RE: Exchange 2007 Spam Filtering
I have been inspired by this thread to re-attempt to get RBL filtering working on my Exchange 2007 server. I tried before and couldn't get it to work. I have added zen.spamhaus.org as an IP Block List provider and enabled it. But spam is still delivered! I studied a spam message that arrived this morning and got the source IP address. I confirmed on the spamhaus website that this ip address is on their list. I tried this script: get-ipblocklistprovider | test-ipblocklistprovider -ipaddress 115.138.46.65 and it seems to work! Exchange says that spamhaus reports this IP address as being a spam source. But then I try get-antispamtoprblproviders and it comes up blank. And when I send an email to spamhaus' nelson-sbl-t...@crynwr.com email address (which sends a reply from a black listed IP address), the email reply is received when it should be blocked. Have I forgotten to do something? Regards, Andrew From: Steve Szabo [mailto:steve...@gmail.com] Sent: 23 July 2010 01:55 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering Have you thought about teaching him unsubscribe, or is he too high on the food chain to learn something like that? \\Steve// From: Brown, Larry [mailto:larry.br...@dplinc.com] Sent: Thursday, July 22, 2010 9:35 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering Well, I have yet to find a message in his Junk email folder (he moves it there, and has about 500 addresses in his blocked senders list) that hasn't gone through our Edge transport according to the Header info. I have figured out that about 50% of what he gets are trade related 'newsletters' and 'news-bulletins'. He has either signed up for them and forgotten, or someone has signed him up without his knowledge. I could see someone signing him up as a form of aggravation since he is an executive that has been here for a long time. Since we are a publicly traded company, guessing or finding his address isn't that hard. And he refuses to discuss changing his email address. sigh FYI, adding b.barracudacentral.orghttp://b.barracudacentral.org to the other three RBL's we were already using, Zen.spamhaus.org Bl.spamcop.net Combined.njable.org Has dropped the amount of SPAM delivered to our quarantine folder by about 50%, and to his mailbox by 20%. There has only been one full day to check, but its apparent already that it has helped a great deal. Larry From: Jeff Brown [mailto:2jbr...@gmail.com] Sent: Wednesday, July 21, 2010 10:24 AM To: MS-Exchange Admin Issues Subject: Re: Exchange 2007 Spam Filtering It looks like you know what you are doing and have done more work to stop spam than a lot of guys. With ZEROS getting through have you verified, as MBS suggested at the start of this thread, that in fact these messages are going through your edge servers? This looks like what you get when SPAM finds its way directly through a secondary MX pointer that may not be filtered on the same level On Tue, Jul 20, 2010 at 10:16 PM, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: My RBL of choice is zen.spamhaus.orghttp://zen.spamhaus.org But, it's running on a Maia Mailguard box. Cost was hardware and time. On Tue, Jul 20, 2010 at 09:00, Brown, Larry larry.br...@dplinc.commailto:larry.br...@dplinc.com wrote: Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day...and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
Exchange 2003 whitespace
Is it possible to obtain free disc space, EDB size, and white space from the command line and export it to a file? Thanks John --- ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.clearswift.com **
Recovering messages from Exchange server 2007
Greetings Exchange gurus What's the easiest way to view all messages that were sent by a particular user on a particular day in the past week? I need this for some cloak-and-dagger investigative purposes - I suppose I could just grant myself permissions to the user's mailbox and forward myself all their Sent Items, but a) would they be able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff they may have permanently deleted? I presume there must be other ways to achieve this - I apologise for my lack of Exchange knowledge, I am not an Exchange bod by any stretch of the imagination. TIA, JRR -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question.
RE: Guidance on disks for Exchange 2010
Thanks for everyone's input. It's clear that there's a lot of difference of opinion. From what I can gather, than, so long as the storage appliance is supported/approved by Exchange/Microsoft, a solution involving thin provisioning using expanding disks would be ok? Just curious, is there is technical definition of a disk that the OS would see increasing on an as-needed basis, rather than being presented at 100GB and then being expanded elsewhere? I think that would be stupid, but wondering if it exists. Richard -Original Message- From: bounce-9028370-8066...@lyris.sunbelt-software.com [mailto:bounce-9028370-8066...@lyris.sunbelt-software.com] On Behalf Of Michael B. Smith Sent: 23 July 2010 03:29 To: MS-Exchange Admin Issues Subject: RE: Guidance on disks for Exchange 2010 And that's exactly what they did: Virtual disks that dynamically expand are not supported by Exchange. :-) Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com
RE: Recovering messages from Exchange server 2007
Can only do that if you have journaling installed or if you have a viable email archiving solution. John Bowles From: James Rankin [kz2...@googlemail.com] Sent: Friday, July 23, 2010 7:59 AM To: MS-Exchange Admin Issues Subject: Recovering messages from Exchange server 2007 Greetings Exchange gurus What's the easiest way to view all messages that were sent by a particular user on a particular day in the past week? I need this for some cloak-and-dagger investigative purposes - I suppose I could just grant myself permissions to the user's mailbox and forward myself all their Sent Items, but a) would they be able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff they may have permanently deleted? I presume there must be other ways to achieve this - I apologise for my lack of Exchange knowledge, I am not an Exchange bod by any stretch of the imagination. TIA, JRR -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question.
Re: Recovering messages from Exchange server 2007
Is anything usable in the message tracking tool? On 23 July 2010 13:25, John Bowles john.bow...@wlkmmas.org wrote: Can only do that if you have journaling installed or if you have a viable email archiving solution. John Bowles -- *From:* James Rankin [kz2...@googlemail.com] *Sent:* Friday, July 23, 2010 7:59 AM *To:* MS-Exchange Admin Issues *Subject:* Recovering messages from Exchange server 2007 Greetings Exchange gurus What's the easiest way to view all messages that were sent by a particular user on a particular day in the past week? I need this for some cloak-and-dagger investigative purposes - I suppose I could just grant myself permissions to the user's mailbox and forward myself all their Sent Items, but a) would they be able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff they may have permanently deleted? I presume there must be other ways to achieve this - I apologise for my lack of Exchange knowledge, I am not an Exchange bod by any stretch of the imagination. TIA, JRR -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question.
Re: Exchange 2003 whitespace
Event 1221 in the Application log will tell you the amount of free space in the db at the time of online defrag. Can you use that plus filesystem info. about disk space and the size of the database files to get what you're looking for? You could write a Powershell script using the Get-Eventlog cmdlet to obtain the white space value, and the rest of it should be pretty straightforward. HTH, RS On Fri, Jul 23, 2010 at 5:01 AM, Ellis, John P. johnel...@wirral.gov.ukwrote: Is it possible to obtain free disc space, EDB size, and white space from the command line and export it to a file? Thanks John --- ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.clearswift.com **
RE: Exchange 2003 whitespace
Hi It does help, only I've not used Powershell before. I was hoping to use a batch file and use some command line swiches. Looks like time to investigate PS. Thanks John From: Richard Stovall [mailto:rich...@gmail.com] Sent: 23 July 2010 13:54 To: MS-Exchange Admin Issues Subject: Re: Exchange 2003 whitespace Event 1221 in the Application log will tell you the amount of free space in the db at the time of online defrag. Can you use that plus filesystem info. about disk space and the size of the database files to get what you're looking for? You could write a Powershell script using the Get-Eventlog cmdlet to obtain the white space value, and the rest of it should be pretty straightforward. HTH, RS On Fri, Jul 23, 2010 at 5:01 AM, Ellis, John P. johnel...@wirral.gov.uk wrote: Is it possible to obtain free disc space, EDB size, and white space from the command line and export it to a file? Thanks John --- ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.clearswift.com **
RE: Exchange 2003 whitespace
I put this together a while back to get the whitespace report weekly May help for a starting point, the rest should be able to be pulled out with the same array of servers and their WMI. strDate = Date() Const ForWriting = 2 Const ForReading = 1 strMail = us...@domain.com Dim fso Dim strLogFileName Set fso = CreateObject(Scripting.FileSystemObject) strLogFileName = Output _ Replace(Replace(replace(Now, /, _), :, _), , _) .txt Set fileDest = fso.OpenTextFile(strLogFileName, ForWriting, True) fileDest.WriteLine Begin WhiteSpace Report Script at now . VBCRLF arrComputers = Array(exchange servers HERE) Set dtmStartDate = CreateObject(WbemScripting.SWbemDateTime) Set dtmEndDate = CreateObject(WbemScripting.SWbemDateTime) DateToCheck = CDate(strDate) dtmStartDate.SetVarDate DateToCheck, CONVERT_TO_LOCAL_TIME dtmEndDate.SetVarDate DateToCheck + 1, CONVERT_TO_LOCAL_TIME For Each strComputer In arrComputers fileDest.WriteLine strComputer Set objWMIService = GetObject(winmgmts: _ {impersonationLevel=impersonate}!\\ strComputer \root\cimv2) Set colEvents = objWMIService.ExecQuery _ (Select * from Win32_NTLogEvent Where Logfile = 'Application' AND _ EventCode = '1221' AND SourceName = 'MSExchangeIS Mailbox Store' AND TimeWritten = ' _ dtmStartDate ' AND TimeWritten ' dtmEndDate ') For Each objEvent in colEvents Message = objEvent.Message fileDest.WriteLine Message Next Next fileDest.Close Set fileDest = fso.OpenTextFile(strLogFileName, ForReading) strText = fileDest.ReadAll fileDest.Close strNewText = Replace(strText, For more information, click http://www.microsoft.com/contentredirect.asp.;, ) Set fileDest = fso.OpenTextFile(strLogFileName, ForWriting) fileDest.WriteLine strNewText fileDest.Close Set fileDest = fso.OpenTextFile(strLogFileName, ForReading) Do Until fileDest.AtEndOfStream strLine = fileDest.ReadLine strLine = Trim(strLine) If Len(strLine) 0 then strNewContents = strNewContents strLine vbCRLF End If Loop fileDest.Close Set fileDest = fso.OpenTextFile(strLogFileName, ForWriting) fileDest.Write strNewContents fileDest.Close Set objEmail = CreateObject(CDO.Message) objEmail.From = whitespacerep...@domain.com objEmail.to = strMail objEmail.Subject = Whitespace Weekly Report objEmail.TextBody = Script Results Log objEmail.AddAttachment D:\Whitespace\ strLogFileName objEmail.Configuration.Fields.Item (http://schemas.microsoft.com/cdo/configuration/sendusing;) = 2 objEmail.Configuration.Fields.Item (http://schemas.microsoft.com/cdo/configuration/smtpserver;) = relay server objEmail.Configuration.Fields.Item (http://schemas.microsoft.com/cdo/configuration/smtpserverport;) = 25 objEmail.Configuration.Fields.Update objEmail.Send From: Ellis, John P. [mailto:johnel...@wirral.gov.uk] Sent: Friday, July 23, 2010 9:11 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2003 whitespace Hi It does help, only I've not used Powershell before. I was hoping to use a batch file and use some command line swiches. Looks like time to investigate PS. Thanks John From: Richard Stovall [mailto:rich...@gmail.com] Sent: 23 July 2010 13:54 To: MS-Exchange Admin Issues Subject: Re: Exchange 2003 whitespace Event 1221 in the Application log will tell you the amount of free space in the db at the time of online defrag. Can you use that plus filesystem info. about disk space and the size of the database files to get what you're looking for? You could write a Powershell script using the Get-Eventlog cmdlet to obtain the white space value, and the rest of it should be pretty straightforward. HTH, RS On Fri, Jul 23, 2010 at 5:01 AM, Ellis, John P. johnel...@wirral.gov.uk wrote: Is it possible to obtain free disc space, EDB size, and white space from the command line and export it to a file? Thanks John --- ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.clearswift.com **
Re: Exchange 2003 whitespace
Some folks on the NT list have mentioned Mark Russinovich's psloglist utility in the past. I've not used it, but perhaps it might let you do what you need in a batch file. http://technet.microsoft.com/en-us/sysinternals/bb897544.aspx http://technet.microsoft.com/en-us/sysinternals/bb897544.aspx On Fri, Jul 23, 2010 at 9:10 AM, Ellis, John P. johnel...@wirral.gov.ukwrote: Hi It does help, only I've not used Powershell before. I was hoping to use a batch file and use some command line swiches. Looks like time to investigate PS. Thanks John -- *From:* Richard Stovall [mailto:rich...@gmail.com] *Sent:* 23 July 2010 13:54 *To:* MS-Exchange Admin Issues *Subject:* Re: Exchange 2003 whitespace Event 1221 in the Application log will tell you the amount of free space in the db at the time of online defrag. Can you use that plus filesystem info. about disk space and the size of the database files to get what you're looking for? You could write a Powershell script using the Get-Eventlog cmdlet to obtain the white space value, and the rest of it should be pretty straightforward. HTH, RS On Fri, Jul 23, 2010 at 5:01 AM, Ellis, John P. johnel...@wirral.gov.ukwrote: Is it possible to obtain free disc space, EDB size, and white space from the command line and export it to a file? Thanks John --- ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.clearswift.com **
RE: Recovering messages from Exchange server 2007
You can track messages, but you cannot view the contents of the message. That's if you have message tracking already enabled prior to these messages having been sent/received. John Bowles From: James Rankin [kz2...@googlemail.com] Sent: Friday, July 23, 2010 8:36 AM To: MS-Exchange Admin Issues Subject: Re: Recovering messages from Exchange server 2007 Is anything usable in the message tracking tool? On 23 July 2010 13:25, John Bowles john.bow...@wlkmmas.orgmailto:john.bow...@wlkmmas.org wrote: Can only do that if you have journaling installed or if you have a viable email archiving solution. John Bowles From: James Rankin [kz2...@googlemail.commailto:kz2...@googlemail.com] Sent: Friday, July 23, 2010 7:59 AM To: MS-Exchange Admin Issues Subject: Recovering messages from Exchange server 2007 Greetings Exchange gurus What's the easiest way to view all messages that were sent by a particular user on a particular day in the past week? I need this for some cloak-and-dagger investigative purposes - I suppose I could just grant myself permissions to the user's mailbox and forward myself all their Sent Items, but a) would they be able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff they may have permanently deleted? I presume there must be other ways to achieve this - I apologise for my lack of Exchange knowledge, I am not an Exchange bod by any stretch of the imagination. TIA, JRR -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question.
Re: Recovering messages from Exchange server 2007
Do you have any sort of edge device or a similar service? I often recover messages for users from our Barracuda. (We also relay outbound messages through it to take advantage of the invalid bounce suppression feature.) On Fri, Jul 23, 2010 at 9:14 AM, John Bowles john.bow...@wlkmmas.orgwrote: You can track messages, but you cannot view the contents of the message. That's if you have message tracking already enabled prior to these messages having been sent/received. John Bowles -- *From:* James Rankin [kz2...@googlemail.com] *Sent:* Friday, July 23, 2010 8:36 AM *To:* MS-Exchange Admin Issues *Subject:* Re: Recovering messages from Exchange server 2007 Is anything usable in the message tracking tool? On 23 July 2010 13:25, John Bowles john.bow...@wlkmmas.org wrote: Can only do that if you have journaling installed or if you have a viable email archiving solution. John Bowles -- *From:* James Rankin [kz2...@googlemail.com] *Sent:* Friday, July 23, 2010 7:59 AM *To:* MS-Exchange Admin Issues *Subject:* Recovering messages from Exchange server 2007 Greetings Exchange gurus What's the easiest way to view all messages that were sent by a particular user on a particular day in the past week? I need this for some cloak-and-dagger investigative purposes - I suppose I could just grant myself permissions to the user's mailbox and forward myself all their Sent Items, but a) would they be able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff they may have permanently deleted? I presume there must be other ways to achieve this - I apologise for my lack of Exchange knowledge, I am not an Exchange bod by any stretch of the imagination. TIA, JRR -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question.
Re: Recovering messages from Exchange server 2007
Actually, we have an IronPort. I forgot all about it. There is a message tracking function on there that may be of use, cheers! On 23 July 2010 14:20, Richard Stovall rich...@gmail.com wrote: Do you have any sort of edge device or a similar service? I often recover messages for users from our Barracuda. (We also relay outbound messages through it to take advantage of the invalid bounce suppression feature.) On Fri, Jul 23, 2010 at 9:14 AM, John Bowles john.bow...@wlkmmas.orgwrote: You can track messages, but you cannot view the contents of the message. That's if you have message tracking already enabled prior to these messages having been sent/received. John Bowles -- *From:* James Rankin [kz2...@googlemail.com] *Sent:* Friday, July 23, 2010 8:36 AM *To:* MS-Exchange Admin Issues *Subject:* Re: Recovering messages from Exchange server 2007 Is anything usable in the message tracking tool? On 23 July 2010 13:25, John Bowles john.bow...@wlkmmas.org wrote: Can only do that if you have journaling installed or if you have a viable email archiving solution. John Bowles -- *From:* James Rankin [kz2...@googlemail.com] *Sent:* Friday, July 23, 2010 7:59 AM *To:* MS-Exchange Admin Issues *Subject:* Recovering messages from Exchange server 2007 Greetings Exchange gurus What's the easiest way to view all messages that were sent by a particular user on a particular day in the past week? I need this for some cloak-and-dagger investigative purposes - I suppose I could just grant myself permissions to the user's mailbox and forward myself all their Sent Items, but a) would they be able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff they may have permanently deleted? I presume there must be other ways to achieve this - I apologise for my lack of Exchange knowledge, I am not an Exchange bod by any stretch of the imagination. TIA, JRR -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question.
Re: Recovering messages from Exchange server 2007
Assuming you still have the Tracking Logs for the period in question, then download and install the 30-day trial of Quest MessageStats ( www.quest.com/messagestats). In the admin console you can identify certain mailboxes on which you want detailed information (auditing tab), and then set up a gathering task for the tracking logs on the servers. Wait for data to be imported, then from the reports console run the Mailbox Sent Audits report. Rob On Fri, Jul 23, 2010 at 7:59 AM, James Rankin kz2...@googlemail.com wrote: Greetings Exchange gurus What's the easiest way to view all messages that were sent by a particular user on a particular day in the past week? I need this for some cloak-and-dagger investigative purposes - I suppose I could just grant myself permissions to the user's mailbox and forward myself all their Sent Items, but a) would they be able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff they may have permanently deleted? I presume there must be other ways to achieve this - I apologise for my lack of Exchange knowledge, I am not an Exchange bod by any stretch of the imagination. TIA, JRR -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question.
RE: Recovering messages from Exchange server 2007 (UNCLASSIFIED)
Classification: UNCLASSIFIED Caveats: NONE I would make sure that you have management's approval or your company lawyer's approval. You can't legally view all of someone's email without reasonable cause, even if it is on company owned equipment. Even then your search/viewing must be limited to whatever search criteria you are looking for. From: Richard Stovall [mailto:rich...@gmail.com] Sent: Friday, July 23, 2010 9:21 AM To: MS-Exchange Admin Issues Subject: Re: Recovering messages from Exchange server 2007 Do you have any sort of edge device or a similar service? I often recover messages for users from our Barracuda. (We also relay outbound messages through it to take advantage of the invalid bounce suppression feature.) On Fri, Jul 23, 2010 at 9:14 AM, John Bowles john.bow...@wlkmmas.org wrote: You can track messages, but you cannot view the contents of the message. That's if you have message tracking already enabled prior to these messages having been sent/received. John Bowles From: James Rankin [kz2...@googlemail.com] Sent: Friday, July 23, 2010 8:36 AM To: MS-Exchange Admin Issues Subject: Re: Recovering messages from Exchange server 2007 Is anything usable in the message tracking tool? On 23 July 2010 13:25, John Bowles john.bow...@wlkmmas.org wrote: Can only do that if you have journaling installed or if you have a viable email archiving solution. John Bowles From: James Rankin [kz2...@googlemail.com] Sent: Friday, July 23, 2010 7:59 AM To: MS-Exchange Admin Issues Subject: Recovering messages from Exchange server 2007 Greetings Exchange gurus What's the easiest way to view all messages that were sent by a particular user on a particular day in the past week? I need this for some cloak-and-dagger investigative purposes - I suppose I could just grant myself permissions to the user's mailbox and forward myself all their Sent Items, but a) would they be able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff they may have permanently deleted? I presume there must be other ways to achieve this - I apologise for my lack of Exchange knowledge, I am not an Exchange bod by any stretch of the imagination. TIA, JRR -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. Classification: UNCLASSIFIED Caveats: NONE
Re: Recovering messages from Exchange server 2007
Thanks, will give this a try if nothing solid is forthcoming from the IronPort On 23 July 2010 14:35, Rob Sargent rbsr...@gmail.com wrote: Assuming you still have the Tracking Logs for the period in question, then download and install the 30-day trial of Quest MessageStats ( www.quest.com/messagestats). In the admin console you can identify certain mailboxes on which you want detailed information (auditing tab), and then set up a gathering task for the tracking logs on the servers. Wait for data to be imported, then from the reports console run the Mailbox Sent Audits report. Rob On Fri, Jul 23, 2010 at 7:59 AM, James Rankin kz2...@googlemail.comwrote: Greetings Exchange gurus What's the easiest way to view all messages that were sent by a particular user on a particular day in the past week? I need this for some cloak-and-dagger investigative purposes - I suppose I could just grant myself permissions to the user's mailbox and forward myself all their Sent Items, but a) would they be able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff they may have permanently deleted? I presume there must be other ways to achieve this - I apologise for my lack of Exchange knowledge, I am not an Exchange bod by any stretch of the imagination. TIA, JRR -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question.
Re: Recovering messages from Exchange server 2007 (UNCLASSIFIED)
It was requested by a director and the Chief exec, so I'm presuming my backside is proverbially covered. On 23 July 2010 14:38, Kent, Larry CTR US USA larry.k...@us.army.milwrote: Classification: UNCLASSIFIED Caveats: NONE I would make sure that you have management’s approval or your company lawyer’s approval. You can’t legally view all of someone’s email without reasonable cause, even if it is on company owned equipment. Even then your search/viewing must be limited to whatever search criteria you are looking for. *From:* Richard Stovall [mailto:rich...@gmail.com] *Sent:* Friday, July 23, 2010 9:21 AM *To:* MS-Exchange Admin Issues *Subject:* Re: Recovering messages from Exchange server 2007 Do you have any sort of edge device or a similar service? I often recover messages for users from our Barracuda. (We also relay outbound messages through it to take advantage of the invalid bounce suppression feature.) On Fri, Jul 23, 2010 at 9:14 AM, John Bowles john.bow...@wlkmmas.org wrote: You can track messages, but you cannot view the contents of the message. That's if you have message tracking already enabled prior to these messages having been sent/received. John Bowles -- *From:* James Rankin [kz2...@googlemail.com] *Sent:* Friday, July 23, 2010 8:36 AM *To:* MS-Exchange Admin Issues *Subject:* Re: Recovering messages from Exchange server 2007 Is anything usable in the message tracking tool? On 23 July 2010 13:25, John Bowles john.bow...@wlkmmas.org wrote: Can only do that if you have journaling installed or if you have a viable email archiving solution. John Bowles -- *From:* James Rankin [kz2...@googlemail.com] *Sent:* Friday, July 23, 2010 7:59 AM *To:* MS-Exchange Admin Issues *Subject:* Recovering messages from Exchange server 2007 Greetings Exchange gurus What's the easiest way to view all messages that were sent by a particular user on a particular day in the past week? I need this for some cloak-and-dagger investigative purposes - I suppose I could just grant myself permissions to the user's mailbox and forward myself all their Sent Items, but a) would they be able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff they may have permanently deleted? I presume there must be other ways to achieve this - I apologise for my lack of Exchange knowledge, I am not an Exchange bod by any stretch of the imagination. TIA, JRR -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. Classification: UNCLASSIFIED Caveats: NONE -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question.
Re: Recovering messages from Exchange server 2007 (UNCLASSIFIED)
I absotively agree. My presumption was that the necessary safeguards are in place. On Fri, Jul 23, 2010 at 9:38 AM, Kent, Larry CTR US USA larry.k...@us.army.mil wrote: Classification: UNCLASSIFIED Caveats: NONE I would make sure that you have management’s approval or your company lawyer’s approval. You can’t legally view all of someone’s email without reasonable cause, even if it is on company owned equipment. Even then your search/viewing must be limited to whatever search criteria you are looking for. *From:* Richard Stovall [mailto:rich...@gmail.com] *Sent:* Friday, July 23, 2010 9:21 AM *To:* MS-Exchange Admin Issues *Subject:* Re: Recovering messages from Exchange server 2007 Do you have any sort of edge device or a similar service? I often recover messages for users from our Barracuda. (We also relay outbound messages through it to take advantage of the invalid bounce suppression feature.) On Fri, Jul 23, 2010 at 9:14 AM, John Bowles john.bow...@wlkmmas.org wrote: You can track messages, but you cannot view the contents of the message. That's if you have message tracking already enabled prior to these messages having been sent/received. John Bowles -- *From:* James Rankin [kz2...@googlemail.com] *Sent:* Friday, July 23, 2010 8:36 AM *To:* MS-Exchange Admin Issues *Subject:* Re: Recovering messages from Exchange server 2007 Is anything usable in the message tracking tool? On 23 July 2010 13:25, John Bowles john.bow...@wlkmmas.org wrote: Can only do that if you have journaling installed or if you have a viable email archiving solution. John Bowles -- *From:* James Rankin [kz2...@googlemail.com] *Sent:* Friday, July 23, 2010 7:59 AM *To:* MS-Exchange Admin Issues *Subject:* Recovering messages from Exchange server 2007 Greetings Exchange gurus What's the easiest way to view all messages that were sent by a particular user on a particular day in the past week? I need this for some cloak-and-dagger investigative purposes - I suppose I could just grant myself permissions to the user's mailbox and forward myself all their Sent Items, but a) would they be able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff they may have permanently deleted? I presume there must be other ways to achieve this - I apologise for my lack of Exchange knowledge, I am not an Exchange bod by any stretch of the imagination. TIA, JRR -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. Classification: UNCLASSIFIED Caveats: NONE
Re: Recovering messages from Exchange server 2007 (UNCLASSIFIED)
Hopefully physically, as well. :) On Fri, Jul 23, 2010 at 9:44 AM, James Rankin kz2...@googlemail.com wrote: It was requested by a director and the Chief exec, so I'm presuming my backside is proverbially covered. On 23 July 2010 14:38, Kent, Larry CTR US USA larry.k...@us.army.milwrote: Classification: UNCLASSIFIED Caveats: NONE I would make sure that you have management’s approval or your company lawyer’s approval. You can’t legally view all of someone’s email without reasonable cause, even if it is on company owned equipment. Even then your search/viewing must be limited to whatever search criteria you are looking for. *From:* Richard Stovall [mailto:rich...@gmail.com] *Sent:* Friday, July 23, 2010 9:21 AM *To:* MS-Exchange Admin Issues *Subject:* Re: Recovering messages from Exchange server 2007 Do you have any sort of edge device or a similar service? I often recover messages for users from our Barracuda. (We also relay outbound messages through it to take advantage of the invalid bounce suppression feature.) On Fri, Jul 23, 2010 at 9:14 AM, John Bowles john.bow...@wlkmmas.org wrote: You can track messages, but you cannot view the contents of the message. That's if you have message tracking already enabled prior to these messages having been sent/received. John Bowles -- *From:* James Rankin [kz2...@googlemail.com] *Sent:* Friday, July 23, 2010 8:36 AM *To:* MS-Exchange Admin Issues *Subject:* Re: Recovering messages from Exchange server 2007 Is anything usable in the message tracking tool? On 23 July 2010 13:25, John Bowles john.bow...@wlkmmas.org wrote: Can only do that if you have journaling installed or if you have a viable email archiving solution. John Bowles -- *From:* James Rankin [kz2...@googlemail.com] *Sent:* Friday, July 23, 2010 7:59 AM *To:* MS-Exchange Admin Issues *Subject:* Recovering messages from Exchange server 2007 Greetings Exchange gurus What's the easiest way to view all messages that were sent by a particular user on a particular day in the past week? I need this for some cloak-and-dagger investigative purposes - I suppose I could just grant myself permissions to the user's mailbox and forward myself all their Sent Items, but a) would they be able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff they may have permanently deleted? I presume there must be other ways to achieve this - I apologise for my lack of Exchange knowledge, I am not an Exchange bod by any stretch of the imagination. TIA, JRR -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. Classification: UNCLASSIFIED Caveats: NONE -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question.
RE: Exchange 2003 whitespace
Powershell Script I wrote\stole. Works in Ex2007 with Powershell 2.0. It needs some modifications on the order of application entries it brings into the array but it will get you going. #startscript #Need Power Shell Version 2.0 # Note: Event ID 1221 has an InstanceID of 1074136261 on both MSX 2007 and MSX 2003 servers. # #Vairables# # $es = Servers Array # # $srv = Servername # # $dbc = Database Count # # $DB = Database Name # # $WS = WhiteSpace# ### #Create File for Output $fileName=read-host Enter the File Name where the information will be stored: $File=New-Item -ItemType file $FileName.txt #Adds Header Info to file add-content $file Server DateBase NumberOfUsers DataBaseSize WhiteSpace #Gets All Exchange Servers with the Mailbox Role including Public Folders $es = Get-ExchangeServer | Sort-Object -Property name | Where-Object {$_.ServerRole -eq Mailbox} foreach ($srv in $es) { #Getting the database count $dbc = get-mailboxdatabase -server $srv |Measure-Object #Getting the 1221 events. #need to modify the following line in order to only get correct app entries $events = Get-EventLog -ComputerName $srv -LogName application -instanceid 1074136261 -source MSExchangeIS Mailbox Store -Newest $dbc.count| Sort-Object -Property Message #Writing the output to Screen Write-Host Write-Host Server - $srv -ForegroundColor Blue Write-Host Databases - $dbc.Count -ForegroundColor Blue Write-Host foreach ($item in $events) { $DBName = $item.ReplacementStrings[1] $WS = $item.ReplacementStrings[0] $database1=$DBName #Getting File Size of Databases $db = Get-MailboxDatabase $srv\$Database1 #write-host $db $path = `\`\ + $srv + `\ + $db.EdbFilePath.DriveName.Remove(1).ToString() + $+ $db.EdbFilePath.PathName.Remove(0,2) $dbsize = Get-ChildItem $path $ReturnedObj = New-Object PSObject #$ReturnedObj | Add-Member NoteProperty -Name Server\StorageGroup\Database -Value $objItem.Identity #$ReturnedObj | Add-Member NoteProperty -Name Size (MB) -Value ({0:n2} -f ($dbsize.Length/1024KB)) #$ReturnedObj | Add-Member NoteProperty -Name -Value ({0:n2} -f ($dbsize.Length/1024KB)) $ReturnedOBJ = ({0:n2} -f ($dbsize.Length/1024KB)) #Getting Number of Users on Databases $NuUsers=Get-MailboxStatistics -database $srv\$Database1 |where-object {!$_.DisconnectDate} | group-object -property:displayName |Measure-Object $NumBerOfUSers=$NuUsers.Count #Writing to Screen Write-Host Write-Host ServerName $srv Write-Host DBName $DBName write-host NmbrUsers $NumberOfUsers Write-Host SizeOfDB$ReturnedObj Write-Host WhtSpace$WS Write-Host #Writing to File add-content $file $srv $DBName $NumberOfUsers$ReturnedObj $WS } } #endscript ___ Clint Kleciak Infrastructure Engineer Mgr CIGNA IT Confidential, unpublished property of CIGNA. Do not duplicate or distribute. Use and distribution limited solely to authorized personnel. (c) Copyright 2010 CIGNA -Original Message- From: Ellis, John P. [mailto:johnel...@wirral.gov.uk] Sent: Friday, July 23, 2010 5:02 AM To: MS-Exchange Admin Issues Subject: Exchange 2003 whitespace Is it possible to obtain free disc space, EDB size, and white space from the command line and export it to a file? Thanks John --- ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.clearswift.com ** -- CONFIDENTIALITY NOTICE: If you have received this email in error, please immediately notify the sender by e-mail at the address shown. This email transmission may contain confidential information. This information is intended only for the use of the individual(s) or entity to whom it is intended even if addressed incorrectly. Please delete it from your files if you are not the intended recipient. Thank you for your compliance. Copyright 2010 CIGNA ==
OOO message only going out once
Running Exchange 2003, Outlook 2003. Sender received an out of office message yesterday at 1pm from recipient that's on vacation. Today, sender sent another email at 8:30am and did not get an OOO from recipient. Mailboxes appear to be well under limits. OOO is still turned on with recipient's mailbox. I looked at message tracking and only saw the OOO from yesterday. I understand that OOO only goes out once per day per sender. What time of day is that counter reset? Has anyone else run across problems where the OOO only fires off once? -Paul
Re: OOO message only going out once
Isn't this the intended behavior? http://support.microsoft.com/kb/157961 http://support.microsoft.com/kb/157961I don't recall it ever being once per day, but it is Friday.. On Fri, Jul 23, 2010 at 10:53 AM, Maglinger, Paul pmaglin...@scvl.comwrote: Running Exchange 2003, Outlook 2003. Sender received an out of office message yesterday at 1pm from recipient that's on vacation. Today, sender sent another email at 8:30am and did not get an OOO from recipient. Mailboxes appear to be well under limits. OOO is still turned on with recipient's mailbox. I looked at message tracking and only saw the OOO from yesterday. I understand that OOO only goes out once per day per sender. What time of day is that counter reset? Has anyone else run across problems where the OOO only fires off once? -Paul
RE: OOO message only going out once
Paul, I could be wrong, but I thought OOO only got sent out once per sender, not once every day. I thought that was default. Mark -Original Message- From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Friday, July 23, 2010 8:54 AM To: MS-Exchange Admin Issues Subject: OOO message only going out once Running Exchange 2003, Outlook 2003. Sender received an out of office message yesterday at 1pm from recipient that's on vacation. Today, sender sent another email at 8:30am and did not get an OOO from recipient. Mailboxes appear to be well under limits. OOO is still turned on with recipient's mailbox. I looked at message tracking and only saw the OOO from yesterday. I understand that OOO only goes out once per day per sender. What time of day is that counter reset? Has anyone else run across problems where the OOO only fires off once? -Paul
RE: Exchange 2003 whitespace
You can also try this one: http://gsexdev.blogspot.com/2008/07/show-exchange-whitespace-retained-it ems.html I use something based on this in PowerGUI. Cheers, Phil -- Phil Randal | Networks Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. -Original Message- From: Kleciak, Clint D A7IT [mailto:clint.klec...@cigna.com] Sent: 23 July 2010 15:36 To: MS-Exchange Admin Issues Subject: RE: Exchange 2003 whitespace Powershell Script I wrote\stole. Works in Ex2007 with Powershell 2.0. It needs some modifications on the order of application entries it brings into the array but it will get you going. #startscript #Need Power Shell Version 2.0 # Note: Event ID 1221 has an InstanceID of 1074136261 on both MSX 2007 and MSX 2003 servers. # #Vairables# # $es = Servers Array # # $srv = Servername # # $dbc = Database Count # # $DB = Database Name # # $WS = WhiteSpace# ### #Create File for Output $fileName=read-host Enter the File Name where the information will be stored: $File=New-Item -ItemType file $FileName.txt #Adds Header Info to file add-content $file Server DateBase NumberOfUsers DataBaseSize WhiteSpace #Gets All Exchange Servers with the Mailbox Role including Public Folders $es = Get-ExchangeServer | Sort-Object -Property name | Where-Object {$_.ServerRole -eq Mailbox} foreach ($srv in $es) { #Getting the database count $dbc = get-mailboxdatabase -server $srv |Measure-Object #Getting the 1221 events. #need to modify the following line in order to only get correct app entries $events = Get-EventLog -ComputerName $srv -LogName application -instanceid 1074136261 -source MSExchangeIS Mailbox Store -Newest $dbc.count| Sort-Object -Property Message #Writing the output to Screen Write-Host Write-Host Server - $srv -ForegroundColor Blue Write-Host Databases - $dbc.Count -ForegroundColor Blue Write-Host foreach ($item in $events) { $DBName = $item.ReplacementStrings[1] $WS = $item.ReplacementStrings[0] $database1=$DBName #Getting File Size of Databases $db = Get-MailboxDatabase $srv\$Database1 #write-host $db $path = `\`\ + $srv + `\ + $db.EdbFilePath.DriveName.Remove(1).ToString() + $+ $db.EdbFilePath.PathName.Remove(0,2) $dbsize = Get-ChildItem $path $ReturnedObj = New-Object PSObject #$ReturnedObj | Add-Member NoteProperty -Name Server\StorageGroup\Database -Value $objItem.Identity #$ReturnedObj | Add-Member NoteProperty -Name Size (MB) -Value ({0:n2} -f ($dbsize.Length/1024KB)) #$ReturnedObj | Add-Member NoteProperty -Name -Value ({0:n2} -f ($dbsize.Length/1024KB)) $ReturnedOBJ = ({0:n2} -f ($dbsize.Length/1024KB)) #Getting Number of Users on Databases $NuUsers=Get-MailboxStatistics -database $srv\$Database1 |where-object {!$_.DisconnectDate} | group-object -property:displayName |Measure-Object $NumBerOfUSers=$NuUsers.Count #Writing to Screen Write-Host Write-Host ServerName $srv Write-Host DBName $DBName write-host NmbrUsers $NumberOfUsers Write-Host SizeOfDB$ReturnedObj Write-Host WhtSpace$WS Write-Host #Writing to File add-content $file $srv $DBName $NumberOfUsers $ReturnedObj $WS } } #endscript ___ Clint Kleciak Infrastructure Engineer Mgr CIGNA IT Confidential, unpublished property of CIGNA. Do not duplicate or distribute. Use and distribution limited solely to authorized personnel. (c) Copyright 2010 CIGNA -Original Message- From: Ellis, John P. [mailto:johnel...@wirral.gov.uk] Sent: Friday, July 23, 2010 5:02 AM To: MS-Exchange Admin Issues Subject: Exchange 2003 whitespace Is it possible to obtain free disc space, EDB size, and white space from the command line and export it to a file? Thanks John ---
Re: OOO message only going out once
It's a W.A.D. (Working As Designed) On Fri, Jul 23, 2010 at 10:12 AM, Evan Brastow ebras...@automatedemblem.com wrote: Sounds like it's working perfectly :) -Original Message- From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Friday, July 23, 2010 10:54 AM To: MS-Exchange Admin Issues Subject: OOO message only going out once Running Exchange 2003, Outlook 2003. Sender received an out of office message yesterday at 1pm from recipient that's on vacation. Today, sender sent another email at 8:30am and did not get an OOO from recipient. Mailboxes appear to be well under limits. OOO is still turned on with recipient's mailbox. I looked at message tracking and only saw the OOO from yesterday. I understand that OOO only goes out once per day per sender. What time of day is that counter reset? Has anyone else run across problems where the OOO only fires off once? -Paul -- Sherry Abercrombie Any sufficiently advanced technology is indistinguishable from magic. Arthur C. Clarke
RE: OOO message only going out once
Interesting. I know that I've gotten OOO from users on multiple days, but never more than one per day. So that means that they would have had to have been toggling the OOO to get that to happen. Thanks people! From: Richard Stovall [mailto:rich...@gmail.com] Sent: Friday, July 23, 2010 10:05 AM To: MS-Exchange Admin Issues Subject: Re: OOO message only going out once Isn't this the intended behavior? http://support.microsoft.com/kb/157961 I don't recall it ever being once per day, but it is Friday.. On Fri, Jul 23, 2010 at 10:53 AM, Maglinger, Paul pmaglin...@scvl.com wrote: Running Exchange 2003, Outlook 2003. Sender received an out of office message yesterday at 1pm from recipient that's on vacation. Today, sender sent another email at 8:30am and did not get an OOO from recipient. Mailboxes appear to be well under limits. OOO is still turned on with recipient's mailbox. I looked at message tracking and only saw the OOO from yesterday. I understand that OOO only goes out once per day per sender. What time of day is that counter reset? Has anyone else run across problems where the OOO only fires off once? -Paul
Re: OOO message only going out once
OOO only oges out once per sender period. Not once per sender per day. To clear OOF history you need to turn the OOF off and then on again for the recipient mailbox. On Fri, Jul 23, 2010 at 10:53 AM, Maglinger, Paul pmaglin...@scvl.comwrote: Running Exchange 2003, Outlook 2003. Sender received an out of office message yesterday at 1pm from recipient that's on vacation. Today, sender sent another email at 8:30am and did not get an OOO from recipient. Mailboxes appear to be well under limits. OOO is still turned on with recipient's mailbox. I looked at message tracking and only saw the OOO from yesterday. I understand that OOO only goes out once per day per sender. What time of day is that counter reset? Has anyone else run across problems where the OOO only fires off once? -Paul
RE: Guidance on disks for Exchange 2010
DAG, DAG, DAG... Why would you want to do this when TB+ drives are available? From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk] Sent: Thursday, July 22, 2010 3:35 AM To: MS-Exchange Admin Issues Subject: Guidance on disks for Exchange 2010 In the virtualisation guide for Exchange 2010, in the section on storage this is written: Virtual disks that dynamically expand aren't supported by Exchange. Does anyone know if this also applies to a disk presented to a physical server via some form of storage virtualisation appliance? Said disk would be presented as 100GB, for example, and the OS would see 100GB, but would grow to reach this size at the storage level. Thanks Richard
RE: Recovering messages from Exchange server 2007
Message tracking will give you a list of the messages, but not the contents. I often use this script to create html lists of emails for tracking purposes. Get-MessageTrackingLog -Server email server -EventID RECEIVE -sender sender's email -Start start date -End end date | ConvertTo-Html Timestamp, EventID, ClientIP, Sender, {$_.Recipients}, MessageSubject, ServerIp, ServerHostname, {$_.RecipientStatus} | Set-Content full path to output filename That will give you a list of all messages the user sent. If you need to know what's in them, you'll need another tool. Steve Hart Network Administrator 503.491.4343 -Direct | 503.492.8160 - Fax From: James Rankin [mailto:kz2...@googlemail.com] Sent: Friday, July 23, 2010 5:37 AM To: MS-Exchange Admin Issues Subject: Re: Recovering messages from Exchange server 2007 Is anything usable in the message tracking tool? On 23 July 2010 13:25, John Bowles john.bow...@wlkmmas.orgmailto:john.bow...@wlkmmas.org wrote: Can only do that if you have journaling installed or if you have a viable email archiving solution. John Bowles From: James Rankin [kz2...@googlemail.commailto:kz2...@googlemail.com] Sent: Friday, July 23, 2010 7:59 AM To: MS-Exchange Admin Issues Subject: Recovering messages from Exchange server 2007 Greetings Exchange gurus What's the easiest way to view all messages that were sent by a particular user on a particular day in the past week? I need this for some cloak-and-dagger investigative purposes - I suppose I could just grant myself permissions to the user's mailbox and forward myself all their Sent Items, but a) would they be able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff they may have permanently deleted? I presume there must be other ways to achieve this - I apologise for my lack of Exchange knowledge, I am not an Exchange bod by any stretch of the imagination. TIA, JRR -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question. -- On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question.
Password expire notification VBS
* Anyone know if this: http://www.windowsitpro.com/article/passwords/how-can-i-use-a-script-to-determine-password-expiration-dates-for-users-in-a-domain-or-an-organizational-unit-ou-and-send-an-email-message-to-accounts-whose-passwords-expire-soon-.aspx Works on E2K7? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764
Re: Legitimate Mass Emails
Thanks everyone. On Thu, Jul 22, 2010 at 10:32 AM, Kennedy, Jim kennedy...@elyriaschools.org wrote: I haven’t had to do this in a long time so I couldn’t tell you who is good. CC will get you delivered, they are a solid company now…new owners. It is just one of my pet peve’s that I can’t let go of. I used to be a hard core frontline anti-spam guy. *From:* Daniele Bartoli [mailto:danielebart...@gmail.com] *Sent:* Thursday, July 22, 2010 1:23 PM *To:* MS-Exchange Admin Issues *Subject:* Re: Legitimate Mass Emails Do you recommend anyone? On Thu, Jul 22, 2010 at 10:20 AM, Kennedy, Jim kennedy...@elyriaschools.org wrote: So you are bulk sending emails that talk about ‘accounts’ and ‘statements’. That is going to look like a bank phish or something similar to your typical bay’s filter. Outsourcing it is still the right answer…relay it through them. Constant Contact as an example would be whitelisted at the big players. Disclaimer: I am not recommending Constant Contact, in fact I hate them as they built their business as spammers and then went legit after they were RBL’d to heck and back. *From:* Daniele Bartoli [mailto:danielebart...@gmail.com] *Sent:* Thursday, July 22, 2010 1:17 PM *To:* MS-Exchange Admin Issues *Subject:* Re: Legitimate Mass Emails These mass emails are generally not marketing type of emails, it is generally system generated saying that their statements are generated or that they need to review their account, etc. Any ideas on this? Daniele On Thu, Jul 22, 2010 at 10:09 AM, Steve Hart sh...@wrightbg.com wrote: We've just outsourced ours to Constant Contact. They handle all of the hassles and provide a easy interface that our marketing people can handle without involving IT at all. We typically set up new addresses in our system for responses to the emails. That allows us to filter emails any way we want. Steve Hart Network Administrator 503.491.4343 -Direct | 503.492.8160 - Fax -Original Message- From: Daniele Bartoli [mailto:danielebart...@gmail.com] Sent: Thursday, July 22, 2010 10:03 AM To: MS-Exchange Admin Issues Subject: Legitimate Mass Emails I am curious how others that are sending out legitimate mass emails to clients deal with protecting their companies from getting blacklisted with the various email services (Yahoo, Google, ComCast, Hotmail)? Several times we have been blacklisted from several of these services and had to work with their support to get it removed. Other times we are seeing that the mail is getting queued, however delayed. Thanks, Daniele
RE: OOO message only going out once
There are a few third party apps that will, on a daily schedule, query all the exchange mailboxes with OOF enabled... save the list, then run through and disable and re-enable the OOF setting on each mailbox to clear the OOF history. This enables the OOF to fire once per day / per sender... It's not a function built into Exchange, but an add-on It's been awhile since I looked at the apps (and we never ended up buying any), so I can't really recommend one ATM. JP From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Friday, July 23, 2010 11:18 AM To: MS-Exchange Admin Issues Subject: RE: OOO message only going out once Interesting. I know that I've gotten OOO from users on multiple days, but never more than one per day. So that means that they would have had to have been toggling the OOO to get that to happen. Thanks people! From: Richard Stovall [mailto:rich...@gmail.com] Sent: Friday, July 23, 2010 10:05 AM To: MS-Exchange Admin Issues Subject: Re: OOO message only going out once Isn't this the intended behavior? http://support.microsoft.com/kb/157961 I don't recall it ever being once per day, but it is Friday.. On Fri, Jul 23, 2010 at 10:53 AM, Maglinger, Paul pmaglin...@scvl.commailto:pmaglin...@scvl.com wrote: Running Exchange 2003, Outlook 2003. Sender received an out of office message yesterday at 1pm from recipient that's on vacation. Today, sender sent another email at 8:30am and did not get an OOO from recipient. Mailboxes appear to be well under limits. OOO is still turned on with recipient's mailbox. I looked at message tracking and only saw the OOO from yesterday. I understand that OOO only goes out once per day per sender. What time of day is that counter reset? Has anyone else run across problems where the OOO only fires off once? -Paul
RE: Legitimate Mass Emails
Depending on the size of your contact list, you might want to check out MailChimp. I use them for a number of non-profit things I do and the service is free and works great. Much better value if you fit into their free criteria than ConstantContact. Tim From: Daniele Bartoli [mailto:danielebart...@gmail.com] Sent: Friday, July 23, 2010 3:00 PM To: MS-Exchange Admin Issues Subject: Re: Legitimate Mass Emails Thanks everyone. On Thu, Jul 22, 2010 at 10:32 AM, Kennedy, Jim kennedy...@elyriaschools.orgmailto:kennedy...@elyriaschools.org wrote: I haven't had to do this in a long time so I couldn't tell you who is good. CC will get you delivered, they are a solid company now...new owners. It is just one of my pet peve's that I can't let go of. I used to be a hard core frontline anti-spam guy. From: Daniele Bartoli [mailto:danielebart...@gmail.commailto:danielebart...@gmail.com] Sent: Thursday, July 22, 2010 1:23 PM To: MS-Exchange Admin Issues Subject: Re: Legitimate Mass Emails Do you recommend anyone? On Thu, Jul 22, 2010 at 10:20 AM, Kennedy, Jim kennedy...@elyriaschools.orgmailto:kennedy...@elyriaschools.org wrote: So you are bulk sending emails that talk about 'accounts' and 'statements'. That is going to look like a bank phish or something similar to your typical bay's filter. Outsourcing it is still the right answer...relay it through them. Constant Contact as an example would be whitelisted at the big players. Disclaimer: I am not recommending Constant Contact, in fact I hate them as they built their business as spammers and then went legit after they were RBL'd to heck and back. From: Daniele Bartoli [mailto:danielebart...@gmail.commailto:danielebart...@gmail.com] Sent: Thursday, July 22, 2010 1:17 PM To: MS-Exchange Admin Issues Subject: Re: Legitimate Mass Emails These mass emails are generally not marketing type of emails, it is generally system generated saying that their statements are generated or that they need to review their account, etc. Any ideas on this? Daniele On Thu, Jul 22, 2010 at 10:09 AM, Steve Hart sh...@wrightbg.commailto:sh...@wrightbg.com wrote: We've just outsourced ours to Constant Contact. They handle all of the hassles and provide a easy interface that our marketing people can handle without involving IT at all. We typically set up new addresses in our system for responses to the emails. That allows us to filter emails any way we want. Steve Hart Network Administrator 503.491.4343 -Direct | 503.492.8160 - Fax -Original Message- From: Daniele Bartoli [mailto:danielebart...@gmail.commailto:danielebart...@gmail.com] Sent: Thursday, July 22, 2010 10:03 AM To: MS-Exchange Admin Issues Subject: Legitimate Mass Emails I am curious how others that are sending out legitimate mass emails to clients deal with protecting their companies from getting blacklisted with the various email services (Yahoo, Google, ComCast, Hotmail)? Several times we have been blacklisted from several of these services and had to work with their support to get it removed. Other times we are seeing that the mail is getting queued, however delayed. Thanks, Daniele