Barnardos_2LS
asked on
Frequency of Event ID 8528 being logged in Event Viewer on an Exchange 2010 SP3 ru4 Database Server
Hi
We have a number of user’s mailboxes set to Prohibit Send & Receive set to 0KB, as they are on long term leave and we don't want email being sent from or delivered to their account. We also have the Issue Warning at (MB) set to 50MB at the databases level. Event ID 8528 is being logged as expected in the Application Log, however the frequency of the event being logged for each user is very unusual. Out of the 19 users (whose mailboxes are hosted on the Server that have had their account set to 0KB) the occurrence of the event being logged for 17 of them (over the last 3 weeks) is in the 10’s or 100’s and what you would expect since I understand the event is triggered each time there is an attempt to send/receive/access the account. etc. The total number of Event ID 8528 entries over this period is 50470, for which 24720 entries relate to one user and another 24610 relate to another users mailbox. The users are standard accounts and wouldn’t have any special access over and above the users. I do not understand why there is such a high number of entries for only 2 users and would like some advice on what can be checked or why this may be occurring. Thanks.
We have a number of user’s mailboxes set to Prohibit Send & Receive set to 0KB, as they are on long term leave and we don't want email being sent from or delivered to their account. We also have the Issue Warning at (MB) set to 50MB at the databases level. Event ID 8528 is being logged as expected in the Application Log, however the frequency of the event being logged for each user is very unusual. Out of the 19 users (whose mailboxes are hosted on the Server that have had their account set to 0KB) the occurrence of the event being logged for 17 of them (over the last 3 weeks) is in the 10’s or 100’s and what you would expect since I understand the event is triggered each time there is an attempt to send/receive/access the account. etc. The total number of Event ID 8528 entries over this period is 50470, for which 24720 entries relate to one user and another 24610 relate to another users mailbox. The users are standard accounts and wouldn’t have any special access over and above the users. I do not understand why there is such a high number of entries for only 2 users and would like some advice on what can be checked or why this may be occurring. Thanks.
ASKER
Thanks, I have checked and there are no rules setup on the user's mailbox and the Quota NotificationSchedule is set to run between 1:00 and 1:15 every day for all Databases.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Confirmed issue was with Blackberry Accounts. Blackberry solution is no longer used therefore issue has been resolved
ASKER
Blackberry accounts were the cause of the excessive logging
check this Quota NotificationSchedule
to check on each database :
Get-MailboxDatabase | format-list Name, QuotaNotificationSchedule