Forum Discussion
Report on users with MFA Enabled
We are not currently enforcing MFA for all users, but have sent out instructions to allow users to self-enroll in MFA (http://aka.ms/MFASetup). Looking at the status of users who I know have enabled...
No, your users are not enabling MFA for themselves by using those URLs, That's a fact. You may have some other configuration going on.
What if I want to exclude BLOCKED users from the report?
<the sign-in status can be blocked or allowed. i want to exclude blocked users from the report
- Got it. so you just need to add a filter like this: Where-Object {$_.BlockCredential -eq $false}
the whole thing would look like something like this:
Get-MsolUser -all | Where-Object {$_.BlockCredential -eq $false} | Select-Object DisplayName,UserPrincipalName,@{N="MFA User Setup"; E={ if( $_.StrongAuthenticationMethods -ne $null){"Enabled"} else { "Disabled"}}},@{N="MFA Admin Enforced"; E={ if( $_.StrongAuthenticationRequirements.State -ne $null){ $_.StrongAuthenticationRequirements.State} else { "Disabled"}}}- this is perfect, thank you so much!!
