Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

User Agent = ZOOMROOMS

Brass Contributor

Hi,

Under Azure AD, I see a User sign-in events with User Agent = ZOOMROOMS (ExchangeServicesClient/0.0.0.0). But the location captured is off another country of the user.

Is this because of the user joining Zoom session? Or is a suspicious session?
I assume you don't need to sign in using O365 account for joining Zoom session.

Thanks.

1 Reply

Hi! 

 

I also had the same sign-in event. You might want to cross-check the IP address the login was made from and Zoom's list of public IP addresses:
https://support.zoom.us/hc/en-us/articles/201362683 

 

If you have SSO configured with Azure AD, I guess this could be normal.