Recent content by SirCam

Hi, I use Windows 2003 R2 SP2. I'm trying to audit folder deletion on a file server. I have set up the auditing GPO for Object access. On the file server I have selected Audit Authenticated Users, audit on Folder and Subfolders, and checked the Delete action. This works - it records folder...

That support doco is for Forefront Client Security, not Forefront for Exchange. We have the same situation with an isolated environment and the only way we can do it is to have Exchange 2007 on a test server with an internet connection. We update all signatures, then copy "c:\program...

Thanks xmsre, that gives me something to work with. I'll check it out. Cheers.

Lol, which hardware company do you have shares in? Trust me, latency is not an issue across RAID 5 300GB disks. No it's not ideal for a busy system, but will be more then adequate for a handful of users, especially now when there's no active users. Test domain has same new servers but with...

No, the servers are brand new puppies, dual CPU, 16GB RAM, connected via crossover cable for cluster traffic and 1Gb for normal traffic (They are kept in the same room). 4 x 300GB RAID 5 disks, so performance shouldn't be an issue.

Maybe it is a configuration issue, but we have seen these problems in the test network and in a brand new domain with basic services and no users. If we lose a server and it requires a reseed 20% of the time, that tells me that it is not very resilient and has much room for improvement. Have...

Maybe. But I would expect CCR to be more resiliant the what it is at the moment. I think when it comes time to implement 2007 into prod we will do log shipping at the SAN level and not use CCR. More reliable and faster.

Hi, I am running Exchange 2007 SP1 in a new environment. There are no active users, so usage is very light. We are using CCR for our mailbox server. Last week the network cables were pulled on the servers and the cluster resources failed. Restarting them today, 1 storage group came up fine...

Without Journaling enabled you may not capture all emails sent to and from the user. They can easily delete any emails from the view and without going into their mailbox and restoring them, an obviously intrusive method, you may not get a full representation of what the user has been doing. If...

We use Symantec's Discovery Accelerator. It's pretty comprehensive in examining not only a user's email store but the journal mailbox as well.

I think it can by using a custom filter, but no idea how to set this up properly. I'd have to filter messages on the "SystemMailbox" sender, but not sure how to do this.

Archiving data has many benefits, not just keeping a copy of all emails in an orgainisation (which is what Journaling does). You can use it to keep mailboxes at reasonable sizes. Users do tend to keep all emails and mailbox sizes can quickly hit a Gb and beyond. By archiving their data using...

I am running Exchange 2007 SP1 with a global transport rule configured to journal all inbound and outbound email. The mailbox server is configured with Cluster Continuous Replication. There are no active users on the network at the moment. Journaling is picking up a lot of test-flow emails...

We are setting up a disconnected network and are trying to use the Forefront Server Security Management Console to push out virus signatures to Exchange 2007 servers. We have this operational in the test network which has an Internet link. As the new network has no outside connections to the...

This has been resolved. After spending a few days with Microsoft looking at this, it came down to a matter of converting the GUID above into another format which matched what was listed in AD. Following this article, we removed all the otherWellknownObjects entries and re-ran /prepareAD and it...