Audit Mac's for which O365 account is signed in

anayat_chowdhur
New Contributor II

We have a bit of an issue with users using their O365 accounts to sign other machines in, we have Office 365 Business, but we primarily use Gsuite, so we prefer most users to use the google apps, however some have access to O365, which they've used to sign their machines in, but others too, which is an issue when they've done it more than 5 times. I know I can audit this inside of the Microsoft Admin panel, but machine names have changed so not really up to date. But wondered if there was a way I could use Jamf to pull this info out, for example a plist file containing the signed in username?

2 REPLIES 2

m_donovan
Contributor III

This will return what email address was used to activate office.

defualts read com.microsoft.office OfficeActivationEmailAddress

scottb
Honored Contributor

Little typo ;)

defaults read com.microsoft.office OfficeActivationEmailAddress