Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

[SDP 3][40ab9e58-5535-4839-abf5-98215467e1e5] Microsoft Exchange Server 2007 and Exchange Server 2010 Diagnostic


View products that this article applies to.

Summary

The Microsoft Exchange Server 2007 and Exchange Server 2010 Diagnostic collects comprehensive information for troubleshooting Exchange Server 2007 and Exchange Server 2010 issues.

↑ Back to the top


More information

This article describes information that may be collected from a computer that is running the Microsoft Exchange Server 2007 and Exchange Server 2010 Diagnostic.

Typically, the output file name contains a prefix. This prefix includes the name of the item for which the output was generated. For example, the prefix may contain the computer name, the cluster name, the storage group name, or the database name.

Information that is collected

Note In these tables, {prefix} is the name of the item for which the output was generated.

Exchange Server and organization baseline
DescriptionFile name
Get-ExchangeServer cmdlet output: AdminDisplayVersion and Roles of all Exchange servers together with exsetup.exe FileVersionInfo.ProductVersion from local system{prefix}_AllExchangeServers*.txt
Get-ExchangeCertificate cmdlet output{prefix}_ExchangeCertificate_FL.txt
Get-AcceptedDomain cmdlet output{prefix}_AcceptedDomain*.txt
Get-RemoteDomain cmdlet output{prefix}_RemoteDomain*.txt
Get-OrganizationConfig cmdlet output{prefix}_OrganizationConfig*.txt
Get-EmailAddressPolicy cmdlet output{prefix}_EmailAddressPolicy*.txt
Get-AvailabilityAddressSpace cmdlet output{prefix}_AvailabilityAddressSpace*.txt
Get-AvailabilityConfig cmdlet output{prefix}_AvailabilityConfig*.txt
Get-UserPrincipalNamesSuffix cmdlet output{prefix}_UserPrincipalNamesSuffix*.txt
Get-ThrottlingPolicy cmdlet output{prefix}_ThrottlingPolicy*.txt
Get-PowerShellVirtualDirectory cmdlet output{prefix}_PowerShellVirtualDirectory*.txt
Get-FederationTrust cmdlet output{prefix}_FederationTrust*.txt
Test-FederationTrustCertificate cmdlet output{prefix}_FederationTrustCertificate*.txt
Get-FederatedOrganizationIdentifier cmdlet output{prefix}_FederatedOrganizationIdentifier*.txt
Get-OrganizationRelationship cmdlet output{prefix}_OrganizationRelationship*.txt
Reg.exe query output for HKLM:SYSTEM\CurrentControlSet\Services registry keys and values where the key name contains *Exchange*{prefix}_REG_SERVICES_EXCHANGE.TXT
Reg.exe query output for HKLM:SOFTWARE\Microsoft registry keys and values where the key name contains *Exchange*{prefix}_REG_SOFTWARE_EXCHANGE.TXT
Reg.exe query output for HKLM:Software\Microsoft\MosTrace registry key and values if they are present.{prefix}_REG_MOSTRACE.TXT
Exchange Server toolbox
DescriptionFile name
Generate and collect output from Exchange Best Practices Analyzer health-check{prefix}_ExBPA.xml
Log from Exchange Best Practices Analyzer health-check{prefix}_ExBPA.xml.log
Collect Exchange Troubleshooting Assistant Trace Control output if present and newer than 14 daysExTRATrace.cab
Collect Exchange Performance Troubleshooting Assistant output if present and newer than 14 daysExPTAData.cab
Exchange Server Setup Information
DescriptionFile name
Copy of all files from %systemdrive%\ExchangeSetupLogs\* and subdirectories.ExchangeSetupLogs.zip
Copy of *.config files in the Exchange setup folder and subfolders. File names within .cab are prefixed with the subfolder name(s) where applicable.ExchangeConfigFiles.cab
Reg.exe query output for Windows Installer registry key and the children for the installed version of Exchange Server.{prefix}_REG_INSTALLER_EXCHANGE.TXT
Exchange Server IIS information
DescriptionFile name
Reg.exe query output for HKLM:\SYSTEM\CCS\Services\ IISAdmin, Inetinfo, W3SVC, msdtc, HKLM:SOFTWARE\Microsoft\Transaction Server, InetStp, InetMGR, and Keyring{prefix} _REG_IIS.TXT
Copy of metabase.xml{prefix}_metabase.xml
Copy of the two most recent IIS W3SVC logs for each website.{prefix}_W3SVC{websiteindex}LogFiles.cab
Exchange Client Access Server role
DescriptionFile name
Get-ClientAccessServer cmdlet output{prefix}_ClientAccessServer.txt
Get-PopSettings cmdlet output{prefix}_PopSettings.txt
Get-ImapSettings cmdlet output{prefix}_ImapSettings.txt
Get-ActiveSyncVirtualDirectory cmdlet output{prefix}_ActiveSyncVirtualDirectory.txt
Get-ActiveSyncMailboxPolicy cmdlet output{prefix}_ActiveSyncMailboxPolicy.txt
Get-OutlookAnywhere cmdlet output{prefix}_OutlookAnywhere.txt
Get-AutodiscoverVirtualDirectory cmdlet output{prefix}_AutodiscoverVirtualDirectory.txt
Get-OabVirtualDirectory cmdlet output{prefix}_OabVirtualDirectory.txt
Get-OwaVirtualDirectory cmdlet output{prefix}_OwaVirtualDirectory.txt
Get-WebServicesVirtualDirectory cmdlet output{prefix}_WebServicesVirtualDirectory.txt
Get-RPCClientAccess cmdlet output{prefix}_RPCClientAccess.txt
Get-EcpVirtualDirectory cmdlet output{prefix}_EcpVirtualDirectory.txt
Get-Childitem output for HKLM:SOFTWARE\Microsoft\Rpc\RpcProxy{prefix}_REG_RPCPROXY.TXT
Copy of the two most recent logs from Logging\RPC Client Access{prefix}_RPCClientAccessLogs.zip
Copy of the two most recent logs from Logging\Address Book Service{prefix}_AddressBookService.zip
ActiveSyncReport script output KB 2469722{prefix}_EASyncOutputReport*.csv
All Exchange Transport Server soles
DescriptionFile name
Get-TransportConfig cmdlet output{prefix}_TransportConfig.txt
Get-TransportServer cmdlet output{prefix}_TransportServer.txt
Get-ReceiveConnector cmdlet output{prefix}_ReceiveConnector.txt
Get-SendConnector cmdlet output{prefix}_SendConnector.txt
Get-TransportAgent cmdlet output{prefix}_TransportAgent.txt
Get-TransportPipeline cmdlet output{prefix}_TransportPipeline.txt
Get-EdgeSubscription cmdlet output{prefix}_EdgeSubscription.txt
Get-Queue cmdlet output{prefix}_Queue.txt
Get-EdgeSyncServiceConfig cmdlet output{prefix}_EdgeSyncServiceConfig.txt
Export-TransportRuleCollection cmdlet output{prefix}_ExportedTransportRules.xml
Export-TransportRuleCollection �ExportLegacyRules cmdlet{prefix}_ExportedLegacyTransportRules.xml
Copy of four newest routing*.xml logsExchangeRoutingLogs.cab
Copy of five newest Agent *.log logs{prefix}_Logs_Agent.cab
Get-ContentFilterConfig cmdlet output{prefix}_ContentFilterConfig.txt
Get-ContentFilterPhrase cmdlet output{prefix}_ContentFilterPhrase.txt
Get-IPBlockListConfig cmdlet output{prefix}_IPBlockListConfig.txt
Get-IPBlockListEntry cmdlet output{prefix}_IPBlockListEntry.txt
Get-IPBlockListProvidersConfig cmdlet output{prefix}_IPBlockListProvidersConfig.txt
Get-IPBlockListProvider cmdlet output{prefix}_IPBlockListProvider.txt
Get-IPAllowListConfig cmdlet output{prefix}_IPAllowListConfig.txt
Get-IPAllowListEntry cmdlet output{prefix}_IPAllowListEntry.txt
Get-IPAllowListProvidersConfig cmdlet output{prefix}_IPAllowListProvidersConfig.txt
Get-IPAllowListProvider cmdlet output{prefix}_IPAllowListProvider.txt
Get-SenderIdConfig cmdlet output{prefix}_SenderIdConfig.txt
Get-SenderReputationConfig cmdlet output{prefix}_SenderReputationConfig.txt
Get-SenderFilterConfig cmdlet output{prefix}_SenderFilterConfig.txt
Get-RecipientFilterConfig cmdlet output{prefix}_RecipientFilterConfig.txt
Get-AntispamUpdates cmdlet output{prefix}_AntispamUpdates.txt
Exchange Hub Transport Server role
DescriptionFile name
Get-ForeignConnector cmdlet output{prefix}_ForeignConnector.txt
Get-RoutingGroupConnector cmdlet output{prefix}_RoutingGroupConnector.txt
Get-JournalRule cmdlet output{prefix}_JournalRule.txt
Get-IRMConfiguration cmdlet output{prefix}_IRMConfiguration.txt
Exchange Edge Server role
DescriptionFile name
Get-AddressRewriteEntry cmdlet output{prefix}_AddressRewriteEntry.txt
Get-AttachmentFilterListConfig cmdlet output{prefix}_AttachmentFilterListConfig.txt
Get-AttachmentFilterEntry cmdlet output{prefix}_AttachmentFilterEntry.txt
Get-EdgeSyncServiceConfig cmdlet output{prefix}_EdgeSyncServiceConfig.txt
Exchange Mailbox Server role
DescriptionFile name
Get-MailboxServer cmdlet output{prefix}_MailboxServer*.txt
Get-ClusteredMailboxServerStatus cmdlet output{prefix}_ClusteredMailboxServerStatus*.txt
Get-MailboxDatabaseCopyStatus cmdlet output{prefix}_MailboxDatabaseCopyStatus*.txt
Get-StoreUsageStatistics cmdlet output{prefix}_StoreUsageStatistics*.txt
Get-DatabaseAvailabilityGroup cmdlet output{prefix}_DAG_{databaseavailabitlitygroupname}*.txt
Get-DatabaseAvailabilityGroupNetwork cmdlet output{prefix}_DAGNetworks*.txt
Get-StorageGroup cmdlet output{prefix}{SG}{storagegroupname}_*.txt
Inventory of files in LogFolderPath for each Storage Group{prefix}{SG}{storagegroupname}_LogFolderPath*.txt
Inventory of files in SystemFolderPath for each Storage Group{prefix}{SG}{storagegroupname}_SystemFolderPath*.txt
Get-MailboxDatabase cmdlet output{prefix}{SG}{storagegroupname}{DBMb}{mailboxdatabasename}_*.txt
Inventory of files in EDBFilePath for each Mailbox Database{prefix}{SG}{storagegroupname}{DBMb}{mailboxdatabasename}_EDBFilePath*.txt
Inventory of files in LogFolderPath for each Mailbox Database{prefix}{DBMb}{mailboxdatabasename}_LogFolderPath*.txt
Get-PublicFolderDatabase cmdlet output{prefix}{SG}{storagegroupname}{DBPf} {publicfolderdatabasename}_*.txt
Inventory of files in EDBFilePath for each Public Folder database{prefix}{SG}{storagegroupname}{DBPf}{publicfolderdatabasename}_EDBFilePath*.txt
Inventory of files in LogFolderPath for each Public Folder Database{prefix}{DBPf}{publicfolderdatabasename}_LogFolderPath*.txt
Inventory of Public Folders under \NON_IPM_SUBTREE path (system folders) for each Public Folder Database{prefix}{SG}{storagegroupname}{DBPf}{publicfolderdatabasename}_NON_IPM_SUBTREE*.txt
Inventory of files in LogFolderPath for each Public Folder Database{prefix}{DBMb}{publicfolderdatabasename}_LogFolderPath*.txt
Properties of the server InformationStore object from Active Directory{prefix}_InformationStore_ADSIProperties*.txt
Inventory of files, if any, in MSExchangeIS Working Directory{prefix}_MSExchangeIS_WorkingDirectory*.txt
Copy of function call log(s) from Exchange Logging directoryExchangeStoreFCL.cab
Exchange Unified Messaging Server role
DescriptionFile name
Get-UMServer cmdlet output{prefix}_UMServer.txt
Get-UMDialPlan cmdlet output{prefix}_UMDialPlan.txt
Get-UMIPGateway cmdlet output{prefix}_UMIPGateway.txt
Get-UMHuntGroup cmdlet output{prefix}_UMHuntGroup.txt
Get-UMMailboxPolicy cmdlet output{prefix}_UMMailboxPolicy.txt
Get-UMVirtualDirectory cmdlet output{prefix}_UMVirtualDirectory.txt
Get-UMAutoAttendant cmdlet output{prefix}_UMAutoAttendant.txt
Get-UMDialPlan, for each Diailplan, ConfiguredInCountryOrRegionGroups{prefix}_UMDialPlan_{DialPlanName}_CountryOrRegionGroups.txt
Get-UMDialPlan, for each Diailplan, DialPlanInternationalGroups{prefix}_UMDialPlan_{DialPlanName}_DialPlanInternationalGroups.txt
Get-UMAutoAttendant, for each UMAutoAttendant, BusinessHoursKeyMapping{prefix}_UMAutoAttendant_{UMAutoAttendantName}_BusinessHoursKeyMapping.txt
Get-UMAutoAttendant, for each UMAutoAttendant, AfterHoursKeyMapping{prefix}_UMAutoAttendant_{UMAutoAttendantName}_AfterHoursKeyMapping.txt
Get-UMServer cmdlet output{prefix}_UMServer.txt
Exchange Transporter Suite
DescriptionFile name
Get-DominoFreeBusyConnector cmdlet output{prefix}_DominoFreeBusyConnector.txt
Get-DominoDirectoryConnector cmdlet output{prefix}_DominoDirectoryConnector.txt
Copy of notes.ini file{prefix}_Notes.ini
Output if notes.ini file should exist but does not exist{prefix}_Missing_Notes.ini
Event logs
DescriptionFile name
Event log � Application � text, csv, and evtx formats{prefix}_evt_Application.*
Event log � System � text, csv, and evtx formats{prefix}_evt_System.*
Event logs � FailoverClustering* - text, csv, and evtx formats{prefix}_evt_FailoverClustering*.*
Event logs � Windows PowerShell � text, csv, and evtx formats{prefix}_evt_*PowerShell*.*
Event logs � Exchange* � text, csv, and evtx formats{prefix}_evt_*Exchange*.*
File version information
DescriptionFile name
File version information from Exchange\*.exe, *.dll{prefix}_sym_Exchange_EXE_DLL.*
File version information from %windir%\cluster\*.*{prefix}_sym_Cluster.*
File version information from %windir%\system32\inetsrv\*.exe, *.dll{prefix}_sym_InetSrv_EXE_DLL.*
File version information from %windir%\system32\drivers\*.*{prefix}_sym_Drivers.*
File version information from {Program Files}\Microsoft iSNS Server\*.* and %windir%\system32\iscsi*.*{prefix}_sym_MS_Iscsi.*
File version information from all drivers that are currently running on computer{prefix}_sym_RunningDrivers.*
File version information from all processes that are currently running on computer{prefix}_sym_Process.*
Registry keys and values
DescriptionFile name
HKLM\Software\Microsoft\Windows NT\CurrentVersion
HKLM\Software\Microsoft\Windows\CurrentVersion
{prefix}_reg_CurrentVersion.TXT
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall{prefix}_reg_Uninstall.TXT
HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions{prefix}_reg_ProductOptions.TXT
HKLM\System\MountedDevices{prefix}_reg_MountedDevices.*
HKLM\System\CurrentControlSet\Control\CrashControl
HKLM\System\CurrentControlSet\Control\Session Manager
HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management
HKLM\Software\Microsoft\Windows NT\CurrentVersion\AeDebug
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\Software\Microsoft\Windows\Windows Error Reporting
HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting
{prefix}_reg_Recovery.TXT
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\Runonce
HKCU\Software\Microsoft\Windows\CurrentVersion\RunonceEx
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKLM\ Software\Microsoft\Windows\CurrentVersion\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\Runonce
HKLM\Software\Microsoft\Windows\CurrentVersion\RunonceEx
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Load
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit
{prefix}_reg_Startup.TXT
HKLM\SYSTEM\CurrentControlSet\Control\Print{prefix}_reg_Print.hiv
HKCU\Software\Policies
HKLM\Software\Policies
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies
{prefix}_reg_Policies.txt
HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones
{prefix}_reg_TimeZone.txt
HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server Web Access
HKLM\SYSTEM\CurrentControlSet\Services\TermService
HKLM\SYSTEM\CurrentControlSet\Services\TermDD
{prefix}_reg_TermServices.txt
HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer
HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation
HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb
HKLM\SYSTEM\CurrentControlSet\Services\SMB
HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb10
HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb20
{prefix}_reg_SMB.txt
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters{prefix}_reg_TCPIPParameters
HKLM\SYSTEM\CurrentControlSet\Services\VSS{prefix}_reg_VSS.TXT
HKLM\SYSTEM\CurrentControlSet\Services\iScsiPrt
HKLM\SOFTWARE\Microsoft\iSCSI Target
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\iSCSI
{prefix}_reg_iSCSI.TXT
HKLM\System\CurrentControlSet\Control\MPDev
HKLM\System\CurrentControlSet\Control\iSCSIPrt
HKLM\System\CurrentControlSet\Services\MSiSCSI
HKLM\System\CurrentControlSet\Services\MSDsm
HKLM\System\CurrentControlSet\Services\MPIO
HKLM\System\CurrentControlSet\Control\Class\{4d36e97b-e325-11ce-bfc1-08002be10318}
HKLM\System\CurrentControlSet\Services\Tcpip
{prefix}_reg_Storage.TXT
HKLM\SYSTEM\CurrentControlSet\Enum{prefix}_reg_Enum.TXT
Networking information
DescriptionFile name
Output from the netdiag.exe utility{prefix}_netdiag.txt
TCP port usage by processes(prefix}_PortUsage.txt
Windows Firewall Configuration{prefix}_FirewallConfig.txt
Basic IP networking configuration information, such as Tcp/ip registry key, ipconfig, netstat, nbtstat, and netsh output{prefix}_TcpIp-Info.txt
Basic SMB information{prefix}_SMB-Info.txt
Netsh information for IPv4{prefix}_TCPIP-Netsh-IPv4.TXT
Netsh information for IPv6{prefix}_TCPIP-Netsh-IPv6.TXT
Netsh information for TCP global and chimney{prefix}_TCPIP-Netsh-TCP.TXT
Active Directory and policy information
DescriptionFile name
Resultant Set of Policy (RSoP) information through gpresult.exe{prefix}_GPResult.*
Security templates that are currently cached on the system{prefix}_AppliedSecTempl.txt
Domain and Forest functional level, local group membership information{prefix}_DSMisc.txt
FSMO role owner information through netdom{prefix}_netdomfsmo.txt
Output from DCDiag.exe diagnostic utility{prefix}_dcdiag.txt
Cluster information
DescriptionFile name
Cluster Group and Resource information{prefix}_ClusterProperties.txt
Cluster Shared Volume information{prefix}_CSVInfo.HTM
Files from %windir%\cluster\*chkdsk*{prefix}_*chkdsk*
Cluster log{prefix}_Cluster.log
Cluster resource dependency report{prefix}_DependencyReport.mht
Failover Cluster Validation Report{prefix}_ValidationReport.mht
File version information from %windir%\cluster\*.*{prefix}_sym_Cluster.*
HKLM\System\CurrentControlSet\Services\clusdisk{prefix}_Clusdisk.txt
HKLM\System\CurrentControlSet\Services\clussvc{prefix}_ClussvcRegistry.txt
HKLM\Cluster in .txt and .hiv formats{prefix}_ClusterRegistry.*
Hotfixes and updates
DescriptionFile name
Installed updates and hotfixes{prefix}_Hotfixes.*
Storage and disk information
DescriptionFile name
iSCSI related informationthat is generated by iscsicli.exe utility{prefix}_ISCSI*.txt
Fibre Channel Information through FCInfo.exe utility{prefix}_FCInfo.txt
Volume Shadow Copy Service (VSS) information{prefix}_VSSAdmin.txt
Other
DescriptionFile name
System information output through msinfo32.exe{prefix}_msinfo32.nfo, .txt
System information (MSInfo32 equivalent) collected through WMIDiagnostic_Results.html
Copy of ServerManager.log from Windows\Logs folder{prefix}_ServerManager.log
Installed Roles and Features through servermanagercmd{prefix}_ServerManagerCmdQuery.*
Environment variables{prefix}_EnvironmentVariables.txt
Process and threads information through pstat.exe{prefix}_PSTAT.txt
Boot Configuration Data information{prefix}_BCDEdit.TXT, -Backup.bkp
Report of all tasks that are scheduled on the local computer{prefix}_schtasks.*
Basic information about hardware virtualization{prefix}_Virtualization.*


Additionally, the Microsoft Exchange Server 2007 and Exchange Server 2010 Diagnostic detects one or more of the following situations:
  • Third-party filter drivers
  • Exchange Server Service Pack (SP), Interim Update (IU), and Update Rollup (RU) versions
  • Windows PowerShell Profile Customization
  • Missing Applicationhost.config entries that are required
  • Exchange store.exe RPC optimizations
  • Expired SSL certificates
  • ActiveSyncReport script output (KB 2469722))
  • Windows Server roles and role services information
  • Presence of computer memory dumps in the past 30 days
  • Presence of user mode memory dumps in the past 30 days
  • Configuration or services that could prevent a memory dump file from being generated
  • Processes that have many handles
  • Low available memory condition

↑ Back to the top


References

For more information about Microsoft Automated Troubleshooting Services (MATS) and Support Diagnostic Platform (SDP), click the following article number to view the article in the Microsoft Knowledge Base:
2598970 Information about the Microsoft Automated Troubleshooting Services and Support Diagnostic Platform

↑ Back to the top


Keywords: KB2173280, kbtshoot, kbsurveynew

↑ Back to the top

Article Info
Article ID : 2173280
Revision : 11
Created on : 6/19/2012
Published on : 6/19/2012
Exists online : False
Views : 495