Azure AD MFA user rollout Announcing the arrival of Valued Associate #679: Cesar Manara ...
Is there a "higher Segal conjecture"?
Sorting numerically
Is there a service that would inform me whenever a new direct route is scheduled from a given airport?
Do you forfeit tax refunds/credits if you aren't required to and don't file by April 15?
Why one of virtual NICs called bond0?
Antler Helmet: Can it work?
The logistics of corpse disposal
If a contract sometimes uses the wrong name, is it still valid?
Can a non-EU citizen traveling with me come with me through the EU passport line?
∞ symbol in external pdf disappears when used as figure
"Seemed to had" is it correct?
How does a Death Domain cleric's Touch of Death feature work with Touch-range spells delivered by familiars?
What makes black pepper strong or mild?
Is the Standard Deduction better than Itemized when both are the same amount?
How can I make names more distinctive without making them longer?
What is the correct way to use the pinch test for dehydration?
How does cp -a work
Did Xerox really develop the first LAN?
List *all* the tuples!
What are the motives behind Cersei's orders given to Bronn?
Why aren't air breathing engines used as small first stages
What causes the vertical darker bands in my photo?
How to deal with a team lead who never gives me credit?
Why don't the Weasley twins use magic outside of school if the Trace can only find the location of spells cast?
Azure AD MFA user rollout
Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern)
Come Celebrate our 10 Year Anniversary!Manage Azure user roles/permissionsDelete Azure Active Directory “Default Directory”require two-step verification for Azure subscription administratorsUsing Azure AD to push Group Policy settingsRemove certain AD Sync from Azure AD SyncLicensing users in Visual Studio Team Foundation ServicesConsolidating Office 365, AAD and Azure SubscriptionWhat is the “azure-cli-{timestamp}” user?How can I verify MSFT-internal synchronization of an Exchange, Skype, Azure, O365 user?How to move from a physical AD network towards a hybrid Azure network
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}
I have had a user account compromised during the roll out of MFA to all users.
Azure MFA in cloud setup and O365 for all users.
MFA was rolled out in batches and the account compromised was in between one of the batches. i have no history of what users were in each batch, i took over from someone else that is now gone.
What i am trying to find out, is when the MFA was enabled for this user.
I have gone through the Azure Audit Logs/Reports and also used PowerShell to try and view the data however everything i can find is only the status of 'Enable' and nothing to do with WHEN it was enabled.
I have googled it and have come up empty-handed other than finding the status or the last sync time.
I'm assuming it is not possible but would like confirmation on that.
Thanks in advance
azure
asked 2 mins ago
user519470user519470
1
New contributor
user519470 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
I have had a user account compromised during the roll out of MFA to all users.
Azure MFA in cloud setup and O365 for all users.
MFA was rolled out in batches and the account compromised was in between one of the batches. i have no history of what users were in each batch, i took over from someone else that is now gone.
What i am trying to find out, is when the MFA was enabled for this user.
I have gone through the Azure Audit Logs/Reports and also used PowerShell to try and view the data however everything i can find is only the status of 'Enable' and nothing to do with WHEN it was enabled.
I have googled it and have come up empty-handed other than finding the status or the last sync time.
I'm assuming it is not possible but would like confirmation on that.
Thanks in advance
azure
asked 2 mins ago
user519470user519470
1
New contributor
user519470 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
How does knowing when MFA was enabled help? What are you trying to accomplish by finding out the when?
– joeqwerty
15 secs ago
add a comment |
I have had a user account compromised during the roll out of MFA to all users.
Azure MFA in cloud setup and O365 for all users.
MFA was rolled out in batches and the account compromised was in between one of the batches. i have no history of what users were in each batch, i took over from someone else that is now gone.
What i am trying to find out, is when the MFA was enabled for this user.
I have gone through the Azure Audit Logs/Reports and also used PowerShell to try and view the data however everything i can find is only the status of 'Enable' and nothing to do with WHEN it was enabled.
I have googled it and have come up empty-handed other than finding the status or the last sync time.
I'm assuming it is not possible but would like confirmation on that.
Thanks in advance
azure
asked 2 mins ago
user519470user519470
1
New contributor
user519470 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
I have had a user account compromised during the roll out of MFA to all users.
Azure MFA in cloud setup and O365 for all users.
MFA was rolled out in batches and the account compromised was in between one of the batches. i have no history of what users were in each batch, i took over from someone else that is now gone.
What i am trying to find out, is when the MFA was enabled for this user.
I have gone through the Azure Audit Logs/Reports and also used PowerShell to try and view the data however everything i can find is only the status of 'Enable' and nothing to do with WHEN it was enabled.
I have googled it and have come up empty-handed other than finding the status or the last sync time.
I'm assuming it is not possible but would like confirmation on that.
Thanks in advance
azure
azure
asked 2 mins ago
user519470user519470
1
New contributor
user519470 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 2 mins ago
user519470user519470
1
New contributor
user519470 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 2 mins ago
user519470user519470
1
New contributor
user519470 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 2 mins ago
user519470user519470
1
asked 2 mins ago
user519470user519470
1
1
New contributor
user519470 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
user519470 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
user519470 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
How does knowing when MFA was enabled help? What are you trying to accomplish by finding out the when?
– joeqwerty
15 secs ago
add a comment |
How does knowing when MFA was enabled help? What are you trying to accomplish by finding out the when?
– joeqwerty
15 secs ago
How does knowing when MFA was enabled help? What are you trying to accomplish by finding out the when?
– joeqwerty
15 secs ago
How does knowing when MFA was enabled help? What are you trying to accomplish by finding out the when?
– joeqwerty
15 secs ago
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
user519470 is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f963210%2fazure-ad-mfa-user-rollout%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
user519470 is a new contributor. Be nice, and check out our Code of Conduct.
user519470 is a new contributor. Be nice, and check out our Code of Conduct.
user519470 is a new contributor. Be nice, and check out our Code of Conduct.
user519470 is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f963210%2fazure-ad-mfa-user-rollout%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
How does knowing when MFA was enabled help? What are you trying to accomplish by finding out the when?
– joeqwerty
15 secs ago