RE: IMF removal

  • From: Andrew English <andrew@xxxxxxxxxxxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Wed, 28 Dec 2005 13:40:03 -0500

No harm done Bob, but how many people do you think actually takes the time to 
read every single white page microsoft publishes; including deployment guide? I 
should have posted that I had found out the location by searching on google. I 
also found a better tool for reading the archived messages than the one Mark 


From: Bob Fronk
Sent: Wed 12/28/2005 1:03 PM
To: [ExchangeList]
Subject: [exchangelist] RE: IMF removal

Don't take this the wrong way but you might take a little time and read up on 
IMF and deployment.
Chapter 4 tells you where the archived messages are kept.
On the Intelligent Message Filtering tab, from the list in When blocking 
messages, select the action that you want Intelligent Message Filter to take 
when it assigns a message an SCL rating above the specified threshold. Choose 
from the following actions: 
.Archive to archive all messages marked as UCE with a rating above the 
specified threshold. Archived messages are saved to the archive directory. This 
directory is in the root directory of the Queue directory specified on the 
Messages tab of the SMTP virtual server properties. By default, the archive 
directory is Exchsrvr\Mailroot\vsi n\UCEArchive, where n is the SMTP virtual 
server instance number. By default, the \Exchsrvr directory is created in the 
<drive letter>:\Program Files parent directory. You can review messages in the 
archive directory by opening them in Notepad or using Microsoft Outlook 
Express. If you discover a legitimate e-mail message that has been archived, 
you can resubmit the message by placing it in the Exchsrvr\Mailroot\vsi 
n\pickup directory. The SMTP service will then deliver the e-mail message to 
the appropriate mailbox. 

Use IMF Companion to view the archived messages.  (Google for it)
Bob Fronk, MCSE

From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx] 
Sent: Wednesday, December 28, 2005 12:40 PM
To: [ExchangeList]
Subject: [exchangelist] RE: IMF removal
Were do the archives get placed on the server? Thanks
List Archives:
Exchange Newsletters: 
Visit for more information about our other sites:
You are currently subscribed to this Discussion List as: 
To unsubscribe visit
Report abuse to info@xxxxxxxxxxxxxx 

Other related posts: