How to Check Login Activity/History in Microsoft Office 365?

To check login activity/history in Microsoft Office 365, you can use the following steps:

1. Sign in to the Microsoft 365 Admin Center: Go to the Microsoft 365 Admin Center and sign in with an admin account.
2. Access the Security & Compliance Center: In the Admin Center, click on “Admin centers” and select “Security & Compliance”.
3. Navigate to Audit Log Search: In the Security & Compliance Center, click on “Search” on the left menu, and then select “Audit log search”.
4. Select the Date Range: Select the date range for which you want to view login activity. You can choose a pre-defined date range or select a custom range.
5. Filter Results: To view login activity, use the “Activities” drop-down list to filter for “UserSignInFailed” and “UserLoggedIn” activities.
6. View Login Details: Select an activity from the search results to view the details of the login event. You can view information such as the user account, date and time of the login, and the location and device from which the login occurred.
7. Export Results: You can also export the search results to a CSV file for further analysis.

By following these steps, you can check login activity/history in Microsoft Office 365 and help identify potential security issues in your organization. It is important to regularly review login activity to ensure that only authorized users are accessing your organization’s resources.