XADM: Event ID: 1016 Generated by a Virus Scan Software Account (244305)


The information in this article applies to:

  • Microsoft Exchange Server 4.0
  • Microsoft Exchange Server 5.0
  • Microsoft Exchange Server 5.5
This article was previously published under Q244305

SUMMARY

With an antivirus software package installed on your Exchange Server computer, you may receive many instances of the following event in the application event log:

Event ID 1016
NT User ExchService logged on to ExUser1 mailbox, and is not the Primary Windows NT Account on this mailbox.

MORE INFORMATION

Some antivirus software requires you to create an account with Service Account Admin permissions so the software can open all mailboxes and scan them. The account created for the antivirus software with Service Account Admin permissions is opening and scanning the mailboxes, and a 1016 event is logged for each mailbox.

This behavior is by design. For additional information on the 1016 event, click the article number below to view the article in the Microsoft Knowledge Base:

173692 XADM: Event 1016 Generated When You Open Mailbox or Schedule of Another User

Modification Type:MinorLast Reviewed:4/21/2005
Keywords:kbinfo KB244305
©2004 Microsoft Corporation. All rights reserved.