From 38a31f1f62854969b6909030fda661a676a21550 Mon Sep 17 00:00:00 2001 From: IxianPixel Date: Thu, 28 Nov 2024 17:53:11 +0000 Subject: [PATCH] Updated MFA Report to include default MFA method --- .DS_Store | Bin 10244 -> 0 bytes Entra/Get-MFAReport.ps1 | 21 +++++++++++++-------- PMM/.DS_Store | Bin 8196 -> 0 bytes 3 files changed, 13 insertions(+), 8 deletions(-) delete mode 100644 .DS_Store delete mode 100644 PMM/.DS_Store diff --git a/.DS_Store b/.DS_Store deleted file mode 100644 index 733953d0734a78e4149f6701dff07e7a9c58db3b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 10244 zcmeHMOKjXk7@prr(^pckMQ&UVFRt zZVFLF3grR?fyC=V#pA#Q5JiA^NWcjd4jfQ~C?GC~asUL}fD8QN@kYs}54e;fJkreX z`Dgy|{NH@z(flTaKzBil5fUbZP|Qq9%dxmfV(lz1N`kLpc7XPTsOc#ump1M6qP~G5 zKp;RMKp;RMKp;Ti+CTu$Y?kOUE`u^aAV45MU=9KHeF$S_GU3Y^F1=3&7Ty&AWhJV; zgwJ>n@NB}qO!#t!OV1R?Fzb#o;ma8=xj6xDPQZUN_%{^r-i~%* zuRDPRmq8gI5FoG^0d{v^Li&hBT#{dKe}6ljGY!X$Mn4CkqH;;qQo58bqjw}H?Wv@z zx&^0O%^zg7VcRy-rDrugV(3#TsiDWVT-C7jyk}r&I(9iUYFL^*)om9n&GBrLyn%*j zC?&0)o^Fq|M8eJO9Va5;>5k@TB;4B4e&R%ku57xgbARfnnYHYPxD()i2uO9AQx7ln z$aIQ5JR%|dR`TeJl1CwNnVcLJM^e&?B2IfK=Nh)WlE}b(7l0-ZSBkJtbH_N zn}w|9q@=oxYGw+i>grvlnKbUzoiSHG?y{!|$IiPwUdNOq6&!uPj{S_H-iy7RF$0HV z-5ScK4WU<;uUxafY16jm_>M&1z~F3kO|2w~^$nv%!!gpPKCU_$-O>!}$bl(Cb0;Sd zJIgf=8+twzs)K=HOU>%D)wMN}yh?7QQWG63q>W<*!@Y-(B`fPfRC@D}h7%dIHD;-K zEwZd!Pw7FX@5$>}a7U%77wXEDm>7DG&dsN3A%IVhJoO*gGmCj8#lWJZcnnEV| z7CrrxdTWDvX4Iz{u8ob%aYf!k={Os%OVe;9skWwi?~p9xN*GqrK;GiQa{5Z2QA(Q< zTlhM7;DwqJQGZz|X(Ze6?CB?mh)#0k0dkr=OU{s2$Xn!na*ljT&XX_6SL7S=E%}lB zM1Cf}kl#Uo3aErCsE4(nz&h9hEzk;W5QiPm2RmUG48UF(g)tb1gP_9Qa1>0ipa}QD z44i~h@CZBwPs20t61)ay;dOWeK7e!ZF?<4F!*_52zK37o520G96(pffSRq^|goO=! z&O&KNj4q^>z+9ZS$8ksaF*+f8u^plG?G*d3i5+o%IoktuE9x6ou45acy)!XKA5ORu z$L4d_qw4~advx_yxSVP7s@08a#I?!+%|Rr38a0`Vz+ZJW3C;{b_xY!{|mAILBb%%JXC=s@gdA*B` zgbe-X6g^AcB_AS1XOW^8$PY-&KY>CGtVTj^giWv+BCrkG;b!Q7PLG(opdW6B-7pLz zNX~JXfDGtx7$(7hJh)Ks2znCkM}j^GkHTZ{I6MJQ!WnoDo`)CUMR=K!wTy-X3uy@N zEu>*FnYT>aI)Yk8+zLE|#>mjT0P;H}a$dCqsBwC_EsBRutfQ43K(XeQ)<`(sQGNok z69&^IPoUG-=)1GX$$eyy4F20r#+u`CJZ9VCmpNwto|B$C=8;$uzv?*;6<$;juO(~u z_WHjA=rO&jyI%gN%LB)6)h^STo4nMhWuVS`ZSWW%5FijB5FijB5Fl_R1S)ukFpK~9 zUHbq3m4*r00|WvD{=*1BWpA>#8yzSG5XyaFvGy?LyD+oF`pt0ZnPB0C<57Cyc&xB+ q{3gt-Zz-n2o)f-qhD+37y6Qgz<|0kO{htMwfa|9=6NsPjJn diff --git a/Entra/Get-MFAReport.ps1 b/Entra/Get-MFAReport.ps1 index 18ff825..9924263 100644 --- a/Entra/Get-MFAReport.ps1 +++ b/Entra/Get-MFAReport.ps1 @@ -24,19 +24,24 @@ foreach ($user in $users) { $mfaMethods = Get-MgUserAuthenticationMethod -UserId $user.Id # Check if any MFA method is registered - $mfaRegistered = $mfaMethods.Count -gt 0 + $mfaRegistered = $mfaMethods.Count -gt 1 + + # Check the preferred MFA method + $uri = "https://graph.microsoft.com/beta/users/$($user.Id)/authentication/signInPreferences" + $currentDefaults = Invoke-MgGraphRequest -Uri $uri -Method GET -OutputType PSObject # Get user licenses $licenses = Get-MgUserLicenseDetail -UserId $user.Id # Create a custom object for each user $userObject = [PSCustomObject]@{ - UserPrincipalName = $user.UserPrincipalName - DisplayName = $user.DisplayName - AccountEnabled = $user.AccountEnabled - MFARegistered = $mfaRegistered - MFAMethods = ($mfaMethods.AdditionalProperties.'@odata.type' -join ', ').Replace('#microsoft.graph.', '') - Licenses = ($licenses.SkuPartNumber -join ', ') + UserPrincipalName = $user.UserPrincipalName + DisplayName = $user.DisplayName + AccountEnabled = $user.AccountEnabled + MFARegistered = $mfaRegistered + DefaultMFAMethod = $currentDefaults.userPreferredMethodForSecondaryAuthentication + AuthenticationMethods = ($mfaMethods.AdditionalProperties.'@odata.type' -join ', ').Replace('#microsoft.graph.', '') + Licenses = ($licenses.SkuPartNumber -join ', ') } # Add the user object to the array @@ -49,4 +54,4 @@ $userInfo | Export-Csv -Path "EntraIDUsersMFAReport.csv" -NoTypeInformation # Disconnect from Microsoft Graph Disconnect-MgGraph -Write-Host "Report generated: EntraIDUsersMFAReport.csv" \ No newline at end of file +Write-Host "Report generated: EntraIDUsersMFAReport.csv" diff --git a/PMM/.DS_Store b/PMM/.DS_Store deleted file mode 100644 index 3e18845f886dfcf665b6b6f8af68f46eaccb5c44..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 8196 zcmeHMU2GIp6u#fI(3yeS+uB0e39zA&pHif)&dx#g zNQjNb7ez6?_@Ls?tI_C#CJ;691h0}xI5)ZX+;i_a z_slu-ow+?*#u)lbW*1|vj4_qEpnM4p_i18Z^n02Ttt=u6(q}ASNjAtVqSigq@j@Jd zI0A75;t0eMh$HYYM1byW(bReFeYqQtaRlNB{4XOQz7I+2f~F!mEou1apdl;)h}P0_ z*l135K&X?9Xey%9l7^~urmP+isUj*dAk}F$VxF_$uNgq1=Gf7tN~dB@9>mPoV)(eFfU zVJGD){#10*rTmm*`$1>t4Jb9Wix$_Zb?OrJSo)+_Ne8*0|P3 zUDos^#-XusJPE7r1{mwao)A_co_4U(GQJnN90K>K8A%gQxt zH+F8_zH?yDzJoLMk2LVcCS9MPAi9Bl+_s9N726C>9?tm%%QbEH#8}z(?Yv`U+}xzq zhz?Dgsb99dbw$E3<`W$+r|0;zU&>&B>)%UcdNHEE}(S2xDWGPZng zw78>5H^vLzT(gudFAYL{;% z3~XDfQ*s*Jmn+!gbUW^0M=5uw*co=7y~{4LkJ%UO3cJd_WjEOm>?ig!`-T0^Zn4{_ zMLin8(TD`rVFTK+5nGT#ANsKu2Qh*)GB}1jOjtM$4<%G^8fWk#Ucq_1hS%{H-p2>{ z5Fg<(zQkAf8dq^0Gx!cS@FV`jE&PSs%3`HXQI$reNoiJEl=aF6rCaG$Qu5K2YC26w zzB(#>G+S6YMPCrbxnDXZhIT*waHP}Cr80pYZEjiBwtiE0&yHQQK$FOrgBK;NqxIU$;N9XYv?;QjkAzR^d$yVN*Jy#9LJxr%j_F= zjm;2_e`UY1KiD0pgx+OHVlClUpm!5`(2H%@j;An$-PnU+LUIP97{fRwP#`29#|hXd z!bgBIUcfY=`6aweSiXQa@Fw2IJGhAVB2<5hOLw7kxQb6nad}}VEvJjFd#UaO~_448miDB tM8tYnjuV~zhat_A(OxQ|(~{B-wg3EwfCupBbbSBE_kRfW5b+Pk@Hb7jfj|HN