Locked Out as Global Admin, Can't get to Email, 3-4 Day estimated resolution

Question

I have a Microsoft Business 365 account. Small business. I am the Global Admin. There are no other admins. The account used Microsoft Authenticator for MFA. Authenticator now fails to receive or generate auth codes. I can't perform any admin portal tasks and my emails fail - each task is asking for an authenticator code. Even trying to reconfigure Authenticator, it asks for an Authenticator code which is ironic. It failed while I was logged into the portal, so I was able to create a support ticket. I received a call 9 hours later. The person was helpful, but determined that issue had to be corrected by production support and that would take 3 to 4 days. During the troubleshooting process, we closed the browser. I now can't get email, can't log into the admin port, can't even log into a the support site without an Authenticator code, which I can't get. Basically a single global admin lock out. When I call Microsoft, the bot says updates are being sent to my email - which or course I can't get. I am entering this via my personal account. Not being able to get to email is a material setback for a small business. Hard to imagine waiting 3 to 4 days, but that is my current situation. Any advice? Every Microsoft avenue I've tried begins with being authenticated via the Authenticator app. The phone approach ends with a polite "service is available online"

Thank you,

Answer 1

Dear @StevePatterson-4875

I’m really sorry you’re going through this. I can absolutely understand how disruptive and stressful this is.

Based on your description, this is a known Microsoft 365 scenario: when the only Global Admin is locked out due to MFA (Authenticator), there is unfortunately no self-service recovery path available. In this case, only Microsoft’s Data Protection / Tenant Recovery team can verify ownership and reset the authentication methods on the backend.

I know the 3-to-4-day estimate feels very hard to accept, but I want to be transparent that this timeline is typically related to the manual security verification process (such as confirming domain ownership, business details, and billing information) before they can safely restore access.

In this case, if you’re unable to access your original support ticket or email updates, you can create a new Microsoft 365 trial tenant and open another support request from there. In that request, clearly state that this is for a different tenant where you are the sole Global Admin locked out due to MFA, and ask to be connected to the Data Protection / Tenant Recovery team.

• Sign up for a new Microsoft 365 Business trial using this link: Compare All Microsoft 365 Plans. You will need to use a different, personal email address to register. 
• Once the trial account is created, log in to its Admin Center > From the Admin Center, open a new Service Request. For reference:  Get support | Microsoft Docs   
• Be prepared to provide proof of ownership (tenant domain, admin email, billing info, or DNS verification), as this is required before they can reset MFA
• Remember to provide your locked account's details and a good contact number for them to reach you. 

Important: Please remember to cancel the trial subscription after your original account issue is resolved to avoid any future charges. 

Note: Please understand that as a forum moderator, my role is to provide general guidance and troubleshooting support. I don’t have access to internal systems or backend tools. I’m unable to directly intervene in your tenant or override any authentication requirements. I appreciate your understanding of these limits.

I hope the information shared helps point you in the right direction. Thank you for your patience and understanding. I'm looking forward to your reply.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".   

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.