XADM: Event ID: 1016 Logged Incorrectly in Application Event Log

 Last reviewed: April 22, 1997
Article ID: Q147362
The information in this article applies to:
  • Microsoft Exchange Server, version 4.0

SYMPTOMS

By default, the Microsoft Exchange Service Account can log in to any mailbox. However, when a Service Account is used to log in to a mailbox, this event should be logged in the Windows NT Application Event Log as Event ID 1016 with the following text: 

   NT User ExchService logged on to ExUser1 mailbox, and is not the Primary
   Windows NT Account on this mailbox.
where ExchService is the Service Account and ExUser1 is the mailbox that the Service Account logs in to.

This information is logged whether or not you have logging turned on for the Microsoft Exchange Private Information Store (IS). This information is not always logged properly as in the following example:

  1. Turn off logging on the Private IS.
2. Log in as the Service Account (ExchService) and open the ExUser1 
   mailbox.
You initially get the following event logged in the Windows NT Event Viewer: 

   EVENT ID: 1016
   NT User ExchService logged on to ExUser1 mailbox, and is not the Primary
   Windows NT Account on this mailbox.

  • In the Microsoft Exchange client, open the Tools menu, click Services, click Exchange Server, click Properties, click Advanced Page, and add ExUser2 mailbox to the list to open.

    The Windows NT Event log will have the same entry: 

       EVENT ID: 1016
   NT User ExchService logged on to ExUser1 mailbox, and is not the Primary
   Windows NT Account on this mailbox.
    The log message should say: 

       NT User ExchService logged on to ExUser2 mailbox, and is not the Primary
   Windows NT Account on this mailbox.

    CAUSE

    This is logged properly if logging is set to at least Minimum on the Private IS, but will not be logged properly if logging is set to None.

    MORE INFORMATION

    For more information about preventing administrators from viewing user mail, please see the following article in the Microsoft Knowledge Base: 

       ARITICLE-ID: Q147354
   TITLE: XADM: Service Account Can Log In to any Mailbox

    STATUS

    Microsoft has confirmed this to be a problem in Microsoft Exchange version 4.0. This problem has been corrected in the latest Service Pack for Microsoft Exchange Server. For information on obtaining the Service Pack, query on the following word in the Microsoft Knowledge Base (without the spaces):

    S E R V P A C K

    • Additional query words:
    Keywords : kbbug4.00 kbfix4.00.sp3 kbusage XADM
    Version : 4.0
    Platform : WinNT

    THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

    Last reviewed: April 22, 1997
    © 1998 Microsoft Corporation. All rights reserved. Terms of Use.