What counts as never signed in?

An account with one or more license assignments and no interactive sign-in recorded in Entra ID, including users created for future hires who never started.

Is it safe to remove licenses from never-signed-in users?

Usually yes, but confirm with HR or the hiring manager first. Some accounts are pre-staged for onboarding. Disabled accounts with licenses are even safer to reclaim.

How much money can this save?

Each Business Premium or E3 seat is roughly $20–36/month; E5 can exceed $50. Ten never-signed-in E5 seats can waste $500+/month.

Where do I run the report in Microsoft 365?

Use Entra ID user list with sign-in activity, Microsoft 365 admin center active users, or PowerShell with Get-MgUser and signInActivity. Filter licensed + no last sign-in.

How is this different from inactive users?

Never-signed-in means zero usage ever. Inactive means they signed in once but not recently. Both waste licenses; never-signed-in is usually politically easier to reclaim.

Can Tenant Hawk find these automatically?

Yes. The cost scan flags never-signed-in licensed accounts and estimates monthly waste using your tenant's license mix.

How to find never-signed-in licensed users in Microsoft 365

Find M365 users who have licenses but never signed in. This is the fastest license waste in most tenants. Reclaim seats before renewal with sign-in reports and safe offboarding steps.

Quick answer

Never-signed-in licensed users are accounts with assigned Microsoft 365 seats but no successful interactive sign-in. Export licensed users, compare to Entra sign-in activity, and reclaim seats from never-used accounts first. It is usually the safest and fastest dollar recovery in any tenant.

Why never-signed-in users are the fastest win

Finance sees license counts. You see the truth: seats assigned to people who never logged in, pre-hire accounts that were never disabled, duplicate test users, or licenses copied from a template.

This is narrower and higher-intent than a general license cleanup. It is also the easiest reclaim to defend in a budget meeting.

How to find never-signed-in licensed users manually

Microsoft 365 admin center → Users → Active users: add Sign-in status column
Entra ID → Users: filter users with licenses; sort by Last sign-in
Microsoft Graph: query users with assignedLicenses and signInActivity; Microsoft documents lastSignInDateTime, lastNonInteractiveSignInDateTime, and lastSuccessfulSignInDateTime on the signInActivity resource
Cross-check disabled accounts: disabled users with active licenses are reclaimable immediately
Export to spreadsheet: UPN, display name, licenses, created date, last sign-in, enabled/disabled

What good looks like

No enabled user holds a paid license for more than 7 days without sign-in (except documented pre-hire staging)
Disabled accounts have zero license assignments within 24 hours of offboarding
HR triggers a dated onboarding record tied to license assignment

How to reclaim licenses safely

Sort by SKU cost: prioritize E5 and Business Premium because each reclaimed seat has immediate dollar impact.
Confirm ownership: check HR or manager records before removing licenses from enabled accounts; pre-hire accounts may be intentional.
Use the admin center for small batches: Microsoft documents unassigning licenses from Users → Active users → Manage product licenses or from Billing → Licenses.
Use Graph PowerShell for repeatable cleanup: for larger batches, Microsoft documents Set-MgUserLicense with -RemoveLicenses for removing SKU IDs.
Check group-based licensing: if a license is inherited from a group, remove the user from the licensing group or change the group assignment instead of editing the user directly.
Document savings: record SKU, user, reclaimed date, and monthly savings so finance can verify the impact.
Fix the process: tie license assignment to start date and offboarding completion so this does not recur.

Pair with inactive and disabled-user checks

Never-signed-in is one slice. Also review:

Licensed users inactive 90+ days
Disabled users still holding seats
Oversized SKUs (E5 where E3 suffices)

Tenant Hawk surfaces never-signed-in licensed accounts in the cost category and puts a dollar estimate on reclaimable spend. Run a free scan to get the list in minutes instead of exporting spreadsheets.

Frequently asked questions

What counts as never signed in?: An account with one or more license assignments and no interactive sign-in recorded in Entra ID, including users created for future hires who never started.
Is it safe to remove licenses from never-signed-in users?: Usually yes, but confirm with HR or the hiring manager first. Some accounts are pre-staged for onboarding. Disabled accounts with licenses are even safer to reclaim.
How much money can this save?: Each Business Premium or E3 seat is roughly $20–36/month; E5 can exceed $50. Ten never-signed-in E5 seats can waste $500+/month.
Where do I run the report in Microsoft 365?: Use Entra ID user list with sign-in activity, Microsoft 365 admin center active users, or PowerShell with Get-MgUser and signInActivity. Filter licensed + no last sign-in.
How is this different from inactive users?: Never-signed-in means zero usage ever. Inactive means they signed in once but not recently. Both waste licenses; never-signed-in is usually politically easier to reclaim.
Can Tenant Hawk find these automatically?: Yes. The cost scan flags never-signed-in licensed accounts and estimates monthly waste using your tenant's license mix.

Try it on your tenant

Run a free health scan in under 5 minutes

Tenant Hawk connects read-only to Microsoft 365 and Entra, scores your tenant across security, cost, reliability, and hygiene, then gives you a prioritized fix-it list.

Start free scan See how it works

Read-only access · no credentials stored · no credit card