Locked Out of Microsoft 365 Global Admin Due to Lost MFA — Need Assistance

Question

I am writing to urgently request assistance with accessing my Microsoft 365 tenant. My organization has only one global administrator account, and I have lost access to the Microsoft Authenticator MFA device associated with that account. As a result, I am completely unable to sign in to the Microsoft 365 admin portal, Azure portal, or PowerShell, and I have no other administrator accounts or backup MFA methods available.

Issue details:

Issue: MFA device lost; cannot complete MFA challenge

Current situation: Locked out of all admin access / cannot reset MFA

Since this is the sole admin account, I am unable to open a support case through the admin portal.

I am requesting that my case be escalated to the Microsoft Data Protection Team (or the appropriate internal escalation team) so that MFA for this account can be reset or an alternate admin recovery solution provided.

Move from: Microsoft Security | Microsoft Authenticator

Answer 1

If you are locked out of your Microsoft 365 global admin account due to a lost MFA device and you are the only global administrator, you will need to contact the Azure Data Protection team for assistance. You can reach them at +1 866-807-5850. They will be able to help you with resetting your MFA or provide an alternate recovery solution for your account.

If you have access to another global admin in your organization, you can also ask them to assist you with the recovery process. However, since you mentioned that you are the sole admin, contacting the Azure Data Protection team is your best option.

Additionally, ensure that you have the necessary information ready when you contact them to expedite the process.

Answer 2

Hello @Charlie Cai

Welcome to Q&A forum!

I’m so sorry to hear that you’ve lost access to your admin account. In this situation, because you are the only global admin of this tenant, you can try step 1 and 2 to get support from Data Protection Team. 

As we are forum moderators only, we can recommend some potential troubleshooting steps and clarify information for you in this thread. Since we cannot provide direct support or access any backend data related to customer accounts because of privacy and security concerns (the Microsoft Data Protection team will be the one to do it for you), we hope for your understanding regarding this.

Since this is a complex issue related to your account and may require assistance from our backend engineering team, please be patient and carefully follow the steps I’ve provided.

1. Contacting Microsoft Data Protection team by phone support

In this situation, the Microsoft Data Protection team has tools and processes in place to verify identity and regain access to administrator accounts.     

Therefore, if you are the only administrator in your organization, then you need to involve Microsoft data protection team. Please try to find the related hotline number to call the frontline let them raise a ticket for you: Customer service phone numbers - Microsoft Support

*(Important Note: Depending on your country or region, when you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

In some countries, this is an automated conversation: First, when you call the hotline, they will ask you what kind of problem you are struggling with.

Answer: Authenticator.

A: What products do you use?

B: Office 365 for business.

Verification: Education or company account?

B: For companies

A: Are you an administrator?

B: Yes.

A: Are there any other administrators in your organization?

B: No.

A: I need one.... Service request?

B: Yes  

If your organization's Office 365 Business subscription is from a partner or reseller, and the global administrator is unable to open a service request on your end, contact the reseller's support provider to help open a service request on behalf of you instead.

Please try 2 or 3 times until you can reach out to an agent.

*

2. Another work around

If you still cannot reach to agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.   

For detailed guidance, to set up a new tenant, please follow these steps:    

• Visit this following link and choose any plan and click try for free to start a free trial: Microsoft 365 Business Plans and Pricing | Microsoft 365

Once your tenant is created, you should be able to access the support portal and submit your ticket without further issues 

Ticket Support: In the Microsoft 365 Admin Center->Support->Help & Support. You can raise support ticket In Microsoft Admin Center by this link:

https://admin.microsoft.com/#/support/requests

After completing them, you will receive an email appointment for a meeting to review this issue professionally together.

***Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.   

I highly appreciate your valuable time and your cooperation during this process

Hopefully, you can resolve this issue soon!

---

If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in "our documentation" to enable e-mail notifications if you want to receive the related email notification for this thread.