Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Exchange 2007 Message Tracking Problem

Posted on 2009-04-01
12
Medium Priority
?
2,551 Views
Last Modified: 2012-08-13
I am running Exchange 2007 SP1 on Window Server 2008.

I am trying to track messages that were received by a particular user and am unable to get any results.  I am able to see items sent by that user through message tracking but when I change the Event ID to RECEIVE no results are displayed.  Am I missing something?
0
Comment
Question by:CNITNetOps
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 5
12 Comments
 
LVL 32

Expert Comment

by:gupnit
ID: 24040371
Hi,
Though enabled by default, please make sure that MT is enabled, use Set-TransportServer <Identity> -MessageTrackingLogEnabled $true
Also, pleasse refer http://www.msexchange.org/tutorials/Exchange-2007-Message-Tracking-Part2.html
Let me know
Thanks
Nitin
0
 
LVL 32

Expert Comment

by:gupnit
ID: 24040399
Oh Sorry, since you are able to see logs, obviously it is enabled. Also you know how to check logs, so ignore my prvious comment.
Kindly share the Screenshot of your query, so that I can confirm, if there is anytihng missing there. Let meknow
Thanks
Nitin
0
 

Author Comment

by:CNITNetOps
ID: 24040552
Here is the screen shot.  I have also tried different combination to get it to work to no avail.


TrackingScreenShot.doc
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 32

Assisted Solution

by:gupnit
gupnit earned 1000 total points
ID: 24040613
Hi,
Can you please broaden your search by increasing the time stamps to maybe 3-4 days and also the server.
This is just to confirm, if user actually did receive anything during ur current time slot or is there actually an issue
Cheers
Nitin
0
 

Author Comment

by:CNITNetOps
ID: 24040687
I just went back a week on my own account and still didn't get any results.  I used my account so I could be sure to use an account I knew had received mail recently.
0
 

Author Comment

by:CNITNetOps
ID: 24050987
I just noticed I am also getting an error saying "An internal processing error caused the search to fail".  
0
 

Author Comment

by:CNITNetOps
ID: 24051308
Also looking in my event tracking logs, it looks like its only logging messages with event id "SUBMIT" and nothing else.  
0
 

Author Comment

by:CNITNetOps
ID: 24051854
Here is the error I am getting when I use the command shell:

[PS] C:\Windows\System32>get-messagetrackinglog -Recipients:user@mydomain.com -EventID "RECEIVE" -Start "4/1/2009 11:15:00 AM" -End "4/2/2009 11:25:00
AM"
Get-MessageTrackingLog : An internal processing error caused the search to fail
.
At line:1 char:23
+ get-messagetrackinglog  <<<< -Recipients:user@mydomain.com -EventID
"RECEIVE" -Start "4/1/2009 11:15:00 AM" -End "4/2/2009 11:25:00 AM"
0
 
LVL 32

Accepted Solution

by:
gupnit earned 1000 total points
ID: 24055861
Hi
So you are confirming that you are able to run this command wihtout any errors without RECEIVE parameter. Could be due to log corruption. I would do the folllowing:
  • Disable MT on Server and stop the services (Exchange Transport Log Search |  Transport | Mail Submission)
  • Rename the last message tracking log file or move to another location
  • Start the services (Exchange Transport Log Search |  Transport | Mail Submission)
  • Enable MT on the server
Now let is generate and try. Let me know
A good read: http://technet.microsoft.com/en-us/library/bb124926.aspx
Thanks
Nitin Gupta (gupnit)
 
0
 

Author Comment

by:CNITNetOps
ID: 24062682
That worked!  I am now able to track email properly.
0
 

Author Closing Comment

by:CNITNetOps
ID: 31565322
thanks so much!
0
 
LVL 32

Expert Comment

by:gupnit
ID: 24066943
Glad to help :-) !
Thsnks
Nitin Gupta (gupnit)
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
On September 18, Experts Exchange launched the first installment of the Help Bell, a new feature for Premium Members, Team Accounts, and Qualified Experts. The Help Bell will serve as an additional tool to help teams increase question visibility.
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates‚Ķ
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses

664 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question