Journaling is enabled on the database of the user mailboxes that you want to journal. To enable journaling, configure a journal recipient to store the journaled messages, and then set the msExchMessageJournalRecipient attribute of the mailbox store.

To set the msExchMessageJournalRecipient attribute, follow these steps:

1. Start the Active Directory Service Interfaces (ADSI) Edit tool. To do this, click Start, click Run, type adsiedit.msc, and then click OK.
   
   
2. Expand the following path under the Configuration container:
   
   
   • CN=Configuration [<domainController>.contoso.com]
     
     
   • CN=Services
     
     
   • CN=Microsoft Exchange
     
     
   • CN=<OrganizationName>
     
     
   • CN=Administrative Groups
     
     
   • CN=<AdministrativeGroupName>
     
     
   • CN=Servers
     
     
   • CN=<ServerName>
     
     
   • CN=InformationStore
     
     
   • CN=<StorageGroupName>
     
     
3. In the details pane, right-click CN=Mailbox Store (<ServerName>), and then click Properties.
   
   
4. On the Attribute Editor tab, click msExchMessageJournalRecipient in the Attributes list, and then click Edit.
   
   
5. In the Value box, type the distinguished name (DN) of the journal recipient mailbox that you want to use, and then click OK. For example, type CN=Journal User,OU=ServiceAccts,DC=contoso,DC=com.
   
   
6. Click OK to close the CN=Mailbox Store (<ServerName>) Properties dialog box, and then exit the ADSI Edit tool.
   
   

After you set this attribute, all messages sent to users and received from users on the store are journaled to the journal recipient that you specified. Depending on the type of journaling enabled, the journal recipient receives a copy of the original message or a journal report.

Note:
Because BCC journaling and message-only journaling are used less frequently, this topic focuses on envelope journaling.

Exchange 2007 SP1 includes a new flag for journaled messages. This is the MustDeliver flag. It appears as follows in the X-Headers.

This flag indicates that Exchange must not generate a non-delivery report (NDR) for a journal report. If the journal recipient mailbox is unavailable, or if some other issue prevents delivery of the journal report, the journal message remains in the submission queue in a retry state until Exchange can deliver the message or until an administrator removes the message manually.

Exchange 2003 creates the full journal report in the same store as that of the journal recipient mailbox. However, Exchange 2007 creates a fully-formed journal report in the transport component. This report is created when the journal agent is triggered on the server that is running the Hub Transport role.

Because of these differences, the following kinds of messages will not contain a journal report if a journal mailbox is put on an Exchange 2007 server:

• Messages that originate from an Exchange 2003 server
  
  
• Messages that have an Exchange 2003 server as the first point of entry from the Internet into an organization
  
  

In these cases, the journal mailbox will contain only a copy of the original message without a journal report, and the following information will be missing:

• BCC recipients
  
  
• Expanded distribution group membership
  
  
• Header data
  
  

Therefore, we recommend that you locate the journal mailbox on an Exchange 2003 server in a mixed mode organization.

Exchange 2007 indicates a journal report that is in transit by using the X-Microsoft-Exchange-ProcessedByJournaling organization X-Header. Exchange 2007 performs the following action to provide interoperability with Exchange 2003: When an Exchange 2007 Hub transport server determines that the next hop is an Exchange 2003 server, Exchange 2007 promotes the X-Header to an EXCH50 BLOB that Exchange 2003 servers can interpret.

Consider the following scenario that may occur when a journal message passes through two or more Hub Transport servers on the way to an Exchange 2003 journal mailbox.

• When Hub Transport Server A determines that the next hop is an Exchange 2007 Hub Transport server, Server A does not create an EXCH50 BLOB for the journal message.
  
  
• When the message arrives at Hub Transport Server B, Server B recognizes the X-Microsoft-Exchange-ProcessedByJournaling X-Header. Because the recipient list has not changed, the journal agent is not triggered and the message is passed on to the Exchange 2003 server.
  
  
• Because Exchange 2003 does not recognize the X-Microsoft-Exchange-ProcessedByJournaling X-Header, Exchange 2003 handles the e-mail message as a message that requires journaling.
  
  

In this scenario, a duplicate journal report is created.

To work around this issue, you can set the MailboxServersSubmissionOverrideList attribute on the mailbox server. To do this, configure the attribute to point to the Exchange 2007 bridgehead server that is on the routing group connector to the Exchange 2003 part of the organization.

Caution:

This change creates a single point of failure for the particular mailbox server. This is because the mailbox server does not fail over to another Hub Transport server if the original server becomes unavailable. Also, this workaround works only if a routing group connector exists in the same Active Directory site as Exchange 2003 the mailbox server. Therefore, we recommend that you do not use this workaround. Instead, we recommend that you configure your archival solution to handle the duplicate journal reports.

When an Exchange 2003 message is journaled, the P2 header is the same as the original sender of the message. This behavior has changed in Exchange 2007. In Exchange 2007, the P2 header of the journal report is set to "Microsoft Exchange on behalf of (the original sender)". Additionally, Microsoft Exchange is considered a privileged sender. This status lets it bypass size limits and connector restrictions. However, because the Exchange 2003 journal report originates from the original message sender, the report does not enjoy the same privileges as those enjoyed by an Exchange 2007 journal report.

When a journal message is sent from Exchange 2003 to Exchange 2007, the message undergoes content conversion from Summary Transport Neutral Encapsulation Format (S-TNEF) to TNEF format. TNEF is Base64-encoded. It creates a message that is 33 percent larger than the original message. This behavior occurs for the journal message and not for the original message.

If the newly-encoded journal message exceeds the organizational message size limits, the following behavior occurs:

• The message arrives on the Exchange 2007 server, and is immediately queued for delivery.
  
  
• Because the message exceeds the organizational message size limits, it is not delivered.
  
  
• Because the message is a journal message, it does not generate an NDR.
  
  
• The e-mail message remains in the submission queue until it is manually removed by an administrator.
  
  

  Note:
  This issue has been fixed in Exchange 2007 Update Rollup 7.

When a message originates from Exchange 2007 and is journaled to an Exchange 2003 mailbox, the original message that is attached to the journal message may be missing its P2 header information.

Because the headers are present in the journal report e-mail message, this issue may not be significant. Additionally, when you access the journaled message by using IMAP or POP3, the MIME headers are visible.

The following Exchange 2007 journaling white paper recommends that you restrict the journal mailbox to accept messages only from the privileged Microsoft Exchange sender:

White Paper: Exchange 2007 Transport Journaling

If you use this guidance in a mixed Exchange 2003 and Exchange 2007 organization, Exchange 2003 journal reports remain stuck in the submission queue. This behavior occurs because Exchange 2003 sets the P2 header of the journal report to be the same as that of the original sender.

Event ID 9213 may be logged from the MSExchangeTransport component. This event includes the following description.

This behavior occurs because Exchange 2007 SP1 adds the MUSTDELIVER property to a journal message.

When you use the Get-TransportConfig cmdlet to view the transport configuration object, the JournalingReportNDRTo property is set, as shown in the following example.

	Copy Code
Get-TransportConfig

When the JournalingReportNdrTo attribute is populated by a valid e-mail address, Exchange adds the address to the return-path of a journal message. This lets Exchange send the NDR together with the journal report attached to the SMTP address if the original journal mailbox is unavailable. In versions of Exchange that are earlier than Exchange 2007 SP1 Update Rollup 8, this feature does not work. In these earlier versions of Exchange, the message remains in the submission queue. To resolve this issue, install the latest Update Rollup package for Exchange 2007.

When the limit for anonymous named properties is reached on an Exchange 2003 journal server, the journal report does not have the original message attached. In this scenario, a paperclip icon is visible in Outlook. However, there is no attached message.

To work around this issue, you can raise the named properties quota limit. If you reach the new maximum limit for named properties, you must create a new database and then move the journal mailbox to the new database. For more information about how to raise the named properties limit, see How to Configure Named Properties and Replica Identifier Quotas for Exchange 2007 Databases.

To reduce the probability of named property depletion issues, install the latest service pack or update rollup package for Exchange 2007.

Exchange 2007 journaling can journal directly to a contact. However, this functionality may create issues that are caused by content conversion. If a message fails content conversion from S-TNEF to plain text or HTML, the journal report also remains in the submission queue.

To work around this issue, you can set the JournalingReportNDRTo property on the TransportConfig object. Or, if the archival product handles TNEF, you can force the contact to use MAPI Rich Text format (set the mAPIRecipient attribute to True) to bypass content conversion.

You can forward a copy of the journal report to an external SMTP address. To do this, follow these steps:

1. Create an Active Directory contact to represent the external SMTP address.
   
   
2. Add the contact to the journal mailbox. For an Exchange 2007 mailbox, view the mailbox Properties dialog box. Click the Mail Flow Settings tab, and then click Delivery Options.
   
   

   Note:
   If you use Outlook rules to forward journal messages, or if you modify properties in Active Directory for forward journal messages, the messages may remain in the submission queue.