Mailbox Delegation - Audit Log - Microsoft Community

-

hello support,

we have enabled auditing on our mailbox, resulted returning following email:

activity: add-mailboxpermission
user: nt authority\system (microsoft.exchange.servicehost)
item: nampr04a002.prod.outlook.com/microsoft exchange hosted organizations/domain-name.onmicrosoft.com/discoverysearchmailbox{d919ba05-xxxx-xxxx-xxxx-...........}

can please give me brief explanation on why keep seeing nt authority\system adding discoverysearchmailbox?

regards,

bj balegar

hi bj balegar,

system account. user performed action (specified in operation property) resulted in record being logged. note records activity performed system accounts (such sharepoint\system or nt authority\system) included in audit log.

reference: detailed properties in office 365 audit log

best regards,
shyamal


Office / Office 365 for admins / Exchange Online / Office 365 for business



Comments

Post a Comment

Popular posts from this blog

Getting ErrorCode: 120018 when trying to access Microsoft account - Microsoft Community

-
split thread. hi, we 've got user exact same issue: "ce mot de passe été utilisé trop souvent dans le passé. choisissez une chaîne plus difficile à deviner. (which means: " we've seen password many times before. choose harder guess. ") errorcode: 120018 correlationid: 4ab3a486-a11a-4ead-983c-c1c391c3e7d5" it happens when tries update password "login.microsoftonline.com" portal. we tested more 5 different new passwords (passwords never seen before). office 365 synchronized ad; user's account not locked or whatsoever, account set able change password cannot reset it. thanks in advance. ***post moved moderator appropriate forum category.*** hi all,   thanks replies.   generally, password length greater 10 characters. understand users may want have longer passwords. please submit feedback improve our products , services. understandi
Read more

The message was sent to a distribution list ‎(DL)‎ - Microsoft Community

-
hi all, i posting question have faced issue last week, migration done exchange 2007 o365. there 1 distribution list in on prem & in o365 group (synced aadc). 1 migrated user send email dl before & after migration, strange thing that, before migration ok, after migration user got message as " delivery has failed these recipients or distribution lists: *** email address removed privacy ***   this message has many recipients. microsoft exchange not try redeliver message you. please try resending fewer recipients, or provide following diagnostic text system administrator". *** email address removed privacy *** #550 5.5.3 resolver.adr.reciplimit; many recipients ## i have checked same message id in o365 message trace & found following... 8/16/2017 11:17:55 am receive message received by: db4pr05mb397 message received by: db4pr05mb397 8/16/2017 11:17:56 am expand dl the message sent distrib
Read more

Activation Error 0x8004FE93 - Microsoft Community

-
not able activate licence of microsoft 365 getting error 0x8004fe93 moved from:      windows / windows 10 / install, upgrade, & activate hi vinit, this issue may have occurred due internet connection issues. activate software, we'd clarify few things. kindly answer following: are trying activate windows 10 license or microsoft office 365? are able access microsoft account ? we'll waiting reply. Office / Install, upgrade and activate / Windows 10 / Office 365 Home
Read more