From e692b4902ac61146fb882f962b36ebe61d5f3f9d Mon Sep 17 00:00:00 2001
From: AdminDroid <49208841+admindroid-community@users.noreply.github.com>
Date: Thu, 2 May 2024 13:47:34 +0530
Subject: [PATCH] M365 Guest User Last Login Time Report

M365 Guest User Last Login Time Report
---
 .../M365GuestsLastLoginTimeReport.ps1         | 223 ++++++++++++++++++
 1 file changed, 223 insertions(+)
 create mode 100644 Guest Users Last Logon Time Report/M365GuestsLastLoginTimeReport.ps1

diff --git a/Guest Users Last Logon Time Report/M365GuestsLastLoginTimeReport.ps1 b/Guest Users Last Logon Time Report/M365GuestsLastLoginTimeReport.ps1
new file mode 100644
index 0000000..7470716
--- /dev/null
+++ b/Guest Users Last Logon Time Report/M365GuestsLastLoginTimeReport.ps1	
@@ -0,0 +1,223 @@
+<#
+=============================================================================================
+Name:           Export Microsoft 365 Guest Users' Last Logon Time Report using MS Graph PowerShell
+Version:        1.0
+website:        o365reports.com
+
+~~~~~~~~~~~~~~~~~~
+Script Highlights:
+~~~~~~~~~~~~~~~~~~
+1. The script uses MS Graph PowerShell and installs MS Graph PowerShell SDK (if not installed already) upon your confirmation. 
+2. The script can be executed with MFA enabled account too. 
+3. Helps to generate reports based on inactive days.  
+4. Provide details about interactive/non-interactive sign-ins.  
+5. Results can be filtered to lists never logged in guests alone. 
+6. Generates report for sign-in enabled users alone. 
+7. Exports report results as a CSV file. 
+8. Supports filtering licensed users alone. 
+9. The script is scheduler friendly. 
+10.It can be executed with certificate-based authentication (CBA) too.  
+
+
+For detailed Script execution:  https://o365reports.com/2024/04/30/export-microsoft-365-guest-users-last-logon-time-report-using-powershell/
+============================================================================================
+#>
+Param
+(
+    [int]$InactiveDays,
+    [int]$InactiveDays_NonInteractive,
+    [switch]$ReturnNeverLoggedInUser,
+    [switch]$EnabledUsersOnly,
+    [switch]$DisabledUsersOnly,
+    [switch]$LicensedUsersOnly,
+    [switch]$CreateSession,
+    [string]$TenantId,
+    [string]$ClientId,
+    [string]$CertificateThumbprint
+)
+
+Function Connect_MgGraph
+{
+ #Check for module installation
+ $Module=Get-Module -Name Microsoft.Graph.Beta -ListAvailable
+ if($Module.count -eq 0) 
+ { 
+  Write-Host Microsoft Graph PowerShell SDK is not available  -ForegroundColor yellow  
+  $Confirm= Read-Host Are you sure you want to install module? [Y] Yes [N] No 
+  if($Confirm -match "[yY]") 
+  { 
+   Write-host "Installing Microsoft Graph PowerShell module..."
+   Install-Module Microsoft.Graph.beta -Repository PSGallery -Scope CurrentUser -AllowClobber -Force
+  }
+  else
+  {
+   Write-Host "Microsoft Graph PowerShell module is required to run this script. Please install module using Install-Module Microsoft.Graph cmdlet." 
+   Exit
+  }
+ }
+ #Disconnect Existing MgGraph session
+ if($CreateSession.IsPresent)
+ {
+  Disconnect-MgGraph
+ }
+
+ #Connecting to MgGraph beta
+ Write-Host Connecting to Microsoft Graph...
+ if(($TenantId -ne "") -and ($ClientId -ne "") -and ($CertificateThumbprint -ne ""))  
+ {  
+  Connect-MgGraph  -TenantId $TenantId -AppId $ClientId -CertificateThumbprint $CertificateThumbprint -NoWelcome
+ }
+ else
+ {
+  Connect-MgGraph -Scopes "User.Read.All","AuditLog.read.All"  -NoWelcome
+ }
+}
+Connect_MgGraph
+
+$ExportCSV = ".\M365GuestUserS_LastLoginTime_Report_$((Get-Date -format yyyy-MMM-dd-ddd` hh-mm-ss` tt).ToString()).csv"
+$ExportResult=""   
+$ExportResults=@()  
+
+#Get friendly name of license plan from external file
+$FriendlyNameHash=Get-Content -Raw -Path .\LicenseFriendlyName.txt -ErrorAction Stop | ConvertFrom-StringData
+
+$Count=0
+$PrintedUser=0
+#retrieve users
+$RequiredProperties=@('UserPrincipalName','CreatedDateTime','AccountEnabled','Department','JobTitle','RefreshTokensValidFromDateTime','SigninActivity')
+Get-MgBetaUser -Filter "userType eq 'Guest'" -All -Property $RequiredProperties | select $RequiredProperties | ForEach-Object {
+ $Count++
+ $UPN=$_.UserPrincipalName
+ Write-Progress -Activity "`n     Processing user: $Count - $UPN"
+ $LastInteractiveSignIn=$_.SignInActivity.LastSignInDateTime
+ $LastNon_InteractiveSignIn=$_.SignInActivity.LastNonInteractiveSignInDateTime
+ $LastSuccessfulSignInTime=$_.SignInActivity.lastSuccessfulSignInDateTime
+ $CreatedDate=$_.CreatedDateTime
+ $AccountEnabled=$_.AccountEnabled
+ $Department=$_.Department
+ $JobTitle=$_.JobTitle
+ $RefreshTokenValidFrom=$_.RefreshTokensValidFromDateTime
+ #Calculate Inactive days
+ if($LastInteractiveSignIn -eq $null)
+ {
+  $LastInteractiveSignIn = "Never Logged In"
+  $InactiveDays_InteractiveSignIn = "-"
+ }
+ else
+ {
+  $InactiveDays_InteractiveSignIn = (New-TimeSpan -Start $LastInteractiveSignIn).Days
+ }
+ if($LastNon_InteractiveSignIn -eq $null)
+ {
+  $LastNon_InteractiveSignIn = "Never Logged In"
+  $InactiveDays_NonInteractiveSignIn = "-"
+ }
+ else
+ {
+  $InactiveDays_NonInteractiveSignIn = (New-TimeSpan -Start $LastNon_InteractiveSignIn).Days
+ }
+ if($AccountEnabled -eq $true)
+ {
+  $AccountStatus='Enabled'
+ }
+ else
+ {
+  $AccountStatus='Disabled'
+ }
+
+ #Get licenses assigned to mailboxes
+ $Licenses = (Get-MgBetaUserLicenseDetail -UserId $UPN).SkuPartNumber
+ $AssignedLicense = @()
+
+ #Convert license plan to friendly name
+ if($Licenses.count -eq 0)
+ {
+  $LicenseDetails = "No License Assigned"
+ }
+ else
+ {
+  foreach($License in $Licenses)
+  {
+   $EasyName = $FriendlyNameHash[$License]
+   if(!($EasyName))
+   {$NamePrint = $License}
+   else
+   {$NamePrint = $EasyName}
+   $AssignedLicense += $NamePrint
+  }
+  $LicenseDetails = $AssignedLicense -join ", "
+ }
+ $Print=1
+
+
+ #Inactive days based on interactive signins filter
+ if($InactiveDays_InteractiveSignIn -ne "-")
+ {
+  if(($InactiveDays -ne "") -and ($InactiveDays -gt $InactiveDays_InteractiveSignIn))
+  {
+   $Print=0
+  }
+ }
+    
+ #Inactive days based on non-interactive signins filter
+ if($InactiveDays_NonInteractiveSignIn -ne "-")
+ {
+  if(($InactiveDays_NonInteractive -ne "") -and ($InactiveDays_NonInteractive -gt $InactiveDays_NonInteractiveSignIn))
+  {
+   $Print=0
+  }
+ }
+
+ #Never Logged In user
+ if(($ReturnNeverLoggedInUser.IsPresent) -and ($LastInteractiveSignIn -ne "Never Logged In"))
+ {
+  $Print=0
+ }
+
+ 
+ #Signin Allowed Users
+ if($EnabledUsersOnly.IsPresent -and $AccountStatus -eq 'Disabled')
+ {      
+  $Print=0
+ }
+
+ #Signin disabled users
+ if($DisabledUsersOnly.IsPresent -and $AccountStatus -eq 'Enabled')
+ {
+  $Print=0
+ }
+
+ #Licensed Users ony
+ if($LicensedUsersOnly -and $Licenses.Count -eq 0)
+ {
+  $Print=0
+ }
+
+ #Export users to output file
+ if($Print -eq 1)
+ {
+  $PrintedUser++
+  $ExportResult=[PSCustomObject]@{'UPN'=$UPN;'Creation Date'=$CreatedDate;'Last Interactive SignIn Date'=$LastInteractiveSignIn;'Last Non Interactive SignIn Date'=$LastNon_InteractiveSignIn;'Inactive Days(Interactive SignIn)'=$InactiveDays_InteractiveSignIn;'Inactive Days(Non-Interactive Signin)'=$InactiveDays_NonInteractiveSignin;'Refresh Token Valid From'=$RefreshTokenValidFrom;'Last Successful Sign-in Time'=$LastSuccessfulSignInTime;'License Details'=$LicenseDetails;'Account Status'=$AccountStatus;'Department'=$Department;'Job Title'=$JobTitle}
+  $ExportResult | Export-Csv -Path $ExportCSV -Notype -Append
+ }
+}
+
+#Open output file after execution
+Write-Host `nScript executed successfully
+if((Test-Path -Path $ExportCSV) -eq "True")
+{
+    Write-Host `n~~ Script prepared by AdminDroid Community ~~`n -ForegroundColor Green
+    Write-Host "~~ Check out " -NoNewline -ForegroundColor Green; Write-Host "admindroid.com" -ForegroundColor Yellow -NoNewline; Write-Host " to get access to 1800+ Microsoft 365 reports. ~~" -ForegroundColor Green `n`n
+    Write-Host "Exported report has $PrintedUser user(s)" 
+    $Prompt = New-Object -ComObject wscript.shell
+    $UserInput = $Prompt.popup("Do you want to open output file?",` 0,"Open Output File",4)
+    if ($UserInput -eq 6)
+    {
+        Invoke-Item "$ExportCSV"
+    }
+    Write-Host "Detailed report available in: $ExportCSV"
+}
+else
+{
+    Write-Host "No user found" -ForegroundColor Red
+}
\ No newline at end of file