List Users MFA Status for All Users

Get-MFAStatus.ps1

#Connect-MsolService


Get-MsolUser -all |
Select-Object ObjectId, IsLicensed, DisplayName, UserPrincipalName, BlockCredential, UserType, WhenCreated, LastPasswordChangeTimestamp,LicenseReconciliationNeeded,
@{N = "Type"; E = { if ( $_.UserPrincipalName.IndexOf("#EXT#") -gt 0 ) { "External" } else { "ThreeWill" } } } ,
@{N = "MFAStatus"; E = { if ( $_.StrongAuthenticationRequirements.State -ne $null) { $_.StrongAuthenticationRequirements.State } else { "Disabled" } } } ,
@{N = "ConferenceRoom"; E = { if ( ($_.UserPrincipalName).IndexOf("conference") -gt 0) { $true } else { $false } } } ,
@{N   = "ThreatLevel"; 
    E = {
        if ($_.BlockCredential -like "True" ) {
            "High"
        } 
        elseif ($_.UserType -like "Member" -and $_.StrongAuthenticationRequirements.State -notlike "En") { 
            "High"
        }
        elseif ( ($_.UserPrincipalName).IndexOf("conference") -gt 0)
        {
            "Low"
        }
        else { 
            "Medium"
        }
    }
} |
Export-Csv -Path "C:\scratch\Security\MFAStatus$(get-date -f ddMMMyy-hhmmss).csv" -NoTypeInformation
 

Added additional fields and logic to categorize accounts based on the details.