Home
  •  

Exchange 2003 MAPI Discovery

Microsoft.Exchange.SyntheticTransaction.MAPILogon.Discovery (Discovery)

This discover rule discovers the MAPI logon monitoring component on an Exchange 2003 Backend server

Knowledge Base article:

Summary

This discovery rule discovers the Exchange 2003 MAPI Component on an Exchange Backend Server.

Configuration

There is no configuration required. To disable local Exchange 2003 Server role discovery disable (override) the rule “Exchange 2003 Server Initial Discovery”.

MAPI Logon monitors via synthetic transactions requires configuration performed by the “Exchange Management Pack Configuration Wizard”.

Element properties:

TargetMicrosoft.Exchange.ServerRole.2003
EnabledTrue
Frequency3600
RemotableFalse

Object Discovery Details:

Discovered Classes and their attribuets:

Member Modules:

ID Module Type TypeId RunAs 
DiscoveryDataSource DataSource Microsoft.Windows.FilteredRegistryDiscoveryProvider Default

Source Code:

<Discovery ID="Microsoft.Exchange.SyntheticTransaction.MAPILogon.Discovery" Enabled="onEssentialMonitoring" Target="Microsoft.Exchange.ServerRole.2003" ConfirmDelivery="false" Remotable="true" Priority="Normal">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="Microsoft.Exchange.SyntheticTransaction.MAPILogon"/>

  </DiscoveryTypes>

  <DataSource ID="DiscoveryDataSource" TypeID="Windows!Microsoft.Windows.FilteredRegistryDiscoveryProvider">

    <ComputerName>\\$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <RegistryAttributeDefinitions>

      <RegistryAttributeDefinition>

        <AttributeName>MS_ExchangeIS_START</AttributeName>

        <Path>SYSTEM\CurrentControlSet\Services\MSExchangeIS\Start</Path>

        <PathType>1</PathType>

        <AttributeType>2</AttributeType>

      </RegistryAttributeDefinition>

    </RegistryAttributeDefinitions>

    <Frequency>3600</Frequency>

    <ClassId>$MPElement[Name="Microsoft.Exchange.SyntheticTransaction.MAPILogon"]$</ClassId>

    <InstanceSettings>

      <Settings>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Name>

          <Value>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="Microsoft.Exchange.ServerRole.2003"]/DistinguishedName$</Name>

          <Value>$Target/Property[Type="Microsoft.Exchange.ServerRole.2003"]/DistinguishedName$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="System!System.Entity"]/DisplayName$</Name>

          <Value>MAPI Logon</Value>

        </Setting>

      </Settings>

    </InstanceSettings>

    <Expression>

      <SimpleExpression>

        <ValueExpression>

          <Value>$Target/Property[Type="Microsoft.Exchange.ServerRole.2003"]/IsFrontEnd$</Value>

        </ValueExpression>

        <Operator>Equal</Operator>

        <ValueExpression>

          <Value>False</Value>

        </ValueExpression>

      </SimpleExpression>

    </Expression>

  </DataSource>

</Discovery>