Sole Global Administrator locked out – MFA recovery required

Question

I am the sole Global Administrator of our Microsoft 365 tenant and I am currently locked out due to MFA.

Tenant: atlcoo.onmicrosoft.com

The only Global Administrator is: [Moderator note: Personally Identifiable Information removed]@atlcoo.onmicrosoft.com

I used Microsoft Self-Service Password Reset. Verification Step 1 succeeds using my registered alternate email address, which I have full access to.

However, Verification Step 2 fails when Microsoft attempts to call my registered phone number and displays:

“Oops! We encountered an unexpected error while contacting you.”

Microsoft Authenticator is also unavailable because it requires authentication itself, creating an MFA loop.

There is no other Global Administrator in the tenant.

I have access to the registered alternate email address and control of our organization’s domain/DNS and can provide ownership verification if required.

Please assist with sole Global Administrator account recovery / MFA reset and escalate to the appropriate Microsoft Data Protection or Tenant Recovery team if necessary.

Answer 1

Hi khalid,

Welcome to the Microsoft Q&A forum.Based on your description, you are the only Global Administrator of the tenant.

In this case, you will need to contact the Data Protection Team through the regional phone number listed in the following link:

Customer service phone numbers – Microsoft Support

Please understand that moderators and other users on this forum are not able to directly escalate your case to the Data Protection Team or submit a request on your behalf.

To make the call more effective, please follow the guidance below:

Tips for Navigating the IVR System (Automated Phone Support)

1. When calling the support number, you may hear an introductory message for approximately 30 seconds (for example, “You can visit the link…”). You can simply wait until the system presents the available options.
2. Then:
   • Press 1 for a business email user.
     • Press 1 again for technical support.

In some regions, the initial interaction may be fully automated. You can prepare the following responses in advance:

• What kind of problem are you experiencing? Answer: Authenticator
• What products do you use? Answer: Office 365 for Business
• Is this for an education or company account? Answer: For companies
• Are you an administrator? Answer: Yes
• Are there any other administrators in your organization? Answer: No. I am the only admin in my tenant.
• Do you need a service request? Answer: Yes. I need to create a ticket. Please transfer me directly to the Data Protection Team.

Information You May Be Asked to Provide

During the call, the support team may ask for subscription-related information such as:

• Company name
• Billing information
• Phone number
• Alternate email address

This information helps the Data Protection Team verify your identity and securely assist you with restoring access to your tenant.

I hope this information is helpful.

If you have any questions or need further assistance, please feel free to share them in the comments on this post so I can continue to support you.

I look forward to continuing the conversation.

---

If the answer is helpful, please click "Yes" and kindly upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.