I am the sole Global Administrator of my own Microsoft Azure / Entra tenant and I am completely locked out due to an MFA issue.

Question

I am the sole Global Administrator of my own Microsoft Azure / Entra tenant and I am completely locked out due to an MFA issue.

The issue:

• I can enter my username and password successfully.
• Azure then asks me for a 6-digit verification code.
• Microsoft Authenticator only shows an 8-digit code for my Microsoft account.
• If I choose to approve the sign-in through Microsoft Authenticator instead, no push notification/request is received.
• I have no other administrator who can reset or re-register my MFA methods.
• The administrator account is associated with my personal Microsoft account.
• I cannot use mysignins.microsoft.com/security-info because it states: "You can't sign in here with a personal account. Use your work or school account instead."

I have already contacted Microsoft by phone. The automated support system redirected me to aka.ms/pwr, but password recovery does not resolve the problem because my password works and the lockout occurs at the MFA stage.

This appears to be a tenant lockout / sole Global Administrator lockout.

Could a Microsoft moderator please assist with getting a support case created and escalated to the Data Protection / Tenant Recovery team so that ownership of the tenant can be verified and the MFA registration can be reset?

I can provide my Microsoft account information, billing information, payment details, invoice information and any other proof of ownership that I have available through a private channel.

I currently cannot access the affected tenant, so I may not have access to the Tenant ID or Subscription ID.

Please let me know what information is required. I will not post sensitive account or billing information publicly.

Thank you.

Answer 1

Hi Christopher,

Thank you for your response.

If you still cannot reach a live agent, I recommend creating a trial tenant and submit a ticket there. To do this, please visit Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.

Follow the guided setup process to create a new account for a new tenant.

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues.

In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt:

"Hello, I’m currently unable to access my previous Microsoft 365 tenant due to losing MFA access, which prevents me from receiving verification codes. I’m the global admin, but I’m locked out and unable to generate a QR code or bypass MFA.

I created this new tenant solely to request assistance. I kindly ask to be connected with the Data Protection team to verify my identity and help me recover access to the original tenant.

This is urgent, as I rely on Microsoft 365 for my work and have been unable to operate for several days. I’m available to provide any documentation or verification needed to support the recovery process."

Ticket Support: In the Microsoft 365 Admin Center > Support > Help & Support.

Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

I hope this helps you regain access to your account quickly. I'm glad to assist and truly hope the information provided has been useful. Please feel free to reach out anytime if you need further assistance.

If you find my post helpful, kindly consider marking it as the accepted answer. Doing so can assist others in the community who may have similar questions in finding solutions more quickly.

Thank you for your time and patience.

Answer 2

Hi Christopher,

Thank you for reaching out and I’m truly sorry to hear that you’re currently unable to sign in.

Just to gently clarify before we go any further, this forum is separate from Microsoft Support. Forum users, moderators and Microsoft external staff cannot access user accounts or directly escalate cases. For security and privacy reasons, account-related issues can only be handled by Microsoft's dedicated support teams.

If your account is also an admin account and there are no other available global administrators in your tenant, then the only way to regain access is contact Microsoft support again and request assistance from the Data Protection team. Please try locating the appropriate hotline for your region here: Customer service phone numbers - Microsoft Support 

Here are some tips and an example of a prompt to help you navigate the IVR more effectively: 

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)   

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:     

• What kind of problem are you experiencing?        
• Answer: Authenticator        
• What products do you use?        
• Answer: Office 365 for business        
• Is this for an education or company account?        
• Answer: For companies        
• Are you an administrator?        
• Answer: Yes        
• Are there any other administrators in your organization?        
• Answer: No. I am the only admin in my tenant         
• Do you need a... Service request?         
• Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.     

During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account.     

I know being locked out of the only admin account can be stressful, but contacting the Data Protection team is the correct path forward in this scenario.

I hope these steps help you create a support ticket successfully and move closer to regaining access to your administrator account. While I’m not able to intervene directly, guiding you to the right support team is the most effective help I can provide here. 

Hope you're able to get this resolved soon.

---

If you found this answer helpful, click "Yes." If you have any further questions about this answer, please click "Comment."

Note: If you would like to receive email notifications about this thread, please follow the instructions in the forum documentation to enable email notifications.