Locked out due conditional access policy

Question

Locked out due conditional access policy

Darshan M 0

All Global Administrator accounts are locked out due to Conditional Access.

Sign from local MFA policy was enabled before admin accounts were fully compliant.

No break-glass account exists.

Need Conditional Access policy temporarily disabled to restore admin access.

Tenant domain:

Thanks in advance

Darshan M 0 Reputation points

2026-03-06T08:57:55.44+00:00

Global admin locked out due to Conditional Access policy error 53001, device state Unregistered
VEMULA SRISAI 11,470 Reputation points Microsoft External Staff Moderator

2026-03-06T10:06:26.3233333+00:00

Darshan M To assist you further and forward this to Microsoft’s Data Protection Team, we need some additional information. As this involves Personally Identifiable Information (PII), please share the following details with us in private message only (do not post publicly):
Jos van Schouten 86 Reputation points

2026-03-06T10:11:47.5566667+00:00

The only supported recovery path is through Microsoft support and tenant verification. Do not try to resolve this further through a forum or DMs. As that might get you further away from a solution.

If all Global Administrators are locked out by a Conditional Access (CA) policy and no break-glass account exists, the situation is considered a tenant lockout in Microsoft Microsoft Entra ID. Since CA policies are enforced before admin access, you cannot disable them yourself if no admin can sign in.

You must request a Conditional Access emergency reset through Microsoft support. Go to: https://aka.ms/AzureSupportRequest or use phone support if you cannot sign in.

Microsoft will require proof that you own the tenant. Which will likely require DNS verification, so make sure you have access to that. In the support process they can explain what they need to move forward.
Darshan M 0 Reputation points

2026-03-07T17:46:03.65+00:00

Hello @VEMULA SRISAI
Thanks for your help.
I have shared required details on PM waiting for your response. Thanks
Darshan M 0 Reputation points

2026-03-07T17:49:58.8733333+00:00

@Jos van Schouten
Thanks for the reply and help
I tried to connecting with Microsoft support on phone, as there was no human agent on Phone, it failed taking my request.
VEMULA SRISAI 11,470 Reputation points Microsoft External Staff Moderator

2026-03-10T14:41:02.9566667+00:00

Darshan M Thank you for sharing the details.

1 answer

Your answer

Darshan M 0 Reputation points

2026-03-06T08:57:55.44+00:00

Global admin locked out due to Conditional Access policy error 53001, device state Unregistered
VEMULA SRISAI 11,470 Reputation points Microsoft External Staff Moderator

2026-03-06T10:06:26.3233333+00:00

Darshan M To assist you further and forward this to Microsoft’s Data Protection Team, we need some additional information. As this involves Personally Identifiable Information (PII), please share the following details with us in private message only (do not post publicly):
Jos van Schouten 86 Reputation points

2026-03-06T10:11:47.5566667+00:00

The only supported recovery path is through Microsoft support and tenant verification. Do not try to resolve this further through a forum or DMs. As that might get you further away from a solution.

If all Global Administrators are locked out by a Conditional Access (CA) policy and no break-glass account exists, the situation is considered a tenant lockout in Microsoft Microsoft Entra ID. Since CA policies are enforced before admin access, you cannot disable them yourself if no admin can sign in.

You must request a Conditional Access emergency reset through Microsoft support. Go to: https://aka.ms/AzureSupportRequest or use phone support if you cannot sign in.

Microsoft will require proof that you own the tenant. Which will likely require DNS verification, so make sure you have access to that. In the support process they can explain what they need to move forward.
Darshan M 0 Reputation points

2026-03-07T17:46:03.65+00:00

Hello @VEMULA SRISAI
Thanks for your help.
I have shared required details on PM waiting for your response. Thanks
Darshan M 0 Reputation points

2026-03-07T17:49:58.8733333+00:00

@Jos van Schouten
Thanks for the reply and help
I tried to connecting with Microsoft support on phone, as there was no human agent on Phone, it failed taking my request.
VEMULA SRISAI 11,470 Reputation points Microsoft External Staff Moderator

2026-03-10T14:41:02.9566667+00:00

Darshan M Thank you for sharing the details.

Answer 1

VEMULA SRISAI 11,470 Microsoft External Staff Moderator

Hello Darshan M,

We engaged our Microsoft Data Protection team by raising a support ticket, and the issue has now been resolved by them. Could you please check and confirm whether you are now able to sign in successfully?

If the issue is confirmed as resolved, kindly revisit this thread and click “Accept Answer”, as this may help other community members facing similar issues.

VEMULA SRISAI 11,470 Reputation points Microsoft External Staff Moderator

2026-03-23T09:06:30.1733333+00:00

Darshan M If the resolution was helpful, kindly take a moment to click on and click on Yes for was this answer helpful. And, if you have any further query do let us know

Share via

Locked out due conditional access policy

1 answer

Your answer