Sole Global Admin locked out by MFA – tenant lockout, request Data Protection team

Thanks. I have already opened a service request from a separate Microsoft 365 Business tenant (request number: #‎2610011420001331). This is a sole Global Admin tenant lockout with DNS proof of domain ownership already published. Could a Microsoft moderator please help escalate it to the Data Protection / Tenant Recovery team? I can provide tenant ID and admin UPN privately.

Hi,

Some methods here.

https://yourwindowsguide.com/2026/09/how-to-reset-microsoft-mfa.html

#1:

Reset Microsoft MFA & Recover Access to Your Microsoft 365 Admin Account using Microsoft Support

Another option is to contact Microsoft support if you are locked out of your account. Please note that this method works only for Microsoft 365 Business accounts; for consumer Outlook accounts, you must complete the recovery form as described here.

Checklist

• Tenant details: Your primary domain and initial onmicrosoft.com domain
• Administrator identity: Global Administrator UPN (User Principal Name).
• Proof of ownership: Custom domain details and access to DNS records to verify domain ownership.
• Billing & Account verification: Subscription billing info, company name, phone number on file, and alternate contact email.
• Partner / Reseller context: Details of former CSPs or resellers (if applicable) and any prior support ticket numbers.

Get the Country Support phone number

Next step, use this Microsoft support document to find the contact number for your country.

Customer service phone numbers – Microsoft Support

Then call the number. See the extensive details on how to reach a Human:

Navigating the Support IVR — Step-by-Step

When you call Microsoft support to reset Microsoft MFA or resolve a forgotten password for a Microsoft 365 issue, follow these IVR prompts:

• Wait out the intro — You may hear a ~30-second automated introduction (e.g., “you can visit the link…”). Ignore it and wait for the menu options.
• Press 1 — Select yourself as a business email user
• Press 1 again — Choose technical help

Automated IVR Conversation Guide

In some regions, the initial interaction is fully automated. Use these answers to navigate it:

1. What kind of problem are you experiencing? — Answer: Login technical support.
2. What product are you contacting us about? — Answer: Microsoft 365 Business Standard.
3. Is this a new case or an existing case? — Answer: New case.
4. Are you a Global Administrator? — Answer: Yes.
5. Are you the Global Administrator for the domain? — Answer: Yes, I am the Global Administrator for the domain.
6. Would you like to be connected with a Microsoft representative regarding your issue? — Answer: Yes, please.
7. If asked to verify your phone number: Confirm that the phone number is already associated with the Microsoft 365 administrator profile.

Create a Temporary Tenant to Open a Support Ticket

If you get stuck in the automated IVR loop or cannot reach a live agent via telephone, offer this practical fallback method:

• Step 1: Sign up for a temporary Microsoft 365 Business trial account to generate a fresh tenant.
• Step 2: Log in to the Microsoft 365 Admin Center of the temporary tenant.
• Step 3: Go to Support > New Service Request and request an escalation to the Data Protection / Tenant Recovery team on behalf of your locked original tenant.
• Step 4: Clearly outline the locked tenant’s domain, UPN, and case history in the ticket description.
• Step 5: Cancel the subscription immediately to avoid charges.