How can I extract and export the last user login time to the M365 portal or Azure AD as .CSV file? is there any PowerShell script or GUI procedure?

Hello @EnterpriseArchitect , Welcome to the MS Q&A Forum. In the past, I used these steps to collect the last login date and export to .csv: Go to the Azure portal => App registrations => Register a Test APP Create a secret and save the value Go to API permissions, select Microsoft Graph Explorer and finally select the below permissions Make sure to add those permissions and Grant the Admin consent for the tenant. Once this is done you need to modify the requested parameters on the script and run it. Run PowerShell script https://github.com/12Knocksinna/Office365itpros/blob/master/GetUserSignInDataGraph.PS1 where you will use parameters from above steps. Output example: Hope above answers your questions and concerns. -------------------------------------------------------- Let us know if you need additional assistance. If the answer was helpful, please accept it and complete the quality survey so that others can find a solution. Sincerely, Olga Os

@Graham C @Gal Shalom You just have to ensure to change the following lines for it to work. $AppId = "d716b32c-0edb-48be-9385-30a9cfd96155" $TenantId = "c662313f-14fc-43a2-9a7a-d2e27f4f3478" $AppSecret = 's_rkvIn1oZ1cNceUBvJ2or1lrrIsb*:=' It worked fine after that :)

Exporting user last login to M365 or Azure to .CSV file ?

Accepted answer

Olga Os - MSFT 5,831 Reputation points Microsoft Employee

2022-10-10T17:13:43.287+00:00
Hello @EnterpriseArchitect ,

Welcome to the MS Q&A Forum.

In the past, I used these steps to collect the last login date and export to .csv:

Go to the Azure portal => App registrations => Register a Test APP

Create a secret and save the value

Go to API permissions, select Microsoft Graph Explorer and finally select the below permissions

Make sure to add those permissions and Grant the Admin consent for the tenant.

Once this is done you need to modify the requested parameters on the script and run it.

Run PowerShell script https://github.com/12Knocksinna/Office365itpros/blob/master/GetUserSignInDataGraph.PS1 where you will use parameters from above steps.

Output example:

Hope above answers your questions and concerns.

--------------------------------------------------------

Let us know if you need additional assistance. If the answer was helpful, please accept it and complete the quality survey so that others can find a solution.

Sincerely,
Olga Os
Please sign in to rate this answer.

1 person found this answer helpful.
EnterpriseArchitect 4,721 Reputation points

2022-10-12T23:29:02.947+00:00

Thanks @Olga Os - MSFT , how long does the SignInLogs kept by Microsoft ?

Olga Os - MSFT 5,831 Reputation points Microsoft Employee

2022-10-13T07:36:30.31+00:00

@EnterpriseArchitect ,

The lastsignin property is a static value that is populated for all user accounts including guest accounts. You could see sign-ins up to 260 days in my output above.

Reference: Example 3: Get users including their last sign-in time

Sincerely,
Olga Os

EnterpriseArchitect 4,721 Reputation points

2022-10-13T12:34:53.027+00:00

Cool, thanks @Olga Os - MSFT

Graham C 26 Reputation points

2023-01-27T16:50:53.4333333+00:00

Hi @Olga Os - MSFT --Thank you for sharing this, however, I'm getting the error output below when executing the script. I don't see any culture specific date formatting and seems to be just taking my system time and adjusting from there. Any ideas how I can overcome this? I'm in the US and my system date time format is en-US: MM/DD/YYYY HH:MM AM/PM

Thank you for any suggestions.

~gC

Get-Date : Cannot bind parameter 'Date' to the target. Exception setting "Date": "Cannot convert null to type "System.DateTime"." At line:47 char:35 + Created = Get-Date($User.CreatedDateTime) -format g + ~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : WriteError: (:) [Get-Date], ParameterBindingException + FullyQualifiedErrorId : ParameterBindingFailed,Microsoft.PowerShell.Commands.GetDateCommand

Graham C 26 Reputation points

2023-01-27T19:08:48.8033333+00:00

Disregard my last! If anyone else sees this error like I did, just let it run all the way through!

...

After some searching, I found that this error is an innocuous warning and does not terminate the script. It seemed like it was throwing this for all the users at the speed it was dropping but the subsequent nextlink pages it occured less and after letting it run I was presented with the expected data and spot checked a few users in the AAD UI for validation.

Thanks!!

Meihua 0 Reputation points

2023-05-25T10:51:18.6266667+00:00

How can I set a filter in the script so that only certain outputs are generated, for example only users from a certain department are exported?

Ivan Luke Cruz 0 Reputation points

2023-06-07T05:11:26.55+00:00

Hi is there a license needed for this?
Sign in to comment

Exporting user last login to M365 or Azure to .CSV file ?

2 additional answers