When you migrate mailboxes to Exchange Online - Microsoft 365, you might want to add…
Disable MFA Office 365 with PowerShell
We need to disable MFA for Office 365 users because they want to use another vendor for MFA. What is the fastest and safest way to disable Office 365 MFA? In this article, you will learn how to disable MFA Office 365 for all users and single user with PowerShell.
Table of contents
Why do you need to disable MFA Office 365? A couple of reasons are:
- Move from per-user MFA to Conditional Access MFA
- Use another MFA vendor
- Microsoft MFA not working (outage)
Note: Disabling MFA will not erase the settings that the users configured.
For example, the users have MFA set up on their authentication app. You disabled MFA for the users. The next time they sign in will be without MFA. When you re-enable MFA for the users, they can authenticate with their authentication app or phone number without going through the whole setup.
How to disable per-user MFA Office 365 with PowerShell
To disable per-user MFA in Microsoft 365/Office 365 with PowerShell, go through the below steps:
Connect to Azure AD PowerShell
Start Windows PowerShell and connect to Azure AD PowerShell.
PS C:\> Connect-MsolService
Disable MFA Office 365 for single user
Disable MFA for a single Office 365 user.
PS C:\> Get-MsolUser -UserPrincipalName "Amanda.Morgan@exoip.com" | Set-MsolUser -StrongAuthenticationRequirements @()
Disable MFA Office 365 for all users
Disable MFA for all Office 365 users.
PS C:\> Get-MsolUser -All | Set-MsolUser -StrongAuthenticationRequirements @()
Disable MFA Office 365 in Azure/Microsoft 365 portal
Suppose you want to use something other than PowerShell to disable per-user MFA for a single or all users. Another way is to use the portal and configure per-user MFA in Microsoft 365/Azure.
Export Office 365 MFA status
Do you like to check the Office 365 MFA status and verify that MFA for the users is successfully disabled? An excellent way is to export Office 365 users MFA status report with PowerShell.
Important: Always use MFA to protect the accounts from attacks and compromised passwords. It adds another layer of protection that helps organizations.
Read more: Enable MFA Office 365 with PowerShell »
You learned how to disable MFA Office 365 with PowerShell. Connect to Azure AD with PowerShell and run the command to disable MFA for all Office 365 users or single user. Don’t forget to always use MFA for extra protection. In this case, it’s another MFA vendor.
Did you enjoy this article? You may also like Enable modern authentication in Office 365 admin center. Don’t forget to follow us and share this article.
This Post Has 7 Comments
Thanks Ali. I can run the Ps code w/ out error. But the MFA for the user in question is still enabled. Are they any pre-req’s for this to work? Does the all users enabled [for MFA] need to be toggled on?
Try to disable per-user MFA for the user in the Microsoft 365 Multi-Factor Authentication page.
Thank you Ali . Appreciate it
That worked great thanks
can you tell me the command to enable it now please
Glad that it worked, Ajay.
Read the article: Enable MFA Office 365 with PowerShell.
Does not work as stated…
Get-Process : A positional parameter cannot be found that accepts argument ‘Connect-MsolService’.
At line:1 char:1
+ PS C:\> Connect-MsolService
+ CategoryInfo : InvalidArgument: (:) [Get-Process], ParameterBindingException
+ FullyQualifiedErrorId : PositionalParameterNotFound,Microsoft.PowerShell.Commands.GetProcessCommand
You did start Windows PowerShell/PowerShell ISE and run the command:
PS C:\> Connect-MsolService
It will not work, and that’s why you get this error.
You need to fill in:
Don’t forget to install the module MSOnline, as shown in the article. Otherwise, you can’t connect and get an error.