Microsoft 365 Work or School account due to an MFA issue.

Question

Hi, I am contacting you because I am completely locked out of my Microsoft 365 Work or School account due to an MFA issue

Here are the details of my case:

I am the Global Administrator and the only admin for this tenant. There is no other internal IT department or admin who can assist me.

I can input my password correctly, but I am failing the MFA verification because the Microsoft Authenticator app is not sending any codes or approvals to my phone.

I do not have any alternative sign-in methods configured.

The previous support agent (Anish) advised me to reach out to the Business Support / Commercial Team because my case requires escalation to the Data Protection Team to reset my MFA registration from the backend. Could you please help me with this process?

Answer 1

Hi @ball, 

Thank you for taking the time to clearly explain your situation. 

The guidance you previously received is absolutely correct. In cases like this, where MFA is blocking access and there are no alternative verification methods available, the request must be handled by the Microsoft Data Protection team. They are the only team with the appropriate tools and processes to securely verify your identity and reset MFA at the backend. 

Since this is a user-to-user support forum, I don’t have access to account-level tools or the ability to make changes such as MFA resets or account recovery. However, I’m more than happy to guide you through the best way to reach the right team as quickly as possible. 

The most effective next step is to contact Microsoft Support by phone so your case can be properly raised and routed to the Data Protection team. You can find the correct contact number for your region here: Customer service phone numbers - Microsoft Support 

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:  

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)    

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:      

• What kind of problem are you experiencing?         
• Answer: Authenticator         
• What products do you use?         
• Answer: Office 365 for business         
• Is this for an education or company account?         
• Answer: For companies         
• Are you an administrator?         
• Answer: Yes         
• Are there any other administrators in your organization?         
• Answer: No. I am the only admin in my tenant          
• Do you need a... Service request?          
• Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.      

During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account.      

---

If you're still unable to get through to support, there is a workaround you might consider: You can register for a new Microsoft 365 tenant by signing up for a trial subscription here: Microsoft 365 Business Plans and Pricing | Microsoft 365   

Once the new tenant is created, you’ll be able to sign in to the Microsoft 365 admin center and submit a support ticket from there. In your request, clearly explain that you need help with regaining access to an administrator account in your original tenant and ask to be routed to the Data Protection team. This approach typically ensures that the ticket is properly assigned and handled by a real support engineer rather than remaining stuck in automated flows.   

Note: Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.   

I truly hope this helps you move forward and regain access as soon as possible. While I’m not able to intervene directly, pointing you to the right path is the most effective support I can provide here. 

If you have any updates, feel free to come back and share. I’ll be here to assist further where I can. 

Thank you again for your patience and understanding. 

---

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.  

Answer 2

The tenant is in a classic “sole global admin locked out by MFA” situation. Because there is no other admin and no alternative MFA method, recovery must be handled by Microsoft’s Data Protection team through a support case. Forum moderators and standard support agents cannot directly reset MFA for an admin account.

Follow these steps to proceed with recovery:

1. Contact Microsoft global customer service by phone
   • Call the appropriate number listed under Customer service phone numbers - Microsoft Support.
   • When the IVR (automated system) asks questions, use wording that routes the call correctly, for example:
     • Problem type: say “Authenticator”.
     • Product: say “Office 365 for business”.
     • When asked: education or company account? answer “For companies”.
     • When asked: Are you an administrator? answer “Yes”.
     • When asked: Do you have another administrator in your organization? answer “No”.
     • When asked if a service request is needed, answer “Yes. I need to create a ticket and speak with the Data Protection team to reset my MFA as the only global admin.”
   • Clearly state that:
     • This is a Microsoft 365 Business/Work or School tenant.
     • The caller is the only Global Administrator.
     • MFA is enforced and the only method was Microsoft Authenticator, which no longer works.
     • The caller can enter the password but cannot complete MFA.
     • A Tenant Admin MFA reset / MFA re-registration reset is required by the Data Protection team.
2. If phone contact fails, create a temporary trial tenant to open a ticket
   • Sign up for a new Microsoft 365 trial tenant (any business/enterprise plan) as described in the context.
   • After the trial tenant is created, go to the Microsoft 365 Admin Center for that new tenant.
   • Navigate to Support → Help & support.
   • Open a support ticket and clearly explain:
     • The issue is with a different, existing tenant where the caller is the Global Administrator.
     • The admin account email and tenant domain for the locked tenant.
     • That MFA is blocking access because Microsoft Authenticator is the only method and no codes/approvals are received.
     • That there are no other global admins and no alternative MFA methods.
     • Request escalation to the Data Protection team to perform a backend reset of MFA registration for the tenant admin.
   • Be prepared to provide business documentation and identity verification as requested by Microsoft.
   • After recovery, cancel the trial subscription for the temporary tenant to avoid charges.
3. If the account is an end-user (non-admin) scenario
   • If this were an end-user account in a business tenant, the guidance would be to contact the organization’s Microsoft 365/Entra admin and ask them to:
     • Go to Microsoft Entra Admin Center → Users → [user] → Authentication methods.
     • Select Require re-register multifactor authentication so the user can set up MFA again at next sign-in.
   • In this case, however, the question explicitly states there is only one admin, so the Data Protection path above is required.

The key action is to reach Microsoft’s Data Protection team via a support ticket (preferably initiated through the global customer service phone line) and request an admin MFA reset for the tenant, since no other admin or alternative method exists.

---

References:

• Global Admin Locked out - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• Common problems with two-step verification for a work or school account
• Use a screen reader to set up and troubleshoot multifactor authentication
• You don't receive a text or voice call that contains the verification code for Microsoft Entra multifactor authentication
• "Account verification system is having trouble" error message when you try to sign in by using a work or school account
• How to add your accounts to Microsoft Authenticator
• Find the administrator for your work or school account