I can sign-in with password but cannot do "Enter code" step to Microsoft 365 admin center

Question

I would like product key the Windows server license on Microsoft 365 admin center by ******@xxx.onmicrosoft.com account. And I can sign-in with password but cannot do "Enter code" step to Microsoft 365 admin. Also its no found or any pop-up code via Microsoft Authenticator on my smartphone.

I try to contact support via link aka.ms/prosupport but also cannot do "Enter code" step. When I try to contact via Thai phone number but there is a robot IVR and transfer to robot agent English language which I may speak is not clear in English.

Could you help me please?

Answer 1

Hi Kritsadadet Chomchay,

So you are in a "hard lockout" state. There is no digital workaround; the Data Protection Team (DPT) is your absolute only path forward. The online support links will fundamentally fail because they require the very login access you have lost.

You must persist with the phone support, but you need to adjust how you interact with the IVR (robot) to bypass the automatic redirection to the website. Call the Microsoft Global Customer Service for Business number again. Select the option for Business (usually option 1). When the bot asks for the reason for your call, do not say "login," "password," or "account access," as these keywords trigger the bot to hang up and tell you to go online. Instead, clearly state "Technical Support" and then "Microsoft Entra ID". If asked for a ticket number, remain silent or press # to force the system to timeout and transfer you to a human agent.

Once connected to a human, state this exact phrase: "I am the sole Global Administrator locked out of my tenant. I need to open a Data Protection case." The agent will not fix it immediately; they will create a ticket for the Data Protection Team to call you back. This engineering team has strict security protocols and will require you to prove ownership, likely by asking you to add a specific TXT record to your domain's DNS. This process can take 2 to 3 weeks. Given the difficulty with the English robot, I strongly recommend having a fluent English speaker assist you during this initial call to ensure the ticket is categorized correctly as a "Data Protection" case.

Hope you found something useful in the answer. If it helped you get more insight into the issue, please consider accepting it. Thank you!

VP

Answer 2

Hello VP,

Thank you so much and only me not another Global Administrator. I am click "Sign in another way" link but still loop required verify code or authentication. And I try interacting with the IVR but failed many call. Could you're advise me more please.

Answer 3

Hello again Kritsadadet Chomchay,

Just following up. Like I said the internal escalation to another Global Administrator is the standard "best practice" resolution, as they can reset your MFA settings instantly via the Entra Admin Center. However, if you are the sole Global Administrator, you are in a "tenant lockout" scenario where online support links like aka.ms/prosupport are functionally useless because they require the very authentication you lack. Your third screenshot contains the critical "Sign in another way" link; you must click this immediately to see if SMS or voice verification was previously configured as a fallback. If that link offers no viable options, you have no choice but to contact the Data Protection Team via phone. This is a specific, high-security engineering group that does not use standard support tickets. When calling the regional support number, ignore the standard menu options and clearly state "Data Protection" or "Account Lockout" to the IVR system to route your call correctly. Be prepared for a rigorous identity verification process, potentially involving updates to your domain's DNS TXT records, which can take several days to process.

If this answer helped you resolve the issue, please consider accepting it. Thank you!!

VP

Answer 4

Hello Kritsadadet Chomchay,

Your screenshots show the broker is active ("Connected account"), but the specific MFA configuration for that tenant is absent, causing the sign-in loop. However, the immediate escalation to the Data Protection Team is premature without clarifying your tenant's hierarchy. You must first confirm if there is another Global Administrator account in your organization; if one exists, they can resolve this instantly by navigating to the Entra Admin Center, selecting your user profile, and executing "Require re-register multifactor authentication." This is the standard architectural fix for lost tokens and avoids the lengthy external validation process.

If you are the sole Global Administrator, the Data Protection Team is your only remaining option, but you should verify you are calling the dedicated Global Customer Service phone numbers for Business specifically for your region, rather than general support lines which often route to consumer bots. When interacting with the IVR, explicitly stating "locking out" or "break glass" can sometimes expedite routing to the specific engineering group capable of validating your identity via DNS records. Regarding the "Sign in another way" link in your third screenshot, if you have not explicitly disabled SMS or voice verification in your original security info setup, checking that link is a mandatory first step before initiating a support ticket.

Hope you found something useful in the answer. If it helped you get more insight into the issue, please consider accepting it. Thank you and have a nice day!

VP