Azure AD : Need powershell script to fetch Azure AD User Sign-in date and time (Last logon)

Question

On Premise AD does not update the Azure AD Sign-in Logs and O365 User Activity report does not include the interactive sign in performed by users.
Need PowerShell script to fetch each Azure AD user Sign-in logs, trying to reconcile the On-premise users last login data with Azure AD Sign-in activity to find inactive users.

Get-MSolUser and Get-AzureAdUser does not include the required data and the details are required for unlicensed users also.

Assuming Inactive users to be the one who have not signed-in in last 90 days.

Answer 1

Hi @Sheshank Dhoot ,

maybe this is helpful:
https://learn.microsoft.com/en-us/services-hub/health/remediation-steps-ad/regularly-check-for-and-remove-inactive-user-accounts-in-active-directory
https://blog.ipswitch.com/find-inactive-user-accounts-in-your-domain
https://blog.netwrix.com/2017/06/15/powershell-find-disabled-or-inactive-users-and-computers-in-ad/
https://gist.github.com/9to5IT/c40cea3937c33a1632c749916612dd7c

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 2

Hello,

Thank you for reaching out.

Additionaly,

You can use Get-AzureADAuditSignInLogs powershell command to get user sign in logs from Azure AD.

https://learn.microsoft.com/en-us/powershell/module/azuread/get-azureadauditsigninlogs?view=azureadps-2.0-preview

Hope this helps,

Answer 3

Did anyone find the answer? I am also needing the answer for SheshankDhoot-2954 question.