Office 365 Users Inactive by AD Group Membership rule

AD Group (DN)

Specify Active Directory group DistinguishedName. The hybrid Office 365 Users that are members of an AD group will be displayed in the report.

Last Microsoft 365 sign in (days ago)

Set a minimum number of days past since a user signs in to Microsoft 365. Use 0 to disable this check.

Last Microsoft 365 service access (days ago)

Set a minimum number of days past since a user accesses Microsoft 365 services.

This queries the dates of the Microsoft activities report and takes the most recent service activity date across all services.

Minimum license assignment age (days)

Set a minimum number of days past since the license assignment to avoid counting new users as inactive. Use 0 to ignore the license assignment date.

Other Query Settings

Properties to display

To display additional properties for each object found by the query, add those properties to the list.

System properties

List of properties required for this rule to be executed correctly.

Post query-filter

To hide unwanted data based on criteria, not supported by Active Directory query, set the filtering conditions here.

Example: filter by the found object Distinguished Name.

Sort by

Sort result object list.

Limit result set

The maximum number of mailboxes returned from Office 365. The default value is taken from Maximum returned results setting on Home > Configuration > Microsoft Office 365 settings.

Initialization script

Usually, rules use query criteria to limit the query search scope. It improves the performance of the executed rule.

Due to PowerShell limitations, it is not possible to use calculated expressions in query criteria. That is the point where initialization script can help. You can initialize a global variable in this setting and then use it in query criteria.

Example: Update AD users, created in the last ten days.

1. Add this initialization script:

{$global:DatePeriod = (Get-Date).AddDays(-10)}

2. Use $DatePeriod variable in query criteria builder: