Get-AzMFADeploymentStats
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
function Get-AzMFADeploymentStats | |
<# | |
.Synopsis | |
Get-AzMFADeploymentStats | |
.DESCRIPTION | |
Get-AzMFADeploymentStats retrieves the MFA registration information from all users in the | |
Tenant and summarizes the results by MFA Authentication mode. | |
.EXAMPLE | |
Get-AzMFADeploymentStats | |
.NOTES | |
v1.0, 17.03.2020, Alex Verboon, initial version | |
#> | |
{ | |
[CmdletBinding()] | |
Param | |
( | |
) | |
Begin | |
{ | |
If (Test-Path -Path "$PSScriptRoot\Get-AzMFAStatus.ps1" -PathType Leaf) | |
{ | |
. "$PSScriptRoot\Get-AzMFAStatus.ps1" | |
} | |
Else | |
{ | |
Write-Error "Script: $PSScriptRoot\Get-AzMFAStatus.ps1 not found" | |
# you find me on github | |
} | |
} | |
Process | |
{ | |
Write-verbose "Retrieve all users from the tenant includig their MFA registration information" | |
$AllUsers = Get-AzMFAStatus -Verbose | |
$MFARegisteredUsers = $AllUsers | Where-Object {$_.OneWaySMSIsDefault -like 'True' -or $_.PhoneAppNotificationIsDefault -like "True" -or $_.PhoneAppOTPIsDefault -like "True" -or $_.TwoWayVoiceMobileIsDefault -like 'True' -or $_.authemail -notlike "" -or $_.AuthPoneNumber -notlike "" -or $_.AuthAltPhone -notlike ""} | |
Write-Verbose "Users with SMS As Default" | |
$Total_OneWaySMSIsDefault = $MFARegisteredUsers | Where-Object {$_.OneWaySMS -like 'True'-and $_.OneWaySMSIsDefault -like 'True'} | |
#$Total_OneWaySMSIsDefault.count | |
write-verbose "PhoneAppNotification As Default" | |
$Total_PhoneAppNotificationIsDefault = $MFARegisteredUsers | Where-Object {$_.PhoneAppNotification -like 'True' -and $_.PhoneAppNotificationIsDefault -like 'True'} | |
#$Total_PhoneAppNotificationIsDefault.count | |
Write-verbose "PhoneAppOTP As Default" | |
$Total_PhoneAppOTPIsDefault = $MFARegisteredUsers | Where-Object {$_.PhoneAppOTP -like 'True' -and $_.PhoneAppOTPIsDefault -like 'True'} | |
#$Total_PhoneAppOTPIsDefault.count | |
Write-Verbose "TwoWayVoiceMobileIsDefault As Default" | |
$Total_TwoWayVoiceMobileIsDefault = $MFARegisteredUsers | Where-Object {$_.TwoWayVoiceMobile -like 'True' -and $_.TwoWayVoiceMobileIsDefault -like 'True'} | |
#$Total_TwoWayVoiceMobileIsDefault.count | |
#write-verbose "Other methods such as auth email, phone number or alternate number" | |
#$mailphone = $MFARegisteredUsers | Where-Object {$_.authemail -notlike "" -or $_.AuthPoneNumber -notlike "" -or $_.AuthAltPhone -notlike ""} | |
#$TotaleMail_PhoneOnly = $MFARegisteredUsers | Where-Object {$_.authemail -notlike "" -or $_.AuthPoneNumber -notlike "" -or $_.AuthAltPhone -notlike "" -and $_.OneWaySMSIsDefault -like 'False' -and $_.PhoneAppNotificationIsDefault -like 'False' -and $_.PhoneAppOTPIsDefault -like 'False'} | |
#$TotaleMail_PhoneOnly.count | |
Write-Verbose "Email registratoin only" | |
$TotaleMailOnly = $MFARegisteredUsers | Where-Object {$_.authemail -notlike "" -and $_.AuthPoneNumber -like "" -and $_.AuthAltPhone -like "" -and $_.OneWaySMSIsDefault -like 'False' -and $_.PhoneAppNotificationIsDefault -like 'False' -and $_.PhoneAppOTPIsDefault -like 'False'} | |
#$TotaleMailOnly.count | |
Write-Verbose "Phone registratoin only" | |
$TotalPhoneOnly = $MFARegisteredUsers | Where-Object {$_.authemail -like "" -and $_.AuthPoneNumber -notlike "" -and $_.AuthAltPhone -notlike "" -and $_.OneWaySMSIsDefault -like 'False' -and $_.PhoneAppNotificationIsDefault -like 'False' -and $_.PhoneAppOTPIsDefault -like 'False'} | |
#$TotalPhoneOnly.count | |
$object = [PScustomObject][ordered]@{ | |
TotalUsersInTenant = $AllUsers.Count | |
TotalUsersMFARegistered = $MFARegisteredUsers.count | |
TotalUsersNotMFARegistered = $AllUsers.Count - $MFARegisteredUsers.count | |
TotalOneWaySMSIsDefault = $Total_OneWaySMSIsDefault.count | |
TotalPhoneAppNotificationIsDefault = $Total_PhoneAppNotificationIsDefault.count | |
TotalPhoneAppOTPIsDefault = $Total_PhoneAppOTPIsDefault.count | |
TotalTwoWayVoiceMobileIsDefault = $Total_TwoWayVoiceMobileIsDefault.count | |
TotaleMailOnly = $TotaleMailOnly.count | |
TotalPhoneOnly = $TotalPhoneOnly.count | |
} | |
$object | |
} | |
End | |
{ | |
} | |
} | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment