Full Admin Lockout – MFA

Question

Full Admin Lockout – MFA

Marthine Ruitenberg 35

We are completely locked out of our Microsoft 365 / Entra ID tenant because MFA is enforced on all Global Admin accounts and authentication fails, with no break-glass account available.

We need a way to disable or bypass Conditional Access / MFA from the backend to regain access.

This is business critical as we currently have no administrative access to the tenant.

VEMULA SRISAI 13,405 Reputation points Microsoft External Staff Moderator

2026-03-03T14:19:38.1266667+00:00

Hello Marthine Ruitenberg,To assist you further and forward this to Microsoft’s Data Protection Team, we need some additional information. As this involves Personally Identifiable Information (PII), please share the following details with us in private message only (do not post publicly):
SUNOJ KUMAR YELURU 18,256 Reputation points MVP Volunteer Moderator

2026-03-04T08:42:03.4+00:00
Hello @Marthine Ruitenberg,

To regain access, you will need to utilize emergency access accounts, which are specifically designed for scenarios where normal administrative access is unavailable. These accounts should be excluded from Conditional Access policies to prevent lockout due to policy misconfigurations.

In such cases, it is advisable to contact Microsoft support for assistance. They can help restore access to your tenant and resolve the issue. The Data Protection team may be engaged to assist you in regaining access.

To prevent future lockouts, it is recommended to set up multiple emergency access accounts and ensure that they are excluded from any Conditional Access policies. This redundancy can help mitigate the risk of being locked out again

Manage emergency access accounts in Microsoft Entra ID

Preventing tenant lockouts

If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.
Marthine Ruitenberg 35 Reputation points

2026-03-04T14:29:14.75+00:00

I am aware.. unfortunately.

1 answer

Your answer

VEMULA SRISAI 13,405 Reputation points Microsoft External Staff Moderator

2026-03-03T14:19:38.1266667+00:00

Hello Marthine Ruitenberg,To assist you further and forward this to Microsoft’s Data Protection Team, we need some additional information. As this involves Personally Identifiable Information (PII), please share the following details with us in private message only (do not post publicly):
SUNOJ KUMAR YELURU 18,256 Reputation points MVP Volunteer Moderator

2026-03-04T08:42:03.4+00:00

Hello @Marthine Ruitenberg,

To regain access, you will need to utilize emergency access accounts, which are specifically designed for scenarios where normal administrative access is unavailable. These accounts should be excluded from Conditional Access policies to prevent lockout due to policy misconfigurations.

In such cases, it is advisable to contact Microsoft support for assistance. They can help restore access to your tenant and resolve the issue. The Data Protection team may be engaged to assist you in regaining access.

To prevent future lockouts, it is recommended to set up multiple emergency access accounts and ensure that they are excluded from any Conditional Access policies. This redundancy can help mitigate the risk of being locked out again

Manage emergency access accounts in Microsoft Entra ID

Preventing tenant lockouts

If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.
Marthine Ruitenberg 35 Reputation points

2026-03-04T14:29:14.75+00:00

I am aware.. unfortunately.

Answer 1

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Share via

Full Admin Lockout – MFA

1 answer

Your answer