Locked Out of Global Admin Account in Azure AD – Case 2507150040004890

Peter Ciprian 0 Reputation points
2025-08-11T14:44:49.35+00:00

There are two Microsoft 365/Azure AD directories under the account.

Directory 1 – Two Global Admin accounts are assigned. MFA has been successfully re-added here, and access is working.

Directory 2 – Only one Global Admin account is assigned, which is completely inaccessible due to a Microsoft Authenticator MFA lockout. The device with the Authenticator app is no longer accessible, and no backup authentication methods were configured.

An open case with Microsoft (Case # 2507150040004890) was created on July 15, 2025, but no response has been received. The inability to access Directory 2 is causing severe business impact as no one can manage users, services, or security settings in that tenant.

Immediate escalation of this case to the Data Protection Team is requested for an MFA reset and restoration of access to Directory 2. Any advice or escalation to the appropriate team would be greatly appreciated.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Killian-N 1,365 Reputation points Microsoft External Staff Moderator
    2025-08-11T16:50:42.0966667+00:00

    Hi @Peter Ciprian,

    Thank you for sharing the details of your situation. I’m really sorry to hear about the ongoing access issues and the lack of response on your support case, it’s completely understandable how disruptive this must be, especially given the business impact.

    I’ve internal reviewed the case (#2507150040004890) and it appears it was unfortunately routed to the wrong queue, which is why no support agent has been assigned. The Data Protection team is the correct team to handle only Global Administrator MFA lockouts and account recovery, but this case didn’t reach them.

    To help move things forward quickly, I recommend creating a new support case with the title: “Only Global Administrator can’t access due to Authenticator app” This will ensure its routed directly to the Data Protection team and not misdirected again.

    I’ve also sent you a private message with step-by-step guidance on how to create the new case. As a forum moderator, while I can’t escalate cases directly from here, I’ll do everything I can to support you through the right channels.

    Thanks again for your patience, and I’m here if you need help with anything else.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.