Locked out of my o365 global admin account

%3CLINGO-SUB%20id%3D%22lingo-sub-2011126%22%20slang%3D%22en-US%22%3ELocked%20out%20of%20my%20o365%20global%20admin%20account%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2011126%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20there%2C%3C%2FP%3E%3CP%3EToday%20I%20enabled%20MFA%20on%20my%20o365%20global%20admin%20account.%3C%2FP%3E%3CP%3EI%20have%20the%20mobile%20number%20and%20email%20address%20configured%20in%20my%20security%20profile%20also.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20I%20tried%20to%20sign%20in%20I%20was%20only%20offered%20authenticator%20app%20verification.%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20app%20is%20not%20configured%20and%20when%20I%20selected%20other%20sign%20in%20options%20I%20could%20not%20select%20call%20back%20or%20mobile%20text%26nbsp%3B%20options.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20called%20MS%20to%20explain%20the%20situation%20and%20they%20told%20me%20to%20expect%20a%20call%20from%20the%20data%20protection%20team.%3C%2FP%3E%3CP%3EIt%20has%20been%20several%20hours%20already%2C%20but%20no%20one%20has%20called%20back.%3C%2FP%3E%3CP%3ETherefore%20I%20have%20called%20back%20MS%20support%20who%20just%20sent%20another%20email%20to%20the%20data%20protection%20team%20to%20solicit%20them.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20need%20to%20do%20urgent%20administration%20work%2C%20but%26nbsp%3B%20can't%20sign%20in%20due%20to%20the%20above%20problem.%3C%2FP%3E%3CP%3EI%20find%20this%20poor%20support%20by%20microsoft.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20any%20other%20way%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2011126%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAuthentication%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2011143%22%20slang%3D%22en-US%22%3ERe%3A%20Locked%20out%20of%20my%20o365%20global%20admin%20account%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2011143%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F171035%22%20target%3D%22_blank%22%3E%40Alfred%20Buatti%3C%2FA%3E%26nbsp%3B%3CBR%20%2F%3EThis%20is%20why%20you%20always%20should%20have%20a%20%22break%20the%20glass%22%20account%20available%2C%20I%20guess%20you%20do%20not%20have%20any%20other%20account%20with%20high%20privileges%20available%3F%3CBR%20%2F%3EJust%20for%20test%2C%20open%20a%20new%20browser%20and%20run%20it%20in%20private%20mode%20and%20test%20once%20more.%20I%20guess%20that%20SMS%2FPhone%20method%20have%20been%20disabled%2C%20and%20that's%20why%20you%20can't%20use%20those%20methods.%3CBR%20%2F%3EDo%20you%20have%20a%20CSP%20partner%2C%20that%20have%20permissions%20to%20your%20tenant%3F%20They%20should%20be%20able%20to%20help%20you%20in%20that%20case.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2012072%22%20slang%3D%22en-US%22%3ERe%3A%20Locked%20out%20of%20my%20o365%20global%20admin%20account%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2012072%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F97603%22%20target%3D%22_blank%22%3E%40Pontus%20Sj%C3%A4lander%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%20Pontus%2C%3C%2FP%3E%3CP%3Ethank%20you%20for%20the%20reply.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20don't%20have%20an%20additional%20global%20admin%20account%20to%20fix%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlso%20don't%20have%20a%20CSP%20partner.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20been%20waiting%2013%20hours%20for%20a%20callback%20from%20MS%20data%20protection%20team%20and%20have%20not%20received%20it%20yet.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20client%20is%20paying%20MS%20around%20%24650%20for%20such%20terrible%20support.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi there,

Today I enabled MFA on my o365 global admin account.

I have the mobile number and email address configured in my security profile also.

 

When I tried to sign in I was only offered authenticator app verification. 

The app is not configured and when I selected other sign in options I could not select call back or mobile text  options.

 

I called MS to explain the situation and they told me to expect a call from the data protection team.

It has been several hours already, but no one has called back.

Therefore I have called back MS support who just sent another email to the data protection team to solicit them.

 

I need to do urgent administration work, but  can't sign in due to the above problem.

I find this is poor support by microsoft. 

 

Is there any other way?

 

Thanks

 

4 Replies

@Alfred Buatti 
This is why you always should have a "break the glass" account available, I guess you do not have any other account with high privileges available?
Just for test, open a new browser and run it in private mode and test once more. I guess that SMS/Phone method have been disabled, and that's why you can't use those methods.
Do you have a CSP partner, that have permissions to your tenant? They should be able to help you in that case.

 

@Pontus Själander 

 

Hi Pontus,

thank you for the reply.

 

I don't have an additional global admin account to fix this.

 

Also don't have a CSP partner.

 

I have been waiting 13 hours for a callback from MS data protection team and have not received it yet.

 

My client is paying MS around $650 for such terrible support.

 

Alright, I hope that it will get solved as soon as possible! But please, learn from this and always make sure to have an way into a tenant if miss configurstions occurs
Was the problem resolved? How long did it take?
I just did the same thing last night on my GCC High Tenant and I'm the only Global admin.