MFA Lockout from Teams Essentials

Hi @Robert Kleibergen,

Thank you for posting your question in the Microsoft Q&A forum, 

I’m sorry to hear that issues with the Microsoft Authenticator app are preventing you from accessing your work account. I’ll guide you through the process of regaining access so you can get back to work as quickly as possible. 

Because this involves sensitive security settings and account-level permissions, our community support team is unable to make direct changes to your account. Only Microsoft’s specialized Data Protection team has the authorization to perform MFA resets and advanced troubleshooting for security reasons. 

To move forward with the recovery, please use the following contact method: Contacting Microsoft Data Protection Support by phone. 

To regain access to your admin account as you can't access the Admin Portal, you can try reaching out to our Global Customer Service phone to raise a request for resetting your authentication method here: Customer service phone numbers - Microsoft Support. During the call, request to speak to an agent, and share with them every detail related to your query and also mention that you are the only admin lost access to your account. This should allow you to contact the appropriate team so you can solve this incident as soon as possible.  

Navigate to the Business Users section to select your specific region. If you are located in the Netherlands, please use the following phone number to reach support. 

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:        

In some countries, it is an automated conversation like:   IVR: What kind of problem are you concerned about?        

You: Authenticator.        

IVR: What kind of product do you use?        

You: Office 365 for business.        

IVR confirmation: education or company account?        

You: For companies        

IVR: Are you an administrator?        

You: Yes.        

IVR: Do you have another administrator in your organization?        

You: No. 

I hope this helps you regain access to your account quickly. I'm glad to assist and truly hope the information provided has been useful. Please feel free to reach out anytime if you need further assistance. 

Thank you for your kindness and contributions to the forum. 

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Thank you for your answer. My last 3 attempts to explain the problem to the Netherlands telephonic support center led to the automted advice to go to aka.ms/prosupport after which the connection was put down. :-(

Can you advise which telephone number either in the Netherlands, or global, to use?

The error indicates that multifactor authentication (MFA) is blocking sign-in and the account cannot be verified with the current methods.

Use these steps depending on the role in the tenant:

1. If there is another admin in the tenant
   • Another global admin must reset the MFA registration so new methods can be configured:
     1. Go to Microsoft Entra admin center.
     2. Navigate to Users → All users → [your user] → Authentication methods.
     3. Select Require re-register multifactor authentication.
     4. Sign in again; the sign-in flow will prompt to set up MFA (Authenticator, phone, etc.) from scratch.
2. If this is a work/school account and there are repeated failed attempts
   • Microsoft Entra MFA may have temporarily blocked sign-in due to unusual activity or multiple attempts.
   • Wait and try again later, or use a different MFA method if one is available (SMS, alternate phone, email, security key) as described in the two-step verification guidance.
   • If malicious activity is suspected, an IT administrator should review Microsoft Entra sign-in logs and adjust MFA settings if needed.
3. If this is a Teams Essentials / Microsoft 365 business tenant with only one global admin (no other admins)
   • This is a tenant lockout scenario. Only Microsoft support (Data Protection team) can restore access:
     1. Call the appropriate Customer service phone numbers - Microsoft Support for the region.
     2. When prompted by the automated system, indicate the issue is with Authenticator / MFA for Office 365 for business / company account, and that this is the only administrator.
     3. Ask to open a service request and have the case escalated to the Data Protection team to verify identity and restore access to the locked tenant.
   • If the subscription was purchased via a partner/reseller, contact the reseller and ask them to open a Microsoft support ticket on behalf of the tenant.
   • As an alternative path to reach support if portal access is not possible, a new temporary Microsoft 365 trial tenant can be created and used only to open a support ticket, clearly stating that the problem is lockout from a different existing tenant where you are the admin.
4. If the issue is specifically with Teams access after sign-in
   • When Teams shows a sign-in banner and blocks chats/meetings until re-authentication:
     1. Click the banner or sign-in button in Teams and complete MFA.
     2. If no window appears, quit and restart Teams, or use the system tray icon to trigger sign-in.
     3. Ensure any required VPN or corporate network is connected before launching Teams.
     4. If the banner persists after successful sign-in, contact the organization’s IT admin.

If none of the above options are available and there is no other admin, the only supported resolution is to work with Microsoft support / Data Protection team to verify identity and reset MFA for the tenant.

References:

• Why am I having trouble signing in to Microsoft Teams?
• Common problems with two-step verification for a work or school account
• Restore your access to Microsoft Teams
• I need to reset my mfa methods - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A