ADM: Exchange Records Event 1016 in the Event Log For Both Valid and Invalid Mailbox Access (812007)
The information in this article applies to:
- Microsoft Exchange 2000 Server
SYMPTOMS When you use auditing for security tracking after you
upgrade to Microsoft Outlook 2002 from Microsoft Outlook 2000, Event ID: 1016
error messages may be generated for both mailbox success and failure audits.
Because of this, you cannot track mailbox success audits separately from
mailbox failure audits. For example, if you are a delegate and regularly
respond to e-mail messages for someone else, you can add their mailbox to your
account for quick access. When you use their mailbox, Exchange records an Event
1016 in the Event Log. Exchange also records the same Event 1016 in the Event
Log when an illegitimate attempt to use a mailbox occurs.
Note You must have been granted at least reviewer permission to open
another user's mailbox and see it in your folder list. CAUSE This problem may occur if you use Outlook 2002 you use
another user's mailbox. When you do so, Exchange records Event 1016 in the
Event Log. WORKAROUND To work around this problem, increase the diagnostic
logging level to maximum.
For additional
information about how to do this, click the following article number to view
the article in the Microsoft Knowledge Base: 274317XADM: How to View Windows NT Accounts that Access Mailboxes in Exchange STATUS Microsoft
has confirmed that this is a problem in the Microsoft products that are listed
at the beginning of this article.
| Modification Type: | Minor | Last Reviewed: | 6/13/2003 |
|---|
| Keywords: | kbprb kbnofix kbBug KB812007 |
|---|
|