Forum Discussion

Iron Contributor

Sep 22, 2017

List all users' last login date

Is it possible, using PowerShell, to list all AAD users' last login date (no matter how they logged in)? I have found a couple of scripts that check the last mailbox login, but that is not what we ne...

Azure Active Directory (AAD)

Kevin_Morgan

Iron Contributor

Dec 18, 2022

Donald Mosteller

The Microsoft Graph API now supports the resource property signInActivity in users end-point, this resource exposes the lastSignInDateTime property which shows the last time a user made a successful sign-in. Fetching signInActivity property requires an Azure AD Premium P1/P2 license and the AuditLog.Read.All permission. The following request retrieves user details along with signInActivity property.

#GET Request
https://graph.microsoft.com/beta/users?$select=displayName,signInActivity

You can refer the below post to know more details about how to find and export Last login date for all Azure AD Users using PowerShell.

https://morgantechspace.com/2021/09/find-last-login-date-for-all-azure-ad-users-using-powershell.html

Joshua Bines

Iron Contributor

Dec 19, 2022

The thread that keeps on keeping on....

Here is a new page from MS on the topic with all the required information.

https://learn.microsoft.com/en-us/azure/active-directory/reports-monitoring/howto-manage-inactive-user-accounts

Joshua Bines
Iron Contributor
Apr 17, 2023
Hey @everyone,
Because of the paging size change from 1000 to 120, guests maybe be reported incorrectly and deleted. If you are using this script please grab an updated copy and report any bugs!

https://github.com/JBines/Remove-StaleGuests
https://github.com/microsoftgraph/msgraph-sdk-powershell/issues/1898