Inactive users in EntraID

What is a one sentence summary of your feature request?

Report for inactive users that considers hybrid AD environment

Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.

In a hybrid environment, I use AD to track inactive accounts. There are other accounts that are entra only, this would be a way to track both in the same place.

How do you currently solve the challenges you have by not having this feature?

Entra ID is not covered and requires manual scripting.

3 Likes

Same for all M365 environments with no Domain Controllers. Saw that this is a free product by Netwrix if you have AD. But no such thing if you’ve gotten rid of your DCs. Plus One.

1 Like

Trying to make it work in the next iteration.

We have some external users who only have access to our Sharepoint. Since they dont log in a computer on our domain the normal inactive users report doesnt work for them. Having a way to track inactive O365/M365 users would be very helpful for us.

3 Likes

Current Netwrix Risk Assessment reports flag “inactive” AD accounts without considering Entra activity. In hybrid environments, this creates false positives—users appear inactive when they’re actively authenticating via Entra.

Why it matters:

  • Misleading risk indicators
  • Compliance reporting inaccuracies
  • Wasted cleanup efforts

What’s needed:

  • Correlate AD and Entra login data using a common identifier (e.g., UPN)
  • Define inactivity across both platforms for accurate reporting

Bottom line: Post-COVID, and as companies move more workloads to the cloud, hybrid identity is the norm. Risk reporting must reflect real user activity, not just AD logins.

1 Like