Shared Mailbox Account logged in on Azure Domain Services Joined Azure VM according to log analytics

Copper Contributor

We have several cases of a 365 shared mailbox account logging in to a VM in Azure, according to log analytics.

 

We are Using Azure domain services. Event ID is 4624. OS is Windows server 2016.

 

I always thought it was impossible to log in to these accounts (without further configuration). Any suggestions to what might have happened?

1 Reply

Twan,

 

We are happy to see that Azure Log Analytics provided you improved visibility to your environment.

I think this is not the right venue for this question. Azure AD or Office 365 forums might be more useful.

 

Thanks,

Meir