Forum Discussion
Guest user activity
Hi Adam!
Thanks, yeah I believe I've seen that article before and it deals more with Guest users within certain teams.
My ultimate goal was to reduce the number of Guest users in my tenant, as it appears to be getting out of hand.
With this, I was hoping to see if the Guest user hasn't logged in within a few months or a year we can simply delete them.
I did find this sign in log tutorial: https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/tutorial-signin-logs-download-script
But i believe its only checks up to a month if I recall correctly.
Guest activities should be recorded in the Office 365 Unified Audit log, just like with regular users. On the Azure AD side of things, you can check the Sign-in logs, which you already found, and the Audit logs next to them.
- Justin ScarboroughApr 25, 2019Copper Contributor
- Anthony LeongApr 25, 2019Copper Contributor
It should be in the Audit logs for the guest user.
Under the Initiated by (Actor) field.- Justin ScarboroughApr 25, 2019Copper Contributor
I am assuming the AL located in Azure. I was in there - and I am somewhat barely familiar with how to pull it.
Are you able to tell me certain conditions i can use to pull it faster? If i do the initiated by actor - my name - it pulls up everything I do when I am just trying to look for a specific "Who turned on guest access" not per account - But tenant wide