M365 admin access

[donkeymusic]

Good afternoon,

 

I am attempting to access our old tenancy and my admin account has MFA assigned with a number I do not recognise, this may be a historical number from before I joined the school.

 

I need to know if there is a way to gain access so that it can be changed and we can migrate our users to a tenancy.

 

As far a I am aware, MFA was not set up for this site, as i have had access previously, just not sure exactly when they MFA was assigned.

 

Am i right in thinking that Microsoft enforced MFA for all site admins?

 

Thank you for any support offered.

[mavhc]

They will enforce it, but not like that, do you have a list of admin users? maybe you've been hacked

[donkeymusic]

I dont, inherited network.

 

the only admin details i had were for the main account

[pete]

If you've lost all admin access and there isn't a break-glass account in the finance safe, you'll need to contact Microsoft and prove your organisation is the owner of the tenant.

 

Pull together all the information you have, get a cup of tea and be prepared to spend a lot of time on the phone.

 

If you bought Microsoft licensing for the tenant through a reseller they may be able to provide a contact or two to speed the process along.

 

Have you asked HR if they recognise the phone number associated with it? Was it a previous employee's personal phone (staff leavers in the MIS will still have phones attached)? Did they leave on good terms? If they did, get the headteacher (who they'll recognise) to ring them?

[dapaulio]

Depending on the relationship with reseller it maybe they have partnership access.

 

Probably unlikely if all they were was the reseller but you never know. As an msp we are the reseller and admin of the tenancy so we have partner admin

 

If they do they may be able to create you an admin user depending on their granulated access

[bigstan48]

I do vaguely remember there is a way around this as when I joined a school and no one had admin rights to the tenancy. My support company helped with this and they used Power BI and a combination of sending a .txt file on the school DNS. I can't remember the exact procedure but it can be done.