Entra / Microsoft 365 · Exchange Online
Find inactive email users
Find inactive email users based on the message trace information, which means we can only go back ten days.
Connect & set up
Run these once per session. All scopes are read-only unless the script makes changes.
Connect-ExchangeOnline -ShowBanner:$False
Run it
The main script. Copy it, or download the .ps1 and run it from your console.
param([int] $LookbackDays = 10,[string] $StartDate = "$EndDate.AddDays(-$LookbackDays)",[string] $EndDate = "Get-Date")[array]$Modules = Get-Module | Select-Object -ExpandProperty NameIf ($Modules -notcontains "ExchangeOnlineManagement") {Write-Host "Connecting to Exchange Online..."Connect-ExchangeOnline -ShowBanner:$False}[array]$Messages = $Null$Page = 1Write-Host "Collecting message trace data for the last 10 days"Do{[array]$CurrentMessages = (Get-MessageTrace -Status Delivered -PageSize 5000 -Page $Page `-StartDate $StartDate -EndDate $EndDate | Select-Object SenderAddress, Subject, Received)$Page++$Messages += $CurrentMessages} Until ($Null -eq $CurrentMessages)$Messages = $Messages | Sort-Object {$_.Received -as [datetime]} -Descending[array]$MessageTable = ($Messages | Sort-Object SenderAddress -Unique)Write-Host "Looking for mailboxes..."[array]$Mbx = Get-ExoMailbox -ResultSize Unlimited -RecipientTypeDetails 'UserMailbox' | Sort-Object DisplayNameWrite-Host ("Processing {0} mailboxes to check activity..." -f $Mbx.count)$Report = [System.Collections.Generic.List[Object]]::new()[int]$ActiveStatusCount = 0ForEach ($M in $Mbx) {$LastActiveDate = $nullIf ($MessageTable -Match $M.PrimarySMTPAddress) {$ActiveStatus = "Active"; $ActiveStatusCount++$LastActiveDate = $Messages | Where-Object {$_.SenderAddress -eq $M.PrimarySMTPAddress} | Select-Object -First 1 | Select-Object -ExpandProperty ReceivedWrite-Host ("{0} is active - message found on {1}" -f $M.DisplayName, $LastActiveDate) -Foregroundcolor Yellow} Else {$ActiveStatus = "Inactive"Write-Host ("{0} is inactive" -f $M.DisplayName) -Foregroundcolor Red}If ($null -ne $LastActiveDate) {$LastActiveDate = Get-Date ($LastActiveDate) -format 'dd-MMM-yyyy HH:mm:ss'} Else {$LastActiveDate = "N/A"}$Reportline = [pscustomobject]@{Name = $M.DisplayNameUPN = $M.UserPrincipalNamePrimarySMTPAddress = $M.PrimarySMTPAddressActive = $ActiveStatus'Last sent message' = $LastActiveDate}$Report.Add($ReportLine)$Text = ("Mailbox state checked on {0} and determined as {1}. Last message addressed on {2}" `-f (Get-Date -format g), $ActiveStatus, $LastActiveDate )# This line updates the mailbox with details of the assessment. Comment it out if you don't want to do thisSet-Mailbox -Identity $M.Alias -CustomAttribute15 $Text}Write-Host ""Write-Host ("Total mail users checked: {0}" -f $Mbx.count)Write-Host ("Active mail users: {0}" -f $ActiveStatusCount)Write-Host ("Inactive mail users: {0}" -f ($Mbx.count - $ActiveStatusCount))Write-Host ""# Generate reportsIf (Get-Module ImportExcel -ListAvailable) {$ExcelGenerated = $TrueImport-Module ImportExcel -ErrorAction SilentlyContinue$OutputXLSXFile = ((New-Object -ComObject Shell.Application).Namespace('shell:Downloads').Self.Path) + "\InactiveMailUsers.xlsx"$Report | Export-Excel -Path $OutputXLSXFile -WorksheetName "Inactive Mail Users Report" -Title ("Inactive Mail Users Report{0}" -f (Get-Date -format 'dd-MMM-yyyy')) -TitleBold -TableName "InactiveMailUsers"} Else {$OutputCSVFile = ((New-Object -ComObject Shell.Application).Namespace('shell:Downloads').Self.Path) + "\InactiveMailUsers.csv"$Report | Export-Csv -Path $OutputCSVFile -NoTypeInformation -Encoding Utf8}If ($ExcelGenerated) {Write-Host ("An Excel report is available in {0}" -f $OutputXLSXFile)} Else {Write-Host ("A CSV report is available in {0}" -f $OutputCSVFile)}
Parameters
ParameterDefaultNotes
-LookbackDays10Number of days back to search message trace data (Exchange Online limit is 10 days).-StartDate$EndDate.AddDays(-10)Start of the message trace search window.-EndDateGet-DateEnd of the message trace search window.Attribution
Author
Office365itpros