Share via

Unable to Access Microsoft 365 Account Due to MFA Lockout

Ravi Parmar - Samsara 0 Reputation points
2026-03-31T06:55:08.5966667+00:00

Dear Microsoft Support Team,

I hope you are doing well.

I am writing to inform you that I am currently unable to access my Microsoft 365 business account ([Moderator note: personal info removed] @aaravishipping.com), and I am completely locked out due to Multi-Factor Authentication (MFA) issues.

I recently changed my mobile device and while trying to configure my email account on the new device, the system prompted for authentication via Microsoft Authenticator. However, I no longer have access to the previous device where the authenticator was configured.

In an attempt to resolve this, I logged into the Microsoft 365 Admin Center and performed the following actions:

  • Tried to reset Multi-Factor Authentication (MFA)
  • Attempted to remove existing authentication methods
  • Deleted authentication methods manually one by one as prompted
  • Reset the account password
  • Revoked active sessions

However, after performing these actions:

  • All authentication methods were removed
  • The system still enforces MFA verification
  • I am unable to sign in as it continuously asks for verification via Authenticator or Outlook approval, which are no longer accessible
  • I am now stuck in a verification loop with no available method to authenticate

Additionally, I attempted to recover the account via standard Microsoft recovery options, but it appears that this is a work account and not eligible for that recovery method.

At present, I am completely locked out of:

  • Microsoft 365 Admin Center
  • Outlook (desktop and mobile)
  • All associated business services

This is critically impacting my business operations.

I kindly request your urgent assistance to:

  • Reset or disable MFA for my account, OR
  • Temporarily disable Security Defaults, OR
  • Restore access so I can reconfigure authentication on my new device

Please let me know if any verification or documentation is required from my end to proceed.

I request you to treat this matter as urgent.

Thank you for your support.

Best regards,
[Moderator note: personal info removed] 

Moved from: Microsoft Security | Microsoft Authenticator

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Demi-N 16,590 Reputation points Microsoft External Staff Moderator
    2026-03-31T09:30:03.49+00:00

    Please understand that as forum moderators, we do not have the tools or sufficient access to make changes to user accounts, including logging in, resetting passwords, or modifying access rights. For your security, only Microsoft Support can assist with these requests. 

    Hello @Ravi Parmar - Samsara,

    Thank you for reaching out.

    Because this is a work account used for your Microsoft 365 subscription, the recovery path depends on whether your tenant has another Global Administrator or if you are the only admin.

    1/ If there is another Global Admin in your tenant

    They can revoke and require re-registration of Multi-Factor Authentication (MFA) settings for your account by following these steps: 

    • Sign in to the Microsoft Entra Admin Center 
    • Navigate to Users > Your Account > Authentication methods 
    • Select Require re-register MFA 

    You can share this official Microsoft article with them for guidance: Manage authentication methods for Microsoft Entra multifactor authentication - Microsoft Entra ID |…  

    2/ If you are the Only Global Admin on the tenant (solo admin account)

    If you are the only admin, you will need to contact Microsoft’s Data Protection team. This team has the authority and the specific security procedures to verify your identity as the legitimate owner of the account and then reset your MFA settings from their end. Please try to find the related hotline number to call the frontline and let them raise a ticket for you: Customer service phone numbers - Microsoft Support    

    User's image

    Here are some tips and an example of a prompt to help you navigate the IVR more effectively:  

    (When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help)       

    In some regions you may initially interact with an automated system, so here is an example of how you can answer the prompts to reach the right team more quickly:  

    • What kind of problem are you experiencing?          
    • Answer: Authenticator          
    • What products do you use?          
    • Answer: Office 365 for business          
    • Is this for an education or company account?          
    • Answer: For companies          
    • Are you an administrator?          
    • Answer: Yes          
    • Are there any other administrators in your organization?          
    • Answer: No. I am the only admin in my tenant           
    • Do you need a... Service request?           
    • Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.       

    During the call, you will be asked to provide information that verifies your identity and proves ownership of the tenant, such as your organization name, billing information, contact email, phone number, or other subscription‑related details.

    If you are unable to reach support via the phone numbers, there is a workaround you might consider: You can register for a new Microsoft 365 tenant by signing up for a trial subscription here: Microsoft 365 Business Plans and Pricing | Microsoft 365    

    User's imageUser's image

    Once the new tenant is created, you can access the admin center and submit a support ticket from there, requesting to speak with the Data Protection Team on behalf of your original tenant.    

    Important notes:     

    • This new trial tenant will not give you access to any of the data or settings in your original locked tenant. It is solely a temporary means to contact Microsoft support.    
    • The resolution time might be longer as you are contacting support from a different tenant.    
    • Remember to cancel the trial subscription for the new tenant once your issue with the original account is resolved to avoid any unintended charges.  

    I hope the information provided helps guide you in the right direction. Although I’m unable to take direct action on your account as a forum moderator, I sincerely hope that the steps and recommendations I’ve shared can support you through the process.  

    Warm regards, 

    If the answer is helpful, please click "Accepted" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

  2. AI answer

    2026-03-31T06:55:38.8933333+00:00

    Because this is a work (business) Microsoft 365 account with Microsoft Entra multifactor authentication enabled, self-service recovery is limited. The available options depend on whether there is another administrator in the tenant.

    1. If there is another global admin in the tenant That admin can reset the MFA registration so the account can be set up again on the new phone:
      1. Another global admin signs in to the Microsoft Entra admin center.
      2. Go to Users → All users and select the locked-out user account.
      3. Open Authentication methods.
      4. Select Require re-register multifactor authentication.
      5. Save the change.
      6. Next time the locked-out user signs in, they will be prompted to register MFA again (e.g., Microsoft Authenticator on the new device).
      This is the standard way to recover when a user has lost access to their MFA device or methods.
    2. If there is no other global admin (you are the only admin) In this case, only Microsoft support (Data Protection / Tenant Recovery) can help reset MFA or restore access. Forum moderators and normal support channels cannot directly change admin MFA. Use one of these paths: Option A – Call Microsoft global customer service (recommended)
      1. Call the appropriate number from Customer service phone numbers - Microsoft Support.
      2. When interacting with the IVR/agent, clearly state:
        • The issue is with Authenticator / MFA.
        • The product is Office 365 for business / Microsoft 365 for business.
        • It is a company (work) account, not personal.
        • You are the only global administrator and are locked out due to MFA.
        • You need a service request with the Data Protection team / Tenant Recovery to reset MFA for the admin account.
      3. Be prepared to provide verification and business documentation so the Data Protection team can confirm tenant ownership and admin identity.
      Option B – Create a temporary trial tenant to open a support ticket If it is not possible to reach the right support team by phone:
      1. Sign up for a new Microsoft 365 trial tenant (a separate environment).
      2. After the trial tenant is created, go to the Microsoft 365 admin center of this new tenant.
      3. Use Support → Help & support to open a ticket.
      4. In the ticket, clearly explain that:
        • The problem is with a different, existing Microsoft 365 tenant.
        • You are the global admin of that original tenant but are locked out due to MFA.
        • Request escalation to the Data Protection team to reset MFA for the original tenant’s admin account.
      5. Provide the original tenant’s admin UPN, tenant domain, and any error messages, plus confirmation that you are the administrator.
      This temporary tenant is only a channel to contact support; it will not give access to data in the original tenant. Remember to cancel the trial once the original tenant issue is resolved.
    3. If you are an end user (not an admin) If this account is not the only global admin and you are an end user, contact the organization’s Microsoft 365/Entra administrator and ask them to:
      • Go to Microsoft Entra admin center → Users → [your account] → Authentication methods.
      • Select Require re-register multifactor authentication.
      • Then sign in again and complete MFA registration on the new device.
    4. General notes
      • Removing authentication methods or resetting password alone does not disable MFA if policies or security defaults still require it; an admin or Microsoft support must reset MFA registration or adjust policies.
      • Standard consumer account recovery flows do not apply to work/school (Entra ID) accounts.
      • If repeated sign-in attempts have been made, Microsoft Entra MFA may temporarily block further attempts; waiting and then trying again after an admin reset may be required.

    To restore access in this scenario, either another global admin must reset MFA for the account, or Microsoft’s Data Protection/Tenant Recovery team must do it after verifying identity.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.