หัวข้อเบ็ดเตล็ดที่ไม่เข้ากับหมวดหมู่เฉพาะใดโดยตรง
Note: Since you described the problem in English, I will also reply in English (including links to documentation and images (if any)), even though the support page you are using is in Thai. If you would like to receive the answer in Thai, please let me know.
Dear @Watin Inthapan,
I understand how critical it is to get back into your account, especially as the sole Global Administrator for your tenant. Facing an MFA lockout during authentication is stressful, but I am here to guide you on how to resolve this immediately.
The error code 399287 typically points to an issue with the SMS sign-in or multi-factor authentication (MFA) delivery pipeline prior to reaching your mobile carrier.
Because you are the only Global Administrator on the Microsoft 365 tenant, there is no other admin within your organization who can reset your MFA methods from the Microsoft Entra admin center. For security reasons, Microsoft Community Support and forum moderators do not have access or permissions to modify admin accounts, reset passwords, or alter MFA settings for private tenants.
To regain access, you must contact Microsoft's dedicated Data Protection Team via telephone to perform an identity verification and reset your MFA.
- Find your local support phone number, Visit the official Microsoft documentation page: Contact Microsoft customer support. When prompted by the automated IVR system, state that you are an Administrator facing an MFA lockout / authentication failure on your Global Admin account. The phone system will route your ticket directly to the Microsoft Data Protection Team.
They will verify your identity and tenant ownership, then safely clear your registered MFA methods so you can set up a new sign-in method (such as the Microsoft Authenticator app or an updated phone number) on your next login attempt.
- If contacting support by phone is unsuccessful, you can use an official and highly effective solution within the community: Create a temporary trial account solely to open support requests on behalf of the locked account.
You can sign up for a new Microsoft 365 tenant by creating a trial subscription here: Microsoft 365 Business Plans and Pricing | Microsoft 365
Once that new tenant is created, you’ll be able to access the Microsoft 365 admin center and submit a support ticket directly from there. In the ticket, explain that you’re requesting assistance from the Data Protection Team for your original tenant, due to being locked out as the only admin with MFA issues. This method often helps bypass the automated loops because you’re able to submit the request from an authenticated admin center, even if it’s under a temporary tenant.
Note: Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.
I strongly recommend setting up the Microsoft Authenticator app or registering a backup Global Admin account once access is restored to avoid single-point-of-failure lockouts in the future.
Please let me know if you need any further assistance.