Microsoft KB Archive/812007

= ADM: Exchange Records Event 1016 in the Event Log For Both Valid and Invalid Mailbox Access =

Article ID: 812007

Article Last Modified on 2/28/2007

-

APPLIES TO


 * Microsoft Exchange 2000 Server Standard Edition

-





SYMPTOMS
When you use auditing for security tracking after you upgrade to Microsoft Outlook 2002 from Microsoft Outlook 2000, Event ID: 1016 error messages may be generated for both mailbox success and failure audits. Because of this, you cannot track mailbox success audits separately from mailbox failure audits. For example, if you are a delegate and regularly respond to e-mail messages for someone else, you can add their mailbox to your account for quick access. When you use their mailbox, Exchange records an Event 1016 in the Event Log. Exchange also records the same Event 1016 in the Event Log when an illegitimate attempt to use a mailbox occurs.

Note You must have been granted at least reviewer permission to open another user's mailbox and see it in your folder list.



CAUSE
This problem may occur if you use Outlook 2002 you use another user's mailbox. When you do so, Exchange records Event 1016 in the Event Log.



WORKAROUND
To work around this problem, increase the diagnostic logging level to maximum. For additional information about how to do this, click the following article number to view the article in the Microsoft Knowledge Base:

274317XADM: How to View Windows NT Accounts that Access Mailboxes in Exchange



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Keywords: kbprb kbnofix kbbug KB812007

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.