| Event Id | 1041 |
| Source | MSExchangeIS Public |
| Description | The rule (1-CF0) with sequence number 100 is being disabled due to errors encountered while applying the rule. The public folder is PublicFolderName. |
| Event Information | According to Microsoft: CAUSE: This problem can occur if an antivirus solution that is based on the antivirus application programming interface (API) is under stress on the Exchange Server 5.5 computer at the same time that an autoforward-type public folder rule is running. When a post is made to the public folder, the rule generates a new message to deliver to the recipients that are specified in the rule. Because the post contains an attachment, the attachment must be submitted to the antivirus vendor for scanning. If the new message is being scanned when the message delivery is attempted, the Exchange Server computer attempts to deliver the message several times, with a delay between each attempt. This behavior can be controlled by modifying two registry keys that are described in the "Workaround" section of this article. WORKAROUND: To work around this problem if you are an Exchange Server administrator, examine and adjust the SendRetries and SendRetryInterval registry values for your environment. However, if this problem still occurs after you make adjustments to these registry values, you might need to apply the fix that is described in the "Resolution" section of this article.To adjust the SendRetries and SendRetryInterval values:1. Start Registry Editor (Regedt32.exe).2. Locate the SendRetries value under the following key in the registry:HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeIS\VirusScan3. On the Edit menu, click REG_DWORD, change this decimal value as applicable (the default value is 2), and then click OK.4. Locate the SendRetryInterval value under the following key in the registry:HKEY_LOCAL_HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeIS\VirusScan5. On the Edit menu, click REG_DWORD, change this decimal value as applicable (the default value is 60000), and then click OK.6. Quit Registry Editor. |
| Reference Links | XADM: Public Folder Rules Are Disabled When You Use an Antivirus API-Based Solution |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.