MFA verification reset request

Question

We are unable to sign in to our Microsoft 365 administrator account because Multi-Factor Authentication (MFA) is required.

We have the correct password for this account. However, after entering the password, Microsoft prompts for MFA verification.

The employee who was using this account has left our company, and the Microsoft Authenticator app was removed from their mobile device. As a result, we no longer have access to the registered MFA method and cannot sign in to the account or create a support case.

We kindly request your assistance in resetting or removing the MFA registration for this account. We are prepared to provide any information required to verify ownership of the Microsoft 365 tenant.

Answer 1

Hi Sudha, 

Thank you for taking the time to share your experience. I hope this response reaches you in time and helps bring some clarity. 

I’ve gone through your description, and I’m sorry to hear about the difficulty you are experiencing when trying to access your admin account due to issues with the Microsoft Authenticator app.  

  

Just to gently clarify before we go any further, forum moderators do not have the ability to access, modify, or recover user accounts. Due to security and privacy requirements, issues such as sign in failures, password recovery, and multi factor authentication can only be addressed by Microsoft’s dedicated support teams, who have the appropriate tools and authorization to manage account level settings securely. 

These scenarios require identity validation and tools that are strictly handled by dedicated support teams for security reasons. Since the Microsoft Authenticator app was associated with a former employee’s device and has been removed, the account is currently locked at the MFA verification step, the next essential step is to involve the Microsoft Data Protection team, as they are the only team authorized to help recover an admin account in these circumstances. You can start by calling your regional Microsoft support hotline here: Customer service phone numbers - Microsoft Support    (Work account)

When reaching out to the Data Protection team, please be prepared to provide any requested information, such as: 

• Tenant name/domain 
• Affected administrator account 
• Microsoft 365 subscription details 
• Proof of tenant/domain ownership, if required 
• Billing or subscription-related verification information 
• Any organizational documents requested by the recovery team 

Kindly note that, due to the sensitive nature of Global Administrator privileges, Microsoft must complete the required ownership verification before any MFA reset or tenant recovery action can be performed. 

 

Here are some tips and an example of a prompt to help you reach out the Microsoft Data Protection team support more effectively:   

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)         

IVR: What kind of problem are you concerned about?        

You: Authenticator.        

IVR: What kind of product do you use?        

You: Office 365 for business.        

IVR confirmation: education or company account?        

You: For companies        

IVR: Are you an administrator?        

You: Yes.        

IVR: Do you have another administrator in your organization?        

You: No.        

IVR: Do you need a... Service request? 

You: Yes. I need to create a ticket. Please send me directly to the Data Protection Team. 

  

Alternative method: Create a new tenant to submit a support ticket 

If you cannot reach a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription and submit your request from there.      

  

To set up a new tenant, please follow these steps below: 

  

Visit Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.       

  

Follow the guided setup process to create a new account for a new tenant.   

  

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues 

  

In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt:   

  

"Hello, we're currently unable to access our Microsoft 365 administrator account because MFA is required after entering the correct password. 

The MFA method was registered through Microsoft Authenticator on a former employee’s mobile device. The employee has left our company, and the Authenticator app was removed, so we can no longer complete the MFA verification. 

As a result, we cannot access the Microsoft 365 admin center or create a support request from the original tenant. 

We created this new tenant only to request assistance. Please help connect us with the appropriate Microsoft support or Data Protection team to verify our ownership and assist with resetting or removing the MFA registration for the affected admin account. 

We are ready to provide any required documents or information, including tenant details, domain ownership, billing information, or company verification."   

  

Ticket Support: In the Microsoft 365 Admin Center > Support > Help & Support. You can raise support ticket at https://admin.microsoft.com/#/support/requests     

  

Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn 

 

I truly hope this helps you regain access to your account quickly. Even though I can't directly intervene, directing you to the correct and specialized support is the most effective help I can provide from my position.    

If you find my post helpful, kindly consider marking it as the accepted answer. Doing so can assist others in the community who may have similar questions in finding solutions more quickly.  

Thank you for your kindness and contributions to the forum.  

---

If you have any extra questions about this answer, please click "Comment".   

Note: Follow the steps in our documentation to enable email notifications if you want to receive email notifications related to this topic.    

Answer 2

Hello Microsoft Data Protection Team,

We are requesting urgent assistance to recover access to our Microsoft 365 tenant.

Tenant Name: [Moderator note: Personally Identifiable Information removed] Administrator Account: [Moderator note: Personally Identifiable Information removed]

We know the account password, but we cannot complete sign-in because Multi-Factor Authentication (MFA) is required.

The employee who previously managed this account has left our company, and the Microsoft Authenticator app that was registered for MFA has been removed from their mobile device. We no longer have access to any registered authentication method.

As a result, we cannot sign in to the Microsoft 365 Admin Center or create a support request from the tenant.

We request assistance from the Microsoft Data Protection team to verify our organization's ownership and reset the MFA registration for this Global Administrator account.

We are prepared to provide any information required for verification, including:

Answer 3

We are unable to sign in to our Microsoft 365 administrator account because Multi-Factor Authentication (MFA) is required.

We have the correct password for the account, but after entering it, Microsoft requests MFA verification. Unfortunately, the employee who previously managed this account has left the company, and the Microsoft Authenticator app associated with the account was removed from their mobile device. As a result, we no longer have access to the registered MFA method and are unable to sign in or create a support request through the Microsoft 365 Admin Center.

We kindly request your assistance in resetting or removing the MFA registration for this administrator account. We are ready to provide any information or documentation required to verify ownership of our Microsoft 365 tenant and restore access to the account.

Thank you for your assistance, and we look forward to your guidance on the next steps.