Forum Discussion

Jeffrey Allen's avatar
Jeffrey Allen
Silver Contributor
Nov 01, 2018

Phantom Account

I have this account in my tenant that goes to more than one person.  If you try to find it in the admin center, it doesn't show as a user, contact, group, shared mailbox or a resource.  If I go into Powershell it shows but I'm not sure how to find out what it is or where it goes.  It is mail enabled with allowing external users to email it and it goes to me and at least one more person.  I'm clueless as to where it is and can't find it.  It doesn't seem to be an alias for a user, group, resource or shared mailbox either.  When I see the name I see a string of numbers afterwards in Powershell.  I also can't find it in Azure AD.  Any ideas????

  • Do you have Mailbox retention / preservation on? Usually this is the mailbox is still around that used to be tied to a user account, maybe you had forward on at some point to you? Do you reconize the name of the box thou?
    • Jeffrey Allen's avatar
      Jeffrey Allen
      Silver Contributor

      We have mailbox retention on but not for this account.  The account is a generic account that seems to come to me but was not setup by me.  You can see it in the addressbook and you can send to it and I will receive it but can't seem to find out what type of object it is.  It is not an alias for me.  Totally confused.

  • Several types of mailboxes are not displayed in the EAC and/or Office 365 Admin center, for example Discovery mailboxes, Scheduling mailboxes, Site mailboxes, etc. PowerShell can give you all the information you need for the mailbox though, simply query the relevant properties: RecipientTypeDetails, UserPrincipalName, EmailAddresses, Forwarding settings, etc.

    • Jeffrey Allen's avatar
      Jeffrey Allen
      Silver Contributor
      Thanks! I guess I don't know enough about Powershell to even run some of these as I've spent two hours trying to get some of these properties and keep getting errors. When will MS do away with PS and make everything GUI?
      • Jeffrey Allen's avatar
        Jeffrey Allen
        Silver Contributor

        I think I've located the phantom account.  I believe it is a part of a Public Folder mailbox but that folder has a different name and doesn't list details in the Exchange Admin Console.  

Resources