Google 2-Step Verification Login Blocked

Instructions for retrieving backup recovery codes for an individual who is locked out of their Gmail account as a result of 2-step verification not being set up, or a failed attempt.

Issue

User was locked out of Gmail account with error: "Your sign in settings do not meet your organization's 2-step verification settings, contact admin for more info."

Environment

• Google Workspace

Process

In Google Admin: 

1. Click Users
2. Click the user you wish to gain access
3. Click Security
4. Click 2-step verification
5. Click Get Backup Verification Codes
6. Copy out the codes
7. Copy all to a text/Word/editor (you may need one shortly)

At this point the user will either be able to log in or will need a Backup Verification Code. Either way, they will be forced to setup 2-Step Verification before being let into their account.

Alternative Method in Google Admin:

1. Click Users
2. Click the user you wish to gain access
3. Click Groups
4. Remove the user from the corresponding Google Group for 2-Step Verification ex: Group FGHI
5. Have the user go through the steps for setting up 2-Step Verification
6. Once they have setup 2-Step Verification, click Add user to groups and look up their 2FA group to add it back