Over 280,000 organizations across 190 countries
trust ManageEngine to manage their IT.

IT administrators can leverage the last logon reports to check and monitor any unauthorized logons to their AD environment.
In the event of a security incident, the last logon reports can help in identifying the source of the incident.

PowerShell scripts can fetch you the login details of multiple M365 mailbox users at once, but they require extensive scripting knowledge and offer limited filtering options. Using the Microsoft 365 Admin Center, you can view the last logon time of only one user at a time.

ManageEngine ADManager Pluslets you generate reports on logon times of multiple M365 users in one go without any PowerShell scripts.

Simplify Microsoft 365 last logon reporting
with ADManager Plus

 
 
1
 

Schedule the report to be generated and emailed to specified recipients at specified times.

1
 

Export Microsoft 365 last logon reports in various formats including CSV, PDF, HTML, and XLS.

1
 

View last logon times, last logoff times, Microsoft 365 licenses, and more.

1
 

Get details about AD attributes such as logon times, account statuses, and more.

View last logon times, last logoff times, Microsoft 365 licenses, and more.

Get details about AD attributes such as logon times, account statuses, and more.

Export Microsoft 365 last logon reports in various formats including CSV, PDF, HTML, and XLS.

Schedule the report to be generated and emailed to specified recipients at specified times.

Start your free trial

Frequently asked questions

Why is the Microsoft 365 last logon report needed?

As a security measure, organizations often need to keep track of the logon activities of Microsoft 365 mailbox users. Aside from security, logon information is collected for various reasons such as adhering to compliance standards, detecting policy violations, and identifying licenses assigned to inactive users so you can reassign them to active users.

What are the AD attributes related to the user logon time?

The attributes related to the user logon time are lastLogon and lastLogonTimeStamp. The former is a non-replicating attribute and is updated only in the domain controller that authenticates the user during logon. The latter is the replicated version and its value gets updated whenever the difference between the previous timestamp and the current timestamp exceeds a certain threshold value.
ADManager Plus retrieves the lastLogon value from all DCs and the latest values will be updated for the lastLogon and lastLogonTimeStamp fields.

What are the limitations of generating this report with native AD tools and scripts?

With the Microsoft 365 Admin Center, you can only view the most recent logon information of users individually. If admins wish to obtain the last logon time of multiple Microsoft 365 mailbox users at once, the only alternative is using complex PowerShell scripts. Furthermore, with PowerShell, only limited filtering options are available, which makes it difficult to narrow down and find any suspicious logon activities.

How do I check the Microsoft 365 login history and last logon times of users with ADManager Plus?

To keep tabs on the Microsoft 365 login history, ADManager Plus provides detailed Microsoft 365 user logon information including last logon times, last logoff times, details of Microsoft 365 licenses, and more without requiring you to write any scripts. Along with listing logon information about users with specific licenses, it displays the AD attributes of users such as logon time, account status, and more.

9 out of 10 Fortune 100 companies trust
ManageEngine to manage their IT.

 
4.6/5
 
4.1/5
 
4.5/5
 
4.47/5
 
4.6/5
 
4.6/5
Start your free trial

Over 100,000 technicians
trust ADManager Plus to manage their
Windows environment.

  • ADManager Plus provides us a single point for our Active Directory Reports. For a small IT department this is crucial for saving time and being able to apply our energy to keeping things running smooth. I foresee this being in our arsenal of network tools for a long time to come.

    Mark Anderson

    IT Support, ET Investments

  • ADManager Plus - The Swiss Army Knife for AD Administrator
    It has made managing and administrating Active Directory easy, fast and efficient. Everyday tasks which earlier required us to write Powershell scripts are now easily achievable using an workflow like interface.

    Deputy Chief IT Engineer

    Company Size: 1B - 3B, Energy and Utilities

The Microsoft 365 last logon report is just one of over 90 M365 reports
that come preloaded in ADManager Plus.
Here's a sneak peek into a few other popular features:

Microsoft 365 Management

Create and manage Microsoft 365 users and their licenses, groups, contacts, mailboxes, and more.

AD Password Management

Reset passwords and set password properties from a single, web-based console based on your organization's password policies. You can also delegate password reset operations to help desk technicians.

Integrations

Simplify enterprise user identity and access management by integrating ADManager Plus with other leading IT products.

UltiPro integration ServiceNow integration ServiceDesk Plus integration
×

Start your 30-day free trial

  •  
  • *
     
  •  
  •  
  • By clicking 'Submit' you agree to processing of personal data according to the Privacy Policy.