mirror of
https://github.com/admindroid-community/powershell-scripts.git
synced 2025-12-17 08:25:20 +00:00
M365 Guest User Last Login Time Report
M365 Guest User Last Login Time Report
This commit is contained in:
AdminDroid
parent
5e64e35ab9
commit
e692b4902a
@ -0,0 +1,223 @@
|
||||
<#
|
||||
=============================================================================================
|
||||
Name: Export Microsoft 365 Guest Users' Last Logon Time Report using MS Graph PowerShell
|
||||
Version: 1.0
|
||||
website: o365reports.com
|
||||
|
||||
~~~~~~~~~~~~~~~~~~
|
||||
Script Highlights:
|
||||
~~~~~~~~~~~~~~~~~~
|
||||
1. The script uses MS Graph PowerShell and installs MS Graph PowerShell SDK (if not installed already) upon your confirmation.
|
||||
2. The script can be executed with MFA enabled account too.
|
||||
3. Helps to generate reports based on inactive days.
|
||||
4. Provide details about interactive/non-interactive sign-ins.
|
||||
5. Results can be filtered to lists never logged in guests alone.
|
||||
6. Generates report for sign-in enabled users alone.
|
||||
7. Exports report results as a CSV file.
|
||||
8. Supports filtering licensed users alone.
|
||||
9. The script is scheduler friendly.
|
||||
10.It can be executed with certificate-based authentication (CBA) too.
|
||||
|
||||
|
||||
For detailed Script execution: https://o365reports.com/2024/04/30/export-microsoft-365-guest-users-last-logon-time-report-using-powershell/
|
||||
============================================================================================
|
||||
#>
|
||||
Param
|
||||
(
|
||||
[int]$InactiveDays,
|
||||
[int]$InactiveDays_NonInteractive,
|
||||
[switch]$ReturnNeverLoggedInUser,
|
||||
[switch]$EnabledUsersOnly,
|
||||
[switch]$DisabledUsersOnly,
|
||||
[switch]$LicensedUsersOnly,
|
||||
[switch]$CreateSession,
|
||||
[string]$TenantId,
|
||||
[string]$ClientId,
|
||||
[string]$CertificateThumbprint
|
||||
)
|
||||
|
||||
Function Connect_MgGraph
|
||||
{
|
||||
#Check for module installation
|
||||
$Module=Get-Module -Name Microsoft.Graph.Beta -ListAvailable
|
||||
if($Module.count -eq 0)
|
||||
{
|
||||
Write-Host Microsoft Graph PowerShell SDK is not available -ForegroundColor yellow
|
||||
$Confirm= Read-Host Are you sure you want to install module? [Y] Yes [N] No
|
||||
if($Confirm -match "[yY]")
|
||||
{
|
||||
Write-host "Installing Microsoft Graph PowerShell module..."
|
||||
Install-Module Microsoft.Graph.beta -Repository PSGallery -Scope CurrentUser -AllowClobber -Force
|
||||
}
|
||||
else
|
||||
{
|
||||
Write-Host "Microsoft Graph PowerShell module is required to run this script. Please install module using Install-Module Microsoft.Graph cmdlet."
|
||||
Exit
|
||||
}
|
||||
}
|
||||
#Disconnect Existing MgGraph session
|
||||
if($CreateSession.IsPresent)
|
||||
{
|
||||
Disconnect-MgGraph
|
||||
}
|
||||
|
||||
#Connecting to MgGraph beta
|
||||
Write-Host Connecting to Microsoft Graph...
|
||||
if(($TenantId -ne "") -and ($ClientId -ne "") -and ($CertificateThumbprint -ne ""))
|
||||
{
|
||||
Connect-MgGraph -TenantId $TenantId -AppId $ClientId -CertificateThumbprint $CertificateThumbprint -NoWelcome
|
||||
}
|
||||
else
|
||||
{
|
||||
Connect-MgGraph -Scopes "User.Read.All","AuditLog.read.All" -NoWelcome
|
||||
}
|
||||
}
|
||||
Connect_MgGraph
|
||||
|
||||
$ExportCSV = ".\M365GuestUserS_LastLoginTime_Report_$((Get-Date -format yyyy-MMM-dd-ddd` hh-mm-ss` tt).ToString()).csv"
|
||||
$ExportResult=""
|
||||
$ExportResults=@()
|
||||
|
||||
#Get friendly name of license plan from external file
|
||||
$FriendlyNameHash=Get-Content -Raw -Path .\LicenseFriendlyName.txt -ErrorAction Stop | ConvertFrom-StringData
|
||||
|
||||
$Count=0
|
||||
$PrintedUser=0
|
||||
#retrieve users
|
||||
$RequiredProperties=@('UserPrincipalName','CreatedDateTime','AccountEnabled','Department','JobTitle','RefreshTokensValidFromDateTime','SigninActivity')
|
||||
Get-MgBetaUser -Filter "userType eq 'Guest'" -All -Property $RequiredProperties | select $RequiredProperties | ForEach-Object {
|
||||
$Count++
|
||||
$UPN=$_.UserPrincipalName
|
||||
Write-Progress -Activity "`n Processing user: $Count - $UPN"
|
||||
$LastInteractiveSignIn=$_.SignInActivity.LastSignInDateTime
|
||||
$LastNon_InteractiveSignIn=$_.SignInActivity.LastNonInteractiveSignInDateTime
|
||||
$LastSuccessfulSignInTime=$_.SignInActivity.lastSuccessfulSignInDateTime
|
||||
$CreatedDate=$_.CreatedDateTime
|
||||
$AccountEnabled=$_.AccountEnabled
|
||||
$Department=$_.Department
|
||||
$JobTitle=$_.JobTitle
|
||||
$RefreshTokenValidFrom=$_.RefreshTokensValidFromDateTime
|
||||
#Calculate Inactive days
|
||||
if($LastInteractiveSignIn -eq $null)
|
||||
{
|
||||
$LastInteractiveSignIn = "Never Logged In"
|
||||
$InactiveDays_InteractiveSignIn = "-"
|
||||
}
|
||||
else
|
||||
{
|
||||
$InactiveDays_InteractiveSignIn = (New-TimeSpan -Start $LastInteractiveSignIn).Days
|
||||
}
|
||||
if($LastNon_InteractiveSignIn -eq $null)
|
||||
{
|
||||
$LastNon_InteractiveSignIn = "Never Logged In"
|
||||
$InactiveDays_NonInteractiveSignIn = "-"
|
||||
}
|
||||
else
|
||||
{
|
||||
$InactiveDays_NonInteractiveSignIn = (New-TimeSpan -Start $LastNon_InteractiveSignIn).Days
|
||||
}
|
||||
if($AccountEnabled -eq $true)
|
||||
{
|
||||
$AccountStatus='Enabled'
|
||||
}
|
||||
else
|
||||
{
|
||||
$AccountStatus='Disabled'
|
||||
}
|
||||
|
||||
#Get licenses assigned to mailboxes
|
||||
$Licenses = (Get-MgBetaUserLicenseDetail -UserId $UPN).SkuPartNumber
|
||||
$AssignedLicense = @()
|
||||
|
||||
#Convert license plan to friendly name
|
||||
if($Licenses.count -eq 0)
|
||||
{
|
||||
$LicenseDetails = "No License Assigned"
|
||||
}
|
||||
else
|
||||
{
|
||||
foreach($License in $Licenses)
|
||||
{
|
||||
$EasyName = $FriendlyNameHash[$License]
|
||||
if(!($EasyName))
|
||||
{$NamePrint = $License}
|
||||
else
|
||||
{$NamePrint = $EasyName}
|
||||
$AssignedLicense += $NamePrint
|
||||
}
|
||||
$LicenseDetails = $AssignedLicense -join ", "
|
||||
}
|
||||
$Print=1
|
||||
|
||||
|
||||
#Inactive days based on interactive signins filter
|
||||
if($InactiveDays_InteractiveSignIn -ne "-")
|
||||
{
|
||||
if(($InactiveDays -ne "") -and ($InactiveDays -gt $InactiveDays_InteractiveSignIn))
|
||||
{
|
||||
$Print=0
|
||||
}
|
||||
}
|
||||
|
||||
#Inactive days based on non-interactive signins filter
|
||||
if($InactiveDays_NonInteractiveSignIn -ne "-")
|
||||
{
|
||||
if(($InactiveDays_NonInteractive -ne "") -and ($InactiveDays_NonInteractive -gt $InactiveDays_NonInteractiveSignIn))
|
||||
{
|
||||
$Print=0
|
||||
}
|
||||
}
|
||||
|
||||
#Never Logged In user
|
||||
if(($ReturnNeverLoggedInUser.IsPresent) -and ($LastInteractiveSignIn -ne "Never Logged In"))
|
||||
{
|
||||
$Print=0
|
||||
}
|
||||
|
||||
|
||||
#Signin Allowed Users
|
||||
if($EnabledUsersOnly.IsPresent -and $AccountStatus -eq 'Disabled')
|
||||
{
|
||||
$Print=0
|
||||
}
|
||||
|
||||
#Signin disabled users
|
||||
if($DisabledUsersOnly.IsPresent -and $AccountStatus -eq 'Enabled')
|
||||
{
|
||||
$Print=0
|
||||
}
|
||||
|
||||
#Licensed Users ony
|
||||
if($LicensedUsersOnly -and $Licenses.Count -eq 0)
|
||||
{
|
||||
$Print=0
|
||||
}
|
||||
|
||||
#Export users to output file
|
||||
if($Print -eq 1)
|
||||
{
|
||||
$PrintedUser++
|
||||
$ExportResult=[PSCustomObject]@{'UPN'=$UPN;'Creation Date'=$CreatedDate;'Last Interactive SignIn Date'=$LastInteractiveSignIn;'Last Non Interactive SignIn Date'=$LastNon_InteractiveSignIn;'Inactive Days(Interactive SignIn)'=$InactiveDays_InteractiveSignIn;'Inactive Days(Non-Interactive Signin)'=$InactiveDays_NonInteractiveSignin;'Refresh Token Valid From'=$RefreshTokenValidFrom;'Last Successful Sign-in Time'=$LastSuccessfulSignInTime;'License Details'=$LicenseDetails;'Account Status'=$AccountStatus;'Department'=$Department;'Job Title'=$JobTitle}
|
||||
$ExportResult | Export-Csv -Path $ExportCSV -Notype -Append
|
||||
}
|
||||
}
|
||||
|
||||
#Open output file after execution
|
||||
Write-Host `nScript executed successfully
|
||||
if((Test-Path -Path $ExportCSV) -eq "True")
|
||||
{
|
||||
Write-Host `n~~ Script prepared by AdminDroid Community ~~`n -ForegroundColor Green
|
||||
Write-Host "~~ Check out " -NoNewline -ForegroundColor Green; Write-Host "admindroid.com" -ForegroundColor Yellow -NoNewline; Write-Host " to get access to 1800+ Microsoft 365 reports. ~~" -ForegroundColor Green `n`n
|
||||
Write-Host "Exported report has $PrintedUser user(s)"
|
||||
$Prompt = New-Object -ComObject wscript.shell
|
||||
$UserInput = $Prompt.popup("Do you want to open output file?",` 0,"Open Output File",4)
|
||||
if ($UserInput -eq 6)
|
||||
{
|
||||
Invoke-Item "$ExportCSV"
|
||||
}
|
||||
Write-Host "Detailed report available in: $ExportCSV"
|
||||
}
|
||||
else
|
||||
{
|
||||
Write-Host "No user found" -ForegroundColor Red
|
||||
}
|
||||
Loading…
x
Reference in New Issue
Block a user