We are running Exchange 5.0, with the latest SP & hotfixes. In the event viewer of the Exchange Server, I have a lot of entries of <br>
<br>
Event ID 1032<br>
Source: MSExchangeIS Private<br>
Type: Send as<br>
<br>
/O=APIWORLD/OU=TSRAT/CN=RECIPIENTS/CN=BJONES sent a message as /O=APIWORLD/OU=TSRAT/CN=RECIPIENTS/CN=BROBERTS. <br>
<br>
--------------------------<br>
<br>
I interpret this to me that user BJONES is logged into the mailbox BROBERTS and is sending e-mails from that account.<br>
<br>
After some investigation and testing, I found out that it is actually BJONES sending an e-mail to BROBERTS. Now, this entry does not come up for every single e-mail that is sent, but it does come up often.<br>
<br>
Is this a bug? How do I distinguish these messages from the times when someone is really sending e-mail from another's account? I cannot find anything in TechNet.<br>
<br>
Our organization is large enough that they are a decent amount of technical people with this type of access.<br>
<br>
Thanks in advance.<br>
<br>
Event ID 1032<br>
Source: MSExchangeIS Private<br>
Type: Send as<br>
<br>
/O=APIWORLD/OU=TSRAT/CN=RECIPIENTS/CN=BJONES sent a message as /O=APIWORLD/OU=TSRAT/CN=RECIPIENTS/CN=BROBERTS. <br>
<br>
--------------------------<br>
<br>
I interpret this to me that user BJONES is logged into the mailbox BROBERTS and is sending e-mails from that account.<br>
<br>
After some investigation and testing, I found out that it is actually BJONES sending an e-mail to BROBERTS. Now, this entry does not come up for every single e-mail that is sent, but it does come up often.<br>
<br>
Is this a bug? How do I distinguish these messages from the times when someone is really sending e-mail from another's account? I cannot find anything in TechNet.<br>
<br>
Our organization is large enough that they are a decent amount of technical people with this type of access.<br>
<br>
Thanks in advance.<br>