Discover Who Creates Guest Accounts in Office 365 Applications

%3CLINGO-SUB%20id%3D%22lingo-sub-917609%22%20slang%3D%22en-US%22%3EDiscover%20Who%20Creates%20Guest%20Accounts%20in%20Office%20365%20Applications%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-917609%22%20slang%3D%22en-US%22%3E%3CP%3EOffice%20365%20applications%20now%20create%20many%20guest%20accounts%20in%20Azure%20Active%20Directory.%20You%20can%20see%20what%20accounts%20exist%2C%20but%20it's%20more%20difficult%20to%20discover%20who%20created%20the%20accounts%20-%20or%20why%20they%20were%20created.%20Fortunately%2C%20the%20Office%20365%20audit%20log%20holds%20a%20lot%20of%20useful%20data%20that%20can%20be%20interrogated%20to%20find%20some%20answers%20and%20PowerShell%20is%20a%20great%20tool%20for%20slicing%20and%20dicing%20audit%20data.%20See%20what%20you%20think%20of%20the%20answers%20I've%20come%20up%20with.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.petri.com%2Fknowing-guest-accounts-office-365%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.petri.com%2Fknowing-guest-accounts-office-365%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-917609%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
MVP

Office 365 applications now create many guest accounts in Azure Active Directory. You can see what accounts exist, but it's more difficult to discover who created the accounts - or why they were created. Fortunately, the Office 365 audit log holds a lot of useful data that can be interrogated to find some answers and PowerShell is a great tool for slicing and dicing audit data. See what you think of the answers I've come up with.

 

https://www.petri.com/knowing-guest-accounts-office-365

0 Replies