I added notes on each section so you know what variables do what. However, some of the Write-Output will be different for each system. This one is meant for Teams chat. Others like Slack, Discord, and so on will use different variables. Mainly, for this one I used for Intune as we have a hybrid environment. I created a Remediation Script in Intune because you can run those on random to computers (FYI this is only for Windows machines). I set the Remediation script to detect if the computer has C:\Users folder (remediation scripts have to verify if something is there before it runs). Then I put this script in. FYI, if you use for Intune, the logs for the Remediation with successful execution will say Recurse in the Intune logs. Mainly because you didn't do anything in the Detection section, which was the C:\Users section. For my own sanity on this, I will only keep this script here for 48 hours and then will remove. Use in the right way this was made for.

# =========================================================

# LOAD WINDOWS FORM LIBRARIES

# =========================================================

Add-Type -AssemblyName System.Windows.Forms

Add-Type -AssemblyName System.Drawing

# =========================================================

# WEBHOOK SETTINGS

# =========================================================

# Replace with your webhook URL

# Examples:

# - Power Automate

# - Teams

# - Slack

# - Discord

# - Custom API endpoint

$WebhookUrl = "WEBHOOK URL"

# =========================================================

# MFA NUMBER GENERATION

# =========================================================

# Generate the correct MFA number

$CorrectNumber = Get-Random -Minimum 1000 -Maximum 9999

# Create array containing selectable numbers

$Numbers = @($CorrectNumber)

# Generate additional random numbers until there are 4 total

while ($Numbers.Count -lt 4) {

$num = Get-Random -Minimum 1000 -Maximum 9999

# Prevent duplicate numbers

if ($Numbers -notcontains $num) {

$Numbers += $num

}

}

# Shuffle/randomize button order

$Numbers = $Numbers | Sort-Object { Get-Random }

# =========================================================

# RESPONSE VARIABLES

# =========================================================

# Result codes:

# 0 = Success

# 1 = Failure / No Response

$Result = $null

# Human-readable status

$Status = "NO RESPONSE"

# Stores selected button value

$selectedValue = ""

# Stores the exact time the button was clicked

$ClickTime = ""

# =========================================================

# CREATE MAIN FORM

# =========================================================

$form = New-Object System.Windows.Forms.Form

# Window title

$form.Text = "MFA Verification"

# Window size

$form.Size = New-Object System.Drawing.Size(420,320)

# Open centered on screen

$form.StartPosition = "CenterScreen"

# Keep popup above all windows

$form.TopMost = $true

# Prevent resizing

$form.FormBorderStyle = "FixedDialog"

$form.MaximizeBox = $false

# =========================================================

# MESSAGE LABEL

# =========================================================

$label = New-Object System.Windows.Forms.Label

# CUSTOMIZE THIS MESSAGE

$label.Text = "Please verify your sign-in request by selecting the matching number below."

# Label size and position

$label.Size = New-Object System.Drawing.Size(360,80)

$label.Location = New-Object System.Drawing.Point(30,20)

# Font settings

$label.Font = New-Object System.Drawing.Font("Segoe UI",10)

# Prevent auto-resizing

$label.AutoSize = $false

$form.Controls.Add($label)

# =========================================================

# DISPLAY MFA NUMBER

# =========================================================

$numberLabel = New-Object System.Windows.Forms.Label

# Display correct MFA number

$numberLabel.Text = $CorrectNumber

# Center the number above the buttons

$numberLabel.Size = New-Object System.Drawing.Size(360,40)

$numberLabel.Location = New-Object System.Drawing.Point(20,110)

# Center text inside label

$numberLabel.TextAlign = [System.Drawing.ContentAlignment]::MiddleCenter

# Large bold font

$numberLabel.Font = New-Object System.Drawing.Font(

"Segoe UI",

18,

[System.Drawing.FontStyle]::Bold

)

$form.Controls.Add($numberLabel)

# =========================================================

# CREATE BUTTONS

# =========================================================

$x = 30

foreach ($Number in $Numbers) {

$button = New-Object System.Windows.Forms.Button

# Button text

$button.Text = $Number

# Button size

$button.Size = New-Object System.Drawing.Size(80,35)

# Button position

$button.Location = New-Object System.Drawing.Point($x,180)

# =====================================================

# BUTTON CLICK EVENT

# =====================================================

$button.Add_Click({

# Save selected number

$script:selectedValue = $this.Text

# Save exact click time

$script:ClickTime = (Get-Date).ToString("yyyy-MM-dd HH:mm:ss UTC")

# Check if correct number selected

if ($script:selectedValue -eq $CorrectNumber.ToString()) {

$script:Result = 0

$script:Status = "SUCCESS"

}

else {

$script:Result = 1

$script:Status = "FAILURE"

}

# Close popup

$form.Close()

})

# Add button to form

$form.Controls.Add($button)

# Move next button to the right

$x += 90

}

# =========================================================

# SHOW POPUP

# =========================================================

$form.ShowDialog()

# =========================================================

# HANDLE NO RESPONSE

# =========================================================

# User closed popup or did not click

if ($Result -eq $null) {

$Result = 1

$Status = "NO RESPONSE"

# Store timeout/close time

$ClickTime = (Get-Date).ToString("yyyy-MM-dd HH:mm:ss UTC")

}

# =========================================================

# JSON PAYLOAD

# =========================================================

# Data sent to webhook

$Body = @{

User = $env:USERNAME

Computer = $env:COMPUTERNAME

ClickTime = $ClickTime

Status = $Status

Selected = $selectedValue

Correct = $CorrectNumber

ReportTime = (Get-Date).ToString("yyyy-MM-dd HH:mm:ss UTC")

} | ConvertTo-Json

# =========================================================

# SEND WEBHOOK

# =========================================================

try {

Invoke-RestMethod `

-Uri $WebhookUrl `

-Method POST `

-Body $Body `

-ContentType "application/json"

Write-Output "Webhook sent successfully."

}

catch {

Write-Output "Webhook failed: $_"

}

# =========================================================

# LOCAL OUTPUT / INTUNE LOGGING

# =========================================================

Write-Output ""

Write-Output "====================================="

Write-Output "User : $env:USERNAME"

Write-Output "Computer : $env:COMPUTERNAME"

Write-Output "Status : $Status"

Write-Output "Selected : $selectedValue"

Write-Output "Correct : $CorrectNumber"

Write-Output "Click Time : $ClickTime"

Write-Output "====================================="

# =========================================================

# EXIT CODES

# =========================================================

# Exit 0 = Success

# Exit 1 = Failure / No Response

if ($Result -eq 0) {

exit 0

}

else {

exit 1

}