Hello @Simon H
Welcome to the Microsoft Q&A Community!
Thank you for contacting us.
As a forum moderator, although I don't have direct access to your tenant details to help you with the lockout, I want to ensure you have a reliable path to reach the appropriate team and move your case forward.
Please follow the guidance below when contacting Microsoft Data Protection Support and submitting a service request.
Section 1. Calling the Support Hotline
- Depending on your country or region, when you dial the support number you may first hear an automated introduction for approximately 30 seconds. For example, you may hear a message suggesting a website to visit. You do not need to take action during this introduction.
- After the introduction, wait for the menu options to begin.
- When prompted, press 1 for business email users.
- When prompted again, press 1 for technical help.
- If the call disconnects or the queue is at capacity, please try again at a different time of day.
Section 2. Call Timing and Availability
- To increase the likelihood of reaching an agent, please attempt to call two to three times during the work week.
- If your first attempt is unsuccessful, try again at a different time window, for example early morning or mid afternoon in your local time zone.
- If you reach the automated system repeatedly without being placed into a live queue, allow the message to complete before making your selections to ensure proper routing.
*Section 3. What to Prepare Before You Call *
Having the following information ready will help the agent identify your tenant and expedite verification:
- Your primary sign in email address and the affected domain name.
- Your tenant ID if known.
- A brief summary of the issue, including the date and approximate time when the problem began, any error messages, and steps you have already tried.
- Confirmation of your role in the tenant, for example global administrator or user.
- If relevant, the name of your partner or reseller and your customer agreement or subscription details.
- A callback phone number and an alternate email address where you can be reached if you are unable to sign in.
Section 4. After Your Support Ticket is Submitted
- After you or the phone agent opens your ticket, it may take time for assignment due to current case volumes.
- Please allow approximately five to seven days for your ticket to be assigned to a specialist.
- Once assigned, the Data Protection team will contact you directly. They may request identity verification, information about domain ownership, or additional logs or screenshots.
- Keep your ticket number for reference and use it in all follow up communications to avoid delays.
- If you do not receive an update within the expected window, follow up on the same ticket rather than creating a new one.
Section 5. If Your Subscription is Managed by a Partner or Reseller
If your Microsoft 365 Business or Education subscription was purchased through a partner or reseller, contact the reseller’s support desk and ask them to open a Microsoft service request on your behalf.
*Section 6. Alternative Path if You Cannot Reach a Support Representative *
If you are unable to successfully reach a representative after multiple attempts:
- Create a new tenant by signing up for a Microsoft 365 trial subscription using Microsoft’s plan comparison page.
- Complete the trial tenant setup and sign in to the Microsoft 365 admin center with the new tenant’s global admin account.
- From the admin center, open a support request. In the description, clearly state that you need assistance with your original tenant and you are unable to access it to create a ticket. Include the original tenant’s domain name and any relevant verification details.
- After the original issue is resolved, cancel the trial subscription to avoid charges.
Section 7. Tips for Data Protection and Identity Verification
- Be prepared to confirm domain ownership. The team may ask you to add a temporary DNS TXT record or provide documentation that proves your control of the domain.
- Have a government issued identification document available if requested as part of identity validation.
- Use a reachable phone number and alternate email address not tied to the locked account to receive updates.
- If you are the global administrator and locked out due to multifactor authentication, note that the team may require additional verification steps before resetting or removing multifactor methods.
- Keep a concise timeline of events and actions taken. This helps the agent quickly assess the situation and reduces back and forth.
Section 8. Recommended Wording When Speaking to the Agent
- State your role and the tenant domain.
- Summarize the issue in one or two sentences.
- Indicate that you have already attempted to follow self service steps and that you require assistance from Data Protection or account recovery specialists.
- Provide your contact details and confirm the best time and method for follow up.
Example: "My name is [Full Name]. I am the [Role, for example Global Administrator] for the tenant using the domain [yourdomain.com]. I am unable to access the tenant due to [brief issue summary, for example multifactor authentication loop after device change]. I have attempted self service recovery without success. I need assistance to verify my identity and regain access. You can reach me at [phone number] and [alternate email]. Thank you."
I hope the given information is clear and will help you with the issue.
Feel free to correct me if there are any misunderstandings and let me know how it goes.
If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.