Exchange2010 Message Tracking Logs
Hello experts,
Got an issue with Exchange 2010 SP3 RU15 Message Tracking Logs
Logging is enabled for MailboxServer and TransportServer roles:
PS C:\> Get-MailboxServer EXCH2 | fl messagetracking*
MessageTrackingLogEnabled : True
MessageTrackingLogMaxAge : 30.00:00:00
MessageTrackingLogMaxDirec
MessageTrackingLogMaxFileS
MessageTrackingLogPath : D:\Message Tracking Logs
MessageTrackingLogSubjectL
PS C:\> Get-TransportServer EXCH2 | fl messagetracking*
MessageTrackingLogEnabled : True
MessageTrackingLogMaxAge : 30.00:00:00
MessageTrackingLogMaxDirec
MessageTrackingLogMaxFileS
MessageTrackingLogPath : D:\Message Tracking Logs
MessageTrackingLogSubjectL
The issue is that i get only MSGTRKM... logs generated but MSGTRK logs are missing. I have disabled logging for mailbox and transport servers and re enabled again - same thing.
Any ideas?
Thanks in advance.
Got an issue with Exchange 2010 SP3 RU15 Message Tracking Logs
Logging is enabled for MailboxServer and TransportServer roles:
PS C:\> Get-MailboxServer EXCH2 | fl messagetracking*
MessageTrackingLogEnabled : True
MessageTrackingLogMaxAge : 30.00:00:00
MessageTrackingLogMaxDirec
MessageTrackingLogMaxFileS
MessageTrackingLogPath : D:\Message Tracking Logs
MessageTrackingLogSubjectL
PS C:\> Get-TransportServer EXCH2 | fl messagetracking*
MessageTrackingLogEnabled : True
MessageTrackingLogMaxAge : 30.00:00:00
MessageTrackingLogMaxDirec
MessageTrackingLogMaxFileS
MessageTrackingLogPath : D:\Message Tracking Logs
MessageTrackingLogSubjectL
The issue is that i get only MSGTRKM... logs generated but MSGTRK logs are missing. I have disabled logging for mailbox and transport servers and re enabled again - same thing.
Any ideas?
Thanks in advance.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hi Strivoli,
I have found the cause of the issue - and you were spot on the first time. It was a permission issue. I have started looking through all related event logs and that pointed towards folder permissions.
The following permissions are required on the message tracking log directory:
Administrator: Full Control
System: Full Control
Network Service: Read, Write, and Delete Subfolders and Files
By default, the Microsoft Exchange Transport service uses the security credentials of the Network Service user account to create the new message tracking log directory and apply the correct permissions on Hub Transport servers. If the Exchange server has only the Mailbox server role installed, the Microsoft Exchange Mail Submission service creates the new message tracking log directory by using the security credentials of the Network Service user account. If the new message tracking log directory does not already exist, and the Network Service account has the rights that are required to create folders and apply permissions at the new location, the new message tracking log directory is created and the correct permissions are applied to the new directory. If the new message tracking log directory already exists, the existing folder permissions are not checked.
Ref:
https://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Exchange&ProdVer=8.0&EvtID=7016&EvtSrc=MSExchangeTransportLogSearch
The strange thing was that MSGTRKM logs where created in same folder just fine, this confused me at the beginning.
Thanks for your help.
I have found the cause of the issue - and you were spot on the first time. It was a permission issue. I have started looking through all related event logs and that pointed towards folder permissions.
The following permissions are required on the message tracking log directory:
Administrator: Full Control
System: Full Control
Network Service: Read, Write, and Delete Subfolders and Files
By default, the Microsoft Exchange Transport service uses the security credentials of the Network Service user account to create the new message tracking log directory and apply the correct permissions on Hub Transport servers. If the Exchange server has only the Mailbox server role installed, the Microsoft Exchange Mail Submission service creates the new message tracking log directory by using the security credentials of the Network Service user account. If the new message tracking log directory does not already exist, and the Network Service account has the rights that are required to create folders and apply permissions at the new location, the new message tracking log directory is created and the correct permissions are applied to the new directory. If the new message tracking log directory already exists, the existing folder permissions are not checked.
Ref:
https://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Exchange&ProdVer=8.0&EvtID=7016&EvtSrc=MSExchangeTransportLogSearch
The strange thing was that MSGTRKM logs where created in same folder just fine, this confused me at the beginning.
Thanks for your help.
You're welcome! I'm glad I could help. Have a nice day!
ASKER
"D:\Message Tracking Logs" - is not empty. I have MSGTRKM logs there. But MSGTRK logs stopped being created some time ago and this just been picked up now.
Permissions OK. System - full control.