Original tenant locked out – sole Global Administrator MFA failure

Question

Original tenant locked out – sole Global Administrator MFA failure

pedro mendes 0

Original Tenant ID:

Account:

No other administrator exists.

Please create a support case for the affected tenant and escalate it to Data Protection / Tenant Recovery.

0 comments

1 answer

Your answer

Answer 1

Bence Weiszmann 1,820

Dear @pedro mendes

If there is no other Global Administrator available in the tenant, this needs to go through Microsoft's tenant recovery process.

I would recommend contacting Microsoft Support and explicitly describing this as a tenant lockout / no accessible Global Administrator case.

You can start here:

Microsoft Entra – Get support

If you prefer to call Microsoft Support, the exact phone menu depends on your country or region. In some countries, there is an initial message telling you to visit the online support page. You can simply wait for the menu options.

In other countries, the call may be handled by an automated conversation. For example:

What kind of problem are you concerned about?
1. Authenticator
What kind of product are you using?
1. Office 365 for business/Azure portal/Entra ID
Is this an education or company account?
1. Company
Are you an administrator?
1. Yes
Do you have another administrator in your organization?
1. No
You need to create a service request?
1. Yes

The exact wording may differ depending on the country and the current phone system, but the important part is to get the call converted into a support/service request.

Once you reach a support engineer, I would be very explicit:

“This is a Microsoft Entra tenant lockout. The only Global Administrator account is no longer accessible, and there are no other Global Administrators in the tenant. We need to recover administrative access to the tenant. Please escalate this case to the Data Protection / Tenant Recovery team.”

Have the following information ready for the ownership verification:

Tenant ID
Initial *.onmicrosoft.com domain
Custom domain name(s)
Proof of domain ownership / DNS access
Microsoft 365 subscription and billing information
Company information
Details about the previous Global Administrator
Any other information Microsoft requests to verify ownership

For future protection, I would also recommend having at least two independently managed Global Administrator accounts and dedicated emergency access accounts. This prevents losing access to the entire tenant when a single administrator account becomes unavailable.

pedro mendes 0 Reputation points

2026-08-28T17:10:55.6533333+00:00

Hi dear @Bence Weiszmann

Thank you for your help.

I tried contacting Microsoft Support, but I have been unable to reach a human agent. I was also told that my account is not an administrator, although I created and purchased the Microsoft 365 Business subscription myself and I am the only user.

The original Microsoft welcome email specifically instructs me to use my onmicrosoft.com account to access the Microsoft 365 Admin Center.

There is no other person managing the tenant and I have no alternative MFA method after accidentally deleting Microsoft Authenticator.

Could you please tell me if there is a direct way to open a Tenant Recovery / Data Protection service request without going through the automated support system?

I can provide the Tenant ID, billing information and proof of ownership privately to Microsoft Support.

Thank you very much. Pedro Mendes
Bence Weiszmann 1,820 Reputation points

2026-08-28T17:19:04.1033333+00:00

Dear @pedro mendes

If you are unable to get in touch with a Microsoft support representative through your existing tenant, one possible alternative is to create a temporary Microsoft 365 tenant using a trial subscription. This can provide you with access to the Microsoft 365 Admin Center, where you can open a support request regarding the tenant you are currently unable to access.

To create the temporary tenant, go to the Microsoft 365 business plans page and start a trial subscription. Follow the on-screen instructions to complete the registration and tenant creation process.

Microsoft 365 Business Plans and Pricing

After the new tenant has been created, sign in to the Microsoft 365 Admin Center and navigate to Support › Help & Support. From there, create a new support request and explain that the request concerns your original tenant, which you can no longer access.

In the support request, clearly mention that you are the Global Administrator of the original tenant and that you have been locked out because you no longer have access to the MFA method required to complete authentication. You can use the following text as a starting point:

Hello, I am currently unable to access my original Microsoft 365 tenant because I no longer have access to the MFA method associated with my account. As a result, I cannot complete the verification process or regain access to the tenant. I am the Global Administrator of the affected tenant. I have created this temporary tenant only because I am unable to open a support request from the original environment. Could you please escalate this case to the appropriate Data Protection or account recovery team so that my ownership and identity can be verified and I can recover access to the original tenant? This issue is significantly affecting our ability to work, and I would appreciate any assistance in resolving it as soon as possible. I am prepared to provide any information or documentation required to verify my identity and ownership of the tenant. Thank you for your assistance.

Once the support request has been submitted, Microsoft may ask for additional information to verify your identity and establish ownership of the affected tenant. Make sure you provide the requested details as accurately as possible.

Important: The trial tenant is only being used as a means of contacting support. Once access to the original tenant has been restored and the issue is resolved, remember to cancel the trial subscription to prevent any unexpected charges.

You can find Microsoft's official instructions for cancelling a trial subscription here:

How to cancel a Microsoft business subscription