| Event Id | 9312 |
| Source | CDOEXM |
| Description | The Microsoft Exchange System Attendant was stopped while message tracking information was being written. Some message tracking information was lost. |
| Event Information | "According To Microsoft:" Explanation: This event indicates that the Microsoft Exchange System Attendant stopped while logging message tracking information. Some message tracking information could have been lost. The event occurs when there is a backlog of tracking events to be written to the message tracking log and the Exchange System Attendant service is shut down. Although a relatively rare event, it is possible under high Active Directory load conditions. User Action: Lost message tracking data cannot be recovered. The reason for the high Active Directory load must be investigated. |
| Reference Links | Microsoft product: Exchange Version: 6.5.6940.0 Event Source: CDOEXM Event ID: 9312 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.