No harm done Bob, but how many people do you think actually takes the time to read every single white page microsoft publishes; including deployment guide? I should have posted that I had found out the location by searching on google. I also found a better tool for reading the archived messages than the one Mark posted. Regards, Andrew From: Bob Fronk Sent: Wed 12/28/2005 1:03 PM To: [ExchangeList] Subject: [exchangelist] RE: IMF removal http://www.MSExchange.org/ Andrew, Don't take this the wrong way but you might take a little time and read up on IMF and deployment. http://www.microsoft.com/technet/prodtechnol/exchange/guides/IMFDeploy/55645ac9-28c2-4e63-a7b8-861f8ae6c052.mspx Chapter 4 tells you where the archived messages are kept. On the Intelligent Message Filtering tab, from the list in When blocking messages, select the action that you want Intelligent Message Filter to take when it assigns a message an SCL rating above the specified threshold. Choose from the following actions: .Archive to archive all messages marked as UCE with a rating above the specified threshold. Archived messages are saved to the archive directory. This directory is in the root directory of the Queue directory specified on the Messages tab of the SMTP virtual server properties. By default, the archive directory is Exchsrvr\Mailroot\vsi n\UCEArchive, where n is the SMTP virtual server instance number. By default, the \Exchsrvr directory is created in the <drive letter>:\Program Files parent directory. You can review messages in the archive directory by opening them in Notepad or using Microsoft Outlook Express. If you discover a legitimate e-mail message that has been archived, you can resubmit the message by placing it in the Exchsrvr\Mailroot\vsi n\pickup directory. The SMTP service will then deliver the e-mail message to the appropriate mailbox. Use IMF Companion to view the archived messages. (Google for it) Bob Fronk, MCSE bfronk@xxxxxxxxxxxxxxxx From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx] Sent: Wednesday, December 28, 2005 12:40 PM To: [ExchangeList] Subject: [exchangelist] RE: IMF removal http://www.MSExchange.org/ Were do the archives get placed on the server? Thanks Regards, Andrew ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: andrew@xxxxxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report abuse to info@xxxxxxxxxxxxxx