Forum Discussion

Jesper Stein's avatar
Jesper Stein
Copper Contributor
Oct 20, 2016
Solved

MFA and Powershell

Hi. I am testing MFA on some admin users. I have given the MFA admins a EMS licens so whitelisting of IPs is supported.   So I have whitelisted our office IP, and when my admin go to https://outlo...
office 365
  • BrandonKoeller's avatar
    BrandonKoeller
    Oct 24, 2016

    Hey Everyone,

    Thanks for your continued engagement. The MFA Powershell team says I can share the link with  y'all: http://aka.ms/exopspreview

    Do let us know if you have feedback.

    Thanks!

    Brandon Koeller

VasilMichev's avatar
VasilMichev
MVP
Oct 20, 2016

Yup, not supported. We should have a ADAL-enabled PowerShell module for Exchange Online soo(ish), then you will be finally able to use MFA for all admin account (that require access to ExO PowerShell).

  • Pardeep Soba's avatar
    Pardeep Soba
    Copper Contributor
    Nov 17, 2016

    hi how do you set bulk users to disbaled status from enabled? i am using the below script

     

    $users = Import-Csv 'C:\support\BulkUpdateMFASampleFile.csv'

    foreach ($user in $users)

    {

    $st = New-Object -TypeName Microsoft.Online.Administration.StrongAuthenticationRequirement

    $st.RelyingParty = "*"

    $st.State = “Disabled”

    $sta = @($st)

    Set-MsolUser -UserPrincipalName $user.Username -StrongAuthenticationRequirements $sta

    }

     

  • Dean_Gross's avatar
    Dean_Gross
    Silver Contributor
    Oct 20, 2016

    I just sat in a meeting hosted by MS and the PM stated that they are working hard on making all of the modules MFA capable. He mentioned that the EXO module with MFA was in Preview.

     

    BrandonKoeller may be able to provide some more details

    • BrandonKoeller's avatar
      BrandonKoeller
      Icon for Microsoft rankMicrosoft
      Oct 24, 2016

      Hey Everyone,

      Thanks for your continued engagement. The MFA Powershell team says I can share the link with  y'all: http://aka.ms/exopspreview

      Do let us know if you have feedback.

      Thanks!

      Brandon Koeller

      • Jan Čížek's avatar
        Jan Čížek
        Copper Contributor
        Nov 11, 2016

        Hi I got problem installing this app. When i double click on it it tells me this: 

         

        PLATFORM VERSION INFO
        Windows : 10.0.14393.0 (Win32NT)
        Common Language Runtime : 4.0.30319.42000
        System.Deployment.dll : 4.6.1586.0 built by: NETFXREL2
        clr.dll : 4.6.1586.0 built by: NETFXREL2
        dfdll.dll : 4.6.1586.0 built by: NETFXREL2
        dfshim.dll : 10.0.14393.0 (rs1_release.160715-1616)

        SOURCES
        Deployment url : file:///C:/Users/j.cizek/Downloads/Microsoft.Online.CSE.PSModule.Client.application

        IDENTITIES
        Deployment Identity : Microsoft.Online.CSE.PSModule.Client.application, Version=16.0.1509.0, Culture=neutral, PublicKeyToken=c3bce3770c238a49, processorArchitecture=msil

        APPLICATION SUMMARY
        * Installable application.
        * Trust url parameter is set.
        ERROR SUMMARY
        Below is a summary of the errors, details of these errors are listed later in the log.
        * Activation of C:\Users\j.cizek\Downloads\Microsoft.Online.CSE.PSModule.Client.application resulted in exception. Following failure messages were detected:
        + Deployment and application do not have matching security zones.

        COMPONENT STORE TRANSACTION FAILURE SUMMARY
        No transaction error was detected.

        WARNINGS
        There were no warnings during this operation.

        OPERATION PROGRESS STATUS
        * [11.11.2016 17:27:14] : Activation of C:\Users\j.cizek\Downloads\Microsoft.Online.CSE.PSModule.Client.application has started.
        * [11.11.2016 17:27:14] : Processing of deployment manifest has successfully completed.
        * [11.11.2016 17:27:14] : Installation of the application has started.

        ERROR DETAILS
        Following errors were detected during this operation.
        * [11.11.2016 17:27:14] System.Deployment.Application.InvalidDeploymentException (Zone)
        - Deployment and application do not have matching security zones.
        - Source: System.Deployment
        - Stack trace:
        at System.Deployment.Application.DownloadManager.DownloadApplicationManifest(AssemblyManifest deploymentManifest, String targetDir, Uri deploymentUri, IDownloadNotification notification, DownloadOptions options, Uri& appSourceUri, String& appManifestPath)
        at System.Deployment.Application.ApplicationActivator.DownloadApplication(SubscriptionState subState, ActivationDescription actDesc, Int64 transactionId, TempDirectory& downloadTemp)
        at System.Deployment.Application.ApplicationActivator.InstallApplication(SubscriptionState& subState, ActivationDescription actDesc)
        at System.Deployment.Application.ApplicationActivator.PerformDeploymentActivation(Uri activationUri, Boolean isShortcut, String textualSubId, String deploymentProviderUrlFromExtension, BrowserSettings browserSettings, String& errorPageUrl)
        at System.Deployment.Application.ApplicationActivator.ActivateDeploymentWorker(Object state)

        COMPONENT STORE TRANSACTION DETAILS
        No transaction information is available.

         

        Do you know how to solve this? 

    • VasilMichev's avatar
      VasilMichev
      MVP
      Oct 20, 2016

      Still private preview AFAIK, but at least we know it's coming!

      • Jesper Stein's avatar
        Jesper Stein
        Copper Contributor
        Oct 21, 2016
        Just got confirmation from a MS supporter, that it is not possible. So we must wait for the new EXO module....

Resources