From 9b6cff75dd432b103364f0e3950b59e9acba8fa0 Mon Sep 17 00:00:00 2001 From: AdminDroid <49208841+admindroid-community@users.noreply.github.com> Date: Fri, 1 Nov 2019 14:37:15 +0530 Subject: [PATCH] Office 365 User Last Logon Time Report --- .../LastLogonTimeReport.ps1 | 221 ++++++++++++++++++ 1 file changed, 221 insertions(+) create mode 100644 Office 365 User Last Logon Time Report/LastLogonTimeReport.ps1 diff --git a/Office 365 User Last Logon Time Report/LastLogonTimeReport.ps1 b/Office 365 User Last Logon Time Report/LastLogonTimeReport.ps1 new file mode 100644 index 0000000..7b44bf3 --- /dev/null +++ b/Office 365 User Last Logon Time Report/LastLogonTimeReport.ps1 @@ -0,0 +1,221 @@ +#Accept input parameter +Param +( + [Parameter(Mandatory = $false)] + [int]$InactiveDays, + [switch]$UserMailboxOnly, + [switch]$ReturnNeverLoggedInMB, + [string]$UserName, + [string]$Password, + [switch]$MFA + +) + +#Check for MSOnline module +$Modules=Get-Module -Name MSOnline -ListAvailable +if($Modules.count -eq 0) +{ + Write-Host Please install MSOnline module using below command: `nInstall-Module MSOnline -ForegroundColor yellow + Exit +} + +#Connect AzureAD and Exchange Online from PowerShell +Get-PSSession | Remove-PSSession + +#Get friendly name of license plan from external file +$FriendlyNameHash=Get-Content -Raw -Path .\LicenseFriendlyName.txt -ErrorAction Stop | ConvertFrom-StringData + + +#Set output file +$ExportCSV=".\LastLogonTimeReport_$((Get-Date -format yyyy-MMM-dd-ddd` hh-mm` tt).ToString()).csv" + +#Authentication using MFA + if($MFA.IsPresent) + { + $MFAExchangeModule = ((Get-ChildItem -Path $($env:LOCALAPPDATA+"\Apps\2.0\") -Filter CreateExoPSSession.ps1 -Recurse ).FullName | Select-Object -Last 1) + If ($MFAExchangeModule -eq $null) + { + Write-Host `nPlease install Exchange Online MFA Module. -ForegroundColor yellow + + Write-Host You can install module using below blog : `nLink `nOR you can install module directly by entering "Y"`n + $Confirm= Read-Host Are you sure you want to install module directly? [Y] Yes [N] No + if($Confirm -match "[yY]") + { + Write-Host Yes + Start-Process "iexplore.exe" "https://cmdletpswmodule.blob.core.windows.net/exopsmodule/Microsoft.Online.CSE.PSModule.Client.application" + } + else + { + Start-Process 'https://o365reports.com/2019/03/23/export-dynamic-distribution-group-members-to-csv/' + Exit + } + $Confirmation= Read-Host Have you installed Exchange Online MFA Module? [Y] Yes [N] No + + if($Confirmation -match "[yY]") + { + $MFAExchangeModule = ((Get-ChildItem -Path $($env:LOCALAPPDATA+"\Apps\2.0\") -Filter CreateExoPSSession.ps1 -Recurse ).FullName | Select-Object -Last 1) + If ($MFAExchangeModule -eq $null) + { + Write-Host Exchange Online MFA module is not available -ForegroundColor red + Exit + } + } + else + { + Write-Host Exchange Online PowerShell Module is required + Start-Process 'https://o365reports.com/2019/03/23/export-dynamic-distribution-group-members-to-csv/' + Exit + } + + } + + #Importing Exchange MFA Module + . "$MFAExchangeModule" + Write-Host Enter credential in prompt to connect to Exchange Online + Connect-EXOPSSession -WarningAction SilentlyContinue + Write-Host Connected to Exchange Online + Write-Host `nEnter credential in prompt to connect to MSOnline + #Importing MSOnline Module + Connect-MsolService | Out-Null + Write-Host Connected to MSOnline `n`nReport generation in progress... + } + #Authentication using non-MFA + else + { + #Storing credential in script for scheduling purpose/ Passing credential as parameter + if(($UserName -ne "") -and ($Password -ne "")) + { + $SecuredPassword = ConvertTo-SecureString -AsPlainText $Password -Force + $Credential = New-Object System.Management.Automation.PSCredential $UserName,$SecuredPassword + } + else + { + $Credential=Get-Credential -Credential $null + } + Connect-MsolService -Credential $credential + $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $Credential -Authentication Basic -AllowRedirection + Import-PSSession $Session -CommandName Get-Mailbox,Get-MailboxStatistics -FormatTypeName * -AllowClobber | Out-Null + } + +$Result="" +$Output=@() +$MBUserCount=0 +$OutputCount=0 + + +Get-Mailbox -ResultSize Unlimited | Where{$_.DisplayName -notlike "Discovery Search Mailbox"} | ForEach-Object{ + $upn=$_.UserPrincipalName + $CreationTime=$_.WhenCreated + $LastLogonTime=(Get-MailboxStatistics -Identity $upn).lastlogontime + $DisplayName=$_.DisplayName + $MBType=$_.RecipientTypeDetails + $Print=1 + $MBUserCount++ + $RolesAssigned="" + Write-Progress -Activity "`n Processed mailbox count: $MBUserCount "`n" Currently Processing: $DisplayName" + + #Retrieve lastlogon time and then calculate Inactive days + if($LastLogonTime -eq $null) + { + $LastLogonTime ="Never Logged In" + $InactiveDaysOfUser="-" + } + else + { + $InactiveDaysOfUser= (New-TimeSpan -Start $LastLogonTime).Days + } + + #Get licenses assigned to mailboxes + $User=(Get-MsolUser -UserPrincipalName $upn) + $Licenses=$User.Licenses.AccountSkuId + $AssignedLicense="" + $Count=0 + + #Convert license plan to friendly name + foreach($License in $Licenses) + { + $Count++ + $LicenseItem= $License -Split ":" | Select-Object -Last 1 + $EasyName=$FriendlyNameHash[$LicenseItem] + if(!($EasyName)) + {$NamePrint=$LicenseItem} + else + {$NamePrint=$EasyName} + $AssignedLicense=$AssignedLicense+$NamePrint + if($count -lt $licenses.count) + { + $AssignedLicense=$AssignedLicense+"," + } + } + if($Licenses.count -eq 0) + { + $AssignedLicense="No License Assigned" + } + + #Inactive days based filter + if($InactiveDaysOfUser -ne "-"){ + if(($InactiveDays -ne "") -and ([int]$InactiveDays -gt $InactiveDaysOfUser)) + { + $Print=0 + }} + + #License assigned based filter + if(($UserMailboxOnly.IsPresent) -and ($MBType -ne "UserMailbox")) + { + $Print=0 + } + + #Never Logged In user + if(($ReturnNeverLoggedInMB.IsPresent) -and ($LastLogonTime -ne "Never Logged In")) + { + $Print=0 + } + + #Get roles assigned to user + $Roles=(Get-MsolUserRole -UserPrincipalName $upn).Name + if($Roles.count -eq 0) + { + $RolesAssigned="No roles" + } + else + { + foreach($Role in $Roles) + { + $RolesAssigned=$RolesAssigned+$Role + if($Roles.indexof($role) -lt (($Roles.count)-1)) + { + $RolesAssigned=$RolesAssigned+"," + } + } + } + + #Export result to CSV file + if($Print -eq 1) + { + $OutputCount++ + $Result=@{'UserPrincipalName'=$upn;'DisplayName'=$DisplayName;'LastLogonTime'=$LastLogonTime;'CreationTime'=$CreationTime;'InactiveDays'=$InactiveDaysOfUser;'MailboxType'=$MBType; 'AssignedLicenses'=$AssignedLicense;'Roles'=$RolesAssigned} + $Output= New-Object PSObject -Property $Result + $Output | Select-Object UserPrincipalName,DisplayName,LastLogonTime,CreationTime,InactiveDays,MailboxType,AssignedLicenses,Roles | Export-Csv -Path $ExportCSV -Notype -Append + } +} + +#Open output file after execution +Write-Host `nScript executed successfully +if((Test-Path -Path $ExportCSV) -eq "True") +{ + Write-Host Result contains $OutputCount mailboxes + Write-Host "Detailed report available in: $ExportCSV" + $Prompt = New-Object -ComObject wscript.shell + $UserInput = $Prompt.popup("Do you want to open output file?",` + 0,"Open Output File",4) + If ($UserInput -eq 6) + { + Invoke-Item "$ExportCSV" + } +} +Else +{ + Write-Host No mailbox found +} +#Clean up session +#Get-PSSession | Remove-PSSession \ No newline at end of file