Feedback by UserVoice

How can we improve the tenant admin features O365?

← Office 365 Admin

Create new View for MFA status Disabled

We can currently only filter the list of users in the Multi-Factor Authentication portal by all, enabled, or enforced.
As we go thru MFA deployment, at a minimum I need to be able to focus on the users that are still disabled for MFA so they can be enabled. We like a view for "Disabled" MFA status.

I would also like to enable MFA based on other attributes (such as department or group membership) rather than picking one user at a time out of 1300 users.

117 votes
Vote
Sign in
(thinking…)
Sign in with: Facebook Google
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close
You have left! (?) (thinking…)
JANDA shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

9 comments

Sign in
(thinking…)
Sign in with: Facebook Google
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment
  • Embry Fedora commented  ·   ·  Flag as inappropriate

    Recently i came across below PowerShell script to get a list of MFA disabled users along with most required attributes like Display Name, User Principal Name, Department, MFA Status, License Status, Is Admin, SignIn Status.

    http://o365reports.com/2019/05/09/export-office-365-users-mfa-status-csv/

    This script also provides MFA status based output. You get a list of only MFA enabled/Enforced users using filters. MFA enabled users report provides Display Name, User Principal Name, MFA Status, Activation Status, Default MFA Method, All MFA Methods, MFA Phone, MFA Email, License Status, IsAdmin, SignIn Status.

  • Anonymous commented  ·   ·  Flag as inappropriate

    Thankfully I found this...can't believe this isn't an option and I need this as well!

  • Peter commented  ·   ·  Flag as inappropriate

    I agree there's a need for this in the web console to easily determine non-compliance.
    If you aren't aware, there's a way to view everyone's status programmatically in PowerShell.
    https://www.techmanyu.com/fetching-azure-ad-users-mfa-status-using-powershell/
    I modified this script to include some more fields which make it easier for me to sort accounts. Then at the end, instead of using $Data, I use "$Data | out-gridview" so I can select-all and copy straight in to Excel. Then I can sort and filter to my heart's content.

  • Rob Clarke commented  ·   ·  Flag as inappropriate

    I agree with this, it is a much needed feature.
    There is no option to show all users, therefore have to go navigate through each page individually, which only show 20 users per page. Please add a 'Disabled' filter. Looking for users with this status is the most frequent reason I access this page.

  • Anonymous commented  ·   ·  Flag as inappropriate

    I agree with this request. It would also be nice to add a column for license type. We use 2 different types of license in our tenant, one which includes MFA and one that doesn't. As it works right now, they are all just lumped in together.

  • Carla commented  ·   ·  Flag as inappropriate

    Definitely need to be able to see the Disabled status. it is a pain to manually go through this list to find those that are not compliant

Office 365 Admin

Categories

Feedback and Knowledge Base

(thinking…)

Related Sites