Topic Last Modified: 2010-02-15

The Microsoft Exchange Server 2010 Management Pack for System Center Operations Manager monitors the Windows Application log on computers running Exchange 2010 and generates this alert when the events specified in the following Details table are logged.

To learn more about this alert, in Operations Manager, do one or more of the following:

Details

Product Name

Exchange

Product Version

14.0 (Exchange 2010)

Event ID

7009

Event Source

MSExchangeTransportLogSearch

Alert Type

Warning

Rule Path

Microsoft Exchange Server/Exchange 2010/Common Components/Hub Transport and Edge Transport/Transport Log Search

Rule Name

The Microsoft Exchange Transport Log Search service failed to access a log file due to insufficient access permissions.

Explanation

This Warning event indicates that the Microsoft Exchange Transport Log Search service can't access the specified directory because of insufficient permissions.

The Microsoft Exchange Transport Log Search service is used by the Get-MessageTrackingLog and Search-MessageTrackingReport cmdlets in the Exchange Management Shell, the Delivery Reports tool in the Exchange Control Panel, and the Tracking Log Explorer tool in the Exchange Management Console to search the message tracking logs on the Hub Transport server, Edge Transport server, or Mailbox server.

The location of the message tracking logs is controlled by the MessageTrackingLogPath parameter on the Set-TransportServer cmdlet or the Set-MailboxServer cmdlet. By default, the message tracking logs are located at C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\MessageTracking.

By default, the following permissions are assigned to the message tracking log directory:

  • Administrators: Full Control

  • System: Full Control

  • Network Service:

    • Modify

    • Special Permissions: Delete Subfolders and Files

User Action

To resolve this warning, set the following permissions at the location that is specified by the MessageTrackingLogPath parameter on the Set-TransportServer cmdlet or the Set-MailboxServer cmdlet:

  • Administrators: Full Control

  • System: Full Control

  • Network Service:

    • Modify

    • Special Permissions: Delete Subfolders and Files

For more information, see Configure Message Tracking.

For More Information

If you are not already doing so, consider running the Exchange tools created to help you analyze and troubleshoot your Exchange environment. These tools can help make sure that your configuration aligns with Microsoft best practices. They can also help you identify and resolve performance issues, improve mail flow, and better manage disaster recovery scenarios. To run these tools, go to the Toolbox node of the Exchange Management Console. To learn more about these tools, see Managing Tools in the Toolbox.