{"id":6673,"date":"2021-04-20T14:02:04","date_gmt":"2021-04-20T14:02:04","guid":{"rendered":"https:\/\/softreetechnology.com\/?p=6673"},"modified":"2021-04-20T14:07:49","modified_gmt":"2021-04-20T14:07:49","slug":"how-to-enable-and-disable-mfa-using-powershell","status":"publish","type":"post","link":"https:\/\/softreetechnology.com\/blog\/powershell\/how-to-enable-and-disable-mfa-using-powershell\/","title":{"rendered":"How to enable and disable MFA using PowerShell"},"content":{"rendered":"

Introduction-<\/strong>In Office 365, multifactor authentication (MFA) is a security feature in which it authenticates whether the user who trying to access the exchange online is the same user who claims the account. MFA use the user’s phone number or mobile app to connect the Office 365.<\/p>\n

Providing the steps below to enable MFA.<\/strong><\/p>\n

 <\/p>\n

Step1-<\/strong>To run Office 365 to remote areas you have to get all the policies.<\/p>\n

If the output is showing unrestricted<\/strong> then set the scope for the current user<\/strong>.<\/p>\n

Step2-<\/strong>To connect the PowerShell online you have to get the credentials for Office 365<\/p>\n

Step3-<\/strong>If MSOnline<\/strong> service is not imported in your end then you have to import the service first by using the below command. MSOnline<\/strong> service is use for connecting to office 365<\/p>\n

Import-Module MSOnline<\/strong><\/p>\n

Step4-<\/strong>Now create the authentication object and set the MFA status values.<\/p>\n

Step5-<\/strong>Then set the MFA<\/p>\n

For single user<\/p>\n

Get-MsolUser -UserPrincipalName $UserName | Set-MsolUser -UserPrincipalName $UserName -StrongAuthenticationRequirements $authentication <\/strong><\/p>\n

 <\/p>\n

For multiple user<\/p>\n

Get-MsolUser \u2013All | Foreach{ Set-MsolUser -UserPrincipalName $_.UserPrincipalName -StrongAuthenticationRequirements $auth<\/strong>entication<\/strong>}<\/strong><\/p>\n

 <\/p>\n

Get-ExecutionPolicy<\/p>\n

Set-ExecutionPolicy Unrestricted \u2013Scope CurrentUser<\/p>\n

$credential = Get-Credential<\/p>\n

Connect-MsolService \u2013Credential $credential<\/p>\n

 <\/p>\n

$UserName= Read-Host “Enter the username”<\/p>\n

 <\/p>\n

$authentication= New-Object -TypeName Microsoft.Online.Administration.StrongAuthenticationRequirement<\/p>\n

$authentication.RelyingParty = “*”<\/p>\n

$authentication.State = “Enabled”<\/p>\n

$authentication.RememberDevicesNotIssuedBefore = (Get-Date)<\/p>\n

 <\/p>\n

Get-MsolUser -UserPrincipalName $UserName | Set-MsolUser -UserPrincipalName $UserName -StrongAuthenticationRequirements $authentication<\/p>\n

 <\/p>\n