XADM: Event 1016 Generated When You Open Mailbox or Schedule of Another User

• Microsoft Exchange Server, versions 5.0, 5.5

SYMPTOMS

Event 1016 is generated in the Application Event log when you attempt to access another user's mailbox or schedule. This occurs even though you have been granted permission to access the mailbox and it occurs regardless of whether your attempt is successful or unsuccessful. The event 1016 states:

   Event ID: 1016
   Source: MSExchangeIS Private
   Type: Success Audit
   Category: Logons
   NT User DOMAIN\username logged on to John Doe mailbox, and is not the
   primary Windows NT account on this mailbox. 

CAUSE

This behavior is by design. This event will be logged in the Event Log regardless of the level that the diagnostics logging is set to on the Information Store. The decision to log this error was made with security in mind. It is important that any possible security breach be logged. If this type of logging were suppressed, an actual breach of security would not be logged.

Additional query words: plus client outlook calendar

Keywords : XADM exc5 exc55
Version : winnt:5.0,5.5
Platform : winnt
Issue type : kbprb