Subject: Urgent – MFA Locked Global Admin – Developer Subscription

Please note that this is a user-to-user support forum. Moderators, contributors including external Microsoft employees cannot directly intervene in Microsoft product features or access back-end systems. Our role is limited to providing technical guidance on reported issues, requests, or ideas.

Hi @ifix Asia

From the details you described, I understand that you have lost the phone hosting your Microsoft Authenticator app and are now locked out of your sole admin account for your Developer E5 tenant.

In this situation, there are two official paths you can take to regain access to the tenant:

1.Please visit the following page and reach out to phone number via: Customer service phone numbers - Microsoft Support

From what I know, you will need to get past the initial AI system to reach the live support team. You can refer to the guide below for tips on how to get through more easily:

2.If method 1 is not working, please follow this link to create a trial tenant: https://www.microsoft.com/en-us/microsoft-365/business/microsoft-365-business-basic?msockid=3eb6980b5c6860e63a588d0c5d1761d6 - after that you will be able to access to Microsoft 365 Admin Center to raise the ticket

Assuming that you have already created an account after registering a free trial and you can go to Microsoft 365 admin center and click "Help & support" icon to raise your ticket. The agent will be able to create a ticket for you under the affected tenant and then transfer this ticket to Data Protection team who could help you to regain access.     

Please mention that you are raising ticket on behalf of the affected tenant that you do not have access to. The support team will help you to create ticket on the affected tenant then later on the Microsoft Data Protection team will assist you.

Note: This process will take more time than usual (7-14 working days) for your account to get access again as Data Protection is always overwhelmed with the number of tickets. As I am forum moderator, I do not have access to Microsoft internal system to assist or push this process to be quicker.

On the other hand, if you do create the trial and it resolves the issue, please remember to cancel the subscription afterward to avoid any related charges. 

I hope my information is helpful. Please give me any updates once you get this resolved.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".  

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

For a Microsoft 365 Developer E5 tenant where the only Global Administrator is locked out by MFA and no alternative methods are configured, the issue is treated as a tenant lockout and must be handled by Microsoft Support/Data Protection. Forum moderators or documentation-based steps cannot directly disable MFA or reset the admin’s methods in this scenario.

Use the following approach:

1. Confirm there is no other Global Admin
   If there were another Global Administrator, that admin could:
   • Sign in to the Microsoft Entra admin center (https://entra.microsoft.com).
   • Go to Users > All users.
   • Select the locked-out admin account.
   • Open Authentication methods.
   • Choose Require re-register multifactor authentication so the admin can set up MFA again at next sign-in.
   Since the tenant has only one Global Admin, this option is not available and the case is a tenant lockout.
2. Engage Microsoft Support/Data Protection team
   For single-admin tenant lockouts, Microsoft’s Data Protection team has specific tools and processes to verify identity and restore access. The path is:
   • Call Microsoft support using the appropriate Customer service phone numbers - Microsoft Support for the region.
   • When interacting with the automated system or agent, clearly state:
     • The problem is with Authenticator / MFA.
     • The product is Office 365 / Microsoft 365 for business (Developer E5 tenant).
     • The account is a company/organization account, not personal.
     • Confirm being the only administrator on the tenant and that MFA is blocking access.
   • Request that a service request be opened and escalated to the Data Protection / Tenant Recovery team for MFA reset / admin recovery.
   Expect to be asked for verification of identity and proof of ownership of the tenant and subscription.
3. If the subscription was obtained via a partner/reseller
   If the Developer tenant or any associated business subscription is tied to a partner/reseller, and the locked-out admin cannot open a service request:
   • Contact the partner’s support organization and ask them to open a Microsoft support ticket on behalf of the tenant for admin locked out due to MFA (tenant lockout).
4. Optional: Use a temporary trial tenant only to contact support
   If direct phone support is difficult to reach, one documented workaround is:
   • Create a new, separate Microsoft 365 trial tenant (this does not give access to the locked tenant’s data).
   • In that new tenant, go to Microsoft 365 Admin Center > Support > Help & support and open a ticket.
   • In the ticket, clearly state that the issue concerns a different existing tenant where the only Global Admin is locked out by MFA, and provide:
     • The admin UPN of the locked tenant.
     • The tenant domain.
     • Error messages seen during sign-in/MFA.
     • Confirmation that this is a single-admin tenant lockout.
   • Work with support as they route the case to the Data Protection team.
5. What cannot be done from documentation alone
   • MFA cannot be disabled, nor can the admin’s MFA methods be reset, without either:
     • Another Global/Privileged admin in the same tenant, or
     • Direct intervention by Microsoft Support/Data Protection after identity verification.
   • Self-service password reset or normal MFA re-registration flows will not work when the only admin is blocked by MFA and no alternative methods exist.

Until Microsoft Support/Data Protection completes verification and resets MFA/administrator access, there is no supported way to bypass or disable MFA for the Global Admin account.

References:

• Preventing tenant lockouts
• Mandatory multifactor authentication for Azure and admin portals
• Common problems with two-step verification for a work or school account
• Global Admin Locked out - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• I need to reset my mfa methods - Microsoft Q&A
• Use a screen reader to set up and troubleshoot multifactor authentication
• You don't receive a text or voice call that contains the verification code for Microsoft Entra multifactor authentication