ADM: Exchange Records Event 1016 in the Event Log For Both Valid and Invalid Mailbox Access

When you use auditing for security tracking after you upgrade to Microsoft Outlook 2002 from Microsoft Outlook 2000, Event ID: 1016 error messages may be generated for both mailbox success and failure audits. Because of this, you cannot track mailbox success audits separately from mailbox failure audits. For example, if you are a delegate and regularly respond to e-mail messages for someone else, you can add their mailbox to your account for quick access. When you use their mailbox, Exchange records an Event 1016 in the Event Log. Exchange also records the same Event 1016 in the Event Log when an illegitimate attempt to use a mailbox occurs.

Note You must have been granted at least reviewer permission to open another user's mailbox and see it in your folder list.

This problem may occur if you use Outlook 2002 you use another user's mailbox. When you do so, Exchange records Event 1016 in the Event Log.

To work around this problem, increase the diagnostic logging level to maximum. For additional information about how to do this, click the following article number to view the article in the Microsoft Knowledge Base:

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.