How to retrieve all the users lastlogon details from entra id

Vishwa Teja Devarakonda 0

Hi Q&A team,

So i have been trying to retrieve all the users last logon from the microsoft entra id even i tried to retrieve with the help of KQL queries as well so did not solved my issue so please provide me detailed steps to resolve this issue.

Thank you

2 answers

Andy David - MVP 151.8K Reputation points MVP

2025-02-04T12:18:55.04+00:00

Different ways here - including powershell

https://admindroid.com/how-to-find-users-last-logon-time-report-in-microsoft-365
Please sign in to rate this answer.
Vishwa Teja Devarakonda 0 Reputation points

2025-02-05T05:57:44.9333333+00:00

The solution which you provided is not having enough details
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Navya 14,985 Reputation points Microsoft Vendor

2025-02-05T07:30:42+00:00
Hi @Vishwa Teja Devarakonda

Thank you for posting this in Microsoft Q&A.

I understand you want to retrieve all the users last logon details from Entra ID using PowerShell.

Can you please try below PowerShell code

Install-Module Microsoft.Graph Import-Module Microsoft.Graph Connect-MgGraph -Scopes Directory.Read.All,AuditLog.Read.All Get-MgUser -All -Property 'UserPrincipalName','SignInActivity','Mail','DisplayName' | Select-Object @{N='UserPrincipalName';E={$_.UserPrincipalName}}, @{N='DisplayName';E={$_.DisplayName }}, @{N='LastSignInDate';E={$_.SignInActivity.LastSignInDateTime}} | Export-Csv -Path C:\usernew1.csv -NoTypeInformation -NoClobber

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Please sign in to rate this answer.
Vishwa Teja Devarakonda 0 Reputation points

2025-02-05T08:56:25.1+00:00

Hi Navya,

Should i try this command on azure portal or else in windows server give me detailed navigation steps to execute the command.

Thank you

Navya 14,985 Reputation points Microsoft Vendor

2025-02-05T10:47:24.3133333+00:00

Hi Vishwa Teja Devarakonda

Thank you for following up on this.

Here is Step-by-Step Instructions:

Open PowerShell as Administrator

Install Microsoft Graph Module. Run the following command to install the Microsoft.Graph module.

Install-Module Microsoft.Graph

Import Microsoft Graph Module

Import-Module Microsoft.Graph

Authenticate with Microsoft Graph

You need to authenticate your session with the appropriate permissions. The command below will prompt you to log in and grant the necessary permissions (you’ll need Directory.Read.All and AuditLog.Read.All scopes):

Connect-MgGraph -Scopes Directory.Read.All,AuditLog.Read.All

A sign-in window will appear where you need to enter your Microsoft account credentials. Ensure you have the required permissions to access this data.

Run the Command to Export User Data

The following command retrieves user details (like UserPrincipalName, DisplayName, Last Sign-In Date, etc.) and exports it to a CSV file located at C:\usernew1.csv:

Get-MgUser -All -Property 'UserPrincipalName','SignInActivity','Mail','DisplayName' | Select-Object @{N='UserPrincipalName';E={$_.UserPrincipalName}}, @{N='DisplayName';E={$_.DisplayName}}, @{N='LastSignInDate';E={$_.SignInActivity.LastSignInDateTime}} | Export-Csv -Path C:\usernew1.csv -NoTypeInformation -NoClobber

Check the Output

After the script runs, the CSV file will be saved at C:\usernew1.csv. You can open this file in Excel or any other CSV viewer to check the exported data.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to retrieve all the users lastlogon details from entra id

2 answers

Your answer