Applies to: Exchange Server 2007 SP3, Exchange Server 2007 SP2, Exchange Server 2007 SP1, Exchange Server 2007
Topic Last Modified: 2007-08-08

This topic explains how to use the Exchange Management Console or the Exchange Management Shell to create a new journal rule on a computer that has the Microsoft Exchange Server 2007 Hub Transport server role installed.

For more information about the Journaling agent, see Overview of Journaling.

Before You Begin

To perform the following procedures, the account you use must be delegated the following:

  • Exchange Organization Administrator role

For more information about permissions, delegating roles, and the rights that are required to administer Exchange Server 2007, see Permission Considerations.

Important:
These procedures describe how to configure premium journaling. To use premium journaling, you must have the Exchange Enterprise Client Access License (CAL). For more information, see Overview of Journaling.
Important:
There are important security and resource considerations when you configure the journaling mailbox that receives journal reports. For more information, see "Journaling Mailboxes" and "Protecting Journal Reports Sent Inside an Exchange Server 2007 Organization" in Overview of Journaling.
Important:
The Journaling agent must be enabled for journal rules to be applied to e-mail messages that enter and leave the Hub Transport server. If individual journal rules are enabled, but the Journaling agent is disabled, Exchange Server 2007 does not apply the journal rules. To determine whether the Journaling agent is enabled on a Hub Transport server, run the following command:

Get-TransportAgent

For more information about the Get-TransportAgent command, see Get-TransportAgent.

To enable the Journaling agent if it is not enabled, run the following command:

Enable-TransportAgent -Identity "Journaling agent"

For more information about the Enable-TransportAgent command, see Enable-TransportAgent.
Note:
When you create a new journal rule on a Hub Transport server, the new journal rule is replicated across the Exchange 2007 organization to all the Hub Transport servers.

Using the Exchange Management Console to Create a Journal Rule

In the Exchange Management Console, you can create new journal rules by following this procedure.

To use the Exchange Management Console to create a new journal rule

  1. Open the Exchange Management Console on the Hub Transport server.

  2. In the console tree, click Organization Configuration, and then click Hub Transport.

  3. In the result pane, click the Journaling tab, and then in the action pane, click New Journal Rule… .

  4. In the Rule name field, type the name of the journal rule.

  5. In the Send Journal reports to e-mail address field, click Browse. In the Select Recipient window, select the recipient that will receive the journal reports.

  6. Under Scope, select the scope to which the journal rule should be applied. The following scopes are available:

    • Global   Global rules process all e-mail messages that pass through a Hub Transport server. These include messages that may have already been processed by Internal rules and External rules.

    • Internal   Internal rules process e-mail messages that are sent and received by recipients in the Exchange 2007 organization.

    • External   External rules process e-mail messages that are sent to recipients or from senders outside the Exchange 2007 organization.

  7. If you want to target a specific recipient, in the Journal messages for Recipient text field, click Browse. In the Select Recipient window, select the mailbox, contact, or distribution group that you want to journal, and then click OK. All messages sent to or from this recipient are journaled.

  8. If you want the rule to be created in a disabled state, clear the Enable Rule check box. Otherwise, leave Enable Rule selected.

  9. Click New to create the new journal rule, and then click Finish.

Using the Exchange Management Shell to Create a Journal Rule

For all journal rules, you must specify a Name parameter and a JournalEmailAddress parameter. All other parameters are optional.

The JournalEmailAddress parameter specifies the secured e-mail mailbox to which journal reports are sent. The Recipient parameter specifies the SMTP address of the mailbox, contact, or distribution group that you want to journal. All messages sent to or from this recipient are journaled.

The Scope parameter specifies the e-mail messages to which the rule is applied. Valid values for this parameter are Global, Internal, and External. See "Using the Exchange Management Console to Create a Journal Rule" earlier in this topic for an explanation of these scopes.

You can create a new journal rule by using the following command syntax:

Copy Code 
New-JournalRule -Name <Journal Rule Name> -Recipient < Recipient SMTP address to be Journaled > -JournalEmailAddress < Journal Mailbox Recipient Object > -Scope <Internal | External | Global> -Enabled <$True | $False>

To use the Exchange Management Shell to journal messages that are sent to or from recipients on a specific distribution list and internal or external recipients or senders

  • Run the following command:

    Copy Code 
    New-JournalRule -Name "Discovery Journal Recipients" -Recipient discovery@contoso.com -JournalEmailAddress "Journal Mailbox" -Scope Global -Enabled $True

To use the Exchange Management Shell to create a disabled journal rule that is configured to journal messages that are sent to or from recipients on a specific distribution list and internal recipients or senders

  • Run the following command:

    Copy Code 
    New-JournalRule -Name "Discovery Journal Recipients" -Recipient discovery@contoso.com -JournalEmailAddress "Journal Mailbox" -Scope Internal -Enabled $False

If you don't enable a journal rule when you create it, you must enable the journal rule later for it to be applied to e-mail messages. To enable a journal rule, use the following command syntax:

Copy Code 
Enable-JournalRule <Journal Rule Name>

To use the Exchange Management Shell to enable a journal rule that was created in a disabled state

  • Run the following command:

    Copy Code 
    Enable-JournalRule "Discovery Journal Recipients"

For detailed syntax and parameter information, see New-JournalRule.