Unlocking my tenant.

Question

I am the sole Global Administrator of a Microsoft 365 tenant. The tenant uses only an onmicrosoft.com domain. I lost access to all MFA methods and cannot complete password recovery. I'm not able to log into anything and cannot get live support or place a ticket. PLEASE HELP!!!

Answer 1

thank you, I tried all of that including setting up a new account. However, there is only a bot to answer questions and this is the response I received:

Sorry, the bot can't talk for a while. It's something the bot's owner needs to address. Error code: InfiniteLoopInBotContent. Conversation ID:

Answer 2

I had read your same post earlier and did all of these things, including creating a new account. There is no ability to log a ticket and the bot's response was:

Sorry, the bot can't talk for a while. It's something the bot's owner needs to address. Error code: InfiniteLoopInBotContent. Conversation ID: 19:acsV2_3AjVcbbXPPJvH0sKJhjdlomU_35xeRwr_zKSrh_a2tc1@thread.v2. Time (UTC): 8/31/2026 7:10:21 PM.

Answer 3

Hi Kathy — unfortunately, because you are the only Global Administrator and have no usable MFA method, there is no self-service way to reset MFA or create another admin. This needs to be treated as a tenant lockout / sole Global Admin MFA recovery case.

Contact Microsoft Support by phone and ask the agent to open a service request and escalate it to the Microsoft Data Protection / Tenant Recovery team. Be explicit that:

You are the sole Global Administrator.

The tenant is completely inaccessible because all MFA methods were lost.

You cannot open a support request from the admin center.

The tenant uses only the *.onmicrosoft.com domain.

You need an MFA reset or restoration of Global Administrator access after ownership verification.

Have any evidence available that could help them validate ownership, such as the tenant ID, affected admin UPN, Microsoft 365 subscription/billing details, invoices, payment method information, and business/organization documentation. Do not share any of that sensitive information in this public thread.

If you cannot reach the correct support channel while signed out, create a separate temporary Microsoft 365 trial tenant and use its admin center to open a ticket about the original locked tenant, requesting Data Protection escalation.

Once access is restored, create at least two emergency Global Administrator accounts, register independent MFA methods, and store break-glass credentials securely.

Answer 4

Dear @Kathy

I’m very sorry that this happened to you. In this case, you will need to contact the Microsoft Data Protection team directly. You can contact the team using the following link:

https://support.microsoft.com/en-us/support/

In other countries, the call may be handled by an automated conversation. For example:

1. What kind of problem are you concerned about?
   1. Authenticator
2. What kind of product are you using?
   1. Office 365 for business/Azure portal/Entra ID
3. Is this an education or company account?
   1. Company
4. Are you an administrator?
   1. Yes
5. Do you have another administrator in your organization?
   1. No
6. You need to create a service request
   1. Yes

Once you reach a support engineer, clearly explain the situation and what you need help with. For example:

“This is a Microsoft Entra tenant lockout. The only Global Administrator account is no longer accessible, and there are no other Global Administrators in the tenant. We need to recover administrative access to the tenant. Please escalate this case to the Data Protection / Tenant Recovery team.”

Have the following information ready for the ownership verification:

• Tenant ID
• Initial *.onmicrosoft.com domain
• Microsoft 365 subscription and billing information
• Company information
• Details about the previous Global Administrator
• Any other information Microsoft requests to verify ownership

Second option would be to create a temporary Microsoft 365 tenant using a trial subscription. You can then use this tenant to access the Microsoft 365 Admin Center and contact Microsoft Support. Once the new tenant is set up, sign in to the Microsoft 365 Admin Center and go to Support › Help & Support. Open a new support request and explain that you need help recovering access to your original tenant. In the request, mention that you are the Global Administrator of the original tenant and that you are currently locked out because you no longer have access to the MFA method required to sign in.

One important thing: the trial tenant is only needed to contact Microsoft Support. After you regain access to your original tenant and the issue has been resolved, remember to CANCEL the trial subscription so you don't accidentally get charged.

Microsoft's instructions for cancelling a trial subscription can be found here: https://learn.microsoft.com/en-us/microsoft-365/commerce/subscriptions/cancel-your-subscription?view=o365-worldwide

For future protection, I would also recommend having at least two Break Glass account with Global Administrator permission. Full documentation for Break Glass accounts: https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/security-emergency-access

Best regards,

Bence