THE article discusses a method to identify users who are not registered for Multi-Factor Authentication (MFA) during an MFA rollout using Powershell scripts. It emphasizes the use of Microsoft.Graph.Beta library commands to streamline the auditing process. The relevant commands are outlined to connect to Microsoft Graph, retrieve authentication details, filter out users who haven't registered for MFA, and display the results. Additionally, it suggests possible modifications to identify users relying on less secure MFA methods, such as SMS.
PowerShell Script Finds Users Missing MFA During Rollout
CyberSIXT Evidence Panel
Source marked as original reporting
Article by CyberSIXT