Shared mailboxes have unknown delegates

[dipty1270]

Recently I have audited our delegates to shared mailboxes, who has access to what.

I noticed quite a few unknown delegates with the username format APCPR03A001\<firstname><14 numbers>
So an example would be APCPR03A001\joe12345678912345.

A quick google of APCPR03A001 shows that it is not unique to our environment.

Anyone else come across this or have an explanation of what these usernames are?

Thanks

[#2]

APCPR03A001 is just the "server/domain" prefix. Most, if not all of your users will have the same value. And joe12345678912345 is the samaccount name, so what you are seeing is the user identifier in the domain\samaccountname format. To get the matching user object, use Get-User, for example this is my account:

Get-User EURPR03A001\vasil58635-371221893

[#3]

Hi Vasil,

Thanks for that, makes a little more sense now.
So even with our own AD environment, 365 creates another SAM account on the 365 servers?
It looks like these SAM account name that appeared in the audit are old users that have been deleted so they do not resolve with get-user. Is there any other way to resolve who these users are?

Thanks.

[#4]

If they are already deleted, no. You will either get this format for deleted users, or the good old SID notation (S-1-5-21-*)