Andrew, Don't take this the wrong way but you might take a little time and read up on IMF and deployment. http://www.microsoft.com/technet/prodtechnol/exchange/guides/IMFDeploy/5 5645ac9-28c2-4e63-a7b8-861f8ae6c052.mspx Chapter 4 tells you where the archived messages are kept. On the Intelligent Message Filtering tab, from the list in When blocking messages, select the action that you want Intelligent Message Filter to take when it assigns a message an SCL rating above the specified threshold. Choose from the following actions: * Archive to archive all messages marked as UCE with a rating above the specified threshold. Archived messages are saved to the archive directory. This directory is in the root directory of the Queue directory specified on the Messages tab of the SMTP virtual server properties. By default, the archive directory is Exchsrvr\Mailroot\vsi n\UCEArchive, where n is the SMTP virtual server instance number. By default, the \Exchsrvr directory is created in the <drive letter>:\Program Files parent directory. You can review messages in the archive directory by opening them in Notepad or using Microsoft Outlook Express. If you discover a legitimate e-mail message that has been archived, you can resubmit the message by placing it in the Exchsrvr\Mailroot\vsi n\pickup directory. The SMTP service will then deliver the e-mail message to the appropriate mailbox. Use IMF Companion to view the archived messages. (Google for it) Bob Fronk, MCSE bfronk@xxxxxxxxxxxxxxxx <http://www.davishelliot.com> ________________________________ From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx] Sent: Wednesday, December 28, 2005 12:40 PM To: [ExchangeList] Subject: [exchangelist] RE: IMF removal http://www.MSExchange.org/ Were do the archives get placed on the server? Thanks Regards, Andrew