Hi, I have a journaling mailbox seems last logon in current time, but I don't see any journaling rule or journaling database settings. The journaling agent is enable from the view of shell command. How can check it further on this? I have noticed that specific time I will got this event at my CAS Event Type: Information Event Source: MSExchange Messaging Policies Event Category: Journaling Event ID: 1000 Date: 5/7/2012 Time: 8:30:42 AM User: N/A Computer: XXX-XXX Description: Journal rules were loaded.

It is exchange 2007, any idea or ways for details tracking or audit for this?

Hi how and where are you checking the journaling settings and configuration and what Issue are you facing ? Since the journaling agent is located on the Hub Transport servers, please check and event longs there , it encounters and evaluates every message before the message reaches its recipient. The Journaling agent acts on messages after categorizationthis ensures access to all of the messages recipient and sender attributes, and it allows the agent to determine if the message was sent directly to a recipient or if it was received via distribution group expansion. So please find the below very useful links which help you to understand the Journaling better. This example retrieves all journal rules configured on a Hub Transport server. Get-JournalRule http://blogs.technet.com/b/exchange/archive/2007/06/22/3403231.aspx http://technet.microsoft.com/hi-in/magazine/2006.12.journaling(en-us).aspx http://www.msexchange.org/tutorials/Exchange-Server-2007-Using-journaling-Rules.html Thanks

I have done the Get-JournalRule at Hub Transport server. It is seems empty, as well at exchange console. I have noticed the event log always log Event Id 1000 at specific time as mentioned. Is there anyway I can: 1) Get filter only journal mailbox from exchange shell. 2) Get the Journaling log, or track on the journaling?

Hello, Use the following commands in EMS: Get-JournalRule |FL Get-MailboxDatabase |FL *journal* Thanks, Simon

Hi, The result as below: Get-MailboxDatabase |FL *journal* JournalRecipient : JournalRecipient : JournalRecipient : JournalRecipient : JournalRecipient : JournalRecipient : JournalRecipient : JournalRecipient : JournalRecipient : JournalRecipient : JournalRecipient : JournalRecipient :

Hello, It seems there is no journaling settings on DB. Please use the ADSIEDIT tool to double confirm if there are any journaling rules on HUB: Thanks, Simon

There is no CN=JournalingVersioned in ADSIEDIT after check.