Announcements
We see an unknown user in the active session login in. I do can terminate the session but this unknown user 'Leeuw' comes back and is login in repeatly.
We cannot figure out who the user is Not in the logfile nor in Azure because this user 'Leeuw' has No account in Office 365, so there is no login log about this person.
All the contacts from outside the organisation (we run a wholesale rawmaterials.eu) are switched off. It's scary ARE WE Business Central HACKED??
table=2000000110 is giving an overview of the active logged in user. Our employees - off course - and during local worktime comes 'Leeuw" a board.
Bert
Can it be some external integration that is using this user?
And have you opened a supportcase with Microsoft?
To me it's a serious riddle and I would like to understand how the server login portal is builded because No Where in our Azure, Office nor BC userslist is user 'Leeuw' registrated or seen.
Our tenant has a list of super users who can acces BC and the office environment but they have no user Leeuw in their office.
Leeuw is acting as a person when I kick it out. Sometimes right away it's loggin in again, sometimes it takes some minutes. Leeuw is - like other users - logged in several times. There is for me no way I can figure out an IP or see what the session does in our business.
I think it's a mistake somewhere in the server loggin module? Something went wrong with that config file?
Bert
Are there any partner that is defined as delegated admin in your AzureAD ? If that is the case they can log on to your BC without having a user in your Azure AD. That is a common way for BC partners to log on to their customers.
If so, I suggest you raise a support ticket with Microsoft through your partner.
unfortunaly its not our partner. We have been in contact and they see the same strange thing happening for their eyes. We have made screenshots. This user gas in table 2000000110 an ID. I hope that server management can checkout IP adres and repair the situation. Its allmost imposible to get in contact with an engenier. In BC you do see all the members with acces aswell the tenant memders. We asked all our partners like accountants and tird party’s.
the thing is simpel. When a user is not having a license or an account it should not be able to log in nor be found in our table 2000000110
yours Bert
Hi, I suspect it is your Partner, Your partner can access to Business Central Online as Delegated Administrator from Partner Center.
More details:
Hope this helps.
Thanks.
ZHU
We did asked our supplier but they claim its for MS nowhere in our O365 is this user known. Its logging in and its not acting as a bot when I stop the session.
it might be in the physical hosting? A shared server and a mixed up configfile?
Bert
Does the user exist as a user in the user section of Business Central? I would also check with your Partner as they have access to your tenant when supporting an environment.
André Arnaud de Cal... 291,359 Super User 2024 Season 2
Martin Dráb 230,370 Most Valuable Professional
nmaenpaa 101,156