问我希望创建一个PowerShell脚本来撤销用户的Azure刷新令牌并禁用用户的设备

EN

# Use one or the other depending on if you want to use the username or objectID
$Username = Read-Host -Prompt
#$ObjectId = Read-Host -Prompt

Connect-AzureAD

# Use one or the other depending on if you want to use the username or objectID
$User = Get-AzureADUser -SearchString $Username
#$User = Get-AzureADUser -ObjectId $ObjectId

if ($null -ne $User) {
  Revoke-AzureADUserAllRefreshToken -ObjectId $User.ObjectId
  Get-AzureADUserRegisteredDevice -ObjectId $User.ObjectId | Set-AzureADDevice -AccountEnabled $false 
} else {
  Write-Warning "No user found with the specified criteria"
}