Forum Discussion
Confusion with Guest Accounts
Yes, it should be reflected in the Unified audit log: https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-in-security-and-compliance#sharing-and-access-request-activities
VasilMichev I would have thought one of those would provide such information but it does not or at least not in whatever the case we are running into. When these users attempt to access this resource and are prompted to login (which they do not know that information), the activity is not reported in these logs. I have been able to confirm, that an anonymous link will work, so whatever the case is, it is related to this login issue. Still waiting on Santa (I mean, Microsoft) to assist on this issue.
- StephenRice
Microsoft
Hi Jeff Harlow,
Hopefully I can help out here! Is the goal to be able to determine which type of user is accessing content via the audit logs? Thanks!
Stephen Rice
OneDrive Program Manager II
StephenRice Yes. Need to see in the logs in this case the user is another O365 Tenant and having some form of failure. I think what I want to see is probably not possible as they are trying to log into their tenant and getting rejected but for whatever reason, it is wanting them to login to their tenant to access a document in our tenant.
To make things worse and what I am trying to get MS to provide a workaround. These users, a client of ours, no longer uses O365 however their IT department apparently failed to disable their tenant. We are still trying to work with them to get into contact with their IT specialist. But it seems that MS would have a way to provide us a bypass so they can still get in with the guest PIN. Users are not the same as admins. :) They know no different. As I mentioned in my support case, MS needs to take in consideration when companies move from O365 to another provider, in this case Google Docs. Sure we love to have everyone in one happy family but that is not always going to happen.
It took us two days just to determine they had an old O365 tenant configuration. That too has been requested. There should be a way to check if a company is using O365.
