How to recover a 365 Admin account from a disgruntled MSP?

Posted by mspgrunt@reddit | sysadmin | View on Reddit | 6 comments

Hello r/sysadmin I myself am an MSP grunt, and we got a new client but their previous MSP provider has given us the 'credentials' to manage their accounts but none of them work. We don't have any access to their 365 admin or their registrar for domain records, but we are able to thankfully get into their AD so we can do *some* management. I've made a ticket with MS support and that's going about as well as you can expect. I'm just wondering if anyone has dealt with something like this before and what I can do? Every option to me at the moment looks like a dead-end.

Reply to Post

6 Comments

[-]

RCTID1975@reddit

First, make sure the client is fully up to date and completely understands the situation and what's going on. Then ask them if their legal team or yours should handle this. 99% of the time when a lawyer is involved, these issues miraculously get solved. Then, once this is solved, set this up the right way so everything is in your client's name. Not only is this the way it should be done, but it'll go a long way to building good rapport by preventing this from ever happening again.

[-]

Mehere_64@reddit

Speak with your client regarding this letting them know what is taking place at this time to get the domain registrar information from the prior MSP. It could be a battle there depending on who "owns" the domain. Once your client and you get access to control the domain you can go prove ownership to MS which of course is a lengthy battle as well.

[-]

Marrsvolta@reddit

Why don’t you have access to the registrar? You need to fix that issue first.

[-]

NH_shitbags@reddit

Client might wish to seek legal remedy. The situation indicates the previous MSP is either grossly incompetent or is conducting malicious behavior against the client.

[-]

notapplemaxwindows@reddit

If you can access a domain controller, are any of the accounts with administrative roles in Microsoft Entra, synchronised from on-premesis AD?

[-]

ra12121212@reddit

If you can't get into the registrar you've excluded half your options. Is there a reason you can't get into that and are you working on it? You may be able to follow the external takeover section here perhaps, but I'm newer to M365 and Azure so maybe this doesn't apply. https://learn.microsoft.com/en-us/entra/identity/users/domains-admin-takeover