Hi Have been recommended Exmon by quite a few people on here. :) Been looking at it and it seems a great tool for our Exchange 2007 SP2 environment. Two questions: 1. Have been reading about Exmon (e.g. http://www.petri.co.il/using_ms_exmon.htm) and apparently there are two reg key changes required for installation. Does anyone know if this is required for Exchange 2007 SP2 (looking at downloading version 14.00.0611.003) 2. I see one of the filters is "Client IP address". I guess this is fine for Outlook clients that connect straight to the Mailbox server, but what about OWA clients that connect via load balanced CAS's? Is the Client IP address shown in Exmon that of the CAS server that the client is connecting from or the actual PC? 3. What are the recommended settings (filter, Update Interval etc) that people here use to troubleshoot problems with?

Neil 1. I believe you have to install the two registry settings for the tool to work fine. 2. Basically the Client IP addresses gives the MAPI connections from different clients. Client IP Addresses : A list of all distinct IP addresses that are used by MAPI clients. 3. If you need to collect the settings at different intervals then i suggest you to run the tool from System monitor and schedule the same to run for every one hour or when ever the load on the server is high. Refer the link to get an overview : http://technet.microsoft.com/en-us/library/bb508855(EXCHG.65).aspx Hope this is useful. Thanks Sumanth Sumanth G

Hi Neil, Based on my experience, Exchange Team have updated the download link to the Exmon tool which now also works on Exchange 2007 as well as Exchange 2010. please refer to these documents: Introducing the Microsft Exchange User Monitor (Exmon) tool http://msexchangeteam.com/archive/2005/04/06/403409.aspx Exmon for Exchange 2007 SP1? Check! http://msexchangeteam.com/archive/2009/04/22/451137.aspx 2. "Client IP address" a list of all distinct IP address that are used by MAPI clients. (Note: The IP addresses that are listed in this column are the IP address after any proxy servers or network address translation. They might not be the MAPI client's actual IP address. ) 3. For this question, please refer to this document: Microsoft Exchange Server User Monitor http://technet.microsoft.com/en-us/library/bb508855(EXCHG.65).aspx Best Regards, Evan Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Thanks both for your input. A couple of follow up questions - 1. Client IP Address : So if someone is accessing their mailbox via OWA as below, what would be the Client IP address shown in Exmon? HTTP Browser on Client (192.168.1.1) > Cisco Load Balancer (192.168.1.2) > CAS Server #3 (192.168.1.10) > Exchange mailbox server 2. I notice the Interval time can be varied, let's take an example of 10 minutes. Are the values given for Packets, Operations etc an average over that 10 minute period or the total within that 10 minute period? 3. What is the best value to use if I am trying to check for clients who are generating excess transaction logs? 4. What is the best value to use if I am trying to check for clients who are using excess database storage? 5. How can I view and save Exmon at the same time?

Hi Neil, 1. The Client IP Addresses is a list of distinct IP addresses that are used by MAPI clients. So when you use OWA, it cannot get any IP address. 2. The Interval time is the total within that 10 minute period. 3. This tool cannot give you’re the best value to check for clients who are generating excess transaction logs and the clients who are using excess database storage. But the “Bytes In”, “Bytes Out” and “log size” may give you some help on this issue. 4. You can save the data choose to save the data under File, it will save the data as . csv file. Thanks, Evan Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi there > But the “Bytes In”, “Bytes Out” and “log size” may give you some help on this issue. I can't see "Log size", where is that kept and what does it refer to? Thanks again!

Hi Neil, Sorry for my explanation. Under "By User", the phrase "log size" should be "Log Bytes". Sorry again. Best Regards, EvanPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.