Share via

Severity A Situation - Locked out of global admin account (MFA) - business down

Reginald Thomas 0 Reputation points
2026-01-27T02:32:33.1866667+00:00

Got a new phone, and can't access my Microsoft Authenticator app from the old phone. Locked out of the account. Business down. There is only one global admin on the account. Have all business documentation and information. @Raja Pothuraju - I need your support immediately on this. Thank you.

Microsoft Security | Microsoft Entra | Microsoft Entra ID

Answer recommended by moderator

  1. Raja Pothuraju 47,415 Reputation points Microsoft External Staff Moderator
    2026-01-27T05:06:35.1866667+00:00

    Hello @Reginald Thomas,

    The issue pertains to a tenant lockout, where no other global admin in the tenant has the necessary permissions to re-register MFA.

    To resolve this, we have engaged our Data Protection team through a support ticket. They will reach out to you via email or phone to help restore access to the tenant and assist in resolving the issue.

    Once the issue has been resolved by our support team, please feel free to revisit and kindly click "Accept Answer," as this will be helpful to other community members facing similar issues.

    Was this answer helpful?

3 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Asim H 0 Reputation points
    2026-05-14T18:31:35.01+00:00

    @Raja Pothuraju we are experiencing an issue with global admin access. We just transitioned from IT services managed tenant to inhouse, but during the transition, no one on our side was assigned a permanent global admin role. We were accessing with PIM, but yesterday the full expiration took place and now none of us have GA access. The IT services contact told us to reach out to multiple number, with no success. He said we should mention the following "This is a tenant administrative lockout. All Global Administrator accounts have lost access due to a license change that removed PIM. We need this escalated to the Microsoft Data Protection Team for tenant recovery." I would appreciate any help you can provide so we can get this resolved urgently. Thanks in advance!

    Was this answer helpful?

    0 comments
  2. Kassahun Zenebe 5 Reputation points
    2026-05-11T18:47:26.64+00:00

    Password/SMS and Authentecater still work. The only thing preventing a login is the Optional policy, which was accidentally enabled, and we don't have to provide it. Three out of 4 verifications should be enough. As Microsoft agents, we can share our screen to verify account ownership in multiple ways.

    Was this answer helpful?

    0 comments
  3. Q&A Assist
    2026-01-27T02:32:41.9533333+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    If you are locked out of your global admin account due to issues with the Microsoft Authenticator app and you are the only global admin, you will need to contact Microsoft Data Protection Support for assistance. Here are the steps you can take:

    1. Contact Microsoft Data Protection Support by Phone: Call the Global Customer Service phone number for your region. Explain your situation and mention that you are the only admin who has lost access to your account. They will guide you through the process of regaining access.
    2. Provide Documentation: Have your business documentation and information ready to verify your identity when you contact support.

    If you are unable to reach support or if you need further assistance, you might consider creating a temporary account to submit a support ticket on behalf of your original account.

    References:

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.