what does the activity date stamp on a device joined to Azure Active Directory actually mean.

Asta Keil 1 Reputation point
2020-12-03T12:05:43.297+00:00

Hi, we had a lost device and we can see a recent activity date when you look up the device in Azure AD under the device. Can we find out who actually signed into the device?
Thank you for your advice. Asta

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,454 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. James Hamil 21,621 Reputation points Microsoft Employee
    2020-12-03T20:30:16.007+00:00

    Hi @Asta Keil , sorry to hear about your lost device! The Active Directory portal allows you to view activity reports. You are able to view who signed in and from where. I believe this should solve your problem! If you still need assistance please let me know. If not, please mark this answer as verified.

    Thank you,
    James

    0 comments
  2. Asta Keil 1 Reputation point
    2020-12-04T08:59:10.753+00:00

    Hi James, thank you for your reply. Yes, I am aware of those logs, but although there is a recent activity date on the device no one with a company email address has logged into the device since well before that activity date. So I'm guessing that must be someone with a local user account on the PC. The administrator is the only local user account on the device and it was Bit-Locker encrypted. If the device was factory reset would that device still show up in Azure AD. Thank you for your insight. Asta