Shared Mailbox Account logged in on Azure Domain Services Joined Azure VM according to log analytics

Occasional Visitor

We have several cases of a 365 shared mailbox account logging in to a VM in Azure, according to log analytics.


We are Using Azure domain services. Event ID is 4624. OS is Windows server 2016.


I always thought it was impossible to log in to these accounts (without further configuration). Any suggestions to what might have happened?

1 Reply



We are happy to see that Azure Log Analytics provided you improved visibility to your environment.

I think this is not the right venue for this question. Azure AD or Office 365 forums might be more useful.