Administration

Released: Exchange Server 2007 Service Pack 3

Close on the heels of Exchange 2010 SP 1 beta, Microsoft has just released Exchange 2007 SP 3. You can download the service pack from the download center. Exchange 2007 SP3 adds compatiblity for Windows Server 2008 R2 to Exchange 2007. With SP3, you can also install Exchange 2007 administration tools on Windows 7 clients. […]

More →

Social Engineering Attack Disguised As Mailbox Quota Message

Social engineering is all about psychological attacks— convincing a user to willingly divulge information is much more convenient, in most cases, than actually brute-forcing your way in. Attackers with very little technical sophistication (and perhaps some great social skills) can easily prey upon even the more vigilant users. I would’ve held on to my belief […]

More →

Export and Import Content Filter Words or Phrases

In Exchange 2010 and Exchange 2007, you can add custom words or phrases as good or bad words to modify the Spam Confidence Level (SCL) assigned to messages. Messages with a good word or phrase are assigned an SCL of 0 and bypass other antispam agents that fire after the Content Filtering agent. Messages with […]

More →

Are Distribution Groups really being used?

Over the years, you end up creating a large number of Distribution Groups based on user demands. The regular departmental Distribution Groups such as Sales, Marketing, Engineering, and HR. The geographical ones such as AllUS, All-California, All-BayArea, and so on. The ones by employment status such as All-FTE for full-time employees, All-Contractors, and so on. […]

More →

Where are mailbox last logon, client IP address and other details in Exchange 2007 & Exchange 2010?

In Exchange Server 2003/2000, expanding a Mailbox Database (MDB) provides information about mailboxes in a database, last logon/logoff times and account(s) that logged on to mailboxes (see ‘Displaying Client IP Address in Exchange System Manager‘ for details). Figure 1: In Exchange 2003, the Logons node displays Store logon-related information. Click here to see a bigger […]

More →

Monitoring Exchange Server 2007 Performance: Perfmon counters and thresholds

Monitoring mission-critical services such as email is a necessity in most organizations. Whereas monitoring software like Microsoft System Center Operations Manager can use Exchange monitoring expertise and rules encoded in Management Packs and many third-party monitoring solutions ship with some embedded Exchange knowledge, if you’re setting up a monitoring system or creating a home-grown monitoring […]

More →

Exchange Quick Audit: mailboxes created in last 7 days

I remember writing plenty of scripts to report on different things such as user accounts created every week/month, user accounts modified, accounts disabled, etc. for SOX compliance. Some of those scripts used to be rather long, and in hindsight— involved a lot more lines of code than an administrator should have to write. Although I […]

More →

List Exchange ActiveSync users and device information in Exchange 2007 and Exchange 2010

One of the requirements for managing mobile devices in an organization is reporting on users with a mobile device, the model or type of device, and optionally other information such as the DeviceID, the time of the last successful connection. In How to get a list of Exchange ActiveSync users we list Exchange ActiveSync (EAS) […]

More →

Exchange Server and UPN Suffixes for an OU

What’s a UPN? Back from the Windows NT days and NetBIOS-style NT domain names, we’ve been used to logging in using the DOMAIN\Username format. With the shift to Active Directory in Windows 2000 Server, we have the ability to use a User Principal Name, which is a login that looks like (and can be generally […]

More →

HOW TO: Remove the Public Folder Store

This is a fairly common question — you’re trying to remove the Public Folder store on an Exchange 2007 server and get an error that some Public Folder replicas still exist. You’re certain you’ve removed all Public Folder replicas from that server. What next? Here’s a little procedure documented in How to Delete Multiple Public […]

More →