Jun 25 2019 03:16 PM
Recently I have audited our delegates to shared mailboxes, who has access to what.
I noticed quite a few unknown delegates with the username format APCPR03A001\<firstname><14 numbers>
So an example would be APCPR03A001\joe12345678912345.
A quick google of APCPR03A001 shows that it is not unique to our environment.
Anyone else come across this or have an explanation of what these usernames are?
Thanks
Jun 26 2019 12:38 AM
APCPR03A001 is just the "server/domain" prefix. Most, if not all of your users will have the same value. And joe12345678912345 is the samaccount name, so what you are seeing is the user identifier in the domain\samaccountname format. To get the matching user object, use Get-User, for example this is my account:
Get-User EURPR03A001\vasil58635-371221893
Jun 26 2019 05:03 PM
Jun 27 2019 12:05 AM
If they are already deleted, no. You will either get this format for deleted users, or the good old SID notation (S-1-5-21-*)