Office 365 - Force logoff for a Users on all devices

Ive been setting up alerts in our Office 365 Cloud App Security portal, alerts such as alert me when a user successfully log into any O365 service outside the United States, Canada and Mexico.

We continuously see a random few users that Ive confirmed are in the US in the office, yet are supposedly signing into mail from the Netherlands or Austria.

We change their passwords immediately, but is there any way to force a logout accross all/any devices they use remotely via powershell or the portal? So they are forced to reauthenticate with their new passwords?

Christian HansUndecided... Asked: 2017-12-04

Who is Participating?

Experts Exchange Solution brought to you by

Enjoy your complimentary solution view.

Get this solution by purchasing an Individual license! Start your 7-day free trial.

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LVL 51

Vasil Michev (MVP)Commented: 2017-12-04

First of all, make sure those are actual logins and not just some Microsoft backend app acting on behalf of the user. MS has datacenters in both NL and Austria, so I suspect it's indeed some app login. And, if you want proper protection, enforce MFA or at least some sort of conditional access policy on these users, the alerts are reactive after all, they will not prevent any unautorhized access.

Anyway, to answer the question, you can force expiration of all issued refresh tokens via the Revoke-AzureADUserAllRefreshToken cmdlet. It will not revoke any access tokens though, we dont have any control over this, but they are short lived - one hour max.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial