Microsoft 365 Account Recovery for a Small Business

Recover a Microsoft 365 business account through documented administrator and Microsoft support routes while protecting tenant ownership, evidence and other privileged accounts.

Step-by-step checks

1. Identify the account type

Confirm whether the problem affects a work account, a personal Microsoft account or the whole tenant. The recovery and administrator routes are different.

2. Use a trusted device and official address

Open Microsoft 365 administration or Microsoft support directly. Do not follow unsolicited recovery links or give a caller a verification code.

3. Check another administrator

A second authorised global administrator may be able to reset access, review sign-in events and remove an attacker without waiting for individual recovery.

4. Preserve evidence

Record suspicious sign-ins, rule changes, consent grants, devices and messages before cleanup. Avoid forwarding sensitive logs through an affected mailbox.

5. Remove attacker persistence

After access is restored, review authentication methods, sessions, forwarding, inbox rules, application consent, administrator roles and recovery details.

6. Protect connected systems

Rotate reused or exposed credentials and review domain, finance, backup and third-party systems that trust the affected Microsoft identity.

When to stop

If tenant administrator control, payment information or sensitive business data may be compromised, isolate the incident and contact Microsoft plus appropriate security, financial or legal support.

What to tell an expert

Share the device model, operating system, exact symptom or error, when it began, what changed beforehand, and which checks you completed. Do not send passwords, one-time codes, encryption recovery keys, or unnecessary personal files.

Official reference

This Supportia guide was prepared with current official guidance as a factual baseline. Interface names can still vary by device and version. Open the official reference.