{"id":644,"date":"2024-09-10T08:36:04","date_gmt":"2024-09-09T22:36:04","guid":{"rendered":"https:\/\/www.cloudproinc.com.au\/?p=644"},"modified":"2024-09-10T08:36:07","modified_gmt":"2024-09-09T22:36:07","slug":"identify-azure-users-without-mfa-using-powershell","status":"publish","type":"post","link":"https:\/\/www.cloudproinc.com.au\/index.php\/2024\/09\/10\/identify-azure-users-without-mfa-using-powershell\/","title":{"rendered":"Identify Azure Users Without MFA Using PowerShell"},"content":{"rendered":"\n

This Microsoft Azure post will show how to Identify Azure users without MFA Using PowerShell.<\/p>\n\n\n\n\n\n\n\n

If you are a Microsoft Azure customer and recently logged into the Microsoft Azure portal, you have probably seen the notification that from October 15th, 2024, Azure will enforce MFA for all users.<\/p>\n\n\n\n

This change has no exceptions and will apply to any Azure\/Entra ID account. In the past, Microsoft enabled Security Defaults on all new tenants, which enforced MFA.<\/p>\n\n\n\n

The problem with Security Defaults is that you can easily disable the feature and log in to Azure without MFA.<\/p>\n\n\n\n

To help companies prepare for the change, Microsoft has made a few tools available to find users that do not use MFA.<\/p>\n\n\n\n

In this article, we will show you one of these tools. The following PowerShell script uses Microsoft Graph for PowerShell and creates a report that shows all the users that signed in to Azure in the last 30 days and if MFA is enabled on their account.<\/p>\n\n\n\n

https:\/\/azuread.github.io\/MSIdentityTools\/commands\/Export-MsIdAzureMfaReport<\/a><\/p>\n\n\n\n

Identify Azure Users Without MFA Using PowerShell<\/strong><\/h2>\n\n\n\n

After installing Graph for PowerShell, log in to Azure using the following cmdlet:<\/p>\n\n\n\n

Connect-MgGraph -Scopes Directory.Read.All, AuditLog.Read.All, UserAuthenticationMethod.Read.All<\/code><\/pre>\n\n\n\n
After successfully connecting to Azure, run the following cmdlet to create the report:<\/p>\n\n\n\n
Export-MsIdAzureMfaReport .\\report.xlsx<\/code><\/pre>\n\n\n\n
The report also offers a readiness tab with more details.<\/p>\n\n\n\n
The impact of not preparing for these changes can be serious for many organizations that do not use App Registration service accounts like SMTP mail relay.<\/p>\n\n\n\n