question

NatliaLima-6410 avatar image
0 Votes"
NatliaLima-6410 asked NatliaLima-6410 commented

User agent in Azure AD Sign-in logs

I have looked at user logs and found many login attempts with the BAV2ROPC user agent. What is this agent?
I didn't find any Microsoft documentation about this user agent.

azure-ad-sign-in-logs
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

vipulsparsh-MSFT avatar image
0 Votes"
vipulsparsh-MSFT answered NatliaLima-6410 commented

@NatliaLima-6410 Thanks for reaching out.

This user agent BAV2ROPC signifies the client apps used in legacy protocols like POP3, IMAP, SMTP legacy and are capable of understanding storing password if they user logged into them at some period.

If you still allow legacy protocol in your organization than you should be seeing a lot of this.
But if you have blocked all the legacy protocols in Office 365 exchange and still see some user agent like this, you need to investigate further.



Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for the explanation!

1 Vote 1 ·