'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Recover Microsoft 365 Admin Access When All Global Admins Leave
Question details
The user needs to regain administrative access to their Microsoft 365 tenant after all global administrators have left the organization.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- The business owner or domain holder is locked out of the Microsoft 365 admin center because the only employees with Global Administrator privileges have departed the company.
- Observed behavior
- Loss of global admin access prevents the management of user accounts, subscriptions, and security settings, requiring an official tenant takeover process.
Ensure you have login credentials for your domain's DNS hosting provider, as well as official business registration details and billing information, which Microsoft will require to verify your domain ownership.
Initiate a Microsoft 365 Tenant Takeover via Support
Contact Microsoft Support to verify your business domain ownership and request the promotion of a new global administrator.
When a Microsoft 365 tenant is left without any active global administrators, no internal user can elevate privileges. The only resolution is to go through Microsoft's Data Protection team for an administrator recovery (also known as an unmanaged tenant takeover).
This process requires strict verification to prevent unauthorized access to your company's data.
Call the official Microsoft customer service phone numbers for your region. Alternatively, create a temporary Microsoft 365 Business Standard 1-month trial account using a different email, log into its Admin Center, and open a support ticket.
Explain to the support representative that all global administrators have left the company and you are the business owner requesting a tenant takeover or administrator recovery.
Microsoft Support will provide you with a specific TXT record. Log into your domain registrar (e.g., GoDaddy, Namecheap) and add this TXT record to your DNS settings to prove you own the domain.
Submit any requested documentation, which typically includes business registration documents, past Microsoft 365 billing invoices, and your personal identity verification.
Switch to WPS Office for Hassle-Free Business Document Management
While you wait for Microsoft to process your admin recovery, prevent business downtime by utilizing WPS Office. It is a powerful, lightweight, and completely free alternative that requires no complex tenant administration.
- 1. Download WPS Office: Visit the official WPS website and download the free installer for your operating system.
- 2. Install and Launch: Run the installer. The lightweight setup takes only a few minutes and does not require complex admin configurations.
- 3. Open Existing Microsoft Documents: Simply double-click your existing Word, Excel, or PowerPoint files to open and edit them seamlessly in WPS Office.
Frequently Asked Questions
Can an existing standard user be promoted to global admin without contacting support?
No. If there are absolutely no global administrators left in the tenant, an existing standard user cannot elevate their own privileges. Only Microsoft Support can intervene to assign the global admin role after verifying domain ownership.
What if I don't have access to the domain's DNS records?
To complete the tenant takeover, you must first regain access to your domain's DNS host (such as GoDaddy, Cloudflare, or Route53). Microsoft strictly requires the addition of a specific TXT or MX record to prove you control the domain.
How long does the Microsoft 365 administrator recovery process take?
The process can take anywhere from a few days to a few weeks. It depends on how quickly you can provide the required legal business documentation and DNS verification to Microsoft's Data Protection team.
