| Event Id | 12002 |
| Source | MSExchangeIS Public Store |
| Description | Error <error code> occurred while processing message <message id> from <host name>. |
| Event Information | "According To Microsoft:" CAUSE: These events are generated when messages in the users mailbox fail to be converted. This can happen when antivirus programs strip off attachments from messages. The 12002 events are generated when a user with these messages in their mailbox, logs on to the server to access their mail. RESOLUTION: 1. Search the antivirus log to see if any attachments were removed and to which user they were going. The message tracking log can also help identify which users sent the offending message. 2. Give the Administrator, or whatever account that you are logging on with, SEND AS and RECEIVE AS permissions on the mailbox store. Then search drive M to find the offending message. Delete the message from within Outlook when possible. If the message cannot be deleted using Outlook, try deleting the message from within drive M. 3. Disable the antivirus program and reboot the server. Also check with the antivirus vendor for any updates. 4. If you are at Exchange 2000 SP3, make sure you have applied the Post-SP3 hotfix. |
| Reference Links | Microsoft product: Exchange Version: 6.5.6940.0 Event Source: MSExchangeIS Public Store Event ID: 12002 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.