Connect-MsolService Getting a list of all users and their MFA Status Make sure you are connected before you run the script. You need to have the MsolService module installed to use this script. Tip Add this script to your PowerShell Profile so you can easily check the MFA Status of your users. If this parameter is set, then we know that the user is using MFA. This parameter will list all the strong authentication methods that a user is using.

Get-MsolUser returns all the user details, including the parameter StrongAuthenticationMethods. The basis for the script is the Get-MsolUser cmdlet, which gets the users from the Azure Active Directory. With PowerShell, we can easily get the MFA Status of all our Office 365 users.

Make sure you check it out! Get the MFA Status with PowerShell It will get a bit more information then this script. Note I have also created this script based on Microsoft Graph.

Get only the licensed and enabled usersĪt the end of the article, you will find the complete script.

Get all the users that don’t have MFA enabled.

List configured MFA types for each user.

I have created a script that can do a couple of things to check and report the MFA status of your users: With PowerShell on the other hand, we can easily get the MFA Status of all users and create an Excel list with all the details we need.

You could also use the built-in overview in the Admin Center, but that would be really time-consuming. To make sure that our users have configured MFA we are going to use PowerShell to get and export the MFA Status. MFA is a really important security measure to protect your tenant. One of the reports that I really miss in the Microsoft 365 Admin Center is a clear overview of the MFA status of each user.

Microsoft 365 mfa