Google
Search WWW Search msexchangetips.blogspot.com

Thursday, August 31, 2006

Exchange: How To View All Registered Event Sinks

Summary:

In this article, I will go over how to view all registered event sinks within Exchange. Event sinks are basically a sub-routine that is fired at specific points in the message flow such as during transport. Most event sinks fire just before the message categorizer and right after. However, there are also sinks that run during message transfer. Many Exchange aware AV products register event sinks within Exchange. For example, before a message is sent to the categorizer, it is sent to the pre-submission queue where it is scanned for viruses or verified against the GAL. Other types of event sinks could be email disclaimers that are attached to say all outbound e-email or custom sinks that are fired based on rules you specify.

There may come a time where you need to view all registered event sinks. For example, you may have inherited an Exchange Server and which a previous admin may have registered custom event sinks that you are unaware of. In other circumstances, I've seen where products specifically AV software, in which the application was removed but the event sink was still registered and caused mail flow issues in which messages were stuck in the pre-submission queued.

To view all registered event sinks, follow the procedure below:

1. You need to download the smtpreg.vbs which you can get from the link below. I have heard that this file is also included in the Exchange SDK, but did not appear to be when I installed the SDK. You can also download the smtpreg.vbs from:

ftp://ftp.smtp25.org/Scripts/

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/smtpevt/html/6b7a017e-981e-45a1-8690-17ff26682bc7.asp


1. Once you have the smtpreg.vbs file, copy it to the root of your C:
2. Open command prompt, start run, cmd.

3. Type the following: C:\cscript smtpreg.vbs /enum

To pipe to a text file to easy viewing type:

C:\cscript smtpreg.vbs /enum > c:\file.txt

4. To remove the event sink. Go to your command prompt.

C:\cscript smtpreg.vbs /remove 1 sinkclass sinkname

1 = SMTP Virtual Service


Note: Sometimes duplicate sinks are registered. In this event, you will need to run this more than once. Re-run step 3 and verify the sink has been removed.


Another Method to view all event sinks is to download the Exchange SDK and launch Exchange Explorer.

Exchange SDK
http://www.microsoft.com/downloads/details.aspx?FamilyId=4AFE3504-C209-4A73-AC5D-FF2A4A3B48B7&displaylang=en


James Chong
MCSE M+, S+, MCTS, Security+
msexchangetips.blogspot.com


How useful was this article? Want to see a tip not listed? Please leave a comment.

4 Comments:

Blogger northben said...

Very helpful. Kudos!

9:06 AM  
Blogger longge said...

Still today, replica handbags is recognized for its high quality purse. At the factory level, if a purse does not meet the replica louis vuitton standards it is destroyed. replica handbags has been in business for an amazing 3 centuries and replica bags continues to be fore front in the hand bag industry.

6:43 PM  
Blogger Vinisha said...

My cousin recommended this blog and she was totally right keep up the fantastic work!

Sinks

2:45 AM  
Blogger Simple Luxury said...

Burberry Outlet Store Online
Handbags Outlet Store Online


www.burberry-outlets.org
www.prada-outlet.org

9:12 AM  

Post a Comment

<< Home

xml:lang="en" lang="en"> MS Exchange Tips: Exchange: How To View All Registered Event Sinks