Microsoft Error Code 399287 no global admin MFA

Question

The account is used only to access externally shared OneDrive/SharePoint resources

The organization does not have an active Global Administrator

If there is no Global Administrator in the tenant, what is the recommended approach to recover access or reset MFA for this guest account?

Answer 1

Hello Hans,

I understand how disruptive it can be when you receive Error Code 399287 and you’re unable to access your externally shared OneDrive or SharePoint resources due to MFA issues especially since your tenant currently has no active Global Administrator. I’m sorry you’re facing this lockout situation without someone in the tenant who can reset MFA or restore your access.

This error typically means your phone-based MFA method (like SMS or voice) is blocked possibly due to telephony fraud protections and without another admin to reset or issue a Temporary Access Pass you're locked out. Since there is no Global Admin to resolve this internally the recommended approach is to contact Microsoft Support and escalate through the Microsoft Data Protection Team. They have specific tools and processes to verify tenant ownership, billing information and domain control to restore admin access. In situations like this they might even suggest creating a new trial tenant and opening a support request from there if your primary tenant cannot access support.

I hope this answer is helpful if you have further questions feel free to reply back

Regards,

Marcelo