the sole Global Administrator, that I changed my phone, no longer have access to the old Microsoft Authenticator registration, have no other administrator and no alternative MFA method, and need an MFA reset / Tenant Recovery.

After collecting all of this information, the automated system simply said “Thank you for contacting Microsoft, goodbye” and terminated the call.

I was not transferred to a human agent, received no service request/case number, and so far have received no email, SMS or callback.

I have already experienced this same outcome several times today.

Since I cannot access the Microsoft 365 Admin Center because of the MFA lockout, could you please advise another way to have a support case created and escalated to the Data Protection / Tenant Recovery team without authenticating to the affected tenant?

Thank you very much for your help.

Disclaimer: As this forum is in the French (fr-fr) locale but your question was posted in English, I will respond in English to ensure accuracy.

Dear Eric Lavedrine,

Based on your description, I understand how urgent this situation must feel, especially since you’re the only administrator and need access to your account.

As a forum member like you, I do not have access to internal Microsoft systems or any special escalation channels. The suggestions I provided are based on what I have observed from many similar cases I have seen in the forum community.

These are the most effective paths available, and I have seen many sole-admin lockout cases successfully resolved through Microsoft Support after tenant ownership and identity verification were completed (only the Microsoft Data Protection team can help you regain access to your account).

Option 1: Try to contact Microsoft Data Protection Support by phone again (Primary Method)  

The most direct method is to call Microsoft's support line to raise a request for resetting your authentication method and regaining your account access. For a full list of regional numbers, you can also visit this official page: Customer service phone numbers - Microsoft Support. The support team will assist you as soon as possible. For reference:  Get support | Microsoft Docs   

Note: You may also consider calling a Microsoft support number for a different region if support in your local region is unavailable or unable to route your case appropriately.

(While calling, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore it and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)     

Here are some tips and an example of a prompt to help you navigate the IVR more effectively: 

In some countries, it is an automated conversation like: First, when you call the hotline, it will be asked as follows: 

IVR: What kind of problem are you concerned about? 

You: Authenticator. 

IVR: What kind of product do you use? 

You: Office 365 for business. 

IVR confirmation: education or company account? 

You: For companies 

IVR: Are you an administrator? 

You: Yes. 

IVR: Do you have the other administrator in your organization? 

You: No. 

IVR: Do you need a... Service request? 

You: Yes  

This process should connect you with a live agent who will create a service request with the Data Protection team. They will then contact you to help you regain access. 

Option 2: Create a Temporary Account (Trial Tenant) to Submit a Support Ticket (Alternative Method) 

If the automated phone system does not get you to a human agent, one workaround is to create a separate trial Microsoft 365 tenant and use that tenant to open a support ticket on behalf of the locked tenant.

• Sign up for a new Microsoft 365 Business trial using this link: Compare All Microsoft 365 Plans. You will need to use a different, personal email address to register. 
• Once the trial account is created, log in to its Admin Center > From the Admin Center, open a new Service Request. For reference:  Get support | Microsoft Docs   
• In the ticket description, explain that you are locked out of your primary tenant (your.onmicrosoft.com) and that you need to speak with the Data Protection team to regain access.
• Remember to provide your locked account's details and a good contact number for them to reach you. 

Important:

- Please remember to cancel the trial subscription after your original account issue is resolved to avoid any future charges. 

• When creating the support request, I also recommend disabling or bypassing the AI/Support Assistant option if presented and choosing the path that allows you to contact a support engineer directly.

I hope the information shared is helpful. If you have any questions, please feel free to reach out. I'm looking forward to your update.