Event 8365 from MSExchangeAL - Could not read the Security Descriptor

Thanks for pointing out the association of Event 8365 and MSExchangeIS activity.  In my case, the last two instances of Event 8365 were followed 1 or 2 seconds later by Event 9661 from MSExchangeIS "The Unsolicited Commercial Email default filter level has been updated. The new value is 4".

My installation is on a 2008R2 DC. 

Your previous post mentioned the possibility that Event 8365 is associated with a server running out of RAM.  I doubt it - I have seen Event 8365 on a new OS installation on a server with 16GB RAM, with just one logged on user and no applications except for Exchange 2010 running.

I still suspect this is a bug, because the source of Event 8365 is MSExchangeAL, but MSExchangeAL does not appear in a list of services.