Shared Mailbox Accessibility Loophole

Question

Hi,

I've just found a loophole for accessing shared mailbox without any licensed users, I'm able to log in to that shared mailbox user by setting its password and directly accessing mailbox with URL "https://outlook.office365.com/mail/<sharedmailboxemail>". Is it a genuine way to use Microsoft Exchange online shared mailbox features? It this loophole exist, then noone will going to purchase all their required license?

Can someone please answer on it and look into this case to resolve it?

Thank you,

Er. Janak Khadka

Answer 1

It's well known behavior, not a loopwhole. It has been known for years, much like the fact that you can access SharePoint Online content without a license. However, the fact that Microsoft does not enforce licensing requirements in code does not mean you are allowed to use such methods. They still constitute a violation of the service terms/license agreement.

Answer 2

Hi @ JanakKhadka ,

As Michev says, it has been known for years, shared mailboxes have passwords, but logging in using this method involves a violation of the Terms of Service/License Agreement .

This official documentation also states that you should not sign in to the shared mailbox with the appropriate user account for it.

About shared mailboxes - Microsoft 365 admin | Microsoft Learn

 

 

In addition, here is a similar thread for your reference: Shared Mailbox can have a password and login enabled without license - Microsoft Community Hub

(Kindlynote:Microsoft provides third-party contact information to help you find additional information about this topic. This contact information may change without notice. Microsoft does not guarantee the accuracy of third-party contact information.)

Thanks for your understanding and support.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread