Q

Track, monitor and log all e-mail communication

Tracking, monitoring and logging all e-mail communication -- both incoming and outgoing -- on an Exchange 2003 server can be tricky. See how Message Journaling and a Microsoft Exchange tool called Archive Sink can help.

I am looking for a way to track, monitor and log all e-mail communication -- both incoming and outgoing -- on an Exchange 2003 server. What is being asked of me is to store and track every e-mail for legal purposes. I would like to replicate this service to another server to keep the load off the production server.

Do you know of any way Exchange can do this? Furthermore, the logging must be readable if called upon with little

effort -- i.e., administration comes to me asking to see all John Q. Smith's e-mail communications from the last two years. I would need to be able to either print them out or import them into a mailbox for viewing. Regardless of user deletions, all mail must be archived (safety from malicious intent or cover ups by the users).

Any help would be appreciated.

VIEW MEMBER FEEDBACK TO THIS ASK THE EXPERT Q&A.

Yes Microsoft does offer a solution called Message Journaling. It can be enabled on each mailbox store. It is quite limited, so you will need to test it out to determine if it fully meets your requirements or not. To enhance the base features of Message Journaling some administrators have also incorporated a Microsoft Exchange tool called Archive Sink on their SMTP Connector servers (Internet facing gateway servers). Here are a few links to help get you started:

How to enable the "Message Journaling" function for an Exchange Server mailbox store

Troubleshooting message journaling in Exchange Server 2003 and in Exchange 2000 Server

How to install and use the Archive Sink utility in Exchange Server 2003


MEMBER FEEDBACK TO THIS ASK THE EXPERT Q&A:

I like the tip, but I have an Exchange 2003 Standard -- is there a way to select which mailboxes should be archived (I have only one mailbox store)?
—Patricia M.

******************************************

Technically you could use the Archive Sink utility referenced in the tip. However, it is not recommended do so, except for troubleshooting purposes. I think you might want to look at a full featured archiving solution that will give you more granular control. A popular solution is the GFI MailArchiver for Exchange. It is reasonably priced and full featured. Click here for a full list of solutions.
—Richard Luckett, spam and security expert


Do you have comments on this Ask the Expert Q&A? Let us know.
Related information from SearchExchange.com:

  • Tip: Archive Sink
  • Tip: Exchange event sink offers more granular message journaling
  • Tip: Outlook Journaling: A poor man's archiving tool
  • Step-by-Step Guide: E-mail compliance to-do list
  • Reference Center: Archiving tips and resources
  • Reference Center: Compliance tips and resources

  • This was first published in February 2006

    Dig deeper on Microsoft Exchange Server 2003

    Pro+

    Features

    Enjoy the benefits of Pro+ membership, learn more and join.

    Have a question for an expert?

    Please add a title for your question

    Get answers from a TechTarget expert on whatever's puzzling you.

    You will be able to add details on the next page.

    0 comments

    Oldest 

    Forgot Password?

    No problem! Submit your e-mail address below. We'll send you an email containing your password.

    Your password has been sent to:

    SearchWindowsServer

    SearchEnterpriseDesktop

    SearchCloudComputing

    SearchSQLServer

    Close