| Event Id | 7021 |
| Source | MSExchangeIS Public |
| Description | Users that were not valid have been removed from the access control list of public folder Americas\Texas\Las Colinas. |
| Event Information | According to Microsoft: During a disaster recovery situation, the public folders in an Exchange Server organization may be re-homed under the following circumstances: 1. The information store is restored to a recovery server. 2. The directory service or information store consistency checker is run on the recovery server. 3. The information store service is stopped on the recovery server. 4. The information store database files are copied to the production server and the information store service is started. When the information store service is started on the production server (after the Pub.edb file is copied from the recovery server), public folder replication takes place between the production server and the rest of the public folder servers in the organization. After replication has occurred, all unsecured public folders in the organization are re-homed to the production server where the databases are restored. |
| Reference Links | XADM: Public Folders Are Re-Homed When You Restore the Pub.edb File |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.