365 Ghost Users

Alert title: “Ghost Users”

Description: Alerts if an active (can be logged into) user account has not been logged in to for an extended time period.


  • It is possible to ignore users
  • The number of days at which to create the alert must be set.

The problem: Some users may have active accounts (can be logged into) – but are not using them for a long time.

Impact: This typically indicates a user account that is not being actively used, however is still operational.  These accounts are at risk of being forgotten about, and later activated or used without permission.

Suggested steps: Engage a technician to confirm that the alert is accurate. De-activate any accounts that don’t need to be active.