How to retrieve all the users lastlogon details from entra id

Question

How to retrieve all the users lastlogon details from entra id

Vishwa Teja Devarakonda 40

Hi Q&A team,

So i have been trying to retrieve all the users last logon from the microsoft entra id even i tried to retrieve with the help of KQL queries as well so did not solved my issue so please provide me detailed steps to resolve this issue.

Thank you

Accepted answer

1 additional answer

Your answer

Answer 1

Navya 20,180 Microsoft External Staff Moderator

Hi @Vishwa Teja Devarakonda

Thank you for posting this in Microsoft Q&A.

I understand you want to retrieve all the users last logon details from Entra ID using PowerShell.

Can you please try below PowerShell code

Install-Module Microsoft.Graph
Import-Module Microsoft.Graph 

Connect-MgGraph -Scopes Directory.Read.All,AuditLog.Read.All

Get-MgUser -All -Property 'UserPrincipalName','SignInActivity','Mail','DisplayName' | Select-Object @{N='UserPrincipalName';E={$_.UserPrincipalName}}, @{N='DisplayName';E={$_.DisplayName }}, @{N='LastSignInDate';E={$_.SignInActivity.LastSignInDateTime}} | Export-Csv -Path C:\usernew1.csv -NoTypeInformation -NoClobber

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Vishwa Teja Devarakonda 40 Reputation points

2025-02-05T08:56:25.1+00:00

Hi Navya,

Should i try this command on azure portal or else in windows server give me detailed navigation steps to execute the command.

Thank you
Navya 20,180 Reputation points Microsoft External Staff Moderator

2025-02-05T10:47:24.3133333+00:00
Hi Vishwa Teja Devarakonda

Thank you for following up on this.

Here is Step-by-Step Instructions:

Open PowerShell as Administrator

Install Microsoft Graph Module. Run the following command to install the Microsoft.Graph module.

Install-Module Microsoft.Graph

Import Microsoft Graph Module

Import-Module Microsoft.Graph

Authenticate with Microsoft Graph

You need to authenticate your session with the appropriate permissions. The command below will prompt you to log in and grant the necessary permissions (you’ll need Directory.Read.All and AuditLog.Read.All scopes):

Connect-MgGraph -Scopes Directory.Read.All,AuditLog.Read.All

A sign-in window will appear where you need to enter your Microsoft account credentials. Ensure you have the required permissions to access this data.

Run the Command to Export User Data

The following command retrieves user details (like UserPrincipalName, DisplayName, Last Sign-In Date, etc.) and exports it to a CSV file located at C:\usernew1.csv:

Get-MgUser -All -Property 'UserPrincipalName','SignInActivity','Mail','DisplayName' | Select-Object @{N='UserPrincipalName';E={$_.UserPrincipalName}}, @{N='DisplayName';E={$_.DisplayName}}, @{N='LastSignInDate';E={$_.SignInActivity.LastSignInDateTime}} | Export-Csv -Path C:\usernew1.csv -NoTypeInformation -NoClobber

Check the Output

After the script runs, the CSV file will be saved at C:\usernew1.csv. You can open this file in Excel or any other CSV viewer to check the exported data.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Anonymous

2025-02-06T12:03:44.6833333+00:00

Hi Vishwa Teja Devarakonda,

Following up to see if the above suggestion by Navya was helpful. And, if you have any further query do let us know.

Best Regards

Janaki Kota
Anonymous

2025-02-07T09:46:08.3733333+00:00

Hi Vishwa Teja Devarakonda,

Following up to see if the above suggestion by Navya was helpful. And, if you have any further query do let us know.

Best Regards

Janaki Kota
Navya 20,180 Reputation points Microsoft External Staff Moderator

2025-02-10T02:41:32.95+00:00

Hi @Vishwa Teja Devarakonda

Is there anything else I can help you with regarding this issue? If you still need further help, please feel free to let me know. If your question has been solved, then you can click "Accept Answer", which may help members with similar questions find the answer easily.

Answer 2

Andy David - MVP 157.8K MVP Volunteer Moderator

Different ways here - including powershell

https://admindroid.com/how-to-find-users-last-logon-time-report-in-microsoft-365

Vishwa Teja Devarakonda 40 Reputation points

2025-02-05T05:57:44.9333333+00:00

The solution which you provided is not having enough details
Kavya 490 Reputation points

2025-02-06T08:54:26.5933333+00:00

The provided link offers 4 different solutions, covering both GUI and PowerShell methods.

Additionally, the pre-built script in the link determines the last logon time based on LastSuccessfulSignInDateTime. Typically, most scripts rely on LastSignInDateTime, which includes both successful and failed sign-in attempts.

By using LastSuccessfulSignInDateTime, you can more accurately track last login time while excluding unauthorized failed sign-in attempts.

You can also use the below to get all users' last successful login time.
Get-MgBetaUser -All -Property 'UserPrincipalName','SignInActivity'| Select-Object @{Name='UPN';E={$_.UserPrincipalName}}, @{Name='LastSuccessfulSignInDate';E={$_.SignInActivity.LastSuccessfulSignInDateTime}} | select UPN,LastSuccessfulSignInDate

Share via

How to retrieve all the users lastlogon details from entra id

1 additional answer

Your answer