how can i get a list of users with MFA enabled via Conditional policy?

Filsoof, Alan (TAI) 0 Reputation points
2023-01-30T16:40:49.4566667+00:00

I am unable to see a list of users with MFA enabled if they are part of a conditional policy.

Exchange Server
Exchange Server
A family of Microsoft client/server messaging and collaboration software.
957 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,208 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
18,636 questions
{count} votes

2 answers

Sort by: Most helpful
  1. James Hamil 20,661 Reputation points Microsoft Employee
    2023-01-30T19:53:15.23+00:00

    Hi Filsoof, Alan (TAI) , the best way to do this is with a PowerShell script. The following links detail how you can accomplish this:

    For example:

     
     Get-MsolUser -all | select DisplayName,UserPrincipalName,@{N="MFA Status"; E={ 
        if( $_.StrongAuthenticationRequirements.State -ne $null) {$_.StrongAuthenticationRequirements.State} else { "Disabled"}}}
    

    Please let me know if you have any questions.

    If this answer helped you please mark it as "Verified" so other users can reference it.

    Thank you,

    James

    0 comments No comments

  2. Thameur-BOURBITA 28,861 Reputation points
    2023-01-30T20:46:41.24+00:00

    Hi @Filsoof, Alan (TAI)

    I think it's not possible through Powershell to get the list of user with MFA enabled only by conditional policy . Powershell can shows the status of MFA in your user account without this details.

    Please don't forget to mark helpful answer as accepted

    0 comments No comments