| Event Id | 1016 |
| Source | MSExchangeIS Mailbox |
| Description | NT User NT AUTHORITY\SYSTEM logged on to <system mailbox>, and is not the primary Windows NT account on this mailbox. |
| Event Information | According to Microsoft: You may see the preceding events even though the information store service starts. You need to mount the databases: 1. Start Exchange System Manager. 2. Expand Servers, expand Servername, and then expand First Storage Group. 3. Right-click the Mailbox Store, and then click Mount Store. 4. Right-click Public Folder Store, and then click Mount Store. |
| Reference Links | Event IDs When Starting the Information Store with Blank Databases |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.