Sole Global Admin locked out by lost Authenticator MFA — need Data Protection / Tenant Recovery

Question

I am the sole Global Administrator of a Microsoft 365 Business / Microsoft Entra tenant and the administrator account is locked at MFA. The password and this low-risk Microsoft Learn sign-in still work, but Entra admin center, Microsoft 365 admin center, and Azure support all require the old Microsoft Authenticator registration.

Confirmed state:

• “Sign in another way” offers only Authenticator approval or Authenticator verification code.
• Both options refer to the old registration, which is no longer available.
• There is no SMS, phone call, security key, recovery code, or usable alternate administrator.
• The Authenticator entry on the current phone is only a connected work account and does not display the old six-digit code.
• The public Contact Us “Can’t sign in” path redirects to the consumer sign-in helper, and Azure support itself requires the unavailable MFA.

This is also blocking a security remediation: My Apps shows an enterprise application named “rclone” with administrator-consented permissions, and the page states that the user cannot revoke that consent. We need tenant administrator access restored so the service principal/admin consent can be removed.

Please have a Microsoft External Staff moderator contact me through private messaging and create/escalate a Microsoft 365 Data Protection / Tenant Recovery case for sole-admin MFA reset / security-info re-registration. I can privately prove control of the custom domain through DNS and provide tenant, subscription, billing, and contact details. Please do not ask me to retry the old Authenticator methods; they are permanently unavailable.

Region: Taiwan; time zone: UTC+8.

Answer 1

Hi Jc,

Good day and I’m sorry to hear about the difficulties you’re experiencing.

In this case, since you're a sole administrator, you need to contact the Microsoft Data Protection Team as they are the only authorized team who has tools and processes in place to verify identity and regain access to administrator accounts.

Just to gently clarify, I forum moderator don't have the ability to access, modify or recover user accounts. Due to security and privacy requirements, issue such as sign in failures, password recovery, and multi-factor authentication can only addressed by Microsoft's dedicated support team, who have the appropriate tools and authorization to manage account level settings securely.

You can reach out to Microsoft Data Protection Team by:

1/ Contact Microsoft Data Protection Support by Phone (Primary Method)    

You can start by calling your regional Microsoft support hotline here: Customer service phone numbers - Microsoft Support.  

During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account. 

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:       

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.) 

IVR: What kind of problem are you concerned about?         

You: Authenticator.         

IVR: What kind of product do you use?         

You: Office 365 for business.         

IVR confirmation: education or company account?         

You: For companies         

IVR: Are you an administrator?         

You: Yes.         

IVR: Do you have another administrator in your organization?         

You: No.         

IVR: Do you need a... Service request?  

You: Yes. I need to create a ticket. Please send me directly to the Data Protection Team.  

2/ Create a Temporary Account (Trial Tenant) to Submit a Support Ticket (Alternative Method)   

If you still cannot reach a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant. 

To set up a new tenant, please follow these steps: 

• Visit Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided.
• Follow the guided setup process to create a new account for a new tenant. 
• Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues. 
• To create a Support ticket: sign into Microsoft 365 Admin Center > Support > Help & Support. 

In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt: 

"Hello, I’m currently unable to access my previous Microsoft 365 tenant due to losing MFA access, which prevents me from receiving verification codes. I’m the global admin, but I’m locked out and unable to generate a QR code or bypass MFA. 

I created this new tenant solely to request assistance. I kindly ask to be connected with the Data Protection team to verify my identity and help me recover access to the original tenant. 

This is urgent, as I rely on Microsoft 365 for my work and have been unable to operate for several days. I’m available to provide any documentation or verification needed to support the recovery process." 

Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn 

I hope this helps you regain access to your account quickly. I'm glad to assist and truly hope the information provided has been useful. Please feel free to reach out anytime if you need further assistance. 

Thank you for your kindness and contributions to the forum. 

---

If the answer is helpful, please click "Yes" and kindly upvote it. If you have extra questions, please click "Comment".         

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.