Article ID: 301328 - View products that this article applies to.
This article has been archived. It is offered "as is" and will no longer be updated.
The following event entry may be logged in the Application event log after you upgrade to Microsoft Outlook 2002 or to a later version of Outlook:
Event ID 1016 reports:This is expected behavior when you use Outlook.
NT User [DOMAIN\User] logged on to [User] mailbox, and is not the primary Windows NT account on this mailbox.
Microsoft Outlook 2002 and later versions of Outlook have a scheduling feature that is named Planner Options. This feature allows you to view the Calendar Details when you create a meeting request or use the Group Schedules feature. When you use the Planner Options feature, Outlook tries to retrieve the Calendar details of the individuals that you invited to the meeting from their Calendar folders. Even if the logon attempt does not work because of insufficient permission, the Event ID 1016 entry is logged in the application event log.
This behavior also causes the Microsoft Exchange Server Administrator program to display the [DOMAIN\User] account from the 1016 event entry in the private information store Logons container and the Mailbox Resources Properties page as the last Microsoft Windows NT account that tried to access the mailbox.
In versions of Microsoft Outlook that are earlier that Outlook 2002, the log on and query for free/busy information does not cause the Microsoft Exchange Server to log an event entry in the Application event log.
NOTE: The Event ID 1016 message indicates a MapiLogon to the root of the mailbox. This event message occurs even if you have permission to access the mailbox, and whether you access it or not. Do not use this event message as an auditing event to monitor the logon activities to a mailbox.
To turn off (disable) the Planner Options feature, use the following steps
(http://go.microsoft.com/fwlink/?LinkId=151500)for other considerations.
Article ID: 301328 - Last Review: January 12, 2015 - Revision: 1.0