MFA Non-Enrolled Users Report

    The MFA Non-Enrolled Users Report presents the list of users who are yet to enroll for MFA in ADSelfService Plus, as well as unlicensed users. The report also displays the mail addresses and mobile numbers of the users, and the OU to which they belong, providing comprehensive data for targeted enrollment initiatives.

    • How it works
    • Generating the MFA Non-Enrolled Users Report
    • Customizing the MFA Non-Enrolled Users Report
    • Automating the MFA Non-Enrolled Users Report
    • Exporting the MFA Non-Enrolled Users Report
    • Tips

    How it works

    The MFA Non-Enrolled Users Report queries the ADSelfService Plus database to identify all users within the selected domains and OUs who have not completed MFA enrollment. The report includes two categories of users: those without ADSelfService Plus licenses assigned and licensed users who have not yet enrolled for any MFA authenticators.

    Prerequisite: You must have administrator or technician-level access to the ADSelfService Plus portal to generate and view reports.

    Generating the MFA Non-Enrolled Users Report

    To generate the MFA Non-Enrolled Users Report:

    MFA Non-Enrolled Users Report
    1. Log in to the ADSelfService Plus portal with admin or operator privileges.
    2. Navigate to Reports > MFA Reports > MFA Non-Enrolled Users Report.
    3. Specify the domain using the Select Domain option.
    4. Use the Select OUs option to specify the OUs, if necessary.
    5. The Show already notified users only checkbox can be selected if the report has to be generated only for users who have been notified about enrollment.
    6. Click Generate.

    Customizing the MFA Non-Enrolled Users Report

    • Adding or removing columns: To add or remove columns, click on the Add/Remove Columns [ ] option at the far right of the report. In the Select the columns to be displayed pop-up that appears, select the required fields under Available Columns and click on the right arrow ( >> ) to move it to the Selected Columns. To remove columns, select the unused fields under Selected Columns and click on the left arrow ( << ) to move it to Available Columns.
    MFA non-enrolled users report in ADSelfService Plus
    • Ordering the columns: The columns' positions can also be altered by selecting a value under Selected Columns and using the Up and Down options to change its position.

    Sorting

    Click on any of the column headers to view the report's entries in ascending or descending order.

    Searching

    • Click on the search icon [ ] in order to search for specific data in the report.
    • Specific users can be searched for using attributes such as their sAMAccountName, or Display Name.
    • Searching happens using the criteria ' contains '. For example, if the username column is searched for the word " jack " , then all usernames containing the sequence " jack " will be displayed as a result.

    Automating the MFA Non-Enrolled Users Report

    • The Schedule Reports option can be used to schedule the generation of reports at specified intervals, and automatically email them to administrators or specific email addresses. Learn to schedule reports here.

    Exporting the MFA Non-Enrolled Users Report

    • The Export As option at the right corner of the page helps export the report in CSV, PDF, XLS, XLSX, HTML and CSVDE formats.

    Tips

    • The More option at the right corner of the page lists the Printable View, Send Mail, and Export Settings options.
      • The Printable View option can be used to preview and print the report.
      • The Send Mail option can be used to mail the report to the desired email addresses.
      • Additionally, you can configure custom Export Settings, such as a personalized title for the report and a header logo that you may wish to display on each page.
    • Target high-risk OUs first: Use the Select OUs option to generate reports for departments with access to sensitive data (Finance, HR, IT) and prioritize their MFA enrollment over lower-risk departments, ensuring critical assets are protected first during phased rollouts.