如何将 Where-Object 输出通过管道传输到 Azure AD 组
How to pipe Where-Object output into Azure AD Group

您的脚本有两个问题。

1. | 意思是powershell pipline，不是这样的用法，更多细节见这个链接。

AzureAD powershell 中的User实体没有StrongAuthenticationMethods属性，它存在于MSOnline powershell ，因此您需要改用它。

这是一个示例，请确保您已使用Install-Module MSOnline安装了MSOnline powershell 模块。

注意：您需要确保用户不在 B 组中，否则您将收到错误The group member you are trying to add is already a member of this group 。

Connect-MsolService

$groupA = "<objectid of group A>"
$groupB = "<objectid of group B>"

#get the users(whose GroupMemberType is 0) in the group A
$userids = (Get-MsolGroupMember -GroupObjectId $groupA | Where-Object {$_.GroupMemberType -eq '0'}).ObjectId
#add the MFA-enrolled user to A and remove from B
foreach($item in $userids){
    $user = Get-MsolUser -ObjectId $item
    if($user.StrongAuthenticationMethods.Count -ne "0"){
        Add-MsolGroupMember -GroupObjectId $groupB -GroupMemberType User -GroupMemberObjectId $item
        Remove-MsolGroupMember -GroupObjectId $groupA -GroupMemberType User -GroupMemberObjectId $item

    }else{
        Write-Host The user $user.DisplayName is not MFA-enrolled.
    }
}