This discover rule discovers the MAPI logon monitoring component on an Exchange 2003 Backend server
This discovery rule discovers the Exchange 2003 MAPI Component on an Exchange Backend Server.
There is no configuration required. To disable local Exchange 2003 Server role discovery disable (override) the rule “Exchange 2003 Server Initial Discovery”.
MAPI Logon monitors via synthetic transactions requires configuration performed by the “Exchange Management Pack Configuration Wizard”.
Target | Microsoft.Exchange.ServerRole.2003 |
Enabled | True |
Frequency | 3600 |
Remotable | False |
Discovered Classes and their attribuets: |
---|
ID | Module Type | TypeId | RunAs |
---|---|---|---|
DiscoveryDataSource | DataSource | Microsoft.Windows.FilteredRegistryDiscoveryProvider | Default |
<Discovery ID="Microsoft.Exchange.SyntheticTransaction.MAPILogon.Discovery" Enabled="onEssentialMonitoring" Target="Microsoft.Exchange.ServerRole.2003" ConfirmDelivery="false" Remotable="true" Priority="Normal">
<Category>Discovery</Category>
<DiscoveryTypes>
<DiscoveryClass TypeID="Microsoft.Exchange.SyntheticTransaction.MAPILogon"/>
</DiscoveryTypes>
<DataSource ID="DiscoveryDataSource" TypeID="Windows!Microsoft.Windows.FilteredRegistryDiscoveryProvider">
<ComputerName>\\$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<RegistryAttributeDefinitions>
<RegistryAttributeDefinition>
<AttributeName>MS_ExchangeIS_START</AttributeName>
<Path>SYSTEM\CurrentControlSet\Services\MSExchangeIS\Start</Path>
<PathType>1</PathType>
<AttributeType>2</AttributeType>
</RegistryAttributeDefinition>
</RegistryAttributeDefinitions>
<Frequency>3600</Frequency>
<ClassId>$MPElement[Name="Microsoft.Exchange.SyntheticTransaction.MAPILogon"]$</ClassId>
<InstanceSettings>
<Settings>
<Setting>
<Name>$MPElement[Name="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Name>
<Value>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>
</Setting>
<Setting>
<Name>$MPElement[Name="Microsoft.Exchange.ServerRole.2003"]/DistinguishedName$</Name>
<Value>$Target/Property[Type="Microsoft.Exchange.ServerRole.2003"]/DistinguishedName$</Value>
</Setting>
<Setting>
<Name>$MPElement[Name="System!System.Entity"]/DisplayName$</Name>
<Value>MAPI Logon</Value>
</Setting>
</Settings>
</InstanceSettings>
<Expression>
<SimpleExpression>
<ValueExpression>
<Value>$Target/Property[Type="Microsoft.Exchange.ServerRole.2003"]/IsFrontEnd$</Value>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>False</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</DataSource>
</Discovery>