Forum Discussion

Rising Flight's avatar
Rising Flight
Brass Contributor
Aug 12, 2018

unable to connect to Azure AD

How to connect to Azure AD with MFA enabled. We are using exchange hybrid environment. we have enabled MFA few days back.

when i login to Windows Azure Active Directory Module for Windows PowerShell
when i use the below syntax

Connect-MsolService

Connect-MsolService : This account is blocked. Contact your Tenant administrator.
At line:1 char:1
+ Connect-MsolService
+ ~~~~~~~~~~~~~~~~~~~
    + CategoryInfo         : OperationStopped: (:) [Connect-MsolService], MicrosoftOnlineExc
   eption
    + FullyQualifiedErrorId : 0x80048823,Microsoft.Online.Administration.Automation.ConnectMs
   olService

------------------------------------------------

i have even connected to exchange online using MFA and typed the command Connect-MsolService, i am getting the same error

experts help me

  • Drop to Powershell and do an update-module -name MSOnline this will update you to latest V1 AAD Powershell module. See if that works.
  • Drop to Powershell and do an update-module -name MSOnline this will update you to latest V1 AAD Powershell module. See if that works.
    • Akshansh285's avatar
      Akshansh285
      Copper Contributor

      I am facing the same issue.. I tried to update the module but it did not work for me.

      Error Message :

      Connect-MsolService : This account is blocked. Contact your Tenant administrator.
      At line:1 char:1
      + Connect-MsolService
      + ~~~~~~~~~~~~~~~~~~~
      + CategoryInfo : OperationStopped: (:) [Connect-MsolService], MicrosoftOnlineException
      + FullyQualifiedErrorId : 0x80048823,Microsoft.Online.Administration.Automation.ConnectMsolService

  • You mention that the account was MFA enabled a few days ago but have you tried to sign into the Azure admin portal since? It could be that the account hasn’t went through the enrollment process after you enabled MFA.
    • Nestori Syynimaa's avatar
      Nestori Syynimaa
      MVP

      Same thoughts, seems that you have not registered your second authentication method yet.

Share

Resources