Small and medium business | Business Central, N...

Unknown-user-in-the-enviremont

(0) Share

Report

Posted on by Rawmaterials

We see an unknown user in the active session login in. I do can terminate the session but this unknown user 'Leeuw' comes back and is login in repeatly.

We cannot figure out who the user is Not in the logfile nor in Azure because this user 'Leeuw' has No account in Office 365, so there is no login log about this person.

All the contacts from outside the organisation (we run a wholesale rawmaterials.eu) are switched off. It's scary ARE WE Business Central HACKED??

table=2000000110 is giving an overview of the active logged in user. Our employees - off course - and during local worktime comes 'Leeuw" a board.

Bert

I have the same question (0)

All responses (8)

Answers (0)

kruyeras 15 on at

Like (0)

Report

Does the user exist as a user in the user section of Business Central? I would also check with your Partner as they have access to your tenant when supporting an environment.

Was this reply helpful? Yes No
Rawmaterials 27 on at

Like (0)

Report

We did asked our supplier but they claim its for MS nowhere in our O365 is this user known. Its logging in and its not acting as a bot when I stop the session.
it might be in the physical hosting? A shared server and a mixed up configfile?

Bert

Was this reply helpful? Yes No
Suggested answer

YUN ZHU 95,329 Super User 2025 Season 2 on at

Like (0)

Report

Hi, I suspect it is your Partner, Your partner can access to Business Central Online as Delegated Administrator from Partner Center.

More details:

https://learn.microsoft.com/en-us/dynamics365/business-central/dev-itpro/administration/delegated-admin

Hope this helps.

Thanks.

ZHU

Was this reply helpful? Yes No
Rawmaterials 27 on at

Like (0)

Report

unfortunaly its not our partner. We have been in contact and they see the same strange thing happening for their eyes. We have made screenshots. This user gas in table 2000000110 an ID. I hope that server management can checkout IP adres and repair the situation. Its allmost imposible to get in contact with an engenier. In BC you do see all the members with acces aswell the tenant memders. We asked all our partners like accountants and tird party’s.
the thing is simpel. When a user is not having a license or an account it should not be able to log in nor be found in our table 2000000110

yours Bert

Was this reply helpful? Yes No
Suggested answer

YUN ZHU 95,329 Super User 2025 Season 2 on at

Like (0)

Report

If so, I suggest you raise a support ticket with Microsoft through your partner.

Was this reply helpful? Yes No
Suggested answer

Inge M. Bruvik 1,105 Moderator on at

Like (0)

Report

Are there any partner that is defined as delegated admin in your AzureAD ? If that is the case they can log on to your BC without having a user in your Azure AD. That is a common way for BC partners to log on to their customers.

Was this reply helpful? Yes No
Rawmaterials 27 on at

Like (0)

Report

To me it's a serious riddle and I would like to understand how the server login portal is builded because No Where in our Azure, Office nor BC userslist is user 'Leeuw' registrated or seen.

Our tenant has a list of super users who can acces BC and the office environment but they have no user Leeuw in their office.

Leeuw is acting as a person when I kick it out. Sometimes right away it's loggin in again, sometimes it takes some minutes. Leeuw is - like other users - logged in several times. There is for me no way I can figure out an IP or see what the session does in our business.

I think it's a mistake somewhere in the server loggin module? Something went wrong with that config file?

Bert

Was this reply helpful? Yes No
Suggested answer

Inge M. Bruvik 1,105 Moderator on at

Like (0)

Report

Can it be some external integration that is using this user?

And have you opened a supportcase with Microsoft?

Was this reply helpful? Yes No