Report of users who have 2fa disabled

[Andrea]

Dears,

I would use gam to obtain report of all users that have 2fa disabled.

I try this command

gam report users filter "accounts:is_2sv_enrolled==false" todrive

but it doesn't seem to work properly.

The report  contains users who have 2fa active.

Do you have a suggestion please?

Many thanks

Best regards to all

Andrea

[Ross Scroggs]

Andrea,

Try this:

gam report users filter "accounts:is_2sv_enrolled==false" fields "accounts:is_2sv_enrolled" fulldatarequired all todrive

Ross

--

ross.s...@gmail.com

---

IMPORTANT:
This is a business and not a personal e-mail, this message and its attachments are confidential and may also be legally privileged.
If you are not the intended recipient, or have received this e-mail in error, please notify immediately the sender and delete this message and all its attachments.

Any unauthorized review, copying, disclosure, dissemination, or distribution of this message and/or its attachments is strictly forbidden.

---

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/238be2be-c5af-449d-ac94-22f478290758n%40googlegroups.com.

[Andrea]

Ross,

you always have the solution! 

You are always precious and kind!

Thank you so much!

Andrea

[Justin Browns19]

Thanks for this info Ross,

I like to add to it.

If I have an Org with sub orgs like Staff>org1

staff ORg2 

What commands would show you all the disabled accounts under Staff including the sub orgs 

Then what command if I wanted a specific org like staff/org2. What command would show those users. 

Does this command require advance Gam?

Thanks

[Ross Scroggs]

Justin,

These commands require Advanced GAM:

Staff and sub-orgs: 

gam print users query "orgUnitPath='/Staff' isEnrolledIn2sv=False" fields primaryemail,isenrolledin2sv,ou

Staff only: 

gam print users query "orgUnitPath='/Staff' isEnrolledIn2sv=False" limittoou "/Staff" fields primaryemail,isenrolledin2sv,ou

Staff sub-org only: 

gam print users query "orgUnitPath='/Staff/Org2' isEnrolledIn2sv=False" limittoou "/Staff/Org2" fields primaryemail,isenrolledin2sv,ou

Ross

--

ross.s...@gmail.com

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/7451108b-782b-4436-9a67-039c92b25786n%40googlegroups.com.

[Randal Stowell]

What syntax should I add to only include non-suspended users?

[Ross Scroggs]

Randal,

See: https://developers.google.com/admin-sdk/directory/v1/guides/search-users

query "orgUnitPath='/Staff' isEnrolledIn2sv=False isSuspended=False"

Ross

This message is intended solely for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law.  If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution, copying or use of this communication or any information contained or attached to this message is strictly prohibited.  If you have received this communication in error, please notify the sender immediately by replying to this message and then delete it from your system.  Thank you.

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/48078201-6da4-4318-b689-ff3e18adfa37n%40googlegroups.com.

--

Ross Scroggs

ross.s...@gmail.com

[Randal Stowell]

Thanks, Ross!

Respectfully,

Randal Stowell District Senior Network Engineer at  Wauconda CUSD 118 A  555 North Main Street, Wauconda, IL 60084 P (847) 865-1043  M (815) 218-1486  E rsto...@d118.org  W www.d118.org Need Tech Assistance?  Create a Helpdesk Ticket here  →  https://www.d118-helpdesk.info/  ←

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAJkvRS93pweZHSbXAA8odm%2BeV5Ko_xxH5Qt%3DZZCpuN3d-L_Cbw%40mail.gmail.com.

[Randal Stowell]

*** UPDATE ***

Here's what worked for me:

gam print users query "orgUnitPath='/Teachers' isEnrolledIn2sv=False isSuspended=False" fields primaryemail,lastLoginTime,isenrolledin2sv,ou todrive

Thanks again, Ross!

Respectfully,

Randal Stowell District Senior Network Engineer at  Wauconda CUSD 118 A  555 North Main Street, Wauconda, IL 60084 P (847) 865-1043  M (815) 218-1486  E rsto...@d118.org  W www.d118.org Need Tech Assistance?  Create a Helpdesk Ticket here  →  https://www.d118-helpdesk.info/  ←