05-12-2020 10:38 PM
I have noticed that User Last Logon time showing in Online Exchange and Sign-in activity at Azure AD portal is different. Mailbox is hosted in O365 (Hybrid Exchange). Some of the mailboxes don't have any sign-in reports in Azure AD, But the last logon date is showing in online Exchange. Is there any difference in both records? why is it showing different dates and times?
05-12-2020 11:47 PM
That's the expected behavior, there are multiple background processes that are accessing the mailbox, so the output of the Get-MailboxStatistics should not be trusted. Tony has discussed this in detail here: https://www.petri.com/get-mailboxstatistics-cmdlet-wrong
08-04-2020 12:26 AM
@Anu_muralidharan Azure AD sign-in report shows all the interactive login attempts. Whereas Exchange Online/Exchange Online PowerShell shows the last login time, which also gets updated when the background process like Mailbox Assistant accesses the mailbox. So, it won't be accurate.