RE: Exchange 2007 Spam Filtering

2010-07-23 Thread Andrew Mclaren
I have been inspired by this thread to re-attempt to get RBL filtering working 
on my Exchange 2007 server. I tried before and couldn't get it to work.

I have added zen.spamhaus.org as an IP Block List provider and enabled it. But 
spam is still delivered!

I studied a spam message that arrived this morning and got the source IP 
address. I confirmed on the spamhaus website that this ip address is on their 
list.

I tried this script:
get-ipblocklistprovider | test-ipblocklistprovider -ipaddress 115.138.46.65
and it seems to work! Exchange says that spamhaus reports this IP address as 
being a spam source.

But then I try get-antispamtoprblproviders and it comes up blank. And when I 
send an email to spamhaus' nelson-sbl-t...@crynwr.com email address (which 
sends a reply from a black listed IP address), the email reply is received when 
it should be blocked.

Have I forgotten to do something?

Regards,

Andrew

From: Steve Szabo [mailto:steve...@gmail.com]
Sent: 23 July 2010 01:55 AM
To: MS-Exchange Admin Issues
Subject: RE: Exchange 2007 Spam Filtering

Have you thought about teaching him unsubscribe, or is he too high on the food 
chain to learn something like that?

\\Steve//

From: Brown, Larry [mailto:larry.br...@dplinc.com]
Sent: Thursday, July 22, 2010 9:35 AM
To: MS-Exchange Admin Issues
Subject: RE: Exchange 2007 Spam Filtering

Well, I have yet to find a message in his Junk email folder (he moves it there, 
and has about 500 addresses in his blocked senders list) that hasn't gone 
through our Edge transport according to the Header info.

I have figured out that about 50% of what he gets are trade related 
'newsletters' and 'news-bulletins'.  He has either signed up for them and 
forgotten, or someone has signed him up without his knowledge.   I could see 
someone signing him up as a form of aggravation since he is an executive that 
has been here for a long time.   Since we are a publicly traded company, 
guessing or finding his address isn't that hard.

And he refuses to discuss changing his email address. sigh

FYI, adding b.barracudacentral.orghttp://b.barracudacentral.org to the other 
three RBL's we were already using,
Zen.spamhaus.org
Bl.spamcop.net
Combined.njable.org
Has dropped the amount of SPAM delivered to our quarantine folder by about 50%, 
and to his mailbox by 20%.  There has only been one full day to check, but its 
apparent already that it has helped a great deal.


Larry

From: Jeff Brown [mailto:2jbr...@gmail.com]
Sent: Wednesday, July 21, 2010 10:24 AM
To: MS-Exchange Admin Issues
Subject: Re: Exchange 2007 Spam Filtering

It looks like you know what you are doing and have done more work to stop spam 
than a lot of guys.  With ZEROS getting through have you verified, as MBS 
suggested at the start of this thread, that in fact these messages are going 
through your edge servers?  This looks like what you get when SPAM finds its 
way directly through a secondary MX pointer that may not be filtered on the 
same level
On Tue, Jul 20, 2010 at 10:16 PM, Kurt Buff 
kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote:
My RBL of choice is zen.spamhaus.orghttp://zen.spamhaus.org

But, it's running on a Maia Mailguard box. Cost was hardware and time.

On Tue, Jul 20, 2010 at 09:00, Brown, Larry 
larry.br...@dplinc.commailto:larry.br...@dplinc.com wrote:
 Exchange 2007, SPAM SCL set to 7.



 To save money our company elected to rely on Exchange's native SPAM
 filtering on the Exchange Edge servers.  However, now we are getting
 complaints about the high level of SPAM getting through to users.  One user
 is getting as many as 100 SPAM emails a day...and of course he is a VIP.



 He does not want to change his email address.  But he does want us to fix
 this problem without spending money.



 We are considering blocking Asian and Eastern European domains, as we don't
 do business with those parts of the world.



 We also use free Real Time Black Lists (remember, can't spend money), Sender
 ID check, and the open proxy test.



 Sadly, when reviewing a lot of the SPAM our user has received we have found
 way too many SCL's of 0 for emails that are obviously SPAM.



 Oh, and lowering the SCL to 6 is also not an option, and it doesn't look
 like it would make much of a difference anyway.



 Can anyone think of anything we have missed?  Is there a way to tweak the
 native anti-spam filtering to make it work better?  Or is this as good as it
 gets?









Exchange 2003 whitespace

2010-07-23 Thread Ellis, John P.
Is it possible to obtain free disc space, EDB size, and white space from
the command line and export it to a file?

Thanks
John
---

**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.clearswift.com
**






Recovering messages from Exchange server 2007

2010-07-23 Thread James Rankin
Greetings Exchange gurus

What's the easiest way to view all messages that were sent by a particular
user on a particular day in the past week? I need this for some
cloak-and-dagger investigative purposes - I suppose I could just grant
myself permissions to the user's mailbox and forward myself all their Sent
Items, but a) would they be able to tell I'd done this? and b) I'm assuming
this wouldn't cover any stuff they may have permanently deleted?

I presume there must be other ways to achieve this - I apologise for my lack
of Exchange knowledge, I am not an Exchange bod by any stretch of the
imagination.

TIA,



JRR

-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.


RE: Guidance on disks for Exchange 2010

2010-07-23 Thread Sobey, Richard A
Thanks for everyone's input. It's clear that there's a lot of difference of 
opinion.

From what I can gather, than, so long as the storage appliance is 
supported/approved by Exchange/Microsoft, a solution involving thin 
provisioning using expanding disks would be ok?

Just curious, is there is technical definition of a disk that the OS would see 
increasing on an as-needed basis, rather than being presented at 100GB and then 
being expanded elsewhere? I think that would be stupid, but wondering if it 
exists.

Richard


-Original Message-
From: bounce-9028370-8066...@lyris.sunbelt-software.com 
[mailto:bounce-9028370-8066...@lyris.sunbelt-software.com] On Behalf Of Michael 
B. Smith
Sent: 23 July 2010 03:29
To: MS-Exchange Admin Issues
Subject: RE: Guidance on disks for Exchange 2010

And that's exactly what they did: Virtual disks that dynamically expand are not 
supported by Exchange. :-)

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com


RE: Recovering messages from Exchange server 2007

2010-07-23 Thread John Bowles
Can only do that if you have journaling installed or if you have a viable email 
archiving solution.


John Bowles


From: James Rankin [kz2...@googlemail.com]
Sent: Friday, July 23, 2010 7:59 AM
To: MS-Exchange Admin Issues
Subject: Recovering messages from Exchange server 2007

Greetings Exchange gurus

What's the easiest way to view all messages that were sent by a particular user 
on a particular day in the past week? I need this for some cloak-and-dagger 
investigative purposes - I suppose I could just grant myself permissions to the 
user's mailbox and forward myself all their Sent Items, but a) would they be 
able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff 
they may have permanently deleted?

I presume there must be other ways to achieve this - I apologise for my lack of 
Exchange knowledge, I am not an Exchange bod by any stretch of the imagination.

TIA,



JRR

--
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the 
machine wrong figures, will the right answers come out?' I am not able rightly 
to apprehend the kind of confusion of ideas that could provoke such a question.



Re: Recovering messages from Exchange server 2007

2010-07-23 Thread James Rankin
Is anything usable in the message tracking tool?

On 23 July 2010 13:25, John Bowles john.bow...@wlkmmas.org wrote:

  Can only do that if you have journaling installed or if you have a viable
 email archiving solution.


 John Bowles

--
 *From:* James Rankin [kz2...@googlemail.com]
 *Sent:* Friday, July 23, 2010 7:59 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Recovering messages from Exchange server 2007

  Greetings Exchange gurus

 What's the easiest way to view all messages that were sent by a particular
 user on a particular day in the past week? I need this for some
 cloak-and-dagger investigative purposes - I suppose I could just grant
 myself permissions to the user's mailbox and forward myself all their Sent
 Items, but a) would they be able to tell I'd done this? and b) I'm assuming
 this wouldn't cover any stuff they may have permanently deleted?

 I presume there must be other ways to achieve this - I apologise for my
 lack of Exchange knowledge, I am not an Exchange bod by any stretch of the
 imagination.

 TIA,



 JRR

 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
 the machine wrong figures, will the right answers come out?' I am not able
 rightly to apprehend the kind of confusion of ideas that could provoke such
 a question.




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.


Re: Exchange 2003 whitespace

2010-07-23 Thread Richard Stovall
Event 1221 in the Application log will tell you the amount of free space in
the db at the time of online defrag.  Can you use that plus filesystem info.
about disk space and the size of the database files to get what you're
looking for?  You could write a Powershell script using the Get-Eventlog
cmdlet to obtain the white space value, and the rest of it should be pretty
straightforward.

HTH,

RS

On Fri, Jul 23, 2010 at 5:01 AM, Ellis, John P. johnel...@wirral.gov.ukwrote:

 Is it possible to obtain free disc space, EDB size, and white space from
 the command line and export it to a file?

 Thanks
 John
 ---

 **
 This email and any files transmitted with it are confidential and
 intended solely for the use of the individual or entity to whom they
 are addressed. If you have received this email in error please notify
 the system manager.

 This footnote also confirms that this email message has been swept by
 MIMEsweeper for the presence of computer viruses.

 www.clearswift.com
 **







RE: Exchange 2003 whitespace

2010-07-23 Thread Ellis, John P.
Hi
It does help, only I've not used Powershell before. I was hoping to use
a batch file and use some command line swiches.
Looks like time to investigate PS.

Thanks
John



From: Richard Stovall [mailto:rich...@gmail.com] 
Sent: 23 July 2010 13:54
To: MS-Exchange Admin Issues
Subject: Re: Exchange 2003 whitespace


Event 1221 in the Application log will tell you the amount of free space
in the db at the time of online defrag.  Can you use that plus
filesystem info. about disk space and the size of the database files to
get what you're looking for?  You could write a Powershell script using
the Get-Eventlog cmdlet to obtain the white space value, and the rest of
it should be pretty straightforward.


HTH,


RS

On Fri, Jul 23, 2010 at 5:01 AM, Ellis, John P.
johnel...@wirral.gov.uk wrote:


Is it possible to obtain free disc space, EDB size, and white
space from
the command line and export it to a file?

Thanks
John

---


**
This email and any files transmitted with it are confidential
and
intended solely for the use of the individual or entity to whom
they
are addressed. If you have received this email in error please
notify
the system manager.

This footnote also confirms that this email message has been
swept by
MIMEsweeper for the presence of computer viruses.

www.clearswift.com

**









RE: Exchange 2003 whitespace

2010-07-23 Thread May, Jeff
I put this together a while back to get the whitespace report weekly

 

May help for a starting point, the rest should be able to be pulled out
with the same array of servers and their WMI.

 

strDate = Date()

 

Const ForWriting = 2

Const ForReading = 1

strMail = us...@domain.com

 

Dim fso

Dim strLogFileName

 

Set fso = CreateObject(Scripting.FileSystemObject)

strLogFileName = Output  _  Replace(Replace(replace(Now, /,
_), :, _),  , _)  .txt

Set fileDest = fso.OpenTextFile(strLogFileName, ForWriting, True)

fileDest.WriteLine Begin WhiteSpace Report Script at   now  . 
VBCRLF

 

arrComputers = Array(exchange servers HERE)

 

Set dtmStartDate = CreateObject(WbemScripting.SWbemDateTime)

Set dtmEndDate = CreateObject(WbemScripting.SWbemDateTime)

DateToCheck = CDate(strDate)

dtmStartDate.SetVarDate DateToCheck, CONVERT_TO_LOCAL_TIME

dtmEndDate.SetVarDate DateToCheck + 1, CONVERT_TO_LOCAL_TIME

For Each strComputer In arrComputers

fileDest.WriteLine strComputer 

Set objWMIService = GetObject(winmgmts: _

 {impersonationLevel=impersonate}!\\  strComputer 
\root\cimv2)

Set colEvents = objWMIService.ExecQuery _

(Select * from Win32_NTLogEvent Where Logfile = 'Application' AND 
_

 EventCode = '1221' AND SourceName = 'MSExchangeIS Mailbox
Store' AND TimeWritten = ' _ 

 dtmStartDate  ' AND TimeWritten  '  dtmEndDate  ') 

For Each objEvent in colEvents

Message = objEvent.Message

fileDest.WriteLine Message

Next

Next

fileDest.Close

 

Set fileDest = fso.OpenTextFile(strLogFileName, ForReading)

strText = fileDest.ReadAll

fileDest.Close

 

strNewText = Replace(strText, For more information, click
http://www.microsoft.com/contentredirect.asp.;, )

Set fileDest = fso.OpenTextFile(strLogFileName, ForWriting)

fileDest.WriteLine strNewText

fileDest.Close

 

Set fileDest = fso.OpenTextFile(strLogFileName, ForReading)

Do Until fileDest.AtEndOfStream

strLine = fileDest.ReadLine

strLine = Trim(strLine)

If Len(strLine)  0 then

strNewContents = strNewContents 
strLine  vbCRLF

End If

Loop

fileDest.Close

 

Set fileDest = fso.OpenTextFile(strLogFileName, ForWriting)

fileDest.Write strNewContents

fileDest.Close

 

Set objEmail = CreateObject(CDO.Message)

objEmail.From = whitespacerep...@domain.com

objEmail.to = strMail

objEmail.Subject = Whitespace Weekly Report

objEmail.TextBody = Script Results Log

objEmail.AddAttachment D:\Whitespace\  strLogFileName


objEmail.Configuration.Fields.Item
(http://schemas.microsoft.com/cdo/configuration/sendusing;) = 2

objEmail.Configuration.Fields.Item
(http://schemas.microsoft.com/cdo/configuration/smtpserver;) = relay
server 

objEmail.Configuration.Fields.Item
(http://schemas.microsoft.com/cdo/configuration/smtpserverport;) = 25

objEmail.Configuration.Fields.Update

objEmail.Send

 

From: Ellis, John P. [mailto:johnel...@wirral.gov.uk] 
Sent: Friday, July 23, 2010 9:11 AM
To: MS-Exchange Admin Issues
Subject: RE: Exchange 2003 whitespace

 

Hi

It does help, only I've not used Powershell before. I was hoping to use
a batch file and use some command line swiches.

Looks like time to investigate PS.


Thanks

John

 



From: Richard Stovall [mailto:rich...@gmail.com] 
Sent: 23 July 2010 13:54
To: MS-Exchange Admin Issues
Subject: Re: Exchange 2003 whitespace

Event 1221 in the Application log will tell you the amount of free space
in the db at the time of online defrag.  Can you use that plus
filesystem info. about disk space and the size of the database files to
get what you're looking for?  You could write a Powershell script using
the Get-Eventlog cmdlet to obtain the white space value, and the rest of
it should be pretty straightforward.

 

HTH,

 

RS

 

On Fri, Jul 23, 2010 at 5:01 AM, Ellis, John P.
johnel...@wirral.gov.uk wrote:

Is it possible to obtain free disc space, EDB size, and white space from
the command line and export it to a file?

Thanks
John
---

**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.clearswift.com
**





 



Re: Exchange 2003 whitespace

2010-07-23 Thread Richard Stovall
Some folks on the NT list have mentioned Mark Russinovich's psloglist
utility in the past.  I've not used it, but perhaps it might let you do what
you need in a batch file.

http://technet.microsoft.com/en-us/sysinternals/bb897544.aspx

http://technet.microsoft.com/en-us/sysinternals/bb897544.aspx

On Fri, Jul 23, 2010 at 9:10 AM, Ellis, John P. johnel...@wirral.gov.ukwrote:

  Hi
 It does help, only I've not used Powershell before. I was hoping to use a
 batch file and use some command line swiches.
 Looks like time to investigate PS.

 Thanks
 John

  --
 *From:* Richard Stovall [mailto:rich...@gmail.com]
 *Sent:* 23 July 2010 13:54
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Exchange 2003 whitespace

  Event 1221 in the Application log will tell you the amount of free space
 in the db at the time of online defrag.  Can you use that plus filesystem
 info. about disk space and the size of the database files to get what you're
 looking for?  You could write a Powershell script using the Get-Eventlog
 cmdlet to obtain the white space value, and the rest of it should be pretty
 straightforward.

 HTH,

 RS

 On Fri, Jul 23, 2010 at 5:01 AM, Ellis, John P. 
 johnel...@wirral.gov.ukwrote:

 Is it possible to obtain free disc space, EDB size, and white space from
 the command line and export it to a file?

 Thanks
 John
 ---

 **
 This email and any files transmitted with it are confidential and
 intended solely for the use of the individual or entity to whom they
 are addressed. If you have received this email in error please notify
 the system manager.

 This footnote also confirms that this email message has been swept by
 MIMEsweeper for the presence of computer viruses.

 www.clearswift.com
 **








RE: Recovering messages from Exchange server 2007

2010-07-23 Thread John Bowles
You can track messages, but you cannot view the contents of the message.  
That's if you have message tracking already enabled prior to these messages 
having  been sent/received.


John Bowles


From: James Rankin [kz2...@googlemail.com]
Sent: Friday, July 23, 2010 8:36 AM
To: MS-Exchange Admin Issues
Subject: Re: Recovering messages from Exchange server 2007

Is anything usable in the message tracking tool?

On 23 July 2010 13:25, John Bowles 
john.bow...@wlkmmas.orgmailto:john.bow...@wlkmmas.org wrote:
Can only do that if you have journaling installed or if you have a viable email 
archiving solution.


John Bowles


From: James Rankin [kz2...@googlemail.commailto:kz2...@googlemail.com]
Sent: Friday, July 23, 2010 7:59 AM
To: MS-Exchange Admin Issues
Subject: Recovering messages from Exchange server 2007

Greetings Exchange gurus

What's the easiest way to view all messages that were sent by a particular user 
on a particular day in the past week? I need this for some cloak-and-dagger 
investigative purposes - I suppose I could just grant myself permissions to the 
user's mailbox and forward myself all their Sent Items, but a) would they be 
able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff 
they may have permanently deleted?

I presume there must be other ways to achieve this - I apologise for my lack of 
Exchange knowledge, I am not an Exchange bod by any stretch of the imagination.

TIA,



JRR

--
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the 
machine wrong figures, will the right answers come out?' I am not able rightly 
to apprehend the kind of confusion of ideas that could provoke such a question.




--
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the 
machine wrong figures, will the right answers come out?' I am not able rightly 
to apprehend the kind of confusion of ideas that could provoke such a question.



Re: Recovering messages from Exchange server 2007

2010-07-23 Thread Richard Stovall
Do you have any sort of edge device or a similar service?  I often recover
messages for users from our Barracuda.  (We also relay outbound messages
through it to take advantage of the invalid bounce suppression feature.)

On Fri, Jul 23, 2010 at 9:14 AM, John Bowles john.bow...@wlkmmas.orgwrote:

  You can track messages, but you cannot view the contents of the message.
 That's if you have message tracking already enabled prior to these
 messages having  been sent/received.


 John Bowles

--
 *From:* James Rankin [kz2...@googlemail.com]
 *Sent:* Friday, July 23, 2010 8:36 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Recovering messages from Exchange server 2007

  Is anything usable in the message tracking tool?

 On 23 July 2010 13:25, John Bowles john.bow...@wlkmmas.org wrote:

  Can only do that if you have journaling installed or if you have a
 viable email archiving solution.


 John Bowles

--
 *From:* James Rankin [kz2...@googlemail.com]
 *Sent:* Friday, July 23, 2010 7:59 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Recovering messages from Exchange server 2007

Greetings Exchange gurus

 What's the easiest way to view all messages that were sent by a particular
 user on a particular day in the past week? I need this for some
 cloak-and-dagger investigative purposes - I suppose I could just grant
 myself permissions to the user's mailbox and forward myself all their Sent
 Items, but a) would they be able to tell I'd done this? and b) I'm assuming
 this wouldn't cover any stuff they may have permanently deleted?

 I presume there must be other ways to achieve this - I apologise for my
 lack of Exchange knowledge, I am not an Exchange bod by any stretch of the
 imagination.

 TIA,



 JRR

 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
 the machine wrong figures, will the right answers come out?' I am not able
 rightly to apprehend the kind of confusion of ideas that could provoke such
 a question.




 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
 the machine wrong figures, will the right answers come out?' I am not able
 rightly to apprehend the kind of confusion of ideas that could provoke such
 a question.




Re: Recovering messages from Exchange server 2007

2010-07-23 Thread James Rankin
Actually, we have an IronPort. I forgot all about it. There is a message
tracking function on there that may be of use, cheers!

On 23 July 2010 14:20, Richard Stovall rich...@gmail.com wrote:

 Do you have any sort of edge device or a similar service?  I often recover
 messages for users from our Barracuda.  (We also relay outbound messages
 through it to take advantage of the invalid bounce suppression feature.)

 On Fri, Jul 23, 2010 at 9:14 AM, John Bowles john.bow...@wlkmmas.orgwrote:

  You can track messages, but you cannot view the contents of the
 message.  That's if you have message tracking already enabled prior to these
 messages having  been sent/received.


 John Bowles

--
 *From:* James Rankin [kz2...@googlemail.com]
 *Sent:* Friday, July 23, 2010 8:36 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Recovering messages from Exchange server 2007

  Is anything usable in the message tracking tool?

 On 23 July 2010 13:25, John Bowles john.bow...@wlkmmas.org wrote:

  Can only do that if you have journaling installed or if you have a
 viable email archiving solution.


 John Bowles

--
 *From:* James Rankin [kz2...@googlemail.com]
 *Sent:* Friday, July 23, 2010 7:59 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Recovering messages from Exchange server 2007

Greetings Exchange gurus

 What's the easiest way to view all messages that were sent by a
 particular user on a particular day in the past week? I need this for some
 cloak-and-dagger investigative purposes - I suppose I could just grant
 myself permissions to the user's mailbox and forward myself all their Sent
 Items, but a) would they be able to tell I'd done this? and b) I'm assuming
 this wouldn't cover any stuff they may have permanently deleted?

 I presume there must be other ways to achieve this - I apologise for my
 lack of Exchange knowledge, I am not an Exchange bod by any stretch of the
 imagination.

 TIA,



 JRR

 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
 the machine wrong figures, will the right answers come out?' I am not able
 rightly to apprehend the kind of confusion of ideas that could provoke such
 a question.




 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
 the machine wrong figures, will the right answers come out?' I am not able
 rightly to apprehend the kind of confusion of ideas that could provoke such
 a question.





-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.


Re: Recovering messages from Exchange server 2007

2010-07-23 Thread Rob Sargent
Assuming you still have the Tracking Logs for the period in question, then
download and install the 30-day trial of Quest MessageStats (
www.quest.com/messagestats).  In the admin console you can identify certain
mailboxes on which you want detailed information (auditing tab), and then
set up a gathering task for the tracking logs on the servers.  Wait for data
to be imported, then from the reports console run the Mailbox Sent Audits
report.

Rob
On Fri, Jul 23, 2010 at 7:59 AM, James Rankin kz2...@googlemail.com wrote:

 Greetings Exchange gurus

 What's the easiest way to view all messages that were sent by a particular
 user on a particular day in the past week? I need this for some
 cloak-and-dagger investigative purposes - I suppose I could just grant
 myself permissions to the user's mailbox and forward myself all their Sent
 Items, but a) would they be able to tell I'd done this? and b) I'm assuming
 this wouldn't cover any stuff they may have permanently deleted?

 I presume there must be other ways to achieve this - I apologise for my
 lack of Exchange knowledge, I am not an Exchange bod by any stretch of the
 imagination.

 TIA,



 JRR

 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
 the machine wrong figures, will the right answers come out?' I am not able
 rightly to apprehend the kind of confusion of ideas that could provoke such
 a question.




RE: Recovering messages from Exchange server 2007 (UNCLASSIFIED)

2010-07-23 Thread Kent, Larry CTR US USA
Classification: UNCLASSIFIED
Caveats: NONE

I would make sure that you have management's approval or your company
lawyer's approval. You can't legally view all of someone's email without
reasonable cause, even if it is on company owned equipment.  Even then
your search/viewing must be limited to whatever search criteria you are
looking for.

 

From: Richard Stovall [mailto:rich...@gmail.com] 
Sent: Friday, July 23, 2010 9:21 AM
To: MS-Exchange Admin Issues
Subject: Re: Recovering messages from Exchange server 2007

 

Do you have any sort of edge device or a similar service?  I often
recover messages for users from our Barracuda.  (We also relay outbound
messages through it to take advantage of the invalid bounce suppression
feature.)

 

On Fri, Jul 23, 2010 at 9:14 AM, John Bowles john.bow...@wlkmmas.org
wrote:

You can track messages, but you cannot view the contents of the message.
That's if you have message tracking already enabled prior to these
messages having  been sent/received.

 

 

John Bowles 

 



From: James Rankin [kz2...@googlemail.com]
Sent: Friday, July 23, 2010 8:36 AM
To: MS-Exchange Admin Issues
Subject: Re: Recovering messages from Exchange server 2007

Is anything usable in the message tracking tool?

On 23 July 2010 13:25, John Bowles john.bow...@wlkmmas.org wrote:

Can only do that if you have journaling installed or if you have a
viable email archiving solution.

 

 

John Bowles 

 



From: James Rankin [kz2...@googlemail.com]
Sent: Friday, July 23, 2010 7:59 AM
To: MS-Exchange Admin Issues
Subject: Recovering messages from Exchange server 2007

Greetings Exchange gurus

What's the easiest way to view all messages that were sent by a
particular user on a particular day in the past week? I need this for
some cloak-and-dagger investigative purposes - I suppose I could just
grant myself permissions to the user's mailbox and forward myself all
their Sent Items, but a) would they be able to tell I'd done this? and
b) I'm assuming this wouldn't cover any stuff they may have permanently
deleted?

I presume there must be other ways to achieve this - I apologise for my
lack of Exchange knowledge, I am not an Exchange bod by any stretch of
the imagination.

TIA,



JRR

-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put
into the machine wrong figures, will the right answers come out?' I am
not able rightly to apprehend the kind of confusion of ideas that could
provoke such a question.




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put
into the machine wrong figures, will the right answers come out?' I am
not able rightly to apprehend the kind of confusion of ideas that could
provoke such a question.

 

Classification: UNCLASSIFIED
Caveats: NONE



Re: Recovering messages from Exchange server 2007

2010-07-23 Thread James Rankin
Thanks, will give this a try if nothing solid is forthcoming from the
IronPort

On 23 July 2010 14:35, Rob Sargent rbsr...@gmail.com wrote:

 Assuming you still have the Tracking Logs for the period in question, then
 download and install the 30-day trial of Quest MessageStats (
 www.quest.com/messagestats).  In the admin console you can identify
 certain mailboxes on which you want detailed information (auditing tab), and
 then set up a gathering task for the tracking logs on the servers.  Wait for
 data to be imported, then from the reports console run the Mailbox Sent
 Audits report.

 Rob
 On Fri, Jul 23, 2010 at 7:59 AM, James Rankin kz2...@googlemail.comwrote:

 Greetings Exchange gurus

 What's the easiest way to view all messages that were sent by a particular
 user on a particular day in the past week? I need this for some
 cloak-and-dagger investigative purposes - I suppose I could just grant
 myself permissions to the user's mailbox and forward myself all their Sent
 Items, but a) would they be able to tell I'd done this? and b) I'm assuming
 this wouldn't cover any stuff they may have permanently deleted?

 I presume there must be other ways to achieve this - I apologise for my
 lack of Exchange knowledge, I am not an Exchange bod by any stretch of the
 imagination.

 TIA,



 JRR

 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
 the machine wrong figures, will the right answers come out?' I am not able
 rightly to apprehend the kind of confusion of ideas that could provoke such
 a question.





-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.


Re: Recovering messages from Exchange server 2007 (UNCLASSIFIED)

2010-07-23 Thread James Rankin
It was requested by a director and the Chief exec, so I'm presuming my
backside is proverbially covered.

On 23 July 2010 14:38, Kent, Larry CTR US USA larry.k...@us.army.milwrote:

  Classification: UNCLASSIFIED
 Caveats: NONE

 I would make sure that you have management’s approval or your company
 lawyer’s approval. You can’t legally view all of someone’s email without
 reasonable cause, even if it is on company owned equipment.  Even then your
 search/viewing must be limited to whatever search criteria you are looking
 for.



 *From:* Richard Stovall [mailto:rich...@gmail.com]
 *Sent:* Friday, July 23, 2010 9:21 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Recovering messages from Exchange server 2007



 Do you have any sort of edge device or a similar service?  I often recover
 messages for users from our Barracuda.  (We also relay outbound messages
 through it to take advantage of the invalid bounce suppression feature.)



 On Fri, Jul 23, 2010 at 9:14 AM, John Bowles john.bow...@wlkmmas.org
 wrote:

 You can track messages, but you cannot view the contents of the message.
 That's if you have message tracking already enabled prior to these
 messages having  been sent/received.





 John Bowles


--

 *From:* James Rankin [kz2...@googlemail.com]
 *Sent:* Friday, July 23, 2010 8:36 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Recovering messages from Exchange server 2007

 Is anything usable in the message tracking tool?

 On 23 July 2010 13:25, John Bowles john.bow...@wlkmmas.org wrote:

 Can only do that if you have journaling installed or if you have a viable
 email archiving solution.





 John Bowles


--

 *From:* James Rankin [kz2...@googlemail.com]
 *Sent:* Friday, July 23, 2010 7:59 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Recovering messages from Exchange server 2007

 Greetings Exchange gurus

 What's the easiest way to view all messages that were sent by a particular
 user on a particular day in the past week? I need this for some
 cloak-and-dagger investigative purposes - I suppose I could just grant
 myself permissions to the user's mailbox and forward myself all their Sent
 Items, but a) would they be able to tell I'd done this? and b) I'm assuming
 this wouldn't cover any stuff they may have permanently deleted?

 I presume there must be other ways to achieve this - I apologise for my
 lack of Exchange knowledge, I am not an Exchange bod by any stretch of the
 imagination.

 TIA,



 JRR

 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
 the machine wrong figures, will the right answers come out?' I am not able
 rightly to apprehend the kind of confusion of ideas that could provoke such
 a question.




 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
 the machine wrong figures, will the right answers come out?' I am not able
 rightly to apprehend the kind of confusion of ideas that could provoke such
 a question.



 Classification: UNCLASSIFIED
 Caveats: NONE




-- 
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
the machine wrong figures, will the right answers come out?' I am not able
rightly to apprehend the kind of confusion of ideas that could provoke such
a question.


Re: Recovering messages from Exchange server 2007 (UNCLASSIFIED)

2010-07-23 Thread Richard Stovall
I absotively agree.  My presumption was that the necessary safeguards are in
place.

On Fri, Jul 23, 2010 at 9:38 AM, Kent, Larry CTR US USA 
larry.k...@us.army.mil wrote:

  Classification: UNCLASSIFIED
 Caveats: NONE

 I would make sure that you have management’s approval or your company
 lawyer’s approval. You can’t legally view all of someone’s email without
 reasonable cause, even if it is on company owned equipment.  Even then your
 search/viewing must be limited to whatever search criteria you are looking
 for.



 *From:* Richard Stovall [mailto:rich...@gmail.com]
 *Sent:* Friday, July 23, 2010 9:21 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Recovering messages from Exchange server 2007



 Do you have any sort of edge device or a similar service?  I often recover
 messages for users from our Barracuda.  (We also relay outbound messages
 through it to take advantage of the invalid bounce suppression feature.)



 On Fri, Jul 23, 2010 at 9:14 AM, John Bowles john.bow...@wlkmmas.org
 wrote:

 You can track messages, but you cannot view the contents of the message.
 That's if you have message tracking already enabled prior to these
 messages having  been sent/received.





 John Bowles


--

 *From:* James Rankin [kz2...@googlemail.com]
 *Sent:* Friday, July 23, 2010 8:36 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Recovering messages from Exchange server 2007

 Is anything usable in the message tracking tool?

 On 23 July 2010 13:25, John Bowles john.bow...@wlkmmas.org wrote:

 Can only do that if you have journaling installed or if you have a viable
 email archiving solution.





 John Bowles


--

 *From:* James Rankin [kz2...@googlemail.com]
 *Sent:* Friday, July 23, 2010 7:59 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Recovering messages from Exchange server 2007

 Greetings Exchange gurus

 What's the easiest way to view all messages that were sent by a particular
 user on a particular day in the past week? I need this for some
 cloak-and-dagger investigative purposes - I suppose I could just grant
 myself permissions to the user's mailbox and forward myself all their Sent
 Items, but a) would they be able to tell I'd done this? and b) I'm assuming
 this wouldn't cover any stuff they may have permanently deleted?

 I presume there must be other ways to achieve this - I apologise for my
 lack of Exchange knowledge, I am not an Exchange bod by any stretch of the
 imagination.

 TIA,



 JRR

 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
 the machine wrong figures, will the right answers come out?' I am not able
 rightly to apprehend the kind of confusion of ideas that could provoke such
 a question.




 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
 the machine wrong figures, will the right answers come out?' I am not able
 rightly to apprehend the kind of confusion of ideas that could provoke such
 a question.



 Classification: UNCLASSIFIED
 Caveats: NONE



Re: Recovering messages from Exchange server 2007 (UNCLASSIFIED)

2010-07-23 Thread Richard Stovall
Hopefully physically, as well.  :)

On Fri, Jul 23, 2010 at 9:44 AM, James Rankin kz2...@googlemail.com wrote:

 It was requested by a director and the Chief exec, so I'm presuming my
 backside is proverbially covered.


 On 23 July 2010 14:38, Kent, Larry CTR US USA larry.k...@us.army.milwrote:

  Classification: UNCLASSIFIED
 Caveats: NONE

 I would make sure that you have management’s approval or your company
 lawyer’s approval. You can’t legally view all of someone’s email without
 reasonable cause, even if it is on company owned equipment.  Even then your
 search/viewing must be limited to whatever search criteria you are looking
 for.



 *From:* Richard Stovall [mailto:rich...@gmail.com]
 *Sent:* Friday, July 23, 2010 9:21 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Recovering messages from Exchange server 2007



 Do you have any sort of edge device or a similar service?  I often recover
 messages for users from our Barracuda.  (We also relay outbound messages
 through it to take advantage of the invalid bounce suppression feature.)



 On Fri, Jul 23, 2010 at 9:14 AM, John Bowles john.bow...@wlkmmas.org
 wrote:

 You can track messages, but you cannot view the contents of the message.
 That's if you have message tracking already enabled prior to these
 messages having  been sent/received.





 John Bowles


--

 *From:* James Rankin [kz2...@googlemail.com]
 *Sent:* Friday, July 23, 2010 8:36 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Recovering messages from Exchange server 2007

 Is anything usable in the message tracking tool?

 On 23 July 2010 13:25, John Bowles john.bow...@wlkmmas.org wrote:

 Can only do that if you have journaling installed or if you have a viable
 email archiving solution.





 John Bowles


--

 *From:* James Rankin [kz2...@googlemail.com]
 *Sent:* Friday, July 23, 2010 7:59 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Recovering messages from Exchange server 2007

 Greetings Exchange gurus

 What's the easiest way to view all messages that were sent by a particular
 user on a particular day in the past week? I need this for some
 cloak-and-dagger investigative purposes - I suppose I could just grant
 myself permissions to the user's mailbox and forward myself all their Sent
 Items, but a) would they be able to tell I'd done this? and b) I'm assuming
 this wouldn't cover any stuff they may have permanently deleted?

 I presume there must be other ways to achieve this - I apologise for my
 lack of Exchange knowledge, I am not an Exchange bod by any stretch of the
 imagination.

 TIA,



 JRR

 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
 the machine wrong figures, will the right answers come out?' I am not able
 rightly to apprehend the kind of confusion of ideas that could provoke such
 a question.




 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
 the machine wrong figures, will the right answers come out?' I am not able
 rightly to apprehend the kind of confusion of ideas that could provoke such
 a question.



 Classification: UNCLASSIFIED
 Caveats: NONE




 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
 the machine wrong figures, will the right answers come out?' I am not able
 rightly to apprehend the kind of confusion of ideas that could provoke such
 a question.




RE: Exchange 2003 whitespace

2010-07-23 Thread Kleciak, Clint D A7IT
Powershell Script I wrote\stole.  Works in Ex2007 with Powershell 2.0.  It 
needs some modifications on the order of application entries it brings into the 
array but it will get you going.




#startscript

#Need Power Shell Version 2.0

# Note: Event ID 1221 has an InstanceID of 1074136261 on both MSX 2007 and MSX 
2003 servers. 
#
#Vairables#
# $es = Servers Array #
# $srv = Servername   #
# $dbc = Database Count   #
# $DB = Database Name #
# $WS = WhiteSpace#
###


#Create File for Output
$fileName=read-host Enter the File Name where the information will be stored:
$File=New-Item -ItemType file $FileName.txt

#Adds Header Info to file
add-content $file Server   DateBase  NumberOfUsers DataBaseSize  
WhiteSpace


#Gets All Exchange Servers with the Mailbox Role including Public Folders
$es = Get-ExchangeServer | Sort-Object -Property name | Where-Object 
{$_.ServerRole -eq Mailbox}

 

foreach ($srv in $es) 
{ 
#Getting the database count
$dbc = get-mailboxdatabase -server $srv |Measure-Object


#Getting the 1221 events. 
#need to modify the following line in order to only get correct app entries
$events = Get-EventLog -ComputerName $srv -LogName application -instanceid 
1074136261 -source MSExchangeIS Mailbox Store -Newest $dbc.count| 
Sort-Object -Property Message 

#Writing the output to Screen
Write-Host  
Write-Host Server - $srv -ForegroundColor Blue 
Write-Host Databases - $dbc.Count -ForegroundColor Blue 
Write-Host  


foreach ($item in $events) 
{ 
$DBName = $item.ReplacementStrings[1] 
$WS = $item.ReplacementStrings[0] 


$database1=$DBName

#Getting File Size of Databases
$db = Get-MailboxDatabase $srv\$Database1
#write-host $db
$path = `\`\ + $srv + `\ + 
$db.EdbFilePath.DriveName.Remove(1).ToString() + $+ 
$db.EdbFilePath.PathName.Remove(0,2)

$dbsize = Get-ChildItem $path
$ReturnedObj = New-Object PSObject
#$ReturnedObj | Add-Member NoteProperty -Name 
Server\StorageGroup\Database -Value $objItem.Identity
#$ReturnedObj | Add-Member NoteProperty -Name Size (MB) 
-Value ({0:n2} -f ($dbsize.Length/1024KB))
#$ReturnedObj | Add-Member NoteProperty -Name   -Value 
({0:n2} -f ($dbsize.Length/1024KB))

$ReturnedOBJ = ({0:n2} -f ($dbsize.Length/1024KB))



#Getting Number of Users on Databases   
$NuUsers=Get-MailboxStatistics -database $srv\$Database1 |where-object 
{!$_.DisconnectDate} | group-object -property:displayName |Measure-Object
$NumBerOfUSers=$NuUsers.Count

#Writing to Screen  
Write-Host
Write-Host ServerName  $srv
Write-Host DBName  $DBName
write-host NmbrUsers   $NumberOfUsers
Write-Host SizeOfDB$ReturnedObj
Write-Host WhtSpace$WS
Write-Host

#Writing to File
add-content $file $srv $DBName   $NumberOfUsers$ReturnedObj  
$WS


} 
}



#endscript





___ 
Clint Kleciak
Infrastructure Engineer Mgr
CIGNA IT

Confidential, unpublished property of CIGNA. Do not duplicate or distribute. 
Use and distribution limited solely to authorized personnel. (c) Copyright 2010 
CIGNA

-Original Message-
From: Ellis, John P. [mailto:johnel...@wirral.gov.uk] 
Sent: Friday, July 23, 2010 5:02 AM
To: MS-Exchange Admin Issues
Subject: Exchange 2003 whitespace

Is it possible to obtain free disc space, EDB size, and white space from
the command line and export it to a file?

Thanks
John
---

**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.clearswift.com
**







--
CONFIDENTIALITY NOTICE: If you have received this email in error, please 
immediately notify the sender by e-mail at the address shown.  This email 
transmission may contain confidential information.  This information is 
intended only for the use of the individual(s) or entity to whom it is intended 
even if addressed incorrectly.  Please delete it from your files if you are not 
the intended recipient.  Thank you for your compliance.  Copyright 2010 CIGNA
==





OOO message only going out once

2010-07-23 Thread Maglinger, Paul
Running Exchange 2003, Outlook 2003.  Sender received an out of office 
message yesterday at 1pm from recipient that's on vacation.  Today, sender sent 
another email at 8:30am and did not get an OOO from recipient.  Mailboxes 
appear to be well under limits.  OOO is still turned on with recipient's 
mailbox.  I looked at message tracking and only saw the OOO from yesterday.  I 
understand that OOO only goes out once per day per sender.  What time of day is 
that counter reset?  Has anyone else run across problems where the OOO only 
fires off once?
 
-Paul




Re: OOO message only going out once

2010-07-23 Thread Richard Stovall
Isn't this the intended behavior?

http://support.microsoft.com/kb/157961

http://support.microsoft.com/kb/157961I don't recall it ever being once
per day, but it is Friday..

On Fri, Jul 23, 2010 at 10:53 AM, Maglinger, Paul pmaglin...@scvl.comwrote:

 Running Exchange 2003, Outlook 2003.  Sender received an out of office
 message yesterday at 1pm from recipient that's on vacation.  Today, sender
 sent another email at 8:30am and did not get an OOO from recipient.
  Mailboxes appear to be well under limits.  OOO is still turned on with
 recipient's mailbox.  I looked at message tracking and only saw the OOO from
 yesterday.  I understand that OOO only goes out once per day per sender.
  What time of day is that counter reset?  Has anyone else run across
 problems where the OOO only fires off once?

 -Paul





RE: OOO message only going out once

2010-07-23 Thread Reimer, Mark
Paul,

I could be wrong, but I thought OOO only got sent out once per sender, not once 
every day. I thought that was default.

Mark

-Original Message-
From: Maglinger, Paul [mailto:pmaglin...@scvl.com] 
Sent: Friday, July 23, 2010 8:54 AM
To: MS-Exchange Admin Issues
Subject: OOO message only going out once

Running Exchange 2003, Outlook 2003.  Sender received an out of office 
message yesterday at 1pm from recipient that's on vacation.  Today, sender sent 
another email at 8:30am and did not get an OOO from recipient.  Mailboxes 
appear to be well under limits.  OOO is still turned on with recipient's 
mailbox.  I looked at message tracking and only saw the OOO from yesterday.  I 
understand that OOO only goes out once per day per sender.  What time of day is 
that counter reset?  Has anyone else run across problems where the OOO only 
fires off once?
 
-Paul






RE: Exchange 2003 whitespace

2010-07-23 Thread Randal, Phil
You can also try this one:

http://gsexdev.blogspot.com/2008/07/show-exchange-whitespace-retained-it
ems.html

I use something based on this in PowerGUI.

Cheers,

Phil

--
Phil Randal | Networks Engineer
NHS Herefordshire  Herefordshire Council  | Deputy Chief Executive's
Office | I.C.T. Services Division
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
Tel: 01432 260160
email: pran...@herefordshire.gov.uk

Any opinion expressed in this e-mail or any attached files are those of
the individual and not necessarily those of Herefordshire Council.

This e-mail and any attached files are confidential and intended solely
for the use of the addressee. This communication may contain material
protected by law from being passed on. If you are not the intended
recipient and have received this e-mail in error, you are advised that
any use, dissemination, forwarding, printing or copying of this e-mail
is strictly prohibited. If you have received this e-mail in error please
contact the sender immediately and destroy all copies of it.
-Original Message-
From: Kleciak, Clint D A7IT [mailto:clint.klec...@cigna.com] 
Sent: 23 July 2010 15:36
To: MS-Exchange Admin Issues
Subject: RE: Exchange 2003 whitespace

Powershell Script I wrote\stole.  Works in Ex2007 with Powershell 2.0.
It needs some modifications on the order of application entries it
brings into the array but it will get you going.




#startscript

#Need Power Shell Version 2.0

# Note: Event ID 1221 has an InstanceID of 1074136261 on both MSX 2007
and MSX 2003 servers. 
#
#Vairables#
# $es = Servers Array #
# $srv = Servername   #
# $dbc = Database Count   #
# $DB = Database Name #
# $WS = WhiteSpace#
###


#Create File for Output
$fileName=read-host Enter the File Name where the information will be
stored:
$File=New-Item -ItemType file $FileName.txt

#Adds Header Info to file
add-content $file Server   DateBase  NumberOfUsers
DataBaseSize  WhiteSpace


#Gets All Exchange Servers with the Mailbox Role including Public
Folders $es = Get-ExchangeServer | Sort-Object -Property name |
Where-Object {$_.ServerRole -eq Mailbox}

 

foreach ($srv in $es)
{
#Getting the database count
$dbc = get-mailboxdatabase -server $srv |Measure-Object


#Getting the 1221 events. 
#need to modify the following line in order to only get correct app
entries $events = Get-EventLog -ComputerName $srv -LogName application
-instanceid 1074136261 -source MSExchangeIS Mailbox Store -Newest
$dbc.count| Sort-Object -Property Message 

#Writing the output to Screen
Write-Host  
Write-Host Server - $srv -ForegroundColor Blue Write-Host Databases
- $dbc.Count -ForegroundColor Blue Write-Host  


foreach ($item in $events)
{
$DBName = $item.ReplacementStrings[1]
$WS = $item.ReplacementStrings[0] 


$database1=$DBName

#Getting File Size of Databases
$db = Get-MailboxDatabase $srv\$Database1
#write-host $db
$path = `\`\ + $srv + `\ +
$db.EdbFilePath.DriveName.Remove(1).ToString() + $+
$db.EdbFilePath.PathName.Remove(0,2)

$dbsize = Get-ChildItem $path
$ReturnedObj = New-Object PSObject
#$ReturnedObj | Add-Member NoteProperty -Name
Server\StorageGroup\Database -Value $objItem.Identity
#$ReturnedObj | Add-Member NoteProperty -Name Size
(MB) -Value ({0:n2} -f ($dbsize.Length/1024KB))
#$ReturnedObj | Add-Member NoteProperty -Name   -Value
({0:n2} -f ($dbsize.Length/1024KB))

$ReturnedOBJ = ({0:n2} -f ($dbsize.Length/1024KB))



#Getting Number of Users on Databases   
$NuUsers=Get-MailboxStatistics -database $srv\$Database1 |where-object
{!$_.DisconnectDate} | group-object -property:displayName
|Measure-Object $NumBerOfUSers=$NuUsers.Count

#Writing to Screen  
Write-Host
Write-Host ServerName  $srv
Write-Host DBName  $DBName
write-host NmbrUsers   $NumberOfUsers
Write-Host SizeOfDB$ReturnedObj
Write-Host WhtSpace$WS
Write-Host

#Writing to File
add-content $file $srv $DBName   $NumberOfUsers
$ReturnedObj  $WS


}
}



#endscript





___ 
Clint Kleciak
Infrastructure Engineer Mgr
CIGNA IT

Confidential, unpublished property of CIGNA. Do not duplicate or
distribute. Use and distribution limited solely to authorized personnel.
(c) Copyright 2010 CIGNA

-Original Message-
From: Ellis, John P. [mailto:johnel...@wirral.gov.uk] 
Sent: Friday, July 23, 2010 5:02 AM
To: MS-Exchange Admin Issues
Subject: Exchange 2003 whitespace

Is it possible to obtain free disc space, EDB size, and white space from
the command line and export it to a file?

Thanks
John
---


Re: OOO message only going out once

2010-07-23 Thread Sherry Abercrombie
It's a W.A.D.  (Working As Designed)

On Fri, Jul 23, 2010 at 10:12 AM, Evan Brastow ebras...@automatedemblem.com
 wrote:

 Sounds like it's working perfectly :)



 -Original Message-
 From: Maglinger, Paul [mailto:pmaglin...@scvl.com]
 Sent: Friday, July 23, 2010 10:54 AM
 To: MS-Exchange Admin Issues
 Subject: OOO message only going out once

 Running Exchange 2003, Outlook 2003.  Sender received an out of office
 message yesterday at 1pm from recipient that's on vacation.  Today, sender
 sent another email at 8:30am and did not get an OOO from recipient.
  Mailboxes appear to be well under limits.  OOO is still turned on with
 recipient's mailbox.  I looked at message tracking and only saw the OOO from
 yesterday.  I understand that OOO only goes out once per day per sender.
  What time of day is that counter reset?  Has anyone else run across
 problems where the OOO only fires off once?

 -Paul







-- 
Sherry Abercrombie

Any sufficiently advanced technology is indistinguishable from magic.
Arthur C. Clarke


RE: OOO message only going out once

2010-07-23 Thread Maglinger, Paul
Interesting.  I know that I've gotten OOO from users on multiple days,
but never more than one per day.  So that means that they would have had
to have been toggling the OOO to get that to happen.  Thanks people!

 

From: Richard Stovall [mailto:rich...@gmail.com] 
Sent: Friday, July 23, 2010 10:05 AM
To: MS-Exchange Admin Issues
Subject: Re: OOO message only going out once

 

Isn't this the intended behavior?

 

http://support.microsoft.com/kb/157961

 

I don't recall it ever being once per day, but it is Friday..

On Fri, Jul 23, 2010 at 10:53 AM, Maglinger, Paul pmaglin...@scvl.com
wrote:

Running Exchange 2003, Outlook 2003.  Sender received an out of office
message yesterday at 1pm from recipient that's on vacation.  Today,
sender sent another email at 8:30am and did not get an OOO from
recipient.  Mailboxes appear to be well under limits.  OOO is still
turned on with recipient's mailbox.  I looked at message tracking and
only saw the OOO from yesterday.  I understand that OOO only goes out
once per day per sender.  What time of day is that counter reset?  Has
anyone else run across problems where the OOO only fires off once?
 
-Paul



 



Re: OOO message only going out once

2010-07-23 Thread Tom Kern
OOO only oges out once per sender period. Not once per sender per day.
To clear OOF history you need to turn the OOF off and then on again for the
recipient mailbox.




On Fri, Jul 23, 2010 at 10:53 AM, Maglinger, Paul pmaglin...@scvl.comwrote:

 Running Exchange 2003, Outlook 2003.  Sender received an out of office
 message yesterday at 1pm from recipient that's on vacation.  Today, sender
 sent another email at 8:30am and did not get an OOO from recipient.
  Mailboxes appear to be well under limits.  OOO is still turned on with
 recipient's mailbox.  I looked at message tracking and only saw the OOO from
 yesterday.  I understand that OOO only goes out once per day per sender.
  What time of day is that counter reset?  Has anyone else run across
 problems where the OOO only fires off once?

 -Paul





RE: Guidance on disks for Exchange 2010

2010-07-23 Thread Matt Moore
DAG, DAG, DAG...  Why would you want to do this when TB+ drives are
available?   

 

From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk] 
Sent: Thursday, July 22, 2010 3:35 AM
To: MS-Exchange Admin Issues
Subject: Guidance on disks for Exchange 2010

 

In the virtualisation guide for Exchange 2010, in the section on storage
this is written:

 

Virtual disks that dynamically expand aren't supported by Exchange.

 

Does anyone know if this also applies to a disk presented to a physical
server via some form of storage virtualisation appliance? Said disk would be
presented as 100GB, for example, and the OS would see 100GB, but would grow
to reach this size at the storage level.

 

Thanks

 

Richard

 



RE: Recovering messages from Exchange server 2007

2010-07-23 Thread Steve Hart
Message tracking will give you a list of the messages, but not the contents.

I often use this script to create html lists of emails for tracking purposes.

Get-MessageTrackingLog -Server email server -EventID RECEIVE -sender 
sender's email -Start start date -End end date | ConvertTo-Html 
Timestamp, EventID, ClientIP, Sender, {$_.Recipients}, MessageSubject, 
ServerIp, ServerHostname, {$_.RecipientStatus} | Set-Content full path to 
output filename


That will give you a list of all messages the user sent.  If you need to know 
what's in them, you'll need another tool.




Steve Hart
Network Administrator
503.491.4343 -Direct | 503.492.8160 - Fax

From: James Rankin [mailto:kz2...@googlemail.com]
Sent: Friday, July 23, 2010 5:37 AM
To: MS-Exchange Admin Issues
Subject: Re: Recovering messages from Exchange server 2007

Is anything usable in the message tracking tool?
On 23 July 2010 13:25, John Bowles 
john.bow...@wlkmmas.orgmailto:john.bow...@wlkmmas.org wrote:
Can only do that if you have journaling installed or if you have a viable email 
archiving solution.


John Bowles


From: James Rankin [kz2...@googlemail.commailto:kz2...@googlemail.com]
Sent: Friday, July 23, 2010 7:59 AM
To: MS-Exchange Admin Issues
Subject: Recovering messages from Exchange server 2007
Greetings Exchange gurus

What's the easiest way to view all messages that were sent by a particular user 
on a particular day in the past week? I need this for some cloak-and-dagger 
investigative purposes - I suppose I could just grant myself permissions to the 
user's mailbox and forward myself all their Sent Items, but a) would they be 
able to tell I'd done this? and b) I'm assuming this wouldn't cover any stuff 
they may have permanently deleted?

I presume there must be other ways to achieve this - I apologise for my lack of 
Exchange knowledge, I am not an Exchange bod by any stretch of the imagination.

TIA,



JRR

--
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the 
machine wrong figures, will the right answers come out?' I am not able rightly 
to apprehend the kind of confusion of ideas that could provoke such a question.



--
On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the 
machine wrong figures, will the right answers come out?' I am not able rightly 
to apprehend the kind of confusion of ideas that could provoke such a question.


Password expire notification VBS

2010-07-23 Thread David Lum
 *   Anyone know if this: 
http://www.windowsitpro.com/article/passwords/how-can-i-use-a-script-to-determine-password-expiration-dates-for-users-in-a-domain-or-an-organizational-unit-ou-and-send-an-email-message-to-accounts-whose-passwords-expire-soon-.aspx
Works on E2K7?
David Lum // SYSTEMS ENGINEER
NORTHWEST EVALUATION ASSOCIATION
(Desk) 971.222.1025 // (Cell) 503.267.9764




Re: Legitimate Mass Emails

2010-07-23 Thread Daniele Bartoli
Thanks everyone.

On Thu, Jul 22, 2010 at 10:32 AM, Kennedy, Jim kennedy...@elyriaschools.org
 wrote:

 I haven’t had to do this in a long time so I couldn’t tell you who is good.
 CC will get you delivered, they are a solid company now…new owners. It is
 just one of my pet peve’s that I can’t let go of. I used to be a hard core
 frontline anti-spam guy.



 *From:* Daniele Bartoli [mailto:danielebart...@gmail.com]
 *Sent:* Thursday, July 22, 2010 1:23 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Legitimate Mass Emails



 Do you recommend anyone?

 On Thu, Jul 22, 2010 at 10:20 AM, Kennedy, Jim 
 kennedy...@elyriaschools.org wrote:

 So you are bulk sending emails that talk about ‘accounts’ and ‘statements’.
 That is going to look like a bank phish or something similar to your typical
 bay’s filter. Outsourcing it is still the right answer…relay it through
 them. Constant Contact as an example would be whitelisted at the big
 players.



 Disclaimer: I am not recommending Constant Contact, in fact I hate them as
 they built their business as spammers and then went legit after they were
 RBL’d to heck and back.



 *From:* Daniele Bartoli [mailto:danielebart...@gmail.com]
 *Sent:* Thursday, July 22, 2010 1:17 PM


 *To:* MS-Exchange Admin Issues

 *Subject:* Re: Legitimate Mass Emails



 These mass emails are generally not marketing type of emails, it is
 generally system generated saying that their statements are generated or
 that they need to review their account, etc.  Any ideas on this?

 Daniele

 On Thu, Jul 22, 2010 at 10:09 AM, Steve Hart sh...@wrightbg.com wrote:



 We've just outsourced ours to Constant Contact.  They handle all of the
 hassles and provide a easy interface that our marketing people can handle
 without involving IT at all.

 We typically set up new addresses in our system for responses to the
 emails. That allows us to filter emails any way we want.


 Steve Hart



 Network Administrator

 503.491.4343 -Direct | 503.492.8160 - Fax



 -Original Message-
 From: Daniele Bartoli [mailto:danielebart...@gmail.com]

 Sent: Thursday, July 22, 2010 10:03 AM
 To: MS-Exchange Admin Issues
 Subject: Legitimate Mass Emails

 I am curious how others that are sending out legitimate mass emails to
 clients deal with protecting their companies from getting blacklisted with
 the various email services (Yahoo, Google, ComCast, Hotmail)?  Several times
 we have been blacklisted from several of these services and had to work with
 their support to get it removed.  Other times we are seeing that the mail is
 getting queued, however delayed.

 Thanks,
 Daniele







RE: OOO message only going out once

2010-07-23 Thread Joe Pochedley
There are a few third party apps that will, on a daily schedule, query all the 
exchange mailboxes with OOF enabled... save the list, then run through and 
disable and re-enable the OOF setting on each mailbox to clear the OOF history. 
 This enables the OOF to fire once per day / per sender...  It's not a function 
built into Exchange, but an add-on

It's been awhile since I looked at the apps (and we never ended up buying any), 
so I can't really recommend one ATM.

JP

From: Maglinger, Paul [mailto:pmaglin...@scvl.com]
Sent: Friday, July 23, 2010 11:18 AM
To: MS-Exchange Admin Issues
Subject: RE: OOO message only going out once

Interesting.  I know that I've gotten OOO from users on multiple days, but 
never more than one per day.  So that means that they would have had to have 
been toggling the OOO to get that to happen.  Thanks people!

From: Richard Stovall [mailto:rich...@gmail.com]
Sent: Friday, July 23, 2010 10:05 AM
To: MS-Exchange Admin Issues
Subject: Re: OOO message only going out once

Isn't this the intended behavior?

http://support.microsoft.com/kb/157961

I don't recall it ever being once per day, but it is Friday..
On Fri, Jul 23, 2010 at 10:53 AM, Maglinger, Paul 
pmaglin...@scvl.commailto:pmaglin...@scvl.com wrote:
Running Exchange 2003, Outlook 2003.  Sender received an out of office 
message yesterday at 1pm from recipient that's on vacation.  Today, sender sent 
another email at 8:30am and did not get an OOO from recipient.  Mailboxes 
appear to be well under limits.  OOO is still turned on with recipient's 
mailbox.  I looked at message tracking and only saw the OOO from yesterday.  I 
understand that OOO only goes out once per day per sender.  What time of day is 
that counter reset?  Has anyone else run across problems where the OOO only 
fires off once?

-Paul



RE: Legitimate Mass Emails

2010-07-23 Thread Tim Vander Kooi
Depending on the size of your contact list, you might want to check out 
MailChimp. I use them for a number of non-profit things I do and the service is 
free and works great. Much better value if you fit into their free criteria 
than ConstantContact.
Tim

From: Daniele Bartoli [mailto:danielebart...@gmail.com]
Sent: Friday, July 23, 2010 3:00 PM
To: MS-Exchange Admin Issues
Subject: Re: Legitimate Mass Emails

Thanks everyone.
On Thu, Jul 22, 2010 at 10:32 AM, Kennedy, Jim 
kennedy...@elyriaschools.orgmailto:kennedy...@elyriaschools.org wrote:
I haven't had to do this in a long time so I couldn't tell you who is good. CC 
will get you delivered, they are a solid company now...new owners. It is just 
one of my pet peve's that I can't let go of. I used to be a hard core frontline 
anti-spam guy.

From: Daniele Bartoli 
[mailto:danielebart...@gmail.commailto:danielebart...@gmail.com]
Sent: Thursday, July 22, 2010 1:23 PM

To: MS-Exchange Admin Issues
Subject: Re: Legitimate Mass Emails

Do you recommend anyone?
On Thu, Jul 22, 2010 at 10:20 AM, Kennedy, Jim 
kennedy...@elyriaschools.orgmailto:kennedy...@elyriaschools.org wrote:
So you are bulk sending emails that talk about 'accounts' and 'statements'. 
That is going to look like a bank phish or something similar to your typical 
bay's filter. Outsourcing it is still the right answer...relay it through them. 
Constant Contact as an example would be whitelisted at the big players.

Disclaimer: I am not recommending Constant Contact, in fact I hate them as they 
built their business as spammers and then went legit after they were RBL'd to 
heck and back.

From: Daniele Bartoli 
[mailto:danielebart...@gmail.commailto:danielebart...@gmail.com]
Sent: Thursday, July 22, 2010 1:17 PM

To: MS-Exchange Admin Issues
Subject: Re: Legitimate Mass Emails

These mass emails are generally not marketing type of emails, it is generally 
system generated saying that their statements are generated or that they need 
to review their account, etc.  Any ideas on this?

Daniele
On Thu, Jul 22, 2010 at 10:09 AM, Steve Hart 
sh...@wrightbg.commailto:sh...@wrightbg.com wrote:


We've just outsourced ours to Constant Contact.  They handle all of the hassles 
and provide a easy interface that our marketing people can handle without 
involving IT at all.

We typically set up new addresses in our system for responses to the emails. 
That allows us to filter emails any way we want.


Steve Hart



Network Administrator

503.491.4343 -Direct | 503.492.8160 - Fax

-Original Message-
From: Daniele Bartoli 
[mailto:danielebart...@gmail.commailto:danielebart...@gmail.com]
Sent: Thursday, July 22, 2010 10:03 AM
To: MS-Exchange Admin Issues
Subject: Legitimate Mass Emails

I am curious how others that are sending out legitimate mass emails to clients 
deal with protecting their companies from getting blacklisted with the various 
email services (Yahoo, Google, ComCast, Hotmail)?  Several times we have been 
blacklisted from several of these services and had to work with their support 
to get it removed.  Other times we are seeing that the mail is getting queued, 
however delayed.

Thanks,
Daniele