这可以通过检查用户的 strongauthenticationrequirements 来实现，就像你一样了解它们是否已启用/强制执行或已禁用。

This can be achieved by checking the strongauthenticationrequirements of users, that way you get to know if they are enabled/enforced or disabled.

#Get Enabled/Enforced Users
# Connect to MSOL

cred = Get-Credential
Connect-MsolService -Credential

cred = Get-Credential Connect-MsolService -Credential

cred

Get-MsOlUser -all -Synchronized -EnabledFilter EnabledOnly | sort-Object -property UserPrincipalName |其中{

cred Get-MsOlUser -all -Synchronized -EnabledFilter EnabledOnly | sort-Object -property UserPrincipalName | Where {