That information is in the Last Login column on the User Access Report. See Run the Access Report for details.

There are three categories: domain, product, and custom roles. See User Roles for details.

A user with the Manage access level needs to send a password reset. See the "One of my users has tried to log on multiple times and is now locked out" topic in the Troubleshooting topic for details.