Applies to: Exchange Server 2013, Exchange Online

Topic Last Modified: 2012-10-13

Journaling can help your organization respond to legal, regulatory, and organizational compliance requirements by recording inbound and outbound e-mail communications. This topic shows you how to perform basic tasks related to managing journaling in Exchange 2013.

Standard journaling is configured on a mailbox database. It enables the Journaling agent to journal all messages sent to and from mailboxes located on a specific mailbox database. You can also use premium journaling enables the Journaling agent to perform more granular journaling by using journal rules. Instead of journaling all mailboxes residing on a mailbox database, you can configure journal rules to match your organization's needs by journaling individual recipients or members of distribution groups. You must have an Exchange Enterprise client access license (CAL) to use premium journaling.

To learn more about journaling, see Journaling.

What do you need to know before you begin?

  • Estimated time to complete each procedure: 5 minutes.

  • You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "Journaling" entry in the Messaging Policy and Compliance Permissions topic.

  • A journaling mailbox has been created, or an existing mailbox is available for use as the journaling mailbox.

  • For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard Shortcuts in the Exchange Admin Center.

Tip:
Having problems? Ask for help in the Exchange forums. Visit the forums at: Exchange Server, Exchange Online, or Exchange Online Protection

What do you want to do?

Create a journal rule

Use the EAC to create a journal rule

  1. Navigate to Compliance management > Journal rules, and then click Add Add Icon.

  2. In Journal rule, provide a name for the journal rule and then compete the following fields:

    • If the message is sent to or received from   Specify the recipient that the rule will target. You can either select a specific recipient or apply the rule to all messages.

    • Journal the following messages   Specify the scope of the journal rule. You can journal only the internal messages, only the external messages, or all messages regardless of origin or destination.

    • Send journal reports to   Type the address of the journaling mailbox that will receive all the journal reports.

  3. Click Save to create the journal rule.

Use the Shell to create a journal rule

This example creates the journal rule Discovery Journal Recipients to journal all messages sent from and received by the recipient user1@contoso.com.

Copy Code
New-JournalRule -Name "Discovery Journal Recipients" -Recipient user1@contoso.com -JournalEmailAddress "Journal Mailbox" -Scope Global -Enabled $True

How do you know this worked?

To verify that you have successfully created the journal rule, do one of the following:

  • From the EAC, verify that the new journal rule you created is listed on the Journal rules tab.

  • From the Shell, verify that the new journal rule exists by running the following command (the example below verifies the rule created in the Shell example above):

    Copy Code
    Get-JournalRule "Discovery Journal Recipients"
    

View or modify a journal rule

Use the EAC to view or modify a journal rule

  1. Navigate to Compliance management > Journal rules.

  2. In the list view, you’ll see all the journal rules in your organization.

  3. Double-click the rule you want to view or modify.

  4. In Journal Rule, modify the settings you want. For more information about the settings in this dialog box, see the procedure Use the EAC to create a journal rule earlier in this topic.

Use the Shell to view or modify a journal rule

This example displays a summary list of all journal rules in the Exchange organization:

Copy Code
Get-JournalRule

This example retrieves the journal rule Brokerage Journal Rule, and pipes the output to the Format-List command to display rule properties in a list format:

Copy Code
Get-JournalRule "Brokerage Journal Rule" | Format-List

If you want to modify the properties of a specific rule, you need to use the Set-JournalRule cmdlet. This example changes the name of the journal rule JR-Sales to TraderVault. The following rule settings are also changed:

  • Recipient

  • JournalEmailAddress

  • Scope

Copy Code
Set-JournalRule JR-Sales -Name TraderVault -Recipient traders@woodgrovebank.com -JournalEmailAddress tradervault@woodgrovebank.com -Scope Internal

How do you know this worked?

To verify that you have successfully modified a journal rule, do one of the following:

  • From the EAC, navigate to Compliance management, > Journal rules. Double-click the rule you modified and verify your changes were saved.

  • From the Shell, verify that you modified the journal rule successfully by running the following command. This command will list the properties you modified along with the name of the rule (the example below verifies the rule modified in the Shell example above):

    Copy Code
    Get-TransportRule "TraderVault" | Format-List Name,Recipient,JournalEmailAddress,Scope
    

Enable or disable a journal rule

Important:
When you disable a journal rule, the journaling agent will stop journaling messages targeted by that rule. While a journal rule is disabled, any messages that would have normally been journaled by the rule aren’t journaled. Make sure that you don't compromise the regulatory or compliance requirements of your organization by disabling a journaling rule.

Use the EAC to enable or disable a journal rule

  1. Navigate to Compliance management > Journal rules.

  2. In the list view, in the On column next to the rule’s name, select the check box to enable the rule or clear it to disable the rule.

Use the Shell to enable or disable a journal rule

This example enables the rule Contoso.

Copy Code
Enable-JournalRule "Contoso Journal Rule"

This example disables the rule Contoso.

Copy Code
Disable-JournalRule "Contoso Journal Rule"

How do you know this worked?

To verify that you have successfully enabled or disabled a journal rule, do one of the following:

  • From the EAC, view the list of journal rules check the status of the check box in the On column.

  • From the Shell, run the following command to return a list of all journal rules in your organization along, including their status:

    Copy Code
    Get-JournalRule | Format-Table Name,Enabled
    

Remove a journal rule

Use the EAC to remove a journal rule

  1. Navigate to Compliance management > Journal rules.

  2. In the list view, select the rule you want to remove, and then click Delete Delete Icon.

Use the Shell to remove a journal rule

This example removes the rule Brokerage Journal Rule.

Copy Code
Remove-JournalRule "Brokerage Journal Rule"

How do you know this worked?

To verify that you have successfully removed the journal rule, do one of the following:

  • From the EAC, verify that the rule you removed is no longer listed on the Journal rules tab.

  • From the Shell, run the following command to verify that the rule you remove is no longer listed:

    Copy Code
    Get-JournalRule
    

Enable or disable per-mailbox database journaling

Caution:
Disabling message journaling on a mailbox database may result in your organization being out of compliance with any applicable messaging retention policies. When you disable message journaling on a mailbox database, journal receipts are no longer sent for messages sent or received by mailboxes on that mailbox database.

Use the EAC enable or disable per-mailbox database journaling

  1. Navigate to Servers > Databases.

  2. In the list view, double-click the mailbox database for which you want to enable journaling.

  3. Click Maintenance, and then click Browse next to the Journal recipient box to select the journaling mailbox. Specifying a journal recipient enables journaling for the database.

    To disable journaling, remove the journal recipient by clicking Remove X.

Use the Shell to enable or disable per-mailbox database journaling

This example enables journaling for the mailbox database Sales Database and sets Sales Database journal mailbox as the journal recipient.

Copy Code
Set-MailboxDatabase "Sales Database" -JournalRecipient "Sales Database Journal Mailbox"

This example disables per-mailbox database journaling on the Sales Database mailbox database.

Copy Code
Set-MailboxDatabase "Sales Database" -JournalRecipient $Null

This example disables per-mailbox database journaling on all mailbox databases in the Exchange organization. The Get-MailboxDatabase cmdlet is used to retrieve all mailbox databases in the Exchange organization, and results from the cmdlet are piped to the Set-MailboxDatabase cmdlet.

Copy Code
Get-MailboxDatabase | Set-MailboxDatabase -JournalRecipient $Null

How do you know this worked?

To verify that you have successfully enabled or disabled per-mailbox database journaling, do one of the following:

  1. From the EAC, navigate to Servers > Databases.

  2. Double click the database you want to verify, and then select the Maintenance tab.

  3. If the correct journaling recipient is listed in the Journal recipient box, you have successfully enabled journaling for the mailbox database. If there is no journaling recipient listed, journaling is disabled for the database.

  • From the Shell, run the following command to return a list of all mailbox databases in your organization, including the journal recipients associated with them. Journaling is enabled for databases that have a journal recipient listed, otherwise it’s disabled.

    Copy Code
    Get-MailboxDatabase | Format-Table Name,JournalRecipient
    

For more information