How to recover admin access to company systems after an acquisition

The short answer: get a company-controlled admin in place first

The quickest way to recover admin access after an acquisition is the cooperative route: the seller, the departed IT person or the outgoing managed service provider signs in once and adds two admin accounts that the company controls. When that person cannot or will not help, each vendor has its own recovery process, and most of them ask you to prove you control the company's domain or billing account.

The order matters because whoever holds the top admin role (the global admin in Microsoft 365, the super admin in Google Workspace, the primary admin in most accounting and field service tools) can change retention settings, delete mailboxes, cancel subscriptions and lock everyone else out. Until the company holds that role itself, it does not fully control its own records.

Who usually holds the only admin login

In owner-run companies, admin rights tend to accumulate with whoever set each tool up, often years ago.

What to have in hand before you start

Recovery goes faster when the paperwork is ready, because vendors and registrars will ask who you are and why the account is yours.

• Closing documents showing which entity you bought and whether it was a stock or an asset purchase; after an asset deal, some accounts may still sit in the seller's entity name
• Access to the domain registrar and DNS, or a clear path to it
• Bank and card statements for the last 12 months, which show every subscription the company pays for
• A company email address on a domain you control, never a personal mailbox
• The purchase agreement's transition, cooperation and further-assurances clauses
• Contact details for the seller, former IT staff and the outgoing MSP

Step-by-step: regaining control system by system

1. List every system from the money trail. Go through card statements, the accounts payable vendor list and expense reports, then rank systems by how much damage a lost login could cause: domain registrar and DNS first, then email and identity, then finance (accounting, payroll, bank portals), then files, then line-of-business tools such as CRM, ERP and field service.
2. Secure the domain registrar. Many email tenant recoveries depend on proving domain control, so whoever holds the registrar account holds the master key. If it sits in the seller's personal account, ask for a transfer to a company account now.
3. Send a written request to the seller or MSP. Ask them to add two named company admins to each system, transfer owner or primary admin roles, and hand over recovery codes and any hardware security keys. Cite the purchase agreement's cooperation clause and set a short deadline.
4. Use vendor recovery where cooperation fails. Microsoft and Google both publish admin recovery processes for tenants with no reachable admin, and both can involve proving control of the domain, for example by adding a DNS record. Follow the vendor's current support article, because the steps change.
5. Handle finance tools with an officer's request. Banks add signers through their own forms and corporate resolutions. Accounting and payroll providers typically let the current primary admin transfer that role, and some will verify an officer of the company when the old admin is gone.
6. Work through line-of-business tools. Vendors of CRM, ERP and field service software generally have a process for reassigning the account owner, usually on a request from a company officer with proof of billing.
7. Lock it down. Create two break-glass admin accounts held by the company, enforce multi-factor sign-in, record every admin in a register, and only then remove the seller's and former employees' admin roles.
8. Prove you can get records out. Run a test export from each core system: one mailbox, one shared drive, a multi-year general ledger report, a CRM export. Check retention settings before deprovisioning anyone, because on many platforms deleting a user also deletes that user's mailbox and files after a short grace period.

Common mistakes that cost history

Illustrative example: a distributor whose only admin moved away

Illustrative and fictional: a search fund buys Harbor Line Supply, a fictional 70-person industrial supplies distributor. In week one the new CEO finds that the founder's nephew, who left two years earlier, is the only global admin, the accounting file is owned by the founder's personal email, and the domain sits in the nephew's registrar account.

The CEO sends one written request citing the purchase agreement's cooperation clause. The nephew adds two company admins and transfers the registrar account within days, and the founder hands over the accounting owner role at the next transition meeting. Before cutting licenses, the new controller sees that former staff mailboxes go back nine years and archives them instead of deleting them. That history stays available for audits, customer disputes and any later decision about the company's records.

Why admin access matters if the company ever licenses its data

Admin access is a precondition for almost any later use of the company's records. One of SourceX's red flags is a company where nobody can export the data; another is a company that has deleted its archives. A company in either position cannot complete a data inventory, so it cannot be assessed.

Once access is secure, an acquired business with 50+ full-time employees at peak (contractors excluded), several years of documented operations, rights to its records and an authorized sponsor can be checked against who qualifies, and the page on what happens after a company applies walks through what follows. Searchers, holdco operators and the MSPs who help them recover access are often first to see which acquired companies have deep, intact histories. Where a parent runs IT centrally, holding company IT shared services explains the extra step of separating control from ownership.

Next step

If you help acquirers sort out access and records, the network opportunity finder helps you work out which companies in your circle are worth a look, and you can register as a partner to introduce the ones that fit. Owners can apply directly at sourcex.si/apply.