Tenant Admin Locked out

Question

I cannot log into my onmicrosoft.com Microsoft 365 tenant. I am the admin and the only admin on the account.

I am able to reset my password successfully, and my username/password are accepted, but I cannot get past the authentication step. The account requires Microsoft Authenticator, however the Authenticator app is no longer registered on my device. When I attempt to sign in, it asks me to verify using the app, which I no longer have access to.

I am stuck in the following loop:

Password reset works

Login with new password succeeds

MFA is required

Authenticator verification cannot be completed

There are no usable alternate sign-in methods available (no SMS, phone call, or security key options). Because of this, I cannot access the Microsoft 365 Admin Center or Entra Admin Center to reset or re-register my MFA methods.

Since I am the only admin, there is no other account that can reset authentication methods for me.

I have also tried contacting Microsoft by phone, but I get stuck in automated loops and cannot reach a live support person.

What is the correct Microsoft-supported recovery process for an admin-only tenant in this situation? Do I need Microsoft to reset MFA or force a re-registration, and how can I reach the correct support channel to do this?

Any guidance would be greatly appreciated.

Answer 1

Hi @Danny,

Thank you for posting your question in the Microsoft Q&A forum,

I’m sorry to hear you’re having trouble accessing your work account because of issues with the Microsoft Authenticator app. Please know that you’re not alone, as many users encounter similar challenges. We are here to guide you through each step so you can regain access and return to work as quickly as possible.

As part of the community support team, my access is limited and I cannot make changes to administrator-level settings. For security reasons, only Microsoft’s specialized support team has the necessary tools and permissions to assist with account-level issues such as MFA resets or advanced troubleshooting.

Since you are the sole Global Administrator for the tenant, please follow the steps below to complete the account recovery process and regain access.

Option 1: Contact Microsoft Data Protection Support by Phone (Primary Method)  

To regain access to your admin account as you can't access the Admin Portal, you can try reaching out to our Global Customer Service phone to raise a request for resetting your authentication method here: Customer service phone numbers - Microsoft Support. During the call, request to speak to an agent, and share with them every detail related to your query and also mention that you are the only admin lost access to your account. This should allow you to contact the appropriate team so you can solve this incident as soon as possible. 

  

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:       

In some countries, it is an automated conversation like: 

IVR: What kind of problem are you concerned about?       

You: Authenticator.       

IVR: What kind of product do you use?       

You: Office 365 for business.       

IVR confirmation: education or company account?       

You: For companies       

IVR: Are you an administrator?       

You: Yes.       

IVR: Do you have another administrator in your organization?       

You: No.       

IVR: Do you need a... Service request?    

You: Yes. I need to create a ticket. Please send me directly to the Data Protection Team.

Option 2: Create a Temporary Account (Trial Tenant) to Submit a Support Ticket (Alternative Method) 

If you still cannot reach to a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription via this link Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.       

 

Please note that forum moderators do not have access to user account settings and cannot assist with logging in, resetting passwords, or changing access rights. While we do not have access to internal systems or administrative tools required to resolve account-specific or backend-related issues but we’ll continue doing our best to support you within the scope of our responsibilities.   

 

Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

 

I hope this helps you regain access to your account quickly. I'm glad to assist and truly hope the information provided has been useful. Please feel free to reach out anytime if you need further assistance.  If you find my post helpful, kindly consider marking it as the accepted answer. Doing so can assist others in the community who may have similar questions in finding solutions more quickly. 

Thank you for your kindness and contributions to the forum. 

---

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.  

Answer 2

If you are locked out of your Microsoft 365 tenant as the only admin and cannot complete the multi-factor authentication (MFA) process due to the Microsoft Authenticator app not being registered on your new device, you will need to contact Microsoft support directly for assistance. Here are the steps you can take:

1. Contact Microsoft Support: Since you are the only admin, you will need to reach out to the Microsoft Data Protection team. You can find the appropriate support phone number for your region by visiting the Microsoft support page. When you call, explain your situation clearly, emphasizing that you are the sole administrator and are locked out due to MFA issues.
2. Provide Necessary Information: Be prepared to provide your administrator account email address, the domain name of your tenant, and any error messages you are receiving. This information will help the support team verify your identity and assist you in regaining access.
3. Alternative Recovery Options: If you are unable to reach support via phone, consider trying to submit a support request through a different Microsoft 365 tenant if you have access to one, or create a new trial tenant to submit a support ticket. However, note that this new tenant will not give you access to your original tenant's data.
4. Verification Process: Expect that Microsoft may require verification of your identity and administrative rights for the locked tenant. Be ready to follow their instructions carefully.
5. Follow Up: After submitting your request or contacting support, keep track of any ticket numbers or case references provided for follow-up.

These steps should guide you through the recovery process for your admin-only tenant.

---

References:

• Troubleshoot sign-in issues and account access problems
• We could not verify your account error when you try to reset your admin password in Microsoft 365, Intune, or Azure