Comments (3)
Looks like you mean this script
https://github.com/OfficeDev/O365-InvestigationTooling/blob/master/InactiveUsersLast90Days.ps1
A couple of things come to mind -
The results in this are 5000 - if you have more than that for the last 90 days, you might not be checking the whole 90 days.
Perhaps you don't have all of the logging needed for the events to show up on the active accounts you are pulling?
Maybe your "allow remembering" is set long-enough that these people haven't had "log on" prompts in that time, and the login just didn't expire/renew in that time frame?
from o365-investigationtooling.
The "remember" prompts are 14 days.
I do get this warning:
WARNING: The names of some imported commands from the module 'tmp_vdysgudt.jlg' include unapproved verbs that might make them less discoverable. To find the commands with unapproved verbs, run the Import-Module command again with the Verbose parameter. For a list of approved verbs, type Get-Verb.
from o365-investigationtooling.
the unapproved verbs warning is not a worry.
That is just non-standard verbs used in one of the commands somewhere
(To see about standard powershell verbs check this link)
from o365-investigationtooling.
Related Issues (20)
- DumpDelegatesandForwardingRules doesn't have target of Get-InboxRule in output HOT 2
- Update EnableMailboxAuditing.ps1 HOT 1
- EnableMailboxAuditing.ps1 add SchedulingMailbox type HOT 4
- unapproved verbs & UseDatabaseQuotaDefaults
- inactiveInLastThreeMonthsUsers HOT 1
- WARNING: Proxy creation has been skipped for the following command:
- Script Times Out When Running Against 5000 Users HOT 1
- Set up all scripts to work from docker
- Legacy authentication turned off HOT 3
- Too many result than Azure AD Admin Center showed HOT 2
- DumpDelegatesandForwardingRules.ps1 trouble running on Exchange Online Powershell Module with MFA
- Are these being updated? HOT 3
- EnableMailboxAuditing.ps1 suggest HOT 1
- EnableMailboxAuditing.ps1 missing ? HOT 1
- How can I decrypt the action and condition fields HOT 2
- Broken link in documentation
- "The account does not have permission to impersonate the requested user."
- InactiveUsersLast90Days.ps1 - limit of 5000 audit log items
- InactiveUsersLast90Days.ps1 - UserLoginFailed events
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from o365-investigationtooling.