Delete azure active directory

Question

How can an AD directory be deleted when the directory uses Microsoft Authenticator which is installed on a lost phone? I am aware of the several articles on how to delete, but since the directory is protected by a Microsoft Authenticator instance installed on a phone no longer available, it is impossible to switch to that directory to delete it. Please advise, thanks.

Answer 1

@M4L
Thank you for your post!

From your conversation with @Carlos Solís Salazar , it sounds like you don't have access to the Authenticator App, no other authentication methods set to complete MFA, and no other users or Global Admins within your tenant. Because of this there's nothing we can do when it comes to getting you access to your Azure AD tenant.

If you do require/want to delete this tenant since it's "empty", I'd recommend working closer with our support team via their customer service number for your country/region or through an Azure support request, if you have another tenant to create this in, or you can reach out to our Azure Data Protection team for further assistance - (866-807-5850).

For future reference, I'd also recommend creating and managing an emergency access account in Azure AD, this will help prevent being accidentally locked out of your Azure Active Directory (Azure AD) organization because you can't sign in or activate another user's account as an administrator.

I hope this helps!

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

----------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Answer 2

Hi @M4L

Thank you for asking this question on the **Microsoft Q&A Platform. **

You can Re-register the MFA

Provided the steps below to reset and unblock MFA in Azure Active Directory via Azure Portal and PowerShell.
Using Azure Portal:

• Sign in to the Azure portal with the tenant Global Administrator account.
• Navigate to Azure Active Directory > Users > All users > Choose the user you wish to perform an action on > select Authentication methods > Require Re-register MFA.
• Once this is done, the next time the user signs in, he/she will be requested to set up a new MFA authentication method.

Hope this helps,
Carlos Solís Salazar

----------

Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.

NOTE: To answer you as quickly as possible, please mention me in your reply.

---