User Sign in details wrong in report

[Lloyd Adams]

I'm not sure how the device info is determined for User Signs-ins, but I'm seeing the interesting combo of OS:WindowsPhone and Browser:Android 4.0 !  Not sure which I want to believe, as neither are attractive propositions now.

[#2]

Those might be standard "template" values used by different clients. For example, PowerShell is a common "offender", or EWS-based clients - I can see few logins from Windows 8 and IE 7.0 in my logs, which I haven't used for years now. Just ignore them.

[#3]

We are having something similar with one of our end users.  When he attempts to login to outlook or Office365 portal from his iphone it shows his location is in another state, but his sitting in my office.  I've rebooted and checked his phone to make sure there is no malware and his GPS telemetry in maps shows him in the correct location.  After 25 years of IT work I really starting to hate Technology.@Lloyd Adams 

[#4]

@AceBandageIs it using their GPS location, or performing a geo location lookup on their ip address?

[#5]

@AceBandage 

Hello,

we have the same issue with most of the users, did you find out the reason behind that?

Thank you 

[#6]

We have a similar issue. One of our office ISP connections is showing as Toronto, ON when in fact it is in Calgary, AB (a 3000+km difference!). When I check the IP address in talosintelligence.com it correctly identified the IP as a Calgary location, so where does Microsoft/Azure get its geolocation info from? In the Cloud App Security you can register an IP address/range and override its location, but that doesn't seem to have any effect on the Azure AD sign in logs.

John R