Fix Microsoft Authenticator Notifications and Error Code 99287
Question details
The user needs to troubleshoot Microsoft Authenticator notification failures and resolve error codes 99287 or 399287 to regain access to a Microsoft 365 administrator account.

- Product
- Microsoft Authenticator
- Device & OS
- not provided
- Scenario
- Attempting to sign in to a Microsoft 365 administrator account but failing because the MFA notifications are not arriving or are generating a specific error code.
- Observed behavior
- Authenticator notifications fail to prompt, or SMS verification fails with error code 99287 or 399287, preventing login.
Do not remove the account from your Microsoft Authenticator app or uninstall the application. Removing your only registered authentication method will make account recovery significantly more difficult.
Request an MFA Reset from Another Administrator
If you are part of a work or school organization with multiple administrators, this is the fastest way to regain access.
Microsoft 365 allows global administrators to manage and reset authentication methods for other users, including fellow administrators. This bypasses the blocked Authenticator app and allows you to register a new device or authentication method.
Reach out to another global administrator within your organization's IT department.
Ask them to sign in to the Microsoft Entra admin center (formerly Azure AD) or the Microsoft 365 Admin Center.
Have the administrator search for your user profile in the 'Users' directory and select 'Authentication methods'.
Ask them to click 'Require re-register MFA'. Once this is done, your next sign-in attempt will prompt you to set up Microsoft Authenticator from scratch, bypassing the previous error.

Contact Microsoft Data Protection Support
If you are the sole administrator for your Microsoft 365 tenant and are locked out, you must contact Microsoft Support directly for account recovery.
Keep Working During Account Recovery with WPS Office
Being locked out of your Microsoft 365 account due to MFA errors shouldn't stop your productivity. While you wait for administrator account recovery, WPS Office offers a free, lightweight, and highly compatible alternative to keep you working on your local files without requiring complex logins.
- 1. Download the Installer: Visit the WPS Office website and download the free version for your operating system.
- 2. Install WPS Office: Run the setup file. The installation is lightweight and finishes in minutes.
- 3. Open Your Files: Double-click any existing .docx, .xlsx, or .pptx file to open and edit it immediately without needing a cloud login.

Frequently Asked Questions
What does error code 399287 mean in Microsoft Authenticator?
Error code 399287 typically indicates that your phone number has been flagged by Microsoft's phone reputation system. This security measure prevents the system from sending SMS or voice verification codes to that specific number, blocking the MFA process.
Should I uninstall the Microsoft Authenticator app to fix error 99287?
No. Uninstalling the app or removing the account from Authenticator will delete the existing security tokens on your device. If this is your only authentication method, removing it will make it much harder to recover your account.
How long does Microsoft administrator account recovery take?
If you are the sole administrator and have to contact the Microsoft Data Protection team, the recovery process can take anywhere from a few days to over a week. This delay is due to the strict security checks required to verify your identity and prevent unauthorized access to your tenant.
Why am I not receiving MFA notifications on my phone?
Notification failures can happen due to network connectivity issues, battery optimization settings on your phone putting the app to sleep, or corrupted tokens in the app. Always check if you have an active internet connection or try generating an offline verification code from the app instead.




