MS 365: How to disable the two factor authentication from single user
Posted: 01 Mar 2023, 18:17
Se l'utente NON ha MFA attiva ma รจ parte di un tenant con la impostazioni di default (post 2019), occorre PRIMA attivare e applicare le MFA (Users > Active Users > MFA impostazioni) e POI disattivarle.
It is important to know that MFA is not recommended to be disabled on user accounts.
In response to your query, you can disable MFA by following the below PowerShell code:
Connect-MsolService
Get the StrongAuthenticationRequirement configured to the user account
Remove StrongAuthenticationRequirements from the user account
Verify MFA has been removed
And you can also try to do this through the Azure Portal and account portal:
https://portal.azure.com/
https://account.activedirectory.windowsazure.com/
I would also suggest to Revoke multifactor authentication sessions and Revoke sessions for the user account.
It is important to know that MFA is not recommended to be disabled on user accounts.
In response to your query, you can disable MFA by following the below PowerShell code:
Connect-MsolService
Get the StrongAuthenticationRequirement configured to the user account
Code: Select all
(Get-MsolUser -UserPrincipalName account@keyman .com).StrongCode: Select all
$mfa = @()
Set-MsolUser -UserPrincipalName account@keyman .com -StrongAuthenticationRequirements $mfaCode: Select all
(Get-MsolUser -UserPrincipalName account@keyman .com).StrongAuthenticationRequirements
$User = Get-MSolUser -UserPrincipalName account@keyman .com
$User.StrongAuthenticationMethods
https://portal.azure.com/
https://account.activedirectory.windowsazure.com/
I would also suggest to Revoke multifactor authentication sessions and Revoke sessions for the user account.