Global Business Admin Locked out of Account and emails access denied through authenticator loop

Question

I upgraded my iPhone at the weekend, and authenticator has now stopped working. I have been locked out of everything Microsoft, and since I am a small business and I am the ONLY global admin for our account, I am unable to do anything. As a small business, I rely heavily on emails as well as my file storage to get all my client files.

I contacted support on Sunday, who escalated to the Data Protection team. It's been 48 hours and 2 business working days. It's really impacting my business. I can't get through to anyone by phone; it constantly says to see online for service updates (yet I can't get into these given the issues), and it says to refer to the email on the service ticket (again I can't get access to this).

Surely, there has to be a better service for people that have a business account and using the account to run businesses.

Is it better to move to Google or other for a better service, as I'm seeing so many people with this issue, reporting weeks to get it resolved.

Help !!!

Answer 1

Hello @Jennie Mead

I’m so sorry to hear that you’ve lost access to your admin account. In this situation, because you are the only global admin of this tenant, you can try step 1 and 2 to get support from "Data Protection Team". 

Since this is a complex issue related to your account and may require assistance from our backend engineering team, please be patient and carefully follow the steps I’ve provided.

1. Contacting Microsoft Data Protection team by phone support

("I see that you’ve already tried these steps without success, but I would like to share a detailed workflow that many users have used successfully to contact the Microsoft Support team. You may want to try this again before moving on to step 2, which is a bit more complex.")

If you are the only administrator in your organization, then you need to involve Microsoft data protection team. Please try to find the related hotline number to call the frontline let them raise a ticket for you: Customer service phone numbers - Microsoft Support

(Important Note: Depending on your country or region, when you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

In some countries, this is an automated conversation: First, when you call the hotline, they will ask you what kind of problem you are struggling with.

Answer: Authenticator.

A: What products do you use?

B: Office 365 for business.

Verification: Education or company account?

B: For companies

A: Are you an administrator?

B: Yes.

A: Are there any other administrators in your organization?

B: No.

A: I need one.... Service request?

B: Yes  

If your organization's Office 365 Business subscription is from a partner or reseller, and the global administrator is unable to open a service request on your end, contact the reseller's support provider to help open a service request on behalf of you instead.

Please try 2 or 3 times until you can reach out to an agent.

2. Another work around

If you still cannot reach to agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.   

For detailed guidance, to set up a new tenant, please follow these steps:    

• Visit this following link and choose any plan and click try for free to start a free trial: Microsoft 365 Business Plans and Pricing | Microsoft 365
• Follow the guided setup process to create a new account for a new tenant.

Once your tenant is created, you should be able to access the support portal and submit your ticket without further issues 

Ticket Support: In the Microsoft 365 Admin Center->Support->Help & Support. You can raise support ticket In Microsoft Admin Center by this link:

https://admin.microsoft.com/#/support/requests

*Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.   

After completing them, you will receive an email appointment for a meeting to review this issue professionally together.

Finally, if you’ve already submitted a ticket, please share the ticket ID with us so we can check its status and keep you updated.

*For your reference:

• After regaining access to your admin account, consider assigning one or two additional global admins to your tenant. This will allow them to help reset MFA in similar situations without needing to contact customer support. 

Assign admin roles in the Microsoft 365 admin center - Microsoft 365 admin | Microsoft Learn   

(*Recommended: Keep it between "2–3" Global Admins for redundancy and security.)

• You can also refer to this thread for future phone changes to help avoid similar issues from happening again.

How do I transfer my Microsoft Authenticator data from my iPhone to a Samsung phone? - Microsoft Q&A

I’ve gathered all the information I could collect to help you. Hopefully it will be useful for you in this case.

Hopefully, you can resolve this issue soon!

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in "our documentation" to enable e-mail notifications if you want to receive the related email notification for this thread. 

Answer 2

I can't get through to anyone by telephone. It all seems to be AI bots which then hang up. How can I physically speak to a human being. #bemorehuman

Answer 3

For a small business tenant where the only global admin is locked out due to Microsoft Authenticator and there is already an open escalation to the Data Protection team, the only supported path is to continue working with that team; no self-service or community action can bypass this.

Key points and options based on the documented process:

1. Data Protection team is required
   • When there is only one global admin and that admin is locked out by MFA, Microsoft’s Data Protection team must verify identity and restore access. This is explicitly called out for single-admin tenants.
   • Forum moderators and normal support channels cannot directly change account access or MFA; they can only help route the case to Data Protection.
2. What the Data Protection team does
   • Verify ownership of the tenant and admin identity using business documentation and contact details.
   • Reset or re-register MFA for at least one global admin account so sign-in becomes possible again.
   • In similar cases, once a Data Protection engineer is assigned, they contact by phone or email, complete identity checks, and then reset MFA or add another authentication method.
3. If no response yet from the existing ticket
   • Call the regional support number listed under Customer service phone numbers and follow the phone prompts until connected to an agent (not just the automated “check online” loop). Clearly state:
     • The issue is a tenant lockout.
     • There is only one global admin.
     • MFA is blocking access and Authenticator is unavailable after a phone change.
     • A Data Protection escalation already exists but is time-critical for business operations.
   • Ask the agent to:
     • Confirm the existing service request is with the Data Protection / Tenant Recovery team.
     • Escalate to a duty manager if the case is stalled.
4. If completely unable to reach support from the locked tenant
   • One documented workaround is to create a temporary new Microsoft 365 trial tenant, then:
     • Sign in to the new tenant’s Microsoft 365 admin center.
     • Use Support → Help & support to open a ticket.
     • In that ticket, clearly state that the problem is with a different, existing tenant where the only global admin is locked out by MFA.
     • Provide the locked tenant’s domain, admin UPN, error behavior, and confirmation that this is the only global admin.
   • This trial tenant does not give access to existing data; it is only a channel to reach support and Data Protection.
5. After access is restored
   • Add at least one additional global admin.
   • Add multiple MFA methods (Authenticator, SMS, alternate email, etc.) and consider a dedicated break-glass account with carefully controlled use so a single device failure does not cause another lockout.

The platform does not provide a faster, alternative technical route for this scenario; recovery depends on the Data Protection workflow and identity verification. Migration decisions to other providers are outside the documented scope and not addressed in the available material.

---

References:

• Troubleshoot sign-in issues and account access problems
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• How Do I Regain Access to My Account After Losing Access to Microsoft Authenticator? (Urgent Request). - Microsoft Q&A
• Global Admin Locked out - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A