This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(272, 84%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENB%3C/text%3E%3C/svg%3E)
We have been locked out of our tenant for almost 3 weeks now due to a faulty Conditional Access policy. During these 3 weeks, there have been countless conversations with a number of Microsoft support agents/technicians, none of which seemed to have an understanding of the actual issue at hand or able to resolve the issue and all ended up assigning the case to a different team or brushing me off that someone else will call me within 2-3 hours (and they never do).
We know exactly what is wrong and how to fix it. But we need the help of the Data protection team. Since this is a high impact incident and things are moving too slow via the regular support channels, we are trying to get in touch with them through this channel. We came across similar incidents on this forum and saw that they responded quickly.
Our current support case number is 2404140040001624.
PLEASE WE ARE GETTING BEYOND DESPERATE AND PLEADING FOR HELP. EVERY ADDITIONAL DAY THAT GOES BY W/O ANY SIGN OF PROGRESS IS CAUSING AN UNBELIEVABLE AMOUNT OF STRESS ON OUR ORGANIZATION.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 81%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
Hi @Nick Bobak , I did receive an update that the team is actively engaged on the incident to resolve your issue. Data Protection is working to exclude you from the policy and working on the verification.
@Marilee Turscak-MSFT that is great news. Thank you so much. I appreciate your efforts and help!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
Hi @Nick Bobak ,
I'm following up on this post since we have confirmation from the Azure Data Protection team that they were able to perform the exclusion.
Issue summary:
There was a tenant lockout due to a faulty conditional access policy.
Resolution:
We reached out to the Azure Data Protection team and they were able to exclude the Global Admin account from the policy.
Thanks for following up with us and feel free to reach out if you face any additional issues.
If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar questions.