Suspend a user via Entra Admin Portal
Go to Entra Admin Center → Users → All users, find and select the user.
Set Account Enabled = No (Block sign-in = Yes) under Edit properties, then Save.
Suspend a user via PowerShell
Update-MgUser -UserId "[email protected]" -BodyParameter @{AccountEnabled = $false} -Verbose
Password Reset via Microsoft Entra Admin Center
Go to Microsoft Entra Admin Center → Users → Find the affected user.
Click Reset Password → Choose the Reset password > Ensure you have the message “Password has been reset”
Save the new password temporarily in a secure location, such as a vault, for the next steps, and send it to the user.
Password Reset via PowerShell
Connect first with Global Admin permissions
Connect-MgGraph -Scopes User.ReadWrite.All
Update-MgUser -UserId "[email protected]" -PasswordProfile @{ ForceChangePasswordNextSignIn = $true; Password = "Put Temporary Password } -Verbose
Reset MFA Settings via Microsoft Entra Admin Center
Entra Admin Center → Users → The required Users → Authentication Methods → Require re-registration of multifactor authentication.
When the Require re-registration multifactor authentication pop-up message appears, choose OK.
Then, the Require User Verification will run.
Note: This will wipe all MFA registrations and force re-enrollment.