Microsoft 365 tenant lockout.

Question

Microsoft 365 tenant lockout.

All Global Administrator accounts are locked out by MFA.

Sign-in is restricted to Passkey and Microsoft Authenticator only.

We cannot access admin.microsoft.com.

We own the tenant and can verify ownership via DNS.

Request: tenant admin recovery and escalation to the Data Protection Team.

Answer 1

Hi @Rai san,

Thank you for posting your question in the Microsoft Q&A forum, and I’m sorry to hear all Global Administrators in your tenant are experiencing access issues.

To begin with, you are correct that this constitutes a Microsoft 365 tenant lockout. When all Global Administrator accounts cannot complete multifactor authentication and the admin center is inaccessible, escalation to Microsoft’s Data Protection Team (DPT) is the required recovery path.

However, please note that in cases like this, where all Global Administrators are locked out and tenant recovery or Global Administrator MFA resets are required, engagement with Microsoft’s Data Protection Team can only be initiated or escalated through Microsoft Support by a verified Global Administrator or authorized tenant owner. For security reasons, community forums and standard support channels cannot directly access or modify a tenant.

With that in mind, you may use one of the two options below to reach Microsoft’s Data Protection Team. Once any Global Administrator regains access, they can promptly reset MFA settings for the remaining Global Administrators by following Microsoft’s guidance in Manage user authentication methods for Microsoft Entra multifactor authentication.

 

---

Option 1: Contact Microsoft Data Protection Support by phone (primary method) 

To regain access to your admin account as you can't access the Admin Portal, you can try reaching out to our Global Customer Service phone to raise a request for resetting your authentication method here: Customer service phone numbers - Microsoft Support. During the call, request to speak to an agent, and share with them every detail related to your query and also mention that you are the only admin lost access to your account. This should allow you to contact the appropriate team so you can solve this incident as soon as possible.

Please note that forum moderators do not have access to user account settings and cannot assist with logging in, resetting passwords, or changing access rights. While we do not have access to internal systems or administrative tools required to resolve account-specific or backend-related issues, we’ll continue doing our best to support you within the scope of our responsibilities. 

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:       

In some countries, it is an automated conversation like:

IVR: What kind of problem are you concerned about?       

You: Authenticator.       

IVR: What kind of product do you use?       

You: Office 365 for business.       

IVR confirmation: education or company account?       

You: For companies       

IVR: Are you an administrator?       

You: Yes.       

IVR: Do you have another administrator in your organization?       

You: No.       

You: Yes. I need to create a ticket. Please send me directly to the Data Protection Team. 

 

---

Option 2: Create a new tenant to submit a support ticket (alternative method)

If you cannot reach a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription via this link Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.       

It is important to note: Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges. 

I hope this helps you regain access to your account quickly. I'm glad to assist and truly hope the information provided has been useful. Please feel free to reach out anytime if you need further assistance.

If you find my post helpful, kindly consider marking it as the accepted answer. Doing so can assist others in the community who may have similar questions in finding solutions more quickly.

Thank you for your kindness and contributions to the forum. 

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

To recover access to your Microsoft 365 tenant after a lockout of all Global Administrator accounts due to MFA restrictions, you will need to follow these steps:

1. Verify Ownership: Since you mentioned that you can verify ownership via DNS, ensure that you have the necessary documentation ready to prove ownership.
2. Contact Support: You will need to open a support ticket with Microsoft. Since you are locked out, you should reach out to the Microsoft 365 Data Protection Team. You can do this by finding the appropriate contact number for your region at the Microsoft 365 admin support page.
3. Provide Required Information: When contacting support, be prepared to provide:
   • Your organization's name and details.
   • Verification of ownership through DNS or other business documentation.
   • Any other information that may help in verifying your identity and ownership of the tenant.
4. Request Escalation: Clearly state your situation and request escalation to the Data Protection Team if necessary. They can assist with resetting credentials for an administrator account and help regain access to your tenant.
5. Consider Emergency Access Accounts: In the future, it’s advisable to set up emergency access accounts that are not subject to the same MFA requirements to prevent similar issues.

By following these steps, you should be able to recover access to your Microsoft 365 tenant.

---

References:

• Tenant access recovery
• Troubleshoot sign-in issues and account access problems