0

I am trying to simplify my AAD housekeeping tasks by creating a script. However, I am having trouble with...

  1. The "last logon part" in the query does not return value but it works when its by its own
  2. The conversion of last logon from Zulu time to align with other datetime output format
# Work on this after I can get "last logon" value
$timestamp = '2017-08-03T12:30:00.000Z'
$datetime  = ([DateTime]$timestamp).ToUniversalTime()

Can someone provide some guidance on how to do this correctly?

Here is the code:

Get-MsolUser -MaxResults 3 | 
Select-Object DisplayName, 
@{n="UPN";e={$_.UserPrincipalName}},
@{n="Enabled";e={(Get-AzureADUser -ObjectId $_.ObjectId).accountEnabled}},
@{n="PwLastSet";e={($_.LastPasswordChangeTimeStamp)}},
@{n="PwAge";e={(New-TimeSpan -Start ($_.LastPasswordChangeTimestamp) -End (Get-Date) ).Days}},
@{n="Manager";e={(Get-AzureADUserManager -ObjectId $_.ObjectId).UserPrincipalName}},  
@{n="Last Login";e={((Get-AzureADAuditSignInLogs -Filter "UserPrincipalName eq '$($_.UserPrincipalName)'" -Top 1).CreatedDateTime)}}| 
Sort-Object PwAge -descending

Thank you!

ynnaij
  • 37
  • 5
  • What's a Zulu? Usually the name createdDateTime is case sensitive, and only results in a string value. – js2010 Apr 12 '23 at 19:06
  • It's the format of the time returned when I ran the command on its own that looks like '2017-08-03T12:30:00.000Z' - https://stackoverflow.com/questions/8405087/what-is-this-date-format-2011-08-12t201746-384z – ynnaij Apr 13 '23 at 01:24

1 Answers1

1

Please update the script with correct filter syntax as mentioned below:

@{n="Last Login";e={(Get-AzureADAuditSignInLogs -Filter "startsWith(userPrincipalName,'$($_.UserPrincipalName)')" -Top 1).CreatedDateTime}

Sample Output Screenshot

I used this in a sample script and was able to generate the output as well.

Harpreet Singh Matharoo
  • 88
  • 3
  • You, sir, are absolutely awesome! Thank you so much! – ynnaij Apr 13 '23 at 14:06
  • I was wondering if you might have some insight on how to convert Zulu time output to align with the PwLastSet output? Any guidance would be appreciated, as I'm not quite sure how to go about it. – ynnaij Apr 13 '23 at 14:07