XADM: Event 1016 Generated When You Open Mailbox or Schedule of Another User

ID: Q173692

-------------------------------------------------------------------------- The information in this article applies to: - Microsoft Exchange Server, version 5.5 -------------------------------------------------------------------------- SYMPTOMS ======== Event 1016 is generated in the Application Event log when you attempt to access another user's mailbox or schedule. This occurs even though you have been granted permission to access the mailbox and it occurs regardless of whether your attempt is successful or unsuccessful. The event 1016 states: Event ID: 1016 Source: MSExchangeIS Private Type: Success Audit Category: Logons NT User DOMAIN\username logged on to John Doe mailbox, and is not the primary Windows NT account on this mailbox. CAUSE ===== This behavior is by design. This event will be logged in the Event Log regardless of the level that the diagnostics logging is set to on the Information Store. The decision to log this error was made with security in mind. It is important that any possible security breach be logged. If this type of logging were suppressed, an actual breach of security would not be logged.


Keywords          : XADM 
Version           : winnt:5.5
Platform          : winnt 
Issue type        :

Last Reviewed: April 28, 1998