Forum Discussion
Can I audit where the mailbox over log in?
Hi,
We have Office 365 E3. Is it possible to audit when the user log in and from which location (ie. city or ip address)?
Thanks,
Yes, just check user sign-in activity in Azure AD:
https://docs.microsoft.com/en-us/azure/active-directory/active-directory-reporting-activity-sign-ins
You can access Azure AD directly in Azure portal or from "Admin Centers" sections in Office 365 Admin portal.
Also from Azure AD sign-in activity blade you can take your data to power bi, or add Azure AD activity pack directly from Power BI:
8 Replies
Yes, just check user sign-in activity in Azure AD:
https://docs.microsoft.com/en-us/azure/active-directory/active-directory-reporting-activity-sign-ins
You can access Azure AD directly in Azure portal or from "Admin Centers" sections in Office 365 Admin portal.
Also from Azure AD sign-in activity blade you can take your data to power bi, or add Azure AD activity pack directly from Power BI:
Hi P. R. Ortiz,
Thank you for your response. Is this feature additional subscription? I got "Start a free trial to use this feature message".
Thanks,
Yes, you need Azure AD Premium license to audit Sign-in in Azure.
Alternatively, in Power BI you can import Azure AD content pack and you get sign-ins per location in a map, and clicking on it you get more Info such as date, username, IP, etc
AdminDroid Office 365 Reporter provides an inbuilt report for monitoring mailbox login activities with IP address.
http://demo.admindroid.com/#/audit/exchange/reports/21002/1/20The 'http://demo.admindroid.com/#/audit/dashboards/user-activities?filterId=4' can help you to easily monitor logins from non-corporate IPs and failed logins.
Note: To monitor logins from outside corporate IP range you need to create a custom view.
Hi Robert,
Thanks for the info. I will try it.
Thanks,
