View and unblock users that are blocked by MFA using Powershell

Compulinx 

To view and unblock users who have been blocked by Multi-Factor Authentication (MFA) using PowerShell, you can use Microsoft's Azure Active Directory PowerShell module. Below are the steps to achieve this:

View Blocked Users

1. Install AzureAD Module: If you haven't installed the AzureAD module yet, you can install it by running the following command in PowerShell as an administrator:

   Install-Module -Name AzureAD

2. Connect to Azure AD: Connect to your Azure AD by running:

   Connect-AzureAD
   

3. List Blocked Users: Run the following command to list all blocked users:

   Get-AzureADUser -All $true | Where-Object {$_.StrongAuthenticationDetail.State -eq "Blocked"}

Unblock Users

To unblock a specific user, you can use the following command:

Set-AzureADUser -ObjectId <UserObjectId> -StrongAuthenticationDetail @{State="Enabled"}

Replace <UserObjectId> with the Object ID of the user you want to unblock.

Using Microsoft Graph API

If you prefer using Microsoft Graph API to achieve the same, you can make a REST call to the Graph API. Here's an example using PowerShell:

$accessToken = "YOUR_ACCESS_TOKEN"
$headers = @{
    "Authorization" = "Bearer $accessToken"
    "Content-Type" = "application/json"
}

$blockedUsersEndpoint = "https://graph.microsoft.com/v1.0/reports/getMfaDetail"
$blockedUsers = Invoke-RestMethod -Uri $blockedUsersEndpoint -Headers $headers -Method Get

$blockedUsers.value | Where-Object {$_.state -eq "Blocked"} | Select-Object UserPrincipalName

Replace YOUR_ACCESS_TOKEN with your actual access token. You'll need to authenticate and obtain this token beforehand.

Note

Make sure you have the necessary permissions to view and manage MFA settings for users in your Azure AD tenant. Always be https://github.com/heboh/belajarRmudah when making changes to user accounts to avoid unintended consequences.