Microsoft KB Archive/244305

= XADM: Event ID: 1016 Generated by a Virus Scan Software Account =

Article ID: 244305

Article Last Modified on 10/27/2006

-

APPLIES TO


 * Microsoft Exchange Server 4.0 Standard Edition
 * Microsoft Exchange Server 5.0 Standard Edition
 * Microsoft Exchange Server 5.5 Standard Edition

-



This article was previously published under Q244305



SUMMARY
With an antivirus software package installed on your Exchange Server computer, you may receive many instances of the following event in the application event log:

Event ID 1016

NT User ExchService logged on to ExUser1 mailbox, and is not the Primary Windows NT Account on this mailbox.



MORE INFORMATION
Some antivirus software requires you to create an account with Service Account Admin permissions so the software can open all mailboxes and scan them. The account created for the antivirus software with Service Account Admin permissions is opening and scanning the mailboxes, and a 1016 event is logged for each mailbox.

This behavior is by design. For additional information on the 1016 event, click the article number below to view the article in the Microsoft Knowledge Base:

173692 XADM: Event 1016 Generated When You Open Mailbox or Schedule of Another User

Additional query words: av

Keywords: kbinfo KB244305

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.