URGENT: Sole Global Admin locked out : Authenticator device reset, no alternate MFA

Question

I am the sole Global Administrator of a Microsoft 365 tenant (not the one listed but I cannot log into the one I am locked out of)

My Microsoft Authenticator app was reset when my phone changed (I believe) and there are no alternate MFA methods configured.

I cannot access the tenant, approve sign-in, or receive verification codes.

I need an MFA reset or Temporary Access Pass issued through Microsoft Data Protection.

Please advise on identity verification process.

Answer 1

Thank you I was able to resolve it on my own.

Answer 2

Hi @agnes chen,

Thank you for posting your question to the Microsoft Q&A forum.

I’m sorry to hear you’re having trouble accessing your work account because of issues with the Microsoft Authenticator app. Please know that you’re not alone, as many users encounter similar challenges. I'm here to guide you through each step so you can regain access and return to work as quickly as possible.

As part of the community support team, my access is limited and I cannot make changes to administrator-level settings. For security reasons, only Microsoft’s specialized support team has the necessary tools and permissions to assist with account-level issues such as MFA resets or advanced troubleshooting.

Since you are the sole Global Administrator for the tenant, please follow the steps below to complete the account recovery process and regain access.

Option 1: Contact Microsoft Data Protection Support by Phone (Primary Method)  

To regain access to your admin account as you can't access the Admin Portal, you can try reaching out to our Global Customer Service phone to raise a request for resetting your authentication method here: Customer service phone numbers - Microsoft Support. During the call, request to speak to an agent, and share with them every detail related to your query and also mention that you are the only admin lost access to your account. This should allow you to contact the appropriate team so you can solve this incident as soon as possible. 

  

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:       

In some countries, it is an automated conversation like: 

IVR: What kind of problem are you concerned about?       

You: Authenticator.       

IVR: What kind of product do you use?       

You: Office 365 for business.       

IVR confirmation: education or company account?       

You: For companies       

IVR: Are you an administrator?       

You: Yes.       

IVR: Do you have another administrator in your organization?       

You: No.       

IVR: Do you need a... Service request?    

You: Yes. I need to create a ticket. Please send me directly to the Data Protection Team.

Option 2: Create a Temporary Account (Trial Tenant) to Submit a Support Ticket (Alternative Method) 

If you still cannot reach to a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription via this link Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.       

 

Please note that forum moderators do not have access to user account settings and cannot assist with logging in, resetting passwords, or changing access rights. While I do not have access to internal systems or administrative tools required to resolve account-specific or backend-related issues but I’ll continue doing our best to support you within the scope of our responsibilities.   

 

Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

 

I hope this helps you regain access to your account quickly. I'm glad to assist and truly hope the information provided has been useful. Please feel free to reach out anytime if you need further assistance.  If you find my post helpful, kindly consider marking it as the accepted answer. Doing so can assist others in the community who may have similar questions in finding solutions more quickly.  Thank you for your kindness and contributions to the forum. 

---

Note: Follow the steps in our documentation to enable email notifications if you want to receive email notifications related to this topic.

Answer 3

How do I contact Contact Microsoft Data Protection Support?

Answer 4

If you are the sole Global Administrator and are locked out due to the Microsoft Authenticator app being reset, you have a couple of options to regain access to your Microsoft 365 tenant:

1. Contact Microsoft Data Protection Support: Since you cannot access the tenant, you should reach out to Microsoft Data Protection Support directly. You can do this by calling their customer service. Explain your situation clearly, mentioning that you are the only Global Admin and require assistance with MFA reset or a Temporary Access Pass.
2. Identity Verification Process: During your communication with Microsoft Support, be prepared to verify your identity. This may involve providing business documentation or other identifying information related to your tenant.
3. Alternative Methods: If you have any other global administrators in your organization, they can also assist you by resetting your MFA settings. However, since you mentioned you are the sole admin, contacting Microsoft directly is your best option.

Make sure to have all relevant information at hand when you contact support to expedite the process.

---

References:

• Global Admin Locked out - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A