When you just need that list of all AD users with their current status including the last time they logged in. The report also provides a status for account disabled and password expired.
- Download and install the GSA file (requires Goverlan Scope Actions)
- Adjust the Scope to target your domain
- Run the report. This makes no changes to Active Directory, just queries and returns the requested information.