Bulk reset MFA method via PowerShell

Question

We are beginning to phase out SMS MFA authentication as it is no longer a secure method of MFA. Due to the size of our organization, we need to roll this out to particular groups in phases to ensure our help desk team is not inundated with support calls.

I'd want to import a CSV file with the users UPNs to reset users MFA method using the cmd below so they must re enroll in MFA.

Reset-MsolStrongAuthenticationMethodByUpn
-UserPrincipalName <String>
[-TenantId <Guid>]

Answer 1

Assuming you have a CSV called blabla.csv, with a column UPN to designate the UserPrincipalName, use this:

Import-CSV blabla.csv | % { Reset-MsolStrongAuthenticationMethodByUpn -UserPrincipalName $_.UPN} 

Answer 2

Hi @Joe Calabria

Thank You for posting question!

Please refer below url for details.

Manage methods using PowerShell:

(Bulk) pre-register MFA for users without enable MFA on the account

Pre-register authentication data to Azure AD Users for MFA

Please don’t forget to Accept the answer and up-vote wherever the information provided helps you, this can be beneficial to other community members.

Answer 3

Hi @Joe Calabria ,

I do not know if you still need a help to address the necessity of users change there method to Microsoft Authenticator. But, currently Microsoft released a feature called Registration campaign that can easely help you iiiiiiiiiiiiiiiwth that. To do so, access the documentHow to run a registration campaign to set up Microsoft Authenticator - Microsoft Authenticator app