Issue with logging

[Phil_Seamark]

We use the unified audit log and notice there are a bunch of users called "Free User" in the logging.  We use AAD and it syncs with our internal AD so I would have thought all user activity would come through with a real user name.

Any thoughts as to why this might happen?

[Seth_C_Bauer]

@Phil_Seamark I don't have a direct answer, but I wonder if this is the scenerio in which an end user signs up for a free account using their business email on their own. The other way is for the organization to assign a free/pro license. More details here. I'd be interested if the free license applied in Office 365 would offer the actual user name...

You could also turn off free sign up if this was the case and you wanted to track user activity and the other avenue produced the expected results.

[Phil_Seamark]

We have a mix of people in our Tenant that use Pro and Free content. I'd still expect the people who don't have a pro license to show up in the logging with their name.  

This would be especially helpful to understand who might need a pro-license allocated to them.

[Seth_C_Bauer]

@Phil_Seamark I'm going to ping @chass on this one as well because he saw the exact same thing in a demo today and he mentioned that it was perplexing. Maybe he tracked down the answer.

[Phil_Seamark]

Was that the AMA?  I tried getting onto that but it didn't work for me.  Seemed like a good idea.

[Seth_C_Bauer]

@Phil_Seamark They ran the "What's new" alongside the AMA. Something happened with the original presentation link and Chuck had to send out a new one right before it started.