Recovering Apple VPP/School login that MSP -2 put 2FA on

[pete]

We suspect a previous MSP for a school we've taken over turned on SMS-based 2FA on the Apple VPP / Apple School Manager account.

 

We have the credentials, but only the last two digits of the number associated. Last MSP says it's not their tech's phone and no-one at the school has a number ending in those digits so we're chasing second-to-last MSP.

 

If I don't get anywhere via the MSP, has anyone had success in convincing Apple to let you back into an account (we have user credentials and can prove ownership of associated devices) without knowing the Recovery Key?

[willtech]

if the device is trusted to the account you could try this way: Get a code from Settings on your trusted device

 

Other than that: How to use account recovery when you can’t reset your Apple ID password

Edited November 10, 2020 by willtech

[Brimstone]

We suspect a previous MSP for a school we've taken over turned on SMS-based 2FA on the Apple VPP / Apple School Manager account.

 

We have the credentials, but only the last two digits of the number associated. Last MSP says it's not their tech's phone and no-one at the school has a number ending in those digits so we're chasing second-to-last MSP.

 

If I don't get anywhere via the MSP, has anyone had success in convincing Apple to let you back into an account (we have user credentials and can prove ownership of associated devices) without knowing the Recovery Key?

ASM requires 2FA from the start it can not be turned on later.....

 

You can try logging into appleid.apple.com if you have both user name and password and edit the number associated

[pete]

It's a VPP account with two-step authentication enabled.

 

Any logins to appleid.apple.com (or recovery pages for the same) require a trusted device, access to the phone number used to setup two-step authentication or the recovery key.

 

We have none of those things at present.

[Brimstone]

It's a VPP account with two-step authentication enabled.

 

Any logins to appleid.apple.com (or recovery pages for the same) require a trusted device, access to the phone number used to setup two-step authentication or the recovery key.

 

We have none of those things at present.

I can only suggest calling Apple support then...

[pete]

Yeah, on with that now while waiting on a response from the MSP. Enterprise team have terrible hold music (and no option for silence).

[pete]

So, fingers crossed it appears if you have the original enrollment ID and can present a valid headteacher, chances are good you can get it unlocked.

 

(The enrollment ID is because searching for school name or associated Apple ID on their system can be flaky, at least when I called).