Locked Out of Only Global Admin Account — MFA Cannot Complete — Request Admin Account Recovery

Question

I am the only Global Administrator for my Microsoft 365 tenant, and I am currently locked out of my admin account due to a failure in MFA configuration.

My admin username is:

• ******@nfsrail.net and the underlying tenant account:
• ******@nfsrailnetworks.onmicrosoft.com

I know the password, but sign‑in cannot proceed because MFA is required and none of my MFA methods are functional. Microsoft Authenticator does not display a verification code, and Outlook Mobile does not display the number‑match prompt. When attempting to authenticate, I receive Error Code 500121, indicating that MFA cannot be satisfied.

I attempted the official recovery procedures documented by Microsoft, including:

• Using “Can’t access your account?” at sign‑in
• Using the work/school password reset portal at https://passwordreset.microsoftonline.com/ [Microsoft...word Reset]
• Following the documented guidance that Self‑Service Password Reset must be enabled for self‑recovery (Microsoft Support: Reset your Microsoft work or school account password using security info) [support.mi...rosoft.com]

However, my tenant does not have Self‑Service Password Reset (SSPR) enabled, and therefore the portal displays:

“You can’t reset your own password because password reset isn’t properly set up for your organization.”

Since there are no other administrators, I cannot reset my MFA registration from inside the tenant.

I am requesting Microsoft Admin Account Recovery, including:

1. Verification of tenant ownership via DNS TXT record
2. Resetting / clearing the MFA methods for my Global Admin account
3. Assistance restoring access to the admin portal

Please advise on the necessary DNS TXT record and any additional steps required to verify domain ownership and restore administrator access.

Thank you.I am the only Global Administrator for my Microsoft 365 tenant, and I am currently locked out of my admin account due to a failure in MFA configuration.

My admin username is:

• ******@nfsrail.net
  and the underlying tenant account:
• ******@nfsrailnetworks.onmicrosoft.com

I know the password, but sign‑in cannot proceed because MFA is required and none of my MFA methods are functional. Microsoft Authenticator does not display a verification code, and Outlook Mobile does not display the number‑match prompt. When attempting to authenticate, I receive Error Code 500121, indicating that MFA cannot be satisfied.

I attempted the official recovery procedures documented by Microsoft, including:

• Using “Can’t access your account?” at sign‑in
• Using the work/school password reset portal at https://passwordreset.microsoftonline.com/ [[Microsoft...word Reset]](http://passwordreset.microsoftonline.com/passwordreset)
• Following the documented guidance that Self‑Service Password Reset must be enabled for self‑recovery (Microsoft Support: Reset your Microsoft work or school account password using security info) [support.mi...rosoft.com]

However, my tenant does not have Self‑Service Password Reset (SSPR) enabled, and therefore the portal displays:

“You can’t reset your own password because password reset isn’t properly set up for your organization.”

Since there are no other administrators, I cannot reset my MFA registration from inside the tenant.

I am requesting Microsoft Admin Account Recovery, including:

1. Verification of tenant ownership via DNS TXT record
2. Resetting / clearing the MFA methods for my Global Admin account
3. Assistance restoring access to the admin portal

Please advise on the necessary DNS TXT record and any additional steps required to verify domain ownership and restore administrator access.

Thank you.

Answer 1

what number do I call

Answer 2

If you are the only Global Administrator for your Microsoft 365 tenant and are locked out due to MFA issues, you will need to follow specific steps to regain access. Here’s what you can do:

1. Contact Microsoft Support: Since you cannot reset your MFA or access the admin portal, you will need to reach out to Microsoft Data Protection Support. You can do this by calling their support number. Explain your situation clearly, including that you are the only administrator and cannot access your account due to MFA failure.
2. Verification of Ownership: During your call, Microsoft may ask you to verify ownership of your tenant. This typically involves adding a DNS TXT record to your domain. Microsoft Support will provide you with the exact TXT record to add. Once added, you will need to inform them so they can verify it.
3. Resetting MFA: Request that Microsoft reset or clear the MFA methods associated with your Global Admin account. They have the necessary tools to assist you with this.
4. Restoring Access: After the above steps, Microsoft should assist you in restoring access to your admin portal.

Since you mentioned that Self-Service Password Reset (SSPR) is not enabled, this makes it crucial to directly contact Microsoft Support for assistance. They have specific protocols for situations like yours, especially when there are no other administrators available to help.

Make sure to have your tenant information ready when you contact support, as this will help expedite the process.

---

References:

• Global Admin Locked out - Microsoft Q&A
• Troubleshoot sign-in issues and account access problems