So how do we do this?
After connecting to the MSOnline service with PowerShell run:
$auth = New-Object -TypeName Microsoft.Online.Administration.StrongAuthenticationRequirement $auth.RelyingParty = "*" $auth.State = "Enabled" $auth.RememberDevicesNotIssuedBefore = (Get-Date) Get-MsolUser –All | Foreach{ Set-MsolUser -UserPrincipalName $_.UserPrincipalName -StrongAuthenticationRequirements $auth}
All users are now "enabled" for MFA.
This should give you a lot of extra brownie points on your secure score rating :-)
No comments:
Post a Comment