Logo
programming4us
programming4us
programming4us
programming4us
Home
programming4us
XP
programming4us
Windows Vista
programming4us
Windows 7
programming4us
Windows Azure
programming4us
Windows Server
programming4us
Windows Phone
 
Windows Server

Exchange Server 2010 Management and Maintenance Practices : Auditing the Environment (part 3) - Message Tracking

4/10/2011 7:14:22 PM

Message Tracking

Of the auditing techniques available in Exchange Server, message tracking is by far the least resource-intensive and will likely be the most commonly used by administrators. Because this feature has proven to be so valuable in previous versions of Exchange Server, Microsoft has enabled it by default in Exchange Server 2010. Previously, message tracking was disabled by default, and had to be enabled on a server-by-server basis.

Administrators can use message tracking logs for message forensics, reporting, and troubleshooting, as well as analyzing mail flow in an organization.

Message tracking records the SMTP transport activity of all messages sent to or from any Exchange Server 2010 Hub Transport, Edge Transport, or mailbox server.

To perform these procedures on a computer with the Hub Transport or mailbox server role installed, administrators must be logged on using an account that is a member of the Exchange Administrators group. The account must also be a member of the local Administrators group on that computer. For a computer with the Edge Transport server role installed, administrators must be logged on using an account that is a member of the local Administrators group on that computer.

Enabling or Disabling Message Tracking

As previously stated, by default, message tracking is enabled on all Exchange Server 2010 computers that deal with message transport. This includes Hub Transport, Edge Transport, and mailbox servers. Message tracking can prove to be extremely useful, and administrators should avoid disabling the feature unless there are overwhelming reasons.

To set or review the message tracking on a Hub Transport server, use the following procedure:

1.
Open the Exchange Management Console.

2.
Expand the Server Configuration folder and select the Hub Transport folder.

3.
In the right pane, right-click on the Exchange server to configure and select Properties.

4.
Select the Log Settings tab to access the Message tracking log settings.

The message tracking can also be set via command-line. All commands must be run from the Exchange Management Shell. As in other shell commands, the <Identity> argument is replaced by the server name. To enable the feature, use the $true argument, and to disable it use $false.

To enable or disable message tracking on a Hub Transport or Edge Transport server:

Set-TransportServer <Identity> -MessageTrackingLogEnabled:<$true or $false>

To enable or disable message tracking on a mailbox server:

Set-MailboxServer <Identity> -MessageTrackingLogEnabled:<$true or $false>

Sample command: To disable message tracking on a mailbox server named Server1, use the following command:

Set-MailboxServer Server1 –MessageTrackingLogEnabled:$false

Note

If a server has both the Mailbox server role and the Hub Transport server role installed, you can use either the Set-MailboxServer or Set-TransportServer cmdlet.


Changing the Location of Message Tracking Logs

Exchange Server 2010 allows administrators to specify the location of the message tracking logs. The new location becomes effective immediately upon the completion of the command; however, any existing log files are not copied to the new directory—they will remain in the old directory.

By default, these files are located in the C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\MessageTracking directory.

When creating a new directory, the following permissions are required:

  • Administrator— Full Control

  • System— Full Control

  • Network Service— Read, Write, and Delete Subfolders and Files

The location can be set on the properties of the Hub Transport or Edge Transport server in the Exchange Management Console using the procedure previously described. To change the default location for these log files via command-line, use the following commands in the Exchange Management Shell.

Change message tracking log file location for a Hub Transport server or an Edge Transport server:

Set-TransportServer <Identity> -MessageTrackingLogPath <LocalFilePath>

Change message tracking log file location for a mailbox server:

Set-MailboxServer <Identity> -MessageTrackingLogPath <LocalFilePath>

Sample command: To change the location of the message tracking log to D:\Message Tracking on an Exchange Server 2010 Hub Transport server named Server1, use the following command:

Set-TransportServer Server1 –MessageTrackingLogPath "D:\Message Tracking"

Configuring Message Tracking Log File and Log Directory Maximum Size

To prevent log files from growing so large that they deplete all available disk space, Exchange Server 2010 allows administrators to configure maximum log file and directory sizes. This configuration setting is a per-server setting and, by default, the maximum directory size is 250MB, whereas the maximum log file size is 10MB. When the maximum file size is reached, Exchange Server opens a new log file. When the maximum directory size is reached, Exchange Server overwrites the log files, starting with the oldest logs first.

To configure message tracking log directory and file sizes, use the following commands in the Exchange Management Shell. This cannot be done with the Exchange Management Console. Be aware that these commands must be performed for each server you want to modify. The <DirectorySize> and <FileSize> arguments should be entered as a number followed by one of the following:

  • B (bytes)

  • KB (kilobytes)

  • MB (megabytes)

  • GB (gigabytes)

  • TB (terabytes)

Change maximum size for message tracking log directory on a Hub Transport or Edge Transport server:

Set-TransportServer <Identity> -MessageTrackingLogMaxDirectorySize <DirectorySize>


Change maximum size for message tracking log directory on a mailbox server:

Set-MailboxServer <Identity> -MessageTrackingLogMaxDirectorySize <DirectorySize>


Change maximum size for individual message tracking log files on a Hub Transport or Edge Transport server:

Set-TransportServer <Identity> -MessageTrackingLogMaxFileSize <FileSize>

Change maximum size for individual message tracking log files on a mailbox server:

Set-MailboxServer <Identity> -MessageTrackingLogMaxFileSize <FileSize>

Sample command: To set the maximum size for the message tracking log directory on a Hub Transport server named Server1 to 500MB, use the following command:

Set-TransportServer Server1 –MessageTrackingLogMaxDirectorySize 500MB

Configuring the Maximum Age for the Message Tracking Logs

In addition to having the ability to configure the maximum file and directory sizes for message tracking logs, administrators can also configure a maximum age for each message tracking log file. The default age is set to 30 days, and any log files that exceed this age are deleted by Exchange Server.

To change the maximum age of message tracking log files, use the following commands in the Exchange Management Shell. This cannot be done with the Exchange Management Console. The <Age> argument is entered in the following format: DD.HH:MM:SS, for Days, Hours, Minutes, Seconds.

Change maximum age for the message tracking log files on a Hub Transport or Edge Transport server:

Set-TransportServer <Identity> -MessageTrackingLogMaxAge <Age>

Change maximum age for the message tracking log files on a mailbox server:

Set-MailboxServer <Identity> -MessageTrackingLogMaxAge <Age>

Sample command: To set the maximum age of the message tracking log files on an Exchange Server 2010 mailbox server named Server1 to 45 days, use the following command:

Set-MailboxServer Server1 –MessageTrackingLogMaxAge 45.00:00:00

Other -----------------
- BizTalk 2010 Recipes : Orchestrations - Calling External Assemblies
- BizTalk 2010 Recipes : Orchestrations - Receiving Multiple Message Formats in a Single Orchestration
- BizTalk 2010 Recipes : Orchestrations - Creating Branching Logic in an Orchestration
- SharePoint 2010 PerformancePoint Services : Examining Show Details Reports
- SharePoint 2010 PerformancePoint Services : Examining Decomposition Tree Reports
- SharePoint 2010 PerformancePoint Services : Reports - Strategy Map
- Windows Server 2008 R2 : Installing DFS (part 2) - Creating a DFS Folder and Replication Group & Configuring DFS Read-Only Replication
- Windows Server 2008 R2 : Installing DFS (part 1) - Creating the DFS Namespace and Root & Adding an Additional Namespace Server to a Domain-Based Namespace
- Windows Server 2008 R2 : File System Management and Fault Tolerance - Planning a DFS Deployment
- Windows Server 2008 R2 : File System Management and Fault Tolerance - The Distributed File System
 
 
Top 10 video Game
-   Minecraft Mods - MAD PACK #10 'NETHER DOOM!' with Vikkstar & Pete (Minecraft Mod - Mad Pack 2)
-   Minecraft Mods - MAD PACK #9 'KING SLIME!' with Vikkstar & Pete (Minecraft Mod - Mad Pack 2)
-   Minecraft Mods - MAD PACK #2 'LAVA LOBBERS!' with Vikkstar & Pete (Minecraft Mod - Mad Pack 2)
-   Minecraft Mods - MAD PACK #3 'OBSIDIAN LONGSWORD!' with Vikkstar & Pete (Minecraft Mod - Mad Pack 2)
-   Total War: Warhammer [PC] Demigryph Trailer
-   Minecraft | MINIONS MOVIE MOD! (Despicable Me, Minions Movie)
-   Minecraft | Crazy Craft 3.0 - Ep 3! "TITANS ATTACK"
-   Minecraft | Crazy Craft 3.0 - Ep 2! "THIEVING FROM THE CRAZIES"
-   Minecraft | MORPH HIDE AND SEEK - Minions Despicable Me Mod
-   Minecraft | Dream Craft - Star Wars Modded Survival Ep 92 "IS JOE DEAD?!"
-   Minecraft | Dream Craft - Star Wars Modded Survival Ep 93 "JEDI STRIKE BACK"
-   Minecraft | Dream Craft - Star Wars Modded Survival Ep 94 "TATOOINE PLANET DESTRUCTION"
-   Minecraft | Dream Craft - Star Wars Modded Survival Ep 95 "TATOOINE CAPTIVES"
-   Hitman [PS4/XOne/PC] Alpha Gameplay Trailer
-   Satellite Reign [PC] Release Date Trailer
Popular tags
Microsoft Access Microsoft Excel Microsoft OneNote Microsoft PowerPoint Microsoft Project Microsoft Visio Microsoft Word Active Directory Biztalk Exchange Server Microsoft LynC Server Microsoft Dynamic Sharepoint Sql Server Windows Server 2008 Windows Server 2012 Windows 7 Windows 8 windows Phone 7 windows Phone 8
programming4us programming4us
 
Popular keywords
HOW TO Swimlane in Visio Visio sort key Pen and Touch Creating groups in Windows Server Raid in Windows Server Exchange 2010 maintenance Exchange server mail enabled groups Debugging Tools Collaborating
programming4us programming4us
PS4 game trailer XBox One game trailer
WiiU game trailer 3ds game trailer
Trailer game
 
programming4us
Natural Miscarriage
programming4us
Windows Vista
programming4us
Windows 7
programming4us
Windows Azure
programming4us
Windows Server
programming4us
Game Trailer