Forum Discussion

Iron Contributor

Feb 09, 2017

Secure Score - User alternate contact info is completed for all users

"We found that you have 5 accounts that do not have completed information." It says it wants an alternate email address or cell phone number. When I run the powershell command Get-MSOLUser to f...

Denise Child

Iron Contributor

Feb 10, 2017

Here is the quick command I used with AAD Powershell just to see if I could find something.

Get-MsolUser -All | Sort DisplayName | Select-Object FirstName,LastName,DisplayName,UserPrincipalName,IsLicensed,*AlternateEmailAddresses,*MobilePhone | out-gridview

Not sure what else to look for since it doesn't specify.

Denise

VasilMichev

MVP

Feb 10, 2017

I know which attributes you are referring to, however the ones actually used by SSPR/MFA might be the authenticationphone/authentication that even admins cannot see (via PowerShell). Check here for more info: https://blogs.technet.microsoft.com/enterprisemobility/2014/12/03/improved-privacy-for-azure-ad-mfa-and-password-reset-phone-numbers/

Denise Child
Iron Contributor
Feb 10, 2017
Thank you Vasil.

We do not have AAD Premium but I was able to view my account and see that the alternate email does not match what I set up in O365.
I am not able to update the alternate email in AAD to match O365.

However, I am going to see if the Secure Score number changes to 4 from 5 because I did not have an alternate phone number until I added it just now. I only had an alternate email listed.

If Secure Score does change to 4 then I will know the other 4 Admins to ask to verify their settings. Some use MFA and some SSPR.
- BrandonKoeller
  Microsoft
  Feb 10, 2017
  Hey Denise,
  
  Thanks for reaching out and sorry for the trouble. I suspect this may be an issue with the telemetry stream from AAD. Engineering team is investigating.
  
  Thanks!
  
  Brandon Koeller