Check the MFA status of all your Microsoft 365 users
AlertControl shows per user whether multi-factor authentication (MFA) is registered, which verification methods they have and whether the user is an administrator. Users without MFA are listed first, so you immediately see who is still at risk. You also see the last sign-in and the last password change. Read-only: AlertControl changes nothing.
Updated 30 October 2026
What do you see per user?
Per user you see the name, the type (member or guest), whether they are an administrator, whether MFA is registered, the registered methods (such as Microsoft Authenticator, text message or a security key), the default method, whether the user can sign in passwordless, the last interactive and non-interactive sign-in and the last password change.
Guests are hidden by default; the Guests switch shows them. You can sort on every column.
Registered is not the same as enforced
AlertControl shows whether a user has registered MFA methods. Whether MFA is actually requested at every sign-in is set in Microsoft Entra ID with Conditional Access or Security Defaults. Start with administrators: an administrator without MFA is the biggest risk.
What do you need?
The MFA data per user comes from the Microsoft Entra ID registration report. For that, at least one user in your tenant needs Microsoft Entra ID P1, for example through Microsoft 365 Business Premium. AlertControl reads up to 5,000 users.
Frequently asked questions
Open the Users & MFA tab in the dashboard. Users without registered MFA are listed first with a red No. You can also sort on the MFA or Admin column.
No. Yes means the user has registered MFA methods. Whether MFA is enforced at every sign-in is set with Conditional Access or Security Defaults in Microsoft Entra ID.
Guests (accounts with #EXT# in the name) are hidden by default. The Guests switch shows them in the list.
No. AlertControl only has read access and cannot change anything in your tenant. It shows where MFA is missing; you turn it on in the Microsoft Entra admin center.
See for yourself what is happening in your Microsoft 365?
Try AlertControl free for 30 days. You sign in with your Microsoft account and grant read-only consent once.