Locked out of Microsoft 365 tenant – only Global Admin, MFA via Authenticator unavailable, unable to contact support

Question

Hello,

I am completely locked out of our Microsoft 365 tenant and need help with escalation.

I am the only Global Administrator in this tenant. MFA is enforced, and the only registered authentication method was Microsoft Authenticator.

Unfortunately, I no longer have access to the Authenticator app (the phone was lost / the app is no longer accessible). I do know the correct password, but I cannot complete MFA and I have no backup verification methods (no SMS, no recovery codes, no secondary admin).

To clarify: my personal Microsoft account (…@outlook.com) is working correctly and I can sign in without any issues. The problem affects only my work/business account used for Microsoft 365 services (Entra ID tenant), where MFA is blocking all access.

Because of this:

I cannot sign in to the Microsoft 365 / Azure / Entra admin portals

I cannot reset authentication methods

I cannot open a support ticket, as every support path requires sign-in and MFA

I am aware of the standard solution where another Global Administrator resets MFA, but there is no other admin in this tenant.

Could a moderator please escalate this case to Microsoft Support / Data Protection / Tenant Recovery, so ownership of the tenant can be verified and MFA registration can be reset or temporarily disabled?

I am able to provide:

tenant domain name

admin email address

company details used during tenant creation

an alternative contact email outside Microsoft

Thank you for your assistance.

---

Moved from: Microsoft 365 and Office | Access | For business | Windows

Answer 1

Dear @Paweł Kłosiński,

Good day! Welcome to Microsoft Q&A forum! 

Based on your description, I understand that you are completely locked out of your Microsoft 365 tenant because you are the only Global Administrator, MFA is enforced using Microsoft Authenticator, and you no longer have access to that authentication method. Although you know the correct password and your personal Microsoft account works normally, you cannot complete MFA for your work account, access admin portals, reset authentication methods, or contact support.

I sincerely apologize for the inconvenience caused by this issue and I'm very sorry to hear about what happened.

If you're the only admin, in this situation, the Microsoft Data Protection Team has tools and processes in place to verify identity and regain access to administrator accounts.

Please note that forum moderators have no control over user accounts, especially when it comes to logging in to your account, resetting your password, changing your access, etc.  

Since you weren't able to reach out to Phone Support, as an alternative, you can create a new tenant account and submit your request from there.    

To set up a new tenant, please follow these steps: 

• Visit Compare Office 365 Enterprise Pricing and Plans | Microsoft 365, choose any plan and click try for free to start a free trial.    
• Follow the guided setup process to create a new account for a new tenant. 

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues.

In the ticket's description, you could refer to this message "Hello,

I am currently locked out of my Microsoft 365 tenant because multi-factor authentication is enforced, and I am unable to complete the verification process. I am the only global administrator for this tenant, which means I cannot access my account or the Microsoft 365 Admin Center.

To resolve this, I have created a new tenant and would like to be connected with the Data Protection Team to verify my identity and assist with regaining access. I am available to provide any required documentation or verification to support the recovery process."

Ticket Support: Log in the Microsoft 365 Admin Center using your newly created trial admin account > Support > Help & Support. You can raise support ticket at: https://admin.microsoft.com/#/support/requests 

• Choose contact method: "Phone" 
• Fill all the information in this contact support details, please describe your situation carefully so they will have enough information to help you. 
• Finally, click on "Contact me" 
• 
• 
• 
• 
• After completing them, you will receive an email appointment for a meeting to review this issue professionally together. 
• For more details, you could refer to this article: Get support for Microsoft 365 for business 

Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.

Note: After creating the support ticket, please kindly let me know the ticket number so I could also track its process to help you regain access to your account/tenant.

Kindly let me know when there are updates or if you need further assistance. Any updates you’re able to share would be really helpful.

I'm here and happy to help! Thank you for your kindness and patience!

---

If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

Answer 2

Phone support is not accessible due to MFA lockout and automated call routing. I am the only Global Administrator — please escalate this tenant-level issue.

Answer 3

If you are locked out of your Microsoft 365 tenant and are the only Global Administrator, there are specific steps you can take to regain access. Since you cannot complete MFA and do not have any backup verification methods, you will need to contact Microsoft Support directly for assistance. Here are the options available to you:

1. Contact Microsoft Data Protection Support: Since you are the only Global Administrator, you can reach out to Microsoft Data Protection Support by phone. When you call, explain your situation clearly, mentioning that you are locked out and that you have no other administrators to assist you. Provide them with your tenant domain name and admin email address.
2. Create a Temporary Account: If you are unable to reach a live agent, consider creating a new trial tenant. This will allow you to access the admin console of the new tenant and submit a support ticket requesting assistance for your original tenant. Make sure to include all relevant details about your locked account in the support ticket.
3. Prepare for Verification: Be ready to verify your identity and administrative rights for the locked tenant. Microsoft may ask for details such as your company information and any other relevant data to confirm ownership of the tenant.

These steps should help you escalate your issue to Microsoft Support effectively. Remember, the key is to communicate clearly that you are the only admin and that MFA is preventing you from accessing your account.

---

References:

• Locked out of global admin account (MFA) - business down - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Preventing tenant lockouts