Share via

Locked out of my Business 365 account.

Yesenia G 0 Reputation points
2026-03-20T02:01:05.47+00:00

Hello, I cannot get into my Microsoft 365 Business account. I am logged into the email on my phone but can't do much else. I switched phones and it said that the information backups on iCloud, but I guess it doesn't work like that. Any way that I try to login it asks to match the code, but my authenticator does not show me anything. My authenticator on the current phone shows an Entra-Id that I added somehow. What can I do? I cannot open a ticket, because that requires you to login. I called the phone number for business accounts and when the AI said to wait that it was going to give me a reference number, the call dropped. When I try to call again now it just keeps telling me system error. I've been at this for 3 days! Help!

Microsoft Security | Microsoft Authenticator
0 comments No comments

1 answer

Sort by: Most helpful
  1. Q&A Assist
    2026-03-20T02:01:23.6533333+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    Because sign-in is blocked by Microsoft Authenticator and there is no working alternative MFA method, the account must be recovered through an administrator or Microsoft support, depending on whether there are other admins in the tenant.

    1. If there is another Global Administrator in the tenant
      • Ask that admin to sign in to the Azure portal → Microsoft Entra ID → Users → select the locked-out account → Authentication methodsRequire re-register multifactor authentication.
      • After this is done, sign in again; the account will be prompted to set up MFA from scratch on the new phone.
    2. If there is no other Global Administrator (sole admin scenario)
      • This is a tenant lockout. Recovery must be handled by Microsoft’s Data Protection team.
      • Call Microsoft’s global customer service phone numbers for business support (see Customer service phone numbers - Microsoft Support in the references).
      • When the IVR/bot asks questions, respond along these lines to reach the right team:
        • Problem type: “Authenticator” or “lost account / can’t pass MFA”
        • Product: “Office 365 for business” / “Microsoft 365 for business”
        • Account type: “For companies”
        • Are you an administrator?: “Yes”
        • Any other administrators?: “No”
        • Do you need a service request?: “Yes” (ask to create a ticket with the Data Protection team for tenant admin MFA reset / tenant recovery).
      • If the call drops or errors, keep trying periodically; phone support is the only path when locked out as sole admin.
    3. Workaround if phone support cannot be reached
      • Create a temporary trial Microsoft 365 tenant using a different account, as described in the referenced Q&A:
        • Sign up for a Microsoft 365 Business/Enterprise trial and complete tenant setup.
        • Go to the new tenant’s Microsoft 365 Admin CenterHelp & support.
        • Open a support ticket requesting contact with the Data Protection team to reset MFA for the original (locked) tenant.
        • Provide:
          • Admin email address of the locked tenant
          • Locked tenant’s domain name
          • Error messages and description that MFA (Authenticator) is the only method and is no longer accessible
          • Confirmation that this is the only Global Admin account.
      • After the issue is resolved and access to the original tenant is restored, cancel the trial subscription on the temporary tenant to avoid charges.

    Until Microsoft support or another admin resets MFA, the sign-in block cannot be bypassed. The email access on the phone does not replace the need to complete MFA for admin and portal access.


    References:

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.