Forgotten Global Admin pasword

Question

Forgotten Global Admin pasword

Frederiek Goemaere 1

Hi,

Last week, I had to reset my only Global Admin account (I have to do that every 90 days) and II tought that I saved it into my password manager but I can’t find it anymore.

The GA account has MFA enabled, I receive a SMS on my cellphone when I log on. Can you do something with that for resetting my password?

Kind regards,

Frederiek

JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator

2022-10-03T18:52:21.45+00:00
@Frederiek Goemaere
Thank you for your post and for following up on this with your recent calls!

When it comes to logging into your Global Admin account, after receiving the SMS code on your phone are you able to login?

Do you have any other users or Admins in your tenant?

Does your tenant have Self-Service Password Reset enabled? If so, you should be able to leverage the below links to reset your password.

If you're using a work or school account, use https://passwordreset.microsoftonline.com.

If you're using a Microsoft account, use https://account.live.com/ResetPassword.aspx.

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
Frederiek Goemaere 1 Reputation point

2022-10-03T19:46:28.177+00:00

Hi,

It is the only global admin account in my tenant and SSPR is not configured. I have a case at Microsoft since Thursday last week but not yet a solution.
Frederiek Goemaere 1 Reputation point

2022-10-03T19:48:52.807+00:00

When it comes to logging into your Global Admin account, after receiving the SMS code on your phone are you able to login? => I first have to fill in the password before i receive the sms and because i don't know my password anymore, i'm stucked
risolis 8,741 Reputation points

2022-10-04T16:55:32.83+00:00

Do you get this at least when you choose sign-in different option ?
Frederiek Goemaere 1 Reputation point

2022-10-04T19:19:40.657+00:00

I only see this:
JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator

2022-10-04T21:36:26.277+00:00

@Frederiek Goemaere
Thank you for following up on this!

Do you have any other users in your tenant that can log in?
risolis 8,741 Reputation points

2022-10-04T23:17:07.96+00:00

@JamesTran-MSFT Many thanks buddy.

@Frederiek Goemaere I am wondering if you by any chance at some point were using your PowerShell terminal to work on it....

If yes, you may try to do it like this to work on your UPN via PS terminal....
Frederiek Goemaere 1 Reputation point

2022-10-05T04:41:49.117+00:00

Hi,

I have normal users and they can still login. Those users where also synched by AzureAD connect, inclusive the password. But no sync account has the Global Admin role.

Only 1 cloud users has that role and 2 weeks a ago, I had to choose a new password and that new password was not saved into my password manager :(.

Please help me with this. That cloud user has correct filled in email addresses and normally also a cellphone number where I receive SMS'ses on for 2FA.
Frederiek Goemaere 1 Reputation point

2022-10-05T04:43:42.627+00:00

I didn't yet used PS with my global admin account. I only use the web GUI in a private browser session (my normal session has integrated azure authentication with my normal account)
JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator

2022-10-06T21:31:38.447+00:00

@Frederiek Goemaere
Thank you for your time and patience on this!

Since you still have normal users that can log in, can you see if they have access to add another mobile number to your Azure AD account? If they have access, they'll be able to add an alternate mobile number to your Azure AD user that you can then use to authenticate with.

I hope this helps!

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
Frederiek Goemaere 1 Reputation point

2022-10-07T06:49:21.383+00:00

@JamesTran-MSFT As a normal user, I cannot change authentication methods of other users. Can Microsoft please use the alternative emailaddresses of my globan admin cloud only user to send a password reset link?
Frederiek Goemaere 1 Reputation point

2022-10-11T12:22:25.513+00:00

Hi @risolis and @JamesTran-MSFT ,

I still have no access to my Global Admin account. Can anyone help me further? I also have a case at Microsoft but it is quiet from that side.

Kind regards,
Frederiek
risolis 8,741 Reputation points

2022-10-18T22:16:32.137+00:00

Hi @Frederiek Goemaere

I saw you mentioned me on this post but please correct me If I am mistaken.

If further assistance is needed for sure we can assist you.

Regards,

1 answer

Your answer

JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator

2022-10-03T18:52:21.45+00:00

@Frederiek Goemaere
Thank you for your post and for following up on this with your recent calls!

When it comes to logging into your Global Admin account, after receiving the SMS code on your phone are you able to login?

Do you have any other users or Admins in your tenant?

Does your tenant have Self-Service Password Reset enabled? If so, you should be able to leverage the below links to reset your password.

If you're using a work or school account, use https://passwordreset.microsoftonline.com.

If you're using a Microsoft account, use https://account.live.com/ResetPassword.aspx.

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
Frederiek Goemaere 1 Reputation point

2022-10-03T19:46:28.177+00:00

Hi,

It is the only global admin account in my tenant and SSPR is not configured. I have a case at Microsoft since Thursday last week but not yet a solution.
Frederiek Goemaere 1 Reputation point

2022-10-03T19:48:52.807+00:00

When it comes to logging into your Global Admin account, after receiving the SMS code on your phone are you able to login? => I first have to fill in the password before i receive the sms and because i don't know my password anymore, i'm stucked
risolis 8,741 Reputation points

2022-10-04T16:55:32.83+00:00

Do you get this at least when you choose sign-in different option ?
Frederiek Goemaere 1 Reputation point

2022-10-04T19:19:40.657+00:00

I only see this:
JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator

2022-10-04T21:36:26.277+00:00

@Frederiek Goemaere
Thank you for following up on this!

Do you have any other users in your tenant that can log in?
risolis 8,741 Reputation points

2022-10-04T23:17:07.96+00:00

@JamesTran-MSFT Many thanks buddy.

@Frederiek Goemaere I am wondering if you by any chance at some point were using your PowerShell terminal to work on it....

If yes, you may try to do it like this to work on your UPN via PS terminal....
Frederiek Goemaere 1 Reputation point

2022-10-05T04:41:49.117+00:00

Hi,

I have normal users and they can still login. Those users where also synched by AzureAD connect, inclusive the password. But no sync account has the Global Admin role.

Only 1 cloud users has that role and 2 weeks a ago, I had to choose a new password and that new password was not saved into my password manager :(.

Please help me with this. That cloud user has correct filled in email addresses and normally also a cellphone number where I receive SMS'ses on for 2FA.
Frederiek Goemaere 1 Reputation point

2022-10-05T04:43:42.627+00:00

I didn't yet used PS with my global admin account. I only use the web GUI in a private browser session (my normal session has integrated azure authentication with my normal account)
JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator

2022-10-06T21:31:38.447+00:00

@Frederiek Goemaere
Thank you for your time and patience on this!

Since you still have normal users that can log in, can you see if they have access to add another mobile number to your Azure AD account? If they have access, they'll be able to add an alternate mobile number to your Azure AD user that you can then use to authenticate with.

I hope this helps!

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
Frederiek Goemaere 1 Reputation point

2022-10-07T06:49:21.383+00:00

@JamesTran-MSFT As a normal user, I cannot change authentication methods of other users. Can Microsoft please use the alternative emailaddresses of my globan admin cloud only user to send a password reset link?
Frederiek Goemaere 1 Reputation point

2022-10-11T12:22:25.513+00:00

Hi @risolis and @JamesTran-MSFT ,

I still have no access to my Global Admin account. Can anyone help me further? I also have a case at Microsoft but it is quiet from that side.

Kind regards,
Frederiek
risolis 8,741 Reputation points

2022-10-18T22:16:32.137+00:00

Hi @Frederiek Goemaere

I saw you mentioned me on this post but please correct me If I am mistaken.

If further assistance is needed for sure we can assist you.

Regards,

Answer 1

risolis 8,741

Hello @Frederiek Goemaere

Thank you for your post on this community space.

I fully understand your concern and for that reason I would like to address it by sharing the following URL down below:

https://answers.microsoft.com/en-us/msoffice/forum/all/locked-out-of-global-admin-account/b84d85f6-d0b0-4947-adb8-a750faf919d0

If further assistance is required please do not hesitate to let us know and we shall assist you.

Have a good one!

Cheers,

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

risolis 8,741 Reputation points

2022-10-02T05:14:17.823+00:00

Hello @Frederiek Goemaere

I hope you are doing well.

I just wanted to know if further assistance is required at this time and if yes, please let us know so, we shall assist you further.

Have a good one!

Cheers,

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Frederiek Goemaere 1 Reputation point

2022-10-02T11:07:45.56+00:00

Hi,

I had 2 phone calls last week with Microsoft but no solution yet. They asked if I had some cached credentials but I only use that cloud-only user for some admin tasks in a webbrowser.

I still have no access to my only global admin account but I have already a casenr. I don't know if they will call me back or not.
risolis 8,741 Reputation points

2022-10-04T16:55:55.513+00:00

Review my previous post above.

Thanks!

Share via

Forgotten Global Admin pasword

1 answer

Your answer