Microsoft 365 Tenant locked out – no Global Admin access due to MFA – tenant recovery required

Question

We are completely locked out of our Microsoft 365 tenant and no administrative access exists anymore.

The only Global Administrator account is blocked due to an MFA issue and can no longer access the Microsoft 365 Admin Center.

There are no additional Global Administrators or privileged admin accounts in the tenant.

A recovery via our Microsoft Partner is not possible, as no sufficient GDAP permissions are assigned. We.tables. We also no longer have access to any former IT or sales partner who could assist.

As a result, we cannot:

• sign in to the Admin Center

open a support ticket from within the tenant

manage users, licenses, security or billing

We need guidance on the official Microsoft tenant / account recovery process for a Global Admin lockout caused by MFA, including how to verify tenant ownership and restore or assign a new Global Administrator.

What is the correct escalation path to initiate tenant recovery when no admin access exists?We are completely locked out of our Microsoft 365 tenant and no administrative access exists anymore.

Thank you for your feedback

Answer 1

Hi @Daniela Keim

Thank you for reaching out to the Microsoft Q&A Forum and sharing your experience.

Based on the information you shared, I understand that you are completely locked out of your Microsoft 365 tenant because the only Global Administrator account is blocked due to an MFA issue. There are no other Global Administrators or privileged admin accounts available, no usable GDAP permissions through a Microsoft Partner, and you are unable to access the Microsoft 365 Admin Center or open a support ticket from within the tenant.

In this situation, there are two official paths you can take to regain access to the tenant:

1.Please visit the following page and reach out to phone number via: Customer service phone numbers - Microsoft Support

From what I know, you will need to get past the initial AI system to reach the live support team. You can refer to the guide below for tips on how to get through more easily:

2.If method 1 is not working, please follow this link to create a trial tenant: https://www.microsoft.com/en-us/microsoft-365/business/microsoft-365-business-basic?msockid=3eb6980b5c6860e63a588d0c5d1761d6 - after that you will be able to access to Microsoft 365 Admin Center to raise the ticket

Assuming that you have already created an account after registering a free trial and you can go to Microsoft 365 admin center and click "Help & support" icon to raise your ticket. The agent will be able to create a ticket for you under the affected tenant and then transfer this ticket to Data Protection team who could help you to regain access.     

Please mention that you are raising ticket on behalf of the affected tenant that you do not have access to. The support team will help you to create ticket on the affected tenant then later on the Microsoft Data Protection team will assist you.

Note: This process will take more time than usual (7-14 working days) for your account to get access again as Data Protection is always overwhelmed with the number of tickets. As I am forum moderator, I do not have access to Microsoft internal system to assist or push this process to be quicker.

I hope my information is helpful. Please give me any updates once you get this resolved.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".  

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

To recover access to your Microsoft 365 tenant when completely locked out and without any Global Administrator access, you will need to follow these steps:

1. Verify Ownership: You must be able to verify ownership of the tenant. This can typically be done through official business documentation, domain ownership, or publicly listed nonprofit registration data.
2. Submit a Support Request: Since you cannot access the Admin Center, you will need to submit a support request through the Microsoft 365 support page. Here’s how:
   • Go to the Microsoft 365 support page.
   • Select I can't sign in or access my tenant.
   • You will likely be asked to verify your identity and ownership of the organization.
3. Contact Microsoft Support: If you are unable to resolve the issue through the support request, you may need to contact Microsoft directly for assistance. You can find Microsoft 365 support phone numbers by country or region to speak with a representative.
4. Documentation: Be prepared to provide any necessary documentation that proves your ownership of the tenant and your identity.
5. Follow Up: Once you have submitted your request, follow up as needed to ensure that your case is being processed.

It's crucial to act quickly and provide as much information as possible to expedite the recovery process.

---

References:

• Tenant access recovery
• Preventing tenant lockouts