Hi @WM
Welcome to Microsoft Q&A forum.
The error code 399287 typically indicates that your multi-factor authentication (MFA) method has been blocked due to a bad reputation associated with the phone number you use for verification.
To better assist you, could you please clarify the following:
- Have you previously set up the Microsoft Authenticator app on any device for this account, or is this your first time trying to sign in?
- If so, are you currently using the same device where you originally registered the Authenticator app? Have you recently switched to a new device?
Scenario 1: If you're a user or there's another available administrator beside you.
When your company enforces multi-factor authentication (MFA) and only allows verification through the Microsoft Authenticator app, the system will not display other options such as SMS, email, or phone call unless those methods have been configured by your administrator. That’s likely why you're being prompted exclusively for the Authenticator app.
If you haven’t installed the app yet, you can follow this official guide to get started: How to add your accounts to Microsoft Authenticator - Microsoft Support
You can also refer to this article for instructions on signing in using the app: Sign in using Microsoft Authenticator - Microsoft Support
If you need further assistance, you can reach out to your IT administrator and share the steps outlined in the article Manage user authentication methods for Microsoft Entra multifactor authentication. This will help them assist you in resetting your MFA settings and restoring access to your account.

Once this is done, you’ll be prompted to set up MFA again on your new device during your next sign-in.
Scenario 2: If you are the sole Global Administrator on the tenant, please follow the steps outlined below to proceed with account recovery and regain access.
Option 1: Contact Microsoft Data Protection Support by Phone (Primary Method)
To regain access to your admin account as you can't access the Admin Portal, you can try reaching out to our Global Customer Service phone to raise a request for resetting your authentication method here: Customer service phone numbers - Microsoft Support. During the call, request to speak to an agent, and share with them every detail related to your query and also mention that you are the only admin lost access to your account. This should allow you to contact the appropriate team so you can solve this incident as soon as possible.
Here are some tips and an example of a prompt to help you navigate the IVR more effectively:
- In some countries, it is an automated conversation like:
- IVR: What kind of problem are you concerned about?
- You: Authenticator.
- IVR: What kind of product do you use?
- You: Office 365 for business.
- IVR confirmation: education or company account?
- You: For companies
- IVR: Are you an administrator?
- You: Yes.
- IVR: Do you have another administrator in your organization?
- You: No.
- IVR: Do you need a... Service request?
- You: Yes. I need to create a ticket. Please send me direct to the Data Protection Team.
Option 2: Create a Temporary Account (Trial Tenant) to Submit a Support Ticket (Alternative Method)
If you still cannot reach to a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription. This would allow you to create a new tenant following the prompts provided. To set up a new tenant, please follow these steps:
Visit Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.
Follow the guided setup process to create a new account for a new tenant.
Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues
In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team.
Ticket Support: In the Microsoft 365 Admin Center > Support > Help & Support. You can raise support ticket at https://admin.microsoft.com/#/support/requests
Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.
I hope this helps you regain access to your account quickly. I'm glad to assist and truly hope the information provided has been useful. Please feel free to reach out anytime if you need further assistance. If you find my post helpful, kindly consider marking it as the accepted answer. Doing so can assist others in the community who may have similar questions in finding solutions more quickly. Thank you for your kindness and contributions to the forum.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.