The issue is caused by Microsoft Exchange Information Store Diagnostic Logging, which generates the Event ID 9567. This event is not a problem in our product because SMEX still works as expected and continues to normally scan items.
To confirm if the Microsoft Exchange Information Store Diagnostic Logging is enabled:
- Navigate to Start > Programs > Microsoft Exchange 2010.
- Select Exchange Management Shell.
- At the prompt, type the following command and press ENTER:
get-eventloglevel MSExchangeIS
- Check the result. If the Virus Scanning entry is set to "Expert", it means that the Diagnostic Logging is enabled.
To stop generating such events:
- Open the Exchange Management Console.
- Click the Server Configuration, Mailbox.
- Under Properties, select the Manage Diagnostic Logging Properties.
- Look for the list of MSExchangeIS and check for Virus Scanning settings in 900x.
- Set the Diagnostic Logging Properties for MSExchangeIS to its lowest to prevent generating these Events IDs.