Where to obtain Workmail users last logon date?

We can retrieve the WorkMail user Last Logon Time from Active Directory. If your Workmail is associated with AD connector, Simple AD or AWS managed AD then you can follow the below steps to retrieve the last logon information of the WorkMail User.

a] Connect to Management Instance in case of Simple AD [1] or AWS managed AD [2]. If you are using AD connector with Self managed AD you can directly login to domain controller.

b] Launch Active Directory Users and Computers console (dsa.msc).

c] Click View and ensure Advanced features is turned on.

d] On the left pane, select the Organization Unit where user is present and then select Workmail user, right click the user account and click Properties.

e] In the list of attributes, look for lastLogon. This attribute shows the time the user was last logged in the domain

In case of AWS managed AD and Self Managed AD, you can retrieve the lastlogon information by running the below PowerShell command ;

Get-ADUser -Filter {Name -eq “username”} -Properties * | Select-Object Name, @{N='LastLogon'; E={[DateTime]::FromFileTime($_.LastLogon)}}

Here replace username with actual workmail username.

Kindly note that lastlogon attribute will get updated even if the user logs into any domain joined machine as well.

Reference

[1] Install the Active Directory Administration Tools for AWS Managed Microsoft AD https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ms_ad_install_ad_tools.html

[2] Install the Active Directory Administration Tools for Simple AD https://docs.aws.amazon.com/directoryservice/latest/admin-guide/simple_ad_install_ad_tools.html