Sole Global Administrator locked out by MFA after phone replacement | cannot access Admin Center, billing, or support

AALM 0 Reputation points
2026-09-21T03:43:01.0266667+00:00

Hello,

I am the owner and sole Administrator of a small business Microsoft 365 tenant, and I have been completely unable to access my tenant for several months after changing phones.

This is a Microsoft 365 business/work account, not a personal Microsoft account.

The situation is as follows:

  • I am the sole Global Administrator for the organization.
  • I know the administrator username and password.
  • The username and password are accepted successfully.
  • The problem occurs when Microsoft requires MFA through Microsoft Authenticator.
  • The phone on which my Microsoft Authenticator registration was configured is no longer available because I changed/lost the previous phone.
  • I now have a new phone and need to register Microsoft Authenticator again.
  • There is no second Global Administrator who can reset my authentication methods.
  • I therefore cannot access the Microsoft 365 Admin Center or Entra administration.
  • I also cannot access the administrative billing/invoice area because that requires access to the same administrator account.

The result is a circular problem:

I need access to the Admin Center in order to use the normal Microsoft 365 administrator support process, but I cannot access the Admin Center because I am the sole administrator and my previous MFA device is no longer available.

I have been trying to resolve this for months.

I have contacted Microsoft Account Safety, and I have also opened and followed up on Microsoft Support cases through Microsoft's official support process.

Unfortunately, these attempts have not resulted in a resolution. I repeatedly receive communications indicating that the support case/ticket is being closed, but because I cannot access the Microsoft 365 Admin Center, there is no practical way for me to continue the case, reopen it, or create a new administrator support request that can actually address the underlying problem.

I have therefore ended up in the same loop repeatedly.

This is a small business, and I personally control the organization, its custom domain and DNS, and the Microsoft 365 subscription/billing relationship. I can provide whatever information Microsoft requires to verify ownership and authorization, including domain/DNS verification, subscription information, billing information, company documentation, identification, tenant information, etc.

At this point, I am simply trying to regain legitimate administrative access to a business tenant that I own and administer. I have been attempting to resolve this for several months and need to know the correct escalation/recovery path rather than being directed back to the Admin Center, which is precisely what I cannot access.

Thank you

Moved from: Microsoft Security | Microsoft Authenticator

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments No comments

1 answer

Sort by: Most helpful
  1. Darren Bruce 2,015 Reputation points Independent Advisor
    2026-09-21T05:24:54.8166667+00:00

    Dear AALM,

    Based on what you've described, this is unfortunately a scenario where the only Global Administrator account is locked behind MFA, and there is no alternate administrator available to reset or remove the registered authentication methods.In this case, the recommended path is to work with Microsoft's Data Protection team / Account Recovery process, as standard administrative recovery procedures require another Global Administrator within the tenant.

    Since you mentioned that previous support requests have been closed without resolution, I recommend replying to any existing case communications or email and explicitly requesting that the case be escalated.

    In the meantime, you also can try to contact Microsoft Support team again as following below:

    You can contact Microsoft Support team via phone service number: Customer service phone numbers - Microsoft Support. The agent will be able to create a ticket for you under the affected tenant and then transfer this ticket to Data Protection team who could help you to regain access.   

    To help you navigate the automated phone system (IVR), here's an example of what the conversation might look like:

    IVR: What kind of problem are you worried about?

    You: Admin account locked

    IVR: What kind of product do you use?

    You: Office 365 for business

    IVR: Does it count for education or business?

    You: For Business

    IVR: Are you an admin?

    You: Yes

    IVR: Do you have another administrator in your organization?

    You: No

    IVR: Need a service request?

    You: Yes

    This should help you connect with a live support agent who can help you directly.

    If you can't create a support ticket during the call, I recommend creating a temporary tenant account and submitting the support request from there. To create a new tenant, follow these steps:

    1. Visit Office 365 E3 - Enterprise Collaboration and Productivity | Microsoft    
    2. Select any plan and click Try for free.    
    3. Complete the setup to create a new tenant.    
    4. Ticket support: In the Microsoft 365 admin center>support>help & support. You can create a support ticket: https://admin.microsoft.com/#/support/requests     

    Important: Please remember to cancel the trial subscription once your issue is resolved to avoid any charges.

    Please understand that as a forum user, I do not have access to tenant administration systems and cannot reset MFA methods or restore Global Administrator access on behalf of a tenant owner.

    If your Microsoft 365 subscription was purchased through a Microsoft partner, CSP provider, or domain registrar that manages the subscription, it may also be worthwhile contacting that provider directly, as they may have additional support channels available to engage Microsoft on your behalf.

    I understand this issue may take some time to resolve and could impact your workflow, especially when access to support itself depends on the administrator account that is currently inaccessible. At this point, continued escalation through Microsoft's account recovery and data protection channels is the appropriate recovery path, as no self-service method exists when the sole Global Administrator's MFA registration is no longer available.

    Feel free to reach out if you have any other question, I hope your issue would be resolved as soon as possible.


    Note: Please follow the steps in the forum documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.