A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
The described situation matches a case where only Microsoft’s Data Protection team can reset the MFA methods, but that team can be reached only through Microsoft’s official support channels. Direct escalation or outbound calls cannot be initiated from here, but the following supported paths exist based on the documented process and similar resolved cases:
- Use the global customer service phone numbers and explicitly request Data Protection support
- Call the regional number listed under Customer service phone numbers - Microsoft Support.
- When interacting with the IVR/automated system, clearly state:
- Problem type: Authenticator or Multi‑Factor Authentication.
- Product: Office 365 for business / Microsoft 365 for business.
- Account type: Company / work account.
- Role: Global administrator.
- That there is no other administrator in the tenant.
- That a Data Protection team ticket is needed to reset MFA for the only global admin.
- If prompted with options, choose technical support for business/enterprise and service request creation.
- If calls route only to recordings or do not reach an agent
- Create a temporary Microsoft 365 tenant using a trial subscription (for example, a Microsoft 365 Business trial) as described in the referenced Q&A.
- From that new tenant’s Microsoft 365 admin center, open a support ticket and explicitly request:
- Contact with the Data Protection team on behalf of the original tenant.
- MFA reset for the only global administrator on the original tenant.
- In the ticket, include:
- The original tenant domain (e.g., contoso.onmicrosoft.com or custom domain).
- Confirmation that the account in question is the only global admin and is locked in an MFA loop.
- If phone/SMS verification is being rate‑limited
- If error messages mention limits on verification calls or texts, wait several minutes and try again, or use another method such as Microsoft Authenticator or verification code if previously configured.
- If the phone number or country code might be wrong, an Entra administrator (if any other exists) must verify and correct the registered authentication methods.
- If the account is a personal Microsoft account (not work/school)
- If the sign‑in page does not show Next and indicates the account is locked, follow the aka.ms/ link shown on the page to submit the account reinstatement form. A Microsoft Online Safety agent will review and respond by email.
- For verification code delivery issues or “usage limit exceeded” errors, follow the guidance in Troubleshoot Microsoft verification code issues and, if necessary, choose another verification method or wait until the listed phone/email is accessible.
- If still unable to reach support
- Use the Contact Microsoft Support flow described in the verification‑code troubleshooting article to open a support case online, then request escalation to the Data Protection team for MFA reset on a work/school account.
Only Microsoft support (specifically the Data Protection team for work/school tenants) can verify identity and reset MFA when the only global admin is locked out. Continuing to call the global customer service numbers and clearly requesting a Data Protection ticket, or using a temporary tenant to open such a ticket, are the documented escalation paths.
References:
- Authentication methods in Microsoft Entra ID - Voice call
- Troubleshoot Microsoft verification code issues
- Microsoft account has been locked
- Common problems with two-step verification for a work or school account
- "Account verification system is having trouble" error message when you try to sign in by using a work or school account
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A
- How do I get a live person at Microsoft.? - Microsoft Q&A
- I need a phone number for Microsoft support - Microsoft Q&A
- I need to talk to someone!! - Microsoft Q&A
- Microsoft Authenticator app doesn't show 6-digit OTP code - Microsoft Q&A