Process %1 (PID=%2). Impersonated account %3 is calling into Exchange Active Directory Provider with the following callstack: ...