

This is especially important when it comes to on-premise Active Directory because you want to avoid requesting MFA codes every time you log in. Essentially, it’s the ability to log in once and access every resource you own. Single sign-on is one of the most important features of any identity management system. Is MFA for Active Directory necessary? Why do you need it?


Why? Because it gives users the same password no matter where they log in, which means their security isn’t compromised if they use a different username and password combination at home or work and only an additional layer of security is added on top of it. That doesn’t mean on-premise Active Directory is redundant or outdated – far from it! As long as you don’t want to implement a cloud solution, on-premise AD is still one of the best ways to protect your network and user accounts while keeping things simple for employees.

However, some businesses prefer on-premise solutions because they give them more control over their data. Many organizations have a natural inclination towards hybrid solutions that provide the most secure and user-friendly experience for everyone. Write-Output $AllUsers | Sort-Object isAdmin, MFAEnabled -DescendingĪs always, please share your comments below on bettering the above script or any questions you may have.With so many options available for securing your on-premise Active Directory, it’s easy to feel overwhelmed. $AdminUsers = Get-MsolRole -ErrorAction Stop | foreach The latter being even more crucial that MFA is enabled. The following script will report on your organizations MFA status per user and report on which users are admins. Multi-factor Authentication (MFA) is a great tool to ensure this however the task of knowing which user has it enabled can be tedious.Įnter PowerShell to the rescue to automate reporting of this process. This comes with new concerns surrounding identity protection and actually proving that remote users are who they say they are in order to be allowed access to organizational data. Security governance has been top of mind for most since the onslaught of human malware has the masses working from home.
