When Spotlight on Messaging Diagnostic Console is connected to Exchange Servers for monitoring the below is displayed in the Application logs:
Log Name:      Application
 Source:        Microsoft-Windows-Perflib
 Date:          3/28/2011 8:17:29 PM
 Event ID:      1010
 Task Category: None
 Level:         Error
 Keywords:      Classic
 User:          N/A
 Computer:      ERCASP2.everestre.net
 Description:
 The Collect Procedure for the "PolicyAgent" service in DLL "C:\Windows\System32\ipsecsvc.dll" generated an exception or returned an invalid status. The performance data returned by the counter DLL will not be returned in the Perf Data Block. The first four bytes (DWORD) of the Data section contains the exception code or status code.
 Event Xml:
 <Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
   <System>
     <Provider Name="Microsoft-Windows-Perflib" Guid="{13B197BD-7CEE-4B4E-8DD0-59314CE374CE}" EventSourceName="Perflib" />
     <EventID Qualifiers="49152">1010</EventID>
     <Version>0</Version>
     <Level>2</Level>
     <Task>0</Task>
     <Opcode>0</Opcode>
     <Keywords>0x80000000000000</Keywords>
     <TimeCreated SystemTime="2011-03-29T00:17:29.000Z" />
     <EventRecordID>523068</EventRecordID>
     <Correlation />
     <Execution ProcessID="0" ThreadID="0" />
     <Channel>Application</Channel>
     <Computer>ERCASP2.everestre.net</Computer>
     <Security />
   </System>
   <UserData>
     <EventXML xmlns:auto-ns2="
http://schemas.microsoft.com/win/2004/08/ev