Article ID: 244305
Article Last Modified on 10/27/2006
APPLIES TO
- Microsoft Exchange Server 4.0 Standard Edition
- Microsoft Exchange Server 5.0 Standard Edition
- Microsoft Exchange Server 5.5 Standard Edition
This article was previously published under Q244305
SUMMARY
With an antivirus software package installed on your Exchange Server computer, you may receive many instances of the following event in the application event log:
Event ID 1016
NT User ExchService logged on to ExUser1 mailbox, and is not the Primary Windows NT Account on this mailbox.
MORE INFORMATION
Some antivirus software requires you to create an account with Service Account Admin permissions so the software can open all mailboxes and scan them. The account created for the antivirus software with Service Account Admin permissions is opening and scanning the mailboxes, and a 1016 event is logged for each mailbox.
This behavior is by design. For additional information on the 1016 event, click the article number below to view the article in the Microsoft Knowledge Base:
173692 XADM: Event 1016 Generated When You Open Mailbox or Schedule of Another User
Additional query words: av
Keywords: kbinfo KB244305
