Solved

Logon dates for Microsoft Office 365 Exchange Online user

Posted on 2014-04-07
4
1,619 Views
Last Modified: 2014-04-14
Is it possible to find all of the logon dates for a single Microsoft Office 365/Exchange Online user using powershell?  I see a command to get the last logon date, but I have been asked to provide the first logon date, and all logon dates since.  We migrated about 4 months ago.  

Is there a powershell command or script that will provide this?

Thank you
0
Comment
Question by:TOHIT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 43

Expert Comment

by:Amit
ID: 39984164
As far as, i know you can find only last logon date. So, chances are rare or impossible to fetch, until MS is maintaining it somewhere....However, you can use mailbox level auditing, that can provide you lot of information, but need to be enabled first.

Check below article for more ref:

https://www.cogmotive.com/blog/office-365-tips/enable-mailbox-auditing-for-office-365-users
0
 
LVL 40

Expert Comment

by:Vasil Michev (MVP)
ID: 39985012
AuditOwner is NOT available in Exchange Online, so you're pretty much left with no option. Open a case with Microsoft and see what they come up with...
0
 

Accepted Solution

by:
TOHIT earned 0 total points
ID: 39988895
Actually Microsoft replied with a powershell command that worked for what I needed. The only problem I had was that it gave me a list of all users for the time frame that I selected, and although it provided the correct dates, all logon times showed as 12:00 a.m., not sure why.  

The command, run from exchange powershell is:

Get-ConnectionByClientTypeDetailReport -StartDate 12/15/2013 -EndDate 03/31/2014 -resultsize Unlimited | Out-GridView

You can change the result size if you want to limit it, and need to customize the startdate and endate.
0
 

Author Closing Comment

by:TOHIT
ID: 39998547
The other comments were helpful, but Microsoft finally responded to a service ticket with the information that I needed.  I posted it here in case anyone else was looking for the information.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The following article is intended as a guide to using PowerShell as a more versatile and reliable form of application detection in SCCM.
A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…
A company’s greatest vulnerability is their email. CEO fraud, ransomware and spear phishing attacks are the no1 threat to a company’s security. Cybercrime is responsible for the largest loss of money to companies today with losses projected to r…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question