SOLVED

Suspend all users

%3CLINGO-SUB%20id%3D%22lingo-sub-2817809%22%20slang%3D%22en-US%22%3ESuspend%20all%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2817809%22%20slang%3D%22en-US%22%3E%3CP%3ECan%20we%26nbsp%3B%20suspend%20all%20the%20IDs%20within%2030%20mins%2C%20or%20in%20specific%20duration%26nbsp%3B%20in%20the%20event%20of%20cyber%20emergency.%20How%20can%20I%20do%20in%20Azure%20AD%20.%20please%20note%20its%20not%20deletion%20of%20user%20temporary%20block%20them%20in%20the%20event%20of%20emergency%20for%20a%20certain%20duration%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2817809%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIdentity%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2818750%22%20slang%3D%22en-US%22%3ERe%3A%20Suspend%20all%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2818750%22%20slang%3D%22en-US%22%3EDisable%20the%20account%20via%20the%20admin%20portal%2FPowerShell%2FGraph%2C%20and%20revoke%20their%20refresh%20tokens.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2820688%22%20slang%3D%22en-US%22%3ERe%3A%20Suspend%20all%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2820688%22%20slang%3D%22en-US%22%3ECan%20I%20do%20the%20same%20for%20all%20the%20user%20at%20one%20go%20%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2820839%22%20slang%3D%22en-US%22%3ERe%3A%20Suspend%20all%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2820839%22%20slang%3D%22en-US%22%3ESure%2C%20that's%20what%20PowerShell%20is%20for%2C%20you%20can%20script%20it%20to%20go%20over%20all%20users%20in%20bulk.%3C%2FLINGO-BODY%3E
Contributor

Can we  suspend all the IDs within 30 mins, or in specific duration  in the event of cyber emergency. How can I do in Azure AD . please note its not deletion of user temporary block them in the event of emergency for a certain duration 

4 Replies
best response confirmed by Chandrasekhar_Arya (Contributor)
Solution
Disable the account via the admin portal/PowerShell/Graph, and revoke their refresh tokens.
Can I do the same for all the user at one go ?
Sure, that's what PowerShell is for, you can script it to go over all users in bulk.
Whether all the request will complete within 30 mins? for example i need to suspend 100 IDs on 1000 servers (i.e. 100*1000 requests) will it complete within 30 mins?