Security helpers

Requires a Microsoft Graph session. For full and always-up-to-date details, use Get-Help <FunctionName> -Detailed (or -Examples).

Disable-UserDevices

Disable all registered devices for specified users.

Syntax

Disable-UserDevices -UserPrincipalName <String[]> [-PassThru]

Parameter	Description	Required
`UserPrincipalName` (`Identity`)	Users whose registered devices will be disabled. Pipeline accepted.	Yes
`PassThru`	Emit the impacted devices.	No

Example

Disable-UserDevices -UserPrincipalName user1@contoso.com,user2@contoso.com -WhatIf

Block sign-in (AccountEnabled = $false) for specified users.

Syntax

Disable-UserSignIn -UserPrincipalName <String[]> [-PassThru]

Parameter	Description	Required
`UserPrincipalName` (`Identity`)	Users to block. Pipeline accepted.	Yes
`PassThru`	Emit the impacted users.	No

Example

Disable-UserSignIn -UserPrincipalName user1@contoso.com -Confirm:$false

Force sign-out by revoking refresh tokens for users.

Syntax

Revoke-UserSessions [-All] [-UserPrincipalName <String[]>] [-Exclude <String[]>] [-PassThru]

Parameter	Description	Required
`All`	Target every user in the tenant.	No
`UserPrincipalName` (`Identity`)	Users to target. Pipeline accepted.	No
`Exclude`	Users to skip (applies to both -All and explicit lists).	No
`PassThru`	Emit the impacted users.	No

Examples

Revoke-UserSessions -UserPrincipalName user1@contoso.com,user2@contoso.com

Revoke-UserSessions -All -Exclude breakglass@contoso.com -Confirm:$false

Notes: