Mailbox Delegation - Audit Log - Microsoft Community

-

hello support,

we have enabled auditing on our mailbox, resulted returning following email:

activity: add-mailboxpermission
user: nt authority\system (microsoft.exchange.servicehost)
item: nampr04a002.prod.outlook.com/microsoft exchange hosted organizations/domain-name.onmicrosoft.com/discoverysearchmailbox{d919ba05-xxxx-xxxx-xxxx-...........}

can please give me brief explanation on why keep seeing nt authority\system adding discoverysearchmailbox?

regards,

bj balegar

hi bj balegar,

system account. user performed action (specified in operation property) resulted in record being logged. note records activity performed system accounts (such sharepoint\system or nt authority\system) included in audit log.

reference: detailed properties in office 365 audit log

best regards,
shyamal


Office / Office 365 for admins / Exchange Online / Office 365 for business



Comments

Post a Comment

Popular posts from this blog

Getting ErrorCode: 120018 when trying to access Microsoft account - Microsoft Community

-
split thread. hi, we 've got user exact same issue: "ce mot de passe été utilisé trop souvent dans le passé. choisissez une chaîne plus difficile à deviner. (which means: " we've seen password many times before. choose harder guess. ") errorcode: 120018 correlationid: 4ab3a486-a11a-4ead-983c-c1c391c3e7d5" it happens when tries update password "login.microsoftonline.com" portal. we tested more 5 different new passwords (passwords never seen before). office 365 synchronized ad; user's account not locked or whatsoever, account set able change password cannot reset it. thanks in advance. ***post moved moderator appropriate forum category.*** hi all,   thanks replies.   generally, password length greater 10 characters. understand users may want have longer passwords. please submit feedback improve our products , services. understandi...
Read more

The message was sent to a distribution list ‎(DL)‎ - Microsoft Community

-
hi all, i posting question have faced issue last week, migration done exchange 2007 o365. there 1 distribution list in on prem & in o365 group (synced aadc). 1 migrated user send email dl before & after migration, strange thing that, before migration ok, after migration user got message as " delivery has failed these recipients or distribution lists: *** email address removed privacy ***   this message has many recipients. microsoft exchange not try redeliver message you. please try resending fewer recipients, or provide following diagnostic text system administrator". *** email address removed privacy *** #550 5.5.3 resolver.adr.reciplimit; many recipients ## i have checked same message id in o365 message trace & found following... 8/16/2017 11:17:55 am receive message received by: db4pr05mb397 message received by: db4pr05mb397 8/16/2017 11:17:56 am expand dl the message sent distrib...
Read more

What is the Office 365 default group Mailbox Users ISV Access Enabled - Microsoft Community

-
we locking down security in o 365 , came across group  mailbox users isv access enabled.  know group used for? tia hi tom,   your time appreciated.   at first, may know if group created or synced aad?   if system group , unable remove it.   could tell me impact business?   thanks , forward response.   regards, carlos   Office / Office 365 for admins / Users, passwords, and groups / Office 365 for business
Read more