Completely locked out of our Microsoft 365 tenant

Question

I have a work account, which I cannot access nor can reach to helpdesk because it asking for a Microsoft Authenticator code. I am the sole global admin for the tenant XXXX.onmicrosoft.com and I am locked out. It asks for Microsoft Authenticator code, but I never finished MFA setup and I have no other admin. I need an MFA reset or admin recovery. I cannot go to help desk as it will ask MFA nor I cannot get connected to your phone lines.

Answer 1

Dear @Vinoj Sukumaran, 

Thank you for posting your question in the Microsoft Q&A forum.  

As a moderator, I don't have the tools to investigate your specific account directly. Because this is a user-to-user support forum. Moderators, contributors including external Microsoft employees cannot directly intervene in Microsoft product features or access back-end systems. Our role is limited to providing technical guidance on reported issues, requests, or ideas. However, I will try my best to guide you as clearly as possible. 

Because you are the only Global Admin and cannot access the Microsoft Entra portal to reset your own MFA, at this stage, your recovery must go through Microsoft’s Data Protection Team. They are the team that has the tools and the authority to verify your permissions for the tenant, and after that, they will help you reconfigure the MFA for your account. 

Option 1: You might need to contact Data Protection Team via phone service number via this link: Customer service phone numbers - Microsoft Support. You said that you cannot get connected to phone lines, so please help me try again with the following script.  

First, when you call the hotline, they will ask you what kind of problem you are struggling with.  

Answer: Authenticator.  
A: What products do you use?  
B: Office 365 for business.  
Verification: Education or company account?  
B: For companies  
A: Are you an administrator?  
B: Yes.  
A: Are there any other administrators in your organization?  
B: No.  
A: I need one.... Service request?  
B: Yes  

When you reach out to real agent, they will be able to create a ticket for you under the affected tenant and then transfer this ticket to Data Protection team. Please help me speak loudly, only keywords, clearly, and patiently waiting for the machine to respond to get past the IVR (automated system) to reach out a live agent. 

Option 2: Create a new tenant with trial subscription to access and submit a ticket in Admin Center. 

If you still can't get through to a real person for help, help me try this: 

Register for a free trial (new tenant with trial subscription) of Microsoft 365 at this link: Compare All Microsoft 365 Plans | Microsoft. The goal is to create a temporary Global Admin account so you can log in to the Microsoft Admin Center. Once you're in, you can submit a support ticket directly to Microsoft in Admin Center. Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.   

How to Submit the Support Ticket in Admin Center: Get support - Microsoft 365 admin | Microsoft Learn 

Now, please help me try running the script above many times to see if it works; try to be as patient as possible. If it still doesn't work, please help me try option 2. Even though creating a new tenant with a trial subscription sounds like it has a lot of steps, it is actually very quick if you try to follow along. You just need to be able to access the Admin Center, and from there, you can raise a support ticket. I am standing by to assist with any information. If you have any questions or require further clarification, do not hesitate to reach out. 

Looking forward to your response!  

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

Answer 2

If you are completely locked out of your Microsoft 365 tenant and cannot access your account due to issues with the Microsoft Authenticator app, there are a couple of steps you can take to regain access:

1. Contact Microsoft Data Protection Support: Since you are the sole global administrator, you will need to reach out to Microsoft support directly. You can do this by calling their customer service phone numbers. When you call, explain that you are locked out and cannot complete the MFA process. Make sure to mention that you are the only admin for your tenant.
2. Temporary Account Creation: If you are unable to reach a live agent, consider creating a temporary account by signing up for a trial subscription. This will allow you to access the admin console of the new tenant and submit a support ticket requesting assistance for your locked account.
3. Follow the IVR Prompts: When contacting support, follow the prompts carefully to ensure you reach the right department. You may need to specify that you are an administrator and that you require assistance with MFA reset.
4. Documentation: Be prepared to provide any necessary documentation that verifies your identity and administrative rights for the locked tenant.

These steps should help you to regain access to your Microsoft 365 account.

---

References:

• Global Admin Locked out - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A