Global Admin Locked Out Due to Lost Authenticator Device – Domain Owner Unable to Access Tenant

Question

Hello,

I am facing a very serious issue with Microsoft 365 authentication and I would really appreciate urgent guidance.

I am the owner of the domain egymaf.com, and the Global Administrator account for my tenant is [Moderator note: personal info removed] @egymaf.onmicrosoft.com

Unfortunately, the phone that contained my Microsoft Authenticator app was lost. Because of that, I can no longer approve the sign-in request or generate the verification codes.

What is confusing for me is that this is supposed to be an additional security method, but in my case it has completely blocked me from accessing my own account.

Please consider the situation:

• I know the username and password • I verified my identity through the alternate email • The alternate email is [Moderator note: personal info removed] @egymaf.com, which is under the same domain that I own • I control the domain DNS and hosting

So from my perspective, it is very strange that an additional security option can completely prevent the domain owner from accessing the tenant, even after password reset and identity verification.

If the authenticator device is lost, there should be a clear way for the administrator or domain owner to reset it. Otherwise the password and alternate email become useless.

I have already tried to contact Microsoft support: • I sent an email to [support@microsoft.com] • I called Microsoft support numbers • I attempted the account recovery steps

Unfortunately I have not been able to reach anyone who can assist.

This situation is now affecting my business operations, because I cannot access my Microsoft 365 tenant or manage my domain services.

I would greatly appreciate guidance on one of the following solutions:

1. Reset or remove the old Microsoft Authenticator device from my admin account
2. Allow me to verify ownership using my domain (DNS verification)
3. Release the domain egymaf.com from this tenant if access cannot be restored

Right now my business is struggling because I cannot access services that belong to my own domain.

Any urgent assistance or guidance would be highly appreciated.

Thank you.

Answer 1

Please understand that as forum moderators, we do not have the tools or sufficient access to make changes to user accounts, including logging in, resetting passwords, or modifying access rights. For your security, only Microsoft Support can assist with these requests. 

Hello @Ahmed Osama,

Thank you for your detailed explanation, and I’m really sorry to hear how much time and effort you’ve already spent trying to recover access to your admin account.

If you are the only admin, you will need to contact Microsoft’s Data Protection team. This team has the authority and the specific security procedures to verify your identity as the legitimate owner of the account and then reset your MFA settings from their end. Please try to find the related hotline number to call the frontline and let them raise a ticket for you: Customer service phone numbers - Microsoft Support    

I know you mentioned that you have already attempted calling without success, but I would kindly ask you to try once more using the tips below. These steps may help you bypass the automated loop and reach an agent who can escalate your case correctly.

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:  

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help)       

In some regions you may initially interact with an automated system, so here is an example of how you can answer the prompts to reach the right team more quickly:  

• What kind of problem are you experiencing?          
• Answer: Authenticator          
• What products do you use?          
• Answer: Office 365 for business          
• Is this for an education or company account?          
• Answer: For companies          
• Are you an administrator?          
• Answer: Yes          
• Are there any other administrators in your organization?          
• Answer: No. I am the only admin in my tenant           
• Do you need a... Service request?           
• Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.       

During the call, you will be asked to provide information that verifies your identity and proves ownership of the tenant, such as your organization name, billing information, contact email, phone number, or other subscription‑related details.

---

If you still cannot reach the Data Protection Team after trying again, there is a workaround you might consider: You can register for a new Microsoft 365 tenant by signing up for a trial subscription here: Microsoft 365 Business Plans and Pricing | Microsoft 365    

Once the new tenant is created, you can access the admin center and submit a support ticket from there, requesting to speak with the Data Protection Team on behalf of your original tenant.    

Important notes:     

• This new trial tenant will not give you access to any of the data or settings in your original locked tenant. It is solely a temporary means to contact Microsoft support.    
• The resolution time might be longer as you are contacting support from a different tenant.    
• Remember to cancel the trial subscription for the new tenant once your issue with the original account is resolved to avoid any unintended charges.  

I hope the information provided helps guide you in the right direction. Although I’m unable to take direct action, I sincerely hope that the steps and recommendations I’ve shared can support you through the process.  

Warm regards, 

---

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.