Dear Chris,
First of all thank you very much for revealing this EventHistory Feature! It will for sure help to find the causes of some "miracles".. ;)
And here is already a question based on a "miracle" where Exchange changes meetings "on its own", and as user says, "I didn't do anything at this night time".
This is a sniplet of the relevant output:
ItemType EventName Flags ObjectClass ItemCount UnreadItemCount ExtendedFlags ClientCategory PrincipalName
MAPI_FOLDER ObjectModified ContentOnly -1 -1 1073741824 AirSync NT AUTHORITYSYSTEM
MAPI_MESSAGE ObjectModified None Exchange.ContentsSyncData 0 0 1073742019 AirSync NT AUTHORITYSYSTEM
MAPI_FOLDER ObjectModified None -1 -1 1073741824 AirSync DomainUser
MAPI_FOLDER ObjectModified ContentOnly 23832 -1 1073741824 WebServices NT AUTHORITYSYSTEM
MAPI_FOLDER ObjectModified ContentOnly IPF.Appointment -1 -1 2147483648 WebServices NT AUTHORITYSYSTEM
MAPI_MESSAGE ObjectModified SearchFolder IPM.Appointment 0 0 1073741824 WebServices NT AUTHORITYSYSTEM
MAPI_MESSAGE ObjectModified SearchFolder IPM.Appointment 0 0 1073741824 WebServices NT AUTHORITYSYSTEM
Can you please shed light on those events?
I actually don't understand, why "SYSTEM" 'starts' with AirSync and modifies the object, ContentOnly.
Is this the Calendar Repair Agent?
And the same question like Cory, "Will this be documented in detail?"
Thank you vey much in advance!
Cheers,
Alex