Assume that you have a computer that has the Microsoft Exchange Server 2010 installed. When a user who has sufficient permission deletes a public folder, event ID 9682 that is used to identify who deletes the public folder is logged in the Application log on the Mailbox server. However, the folder name is empty, and the event log resembles the following:
Log Name: Application Source: MSExchangeIS Public Store Date: Date Event ID: 9682 Task Category: General Level: Information Keywords: Classic User: N/A Computer: Computer Description: Folder with folder ID ID Number was deleted by /o=Exchange Organization /ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=User, user account Domain\Account.
This issue occurs because Exchange 2010 does not set a certain attribute that is related to the public folder name before Exchange 2010 displays the event.
To resolve this issue, install the following update rollup:
2803727 Description of Update Rollup 1 for Exchange Server 2010 Service Pack 3
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
For more information about the issue, click the following article number to go to the article in the Microsoft Knowledge Base:
891968 Description of a hotfix that enables Exchange Server 2003 to log an event when a user deletes a public folder