Forum Discussion

dipty1270's avatar
dipty1270
Copper Contributor
Jun 25, 2019

Shared mailboxes have unknown delegates

Recently I have audited our delegates to shared mailboxes, who has access to what.

I noticed quite a few unknown delegates with the username format APCPR03A001\<firstname><14 numbers>
So an example would be APCPR03A001\joe12345678912345.

 

A quick google of APCPR03A001 shows that it is not unique to our environment.

 

Anyone else come across this or have an explanation of what these usernames are?

 

Thanks

Exchange Online
Hybrid
office 365
  • VasilMichev's avatar
    VasilMichev
    MVP
    Jun 26, 2019

    APCPR03A001 is just the "server/domain" prefix. Most, if not all of your users will have the same value. And joe12345678912345 is the samaccount name, so what you are seeing is the user identifier in the domain\samaccountname format. To get the matching user object, use Get-User, for example this is my account:

     

    Get-User EURPR03A001\vasil58635-371221893

     

    • dipty1270's avatar
      dipty1270
      Copper Contributor
      Jun 27, 2019
      Hi Vasil,

      Thanks for that, makes a little more sense now.
      So even with our own AD environment, 365 creates another SAM account on the 365 servers?
      It looks like these SAM account name that appeared in the audit are old users that have been deleted so they do not resolve with get-user. Is there any other way to resolve who these users are?

      Thanks.
      • VasilMichev's avatar
        VasilMichev
        MVP
        Jun 27, 2019

        If they are already deleted, no. You will either get this format for deleted users, or the good old SID notation (S-1-5-21-*)