Subscribe: Comments on Glen's Exchange Dev Blog: BYO Message Tracking Center with PowerShell
http://gsexdev.blogspot.com/feeds/116003239672979133/comments/default
Preview: Comments on Glen's Exchange Dev Blog: BYO Message Tracking Center with PowerShell

Comments on Glen's Exchange Dev Blog: BYO Message Tracking Center with PowerShell





Updated: 2018-01-10T21:18:30.042+11:00

 



Hi Glen, Great script, makes life alot easier whe...

2013-10-31T21:56:11.939+11:00

Hi Glen,

Great script, makes life alot easier when gather information from exchange 2003. I was wondering if it was just me but it seems it doesn't support tracking emails sent to distribution groups. While I expect it shows emails sent to the users within these groups is there any way of showing information based on just the distribution group?

Many thanks,
Martin



This wont work on 2007 as 2007 doesn't support...

2011-11-23T17:22:18.738+11:00

This wont work on 2007 as 2007 doesn't support WMI for message tracking see http://gsexdev.blogspot.com/2008/09/wizbang-exchange-2007-message-tracking.html instead

Cheers
Glen



I'm getting an error: "Invalid namespace&...

2011-11-23T03:32:23.096+11:00

I'm getting an error: "Invalid namespace" in line 83, character 15, the 'get-wmiobject' command.

I tried both the server name and the IP. I have E2K7 running on 2003, x64.

I'm pretty new to scripting and using WMI, so I'm not really sure how to resolve this.

I'd really appreciate any guidance!

Thanks!



Great script you have created here! It does exactl...

2011-09-20T07:01:23.422+10:00

Great script you have created here! It does exactly what I was looking for, except for one small item. When doing a search and selecting one of the "Extras" it brings up the results just fine. However when I go to export those results, all I get is the headers and none of the information. Is there anything you could point out I might be doing wrong? Thanks!



Yeah, I need to know how to track all messages sen...

2010-01-14T01:44:50.204+11:00

Yeah, I need to know how to track all messages sent to specific domains (e.g. *@hotmail.com, etc) across all mailboxes in my Exchange 2003 server. How can I do this?



This is an excellent little tool. I wish I could h...

2009-10-06T10:22:33.757+11:00

This is an excellent little tool. I wish I could help make it even better but I lack the skills :-(
What about adding ability for wildcard search in the recipient/sender addresses? Or a subject line search?
Any skilled folks fancy a challenge? I haven't found any decent ways of searching Exchange 2003 tracking logs yet.



That particular script is for 2003 so wont work on...

2008-09-23T10:05:00.000+10:00

That particular script is for 2003 so wont work on 2007 I just posted a 2007 script a couple of days okay but it vaires from this. Try http://msgdev.mvps.org/exdevblog/wsearh.zip this is a quick mashup of few of these scripts its uses Get-TransportServer so should work across multiple hubs.

Cheers
Glen



I am trying to track down if users reply to any sp...

2008-09-23T05:53:00.000+10:00

I am trying to track down if users reply to any spear phishing attempts across several transport servers.

the above code is a little too complicated for what I am trying...

my search
$addy = "acount_upgade@live.com"
Get-TransportServer | Get-MessageTrackingLog -Recipient $addy | ft TimeStamp, Sender, Recipients, MessageSubject

Could anyone point me in the right direction for creating a simple input form to display the results of a recipient search?

Any help would be greatly appreciated,
Scott
s33butler (at) gmail (dot) com



The first thing would be to make sure message trac...

2006-12-13T08:39:00.000+11:00

The first thing would be to make sure message tracking is enabled it isn't by default. If you have a cluster they you message tracking file are probably quite large which mean it would take a while to run. The underlying script uses WMI to query the message tracking logs. From a testing perspective you could try a simpler script such as http://msdn2.microsoft.com/en-us/library/aa126776.aspx

That should give a indication if you can query the message tracking logs. I think on a cluster you would need to use the virtual servername not the node names. The other things you could do is put powershell into trace mode using

Set-PsDebug -trace 2

This will give a pretty verbose debug of what the script is doing an may highlight any errors

Cheers
Glen



Hi,Just saw this stuff, sounds really nice. Tried ...

2006-12-12T21:05:00.000+11:00

Hi,
Just saw this stuff, sounds really nice. Tried using it, but it didn't work, We have exchange in cluster, so the I tried using the cluster name, didn't work, then the individual server names it didn't work either. the GUI appears, but it gets hanged when I press search.

Any Specific reason?



Its a little strange there doesn't seem to be any ...

2006-10-10T09:46:00.000+10:00

Its a little strange there doesn't seem to be any errors happening the screen output looks exactly correct. Bascially what should be happening is the execution of the command window will halt and a Form should appear. I did have an issue when i was building it when the form would sometimes not be the active windows. So down on the task bar you may get a dropdown in the powershell box you may need to click on to make it the active window. I started building this in RC1 and finished in RC2 if you using early version im not sure how it would work. I'm interested to know why it doesn't work what version of powershell are you using?



p.s. don't know if this is useful info but here it...

2006-10-10T03:34:00.000+10:00

p.s. don't know if this is useful info but here it is. also, i can run other scripts successfully.

PS C:\scripts\myps> get-psprovider

Name Capabilities Drives
---- ------------ ------
Alias ShouldProcess {Alias}
Environment ShouldProcess {Env}
FileSystem Filter, ShouldProcess {C, A, B, D...}
Function ShouldProcess {Function}
Registry ShouldProcess {HKLM, HKCU}
Variable ShouldProcess {Variable}
Certificate ShouldProcess {cert}



i am too new at this to debug. can you provide som...

2006-10-10T03:28:00.000+10:00

i am too new at this to debug. can you provide some insight as to why it doesn't work for me? thanks!**************PS C:\scripts\myps> get-hostName : ConsoleHostVersion : 1.0.9567.0InstanceId : 01e560d2-439b-449b-99e7-e488b42d6709UI : System.Management.Automation.Internal.Host.InternalHostUserInterfaceCurrentCulture : en-USCurrentUICulture : en-USPrivateData :********************PS C:\scripts\myps> ./mtrackv1GAC Version Location--- ------- --------True v2.0.50727 C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\Sys...True v2.0.50727 C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e0...AllowDBNull : TrueAutoIncrement : FalseAutoIncrementSeed : 0AutoIncrementStep : 1Caption : Origination TimeColumnName : Origination TimePrefix :DataType : System.DateTimeDateTimeMode : UnspecifiedLocalDefaultValue :Expression :ExtendedProperties : {}MaxLength : -1Namespace :Ordinal : 0ReadOnly : FalseTable : {}Unique : FalseColumnMapping : ElementSite :Container :DesignMode : FalseAllowDBNull : TrueAutoIncrement : FalseAutoIncrementSeed : 0AutoIncrementStep : 1Caption : SenderAddressColumnName : SenderAddressPrefix :DataType : System.StringDateTimeMode : UnspecifiedLocalDefaultValue :Expression :ExtendedProperties : {}MaxLength : -1Namespace :Ordinal : 1ReadOnly : FalseTable : {}Unique : FalseColumnMapping : ElementSite :Container :DesignMode : FalseAllowDBNull : TrueAutoIncrement : FalseAutoIncrementSeed : 0AutoIncrementStep : 1Caption : RecipientAddressColumnName : RecipientAddressPrefix :DataType : System.StringDateTimeMode : UnspecifiedLocalDefaultValue :Expression :ExtendedProperties : {}MaxLength : -1Namespace :Ordinal : 2ReadOnly : FalseTable : {}Unique : FalseColumnMapping : ElementSite :Container :DesignMode : FalseAllowDBNull : TrueAutoIncrement : FalseAutoIncrementSeed : 0AutoIncrementStep : 1Caption : SubjectColumnName : SubjectPrefix :DataType : System.StringDateTimeMode : UnspecifiedLocalDefaultValue :Expression :ExtendedProperties : {}MaxLength : -1Namespace :Ordinal : 3ReadOnly : FalseTable : {}Unique : FalseColumnMapping : ElementSite :Container :DesignMode : FalseAllowDBNull : TrueAutoIncrement : FalseAutoIncrementSeed : 0AutoIncrementStep : 1Caption : Size (KB)ColumnName : Size (KB)Prefix :DataType : System.Int32DateTimeMode : UnspecifiedLocalDefaultValue :Expression :ExtendedProperties : {}MaxLength : -1Namespace :Ordinal : 4ReadOnly : FalseTable : {}Unique : FalseColumnMapping : ElementSite :Container :DesignMode : FalseAllowDBNull : TrueAutoIncrement : FalseAutoIncrementSeed : 0AutoIncrementStep : 1Caption : EmailAddressColumnName : EmailAddressPrefix :DataType : System.StringDateTimeMode : UnspecifiedLocalDefaultValue :Expression :ExtendedProp[...]