Event ID - 1009

Event Id1009
SourceMSExchangeIS Private
DescriptionDOMAIN\User1 logged on as /o=ORG/ou=SITE/cn=Recipients/cn=User1
Event InformationAccording to Microsoft:
This Event message indicates that a Windows NT account has logged into a particular Exchange Server mailbox:
Reference LinksHow to View Windows NT Accounts that Access Mailboxes in Exchange Server

XADM: How to Log Mailbox Access by Computer Name

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.