After a mailbox is disabled by the administrator, the Microsoft.Exchange.Store.Worker.exe process crashes if an email was sent from the disabled mailbox before it was disabled. When this issue occurs, event ID 1002 that resembles the following is logged in Event Viewer:
This issue occurs depending on the time of email sending and mailbox disabling. If the sender's mailbox is disabled during the message submission process in the Microsoft.Exchange.Store.Worker.exe process, the process fails to read some important Exchange related AD attributes of the sender. Therefore, the Microsoft.Exchange.Store.Worker.exe process will be ended unexpectedly by detecting the necessary attributes for processing that are missing.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Article ID: 3208885 - Last Review: Dec 13, 2016 - Revision: 1
Exchange Server 2013 Enterprise, Exchange Server 2013 Standard Edition