1016 Security Audit Logged for Every Exchange 2000 Push Message Sent by Mobile Information Server
Solution
When you are using Mobile Information Server to send "Push" notifications to Exchange 2000 users, the following event is logged in the Application log of the Exchange 2000 server for each Push message:
Event ID: 1016
Category: Logons
Source: MSExchangeIS Mailbox
Description: Windows 2000 User DOMAIN\ENTEVENTSOURCE logged on to User@domain.com mailbox, and is not the primary Windows 2000 account on this mailbox.
This behavior is by design. This behavior occurs as a result of the security auditing features of Exchange 2000. When a user who is not the primary account associated with a particular mailbox logs on to that mailbox, this event is logged to prevent unauthorized users from accessing private mailbox data.