Exchange 2007 Services and Function Part 2 (A Little More)

In My Previous Blog i tried putting up Exchange Functions with the related executables. In this blog you will see more description on Exchange 2007 Services which are responsible for Client Access Server, Hub Transport Server, Mailbox Server, Edge Server and Unified Messaging. This article is purely published on the basis of event triggered from my virtual lab. Event ID's whatever you see in your production environment may vary compare to this however the function of each service will remain the same.

1) Microsoft Exchange Active Directory Topology:
This service is responsible to provide the information of Active Directory Information to Exchange Server Components. This service need to be started on the client Access Server, Hub Transport Server, Mailbox Server and Unified Messaging Server. It doesn’t depend on dependencies in order to start. However there are some other Exchange Services which are dependent on this service. 

List of Services which are dependent on this service: -

-Microsoft Exchange Transport Log Search
-Microsoft Exchange Transport
-Microsoft Exchange Service Host
-Microsoft Exchange Search Indexer
-Microsoft Exchange Replication Service
-Microsoft Exchange Mail Submission
-Microsoft Exchange Mailbox Assistants
-Microsoft Exchange File Distribution
-Microsoft Exchange EdgeSync
-Microsoft Exchange Anti-spam Update

Who is responsible to execute this service : "MSExchangeADTopologyService.exe"
Path from where it is executed :
"C:\Program Files\Microsoft\Exchange Server\Bin\MSExchangeADTopologyService.exe"

Functions:
-It will help the Exchange Server component to get the list of domain controllers, global catalogs server & Configuration Domain Controllers which needs to be used.
-It will help the Exchange Server Component to discover the following server like the server name, their roles, reachability, synchronize status, GC capable, PDC, SACL Rights, Net-logon etc which are in the site and the servers which are out of site.
Related Event ID's : 2080 & 2081

2) Microsoft Exchange Monitoring: This service is installed on Exchange Server Role as part of installation. This service is optional and set to manual. This service will not depend on any other service.

Who is responsible to execute this service : “Microsoft.Exchange.Monitoring.exe"Path from where it is executed :
"C:\Program Files\Microsoft\Exchange Server\Bin\Microsoft.Exchange.Monitoring.exe"

Functions:-Provides a remote procedure call (RPC) server that can be used to invoke diagnostic cmdlets. This service does not have any dependencies.
Related Event ID : 700 & 701

3) Microsoft Exchange File Distribution Service : This service is responsible for distribution offline address book and custom unified messaging prompts. This is a required service for client Access Server & Unified Messaging Server. It is dependent on Workstation & Microsoft Exchange Active Directory Topology Service.

Who is responsible to execute this service: MSExchangeFDS.exe
Path from where it is executed:
"C:\Program Files\Microsoft\Exchange Server\Bin\MSExchangeFDS.exe"

Functions:-This will help the client access server to give the synchronization status of OAB like it will give the details OAB is synchronized successfully or not. And the name of the OAB.
Related Event ID: 1008

4) Microsoft Exchange IMAP4: This service will get installed on Client Access Server Role. It is an optional which is set to manual. Service name for this service is MsExchangeIMAP4. This service is dependent on Microsoft Exchange Active Directory Service.

Who is responsible for this service: "Microsoft.Exchange.Imap4Service.exe"
Path from where it is executed :
"C:\ProgramFiles\Microsoft\ExchangeServer\ClientAccess\PopImap\Microsoft.Exchange.Imap4Service.exe"

Functions: -It provides the IMAP4 access to IMAP4 Client.
Related Events:-
Event ID: 2080 (First this service will information about GC DC, synchronize status, PDC, SACL Rights etc from Microsoft Exchange Active Directory Topology
Event ID: 1000 (This will provide the status of IMAP4 service whether it is getting start)
Event ID: 1001 (Final status of the IMAP4 Service)

5) Microsoft Exchange POP3: This service will get installed on Client Access Server Role. It is an optional which is set to manual. Service name for this service is MsExchangePOP3. This service is dependent on Microsoft Exchange Active Directory Service.

Who is responsible for this service: "Microsoft.Exchange.Pop3Service.exe"Path from where it is executed:
"C:\ProgramFiles\Microsoft\ExchangeServer\ClientAccess\PopImap\Microsoft.Exchange.Pop3Service.exe"

Functions:
-It provides the POP3 access to POP3 Client.
Related Events:-
Event ID: 1000 (This will provide the status of POP3 service whether it is getting start)
Event ID: 1001 (Final status of the POP3 Service)

6) Microsoft Exchange Service Host: This service will get installed on Client Access Server & Mailbox Server. It is a required service which needs to be started and running all the time. This service is dependent upon “Microsoft Exchange Active Directory Topology Service”.

Who is responsible for this service : "Microsoft.Exchange.ServiceHost.exe"Path from where it is executed :
"C:\Program Files\Microsoft\Exchange Server\bin\Microsoft.Exchange.ServiceHost.exe"

Functions:-This service will get the information about GC, DC and synchronization & online status of the AD Servers from Microsoft Exchange Active Directory Service
-It will initially check the server role which is installed on the server where it is running like if you have installed MBX, CAS & HUB on the same server it will give the status of all the server role and if you have just installed CAS it will give only CAS Server role installed information.
-If it is just a cas server role then it will load RPC over https autoconfig dll
i.e Microsoft.Exchange.RPCOverHTTPAutoconfig.dll and for Mailbox Server: Microsoft.Exchange.SystemAttendantMailboxServicelet.dll
Related Event ID's : 2080, 2003, 2014, 2016, 2018, 2001 & 2004

7) Microsoft Exchange Edge Sync :
This service is installed on the Hub Server. It is a required service which needs to be started and running all the time. It is dependent upon “Microsoft Exchange Active Directory Topology Service”.

Who is responsible for this service : " Microsoft.Exchange.EdgeSyncSvc.exe"Path from where it is executed :
"C:\Program Files\Microsoft\Exchange Server\Bin\Microsoft.Exchange.EdgeSyncSvc.exe"

Functions:-This service will help the hub server to get synchronized with Edge Server by connecting to ADAM instance on the Edge Server through LDAP.
Related Event ID : 1059

8) Microsoft Exchange Anti-spam Update:
This service is installed on Hub Server & Edge Server. It is an optional service. In Hub Server, this service is dependent on “Microsoft Exchange Active Directory Topology Service” and in Edge Server, this service is dependent on “Microsoft Exchange ADAM".

Who is responsible for this service: "Microsoft.Exchange.AntispamUpdateSvc.exe"Path from where it is executed:
"C:\Program Files\Microsoft\Exchange Server\Bin\Microsoft.Exchange.AntispamUpdateSvc.exe"

Functions:-It is used to automatically download anti-spam filter updates from Microsoft Updates.
-Before it initialize the service it will contact the AD topology service for getting the information of AD Servers if it is a hub server and if it is edge server it will contact ADAM for getting the access information.
Related Event ID : 1000

9) Microsoft Exchange Transport : This service is installed on Hub Transport Server and Edge Transport Server. This service is dependent on “Microsoft Exchange Active Directory Topology Service” for Hub Server & In Edge Server “Microsoft Exchange ADAM.

Who is responsible for this service : "MSExchangeTransport.exe"Path from where it is executed :
"C:\Program Files\Microsoft\Exchange Server\Bin\MSExchangeTransport.exe"

Functions:-It is responsible for mailflow.
-It will give the SMTP Server information and transport stack.
-This will even load the transport rule collection, configuration update for transport, content filter in another word Filtering components.
Related Event ID's : 1000, 102, 16022, 4002, 7004, 1001, 2000, 300, 301, 302 & 17010

10) Microsoft Exchange Transport Log Search :
 This service is installed on the Hub Server, Edge Server and Mailbox Server Role. This is an optional service set to manual only on Edge Server. This service is dependent on “Microsoft Exchange Active Directory Topology Service” on Mailbox and Hub Server. For Edge Server it is dependent on “Microsoft Exchange ADAM”

Who is responsible to start this service : "MSExchangeTransportLogSearch.exe"Path from where it is executed :
"C:\Program Files\Microsoft\Exchange Server\Bin\MSExchangeTransportLogSearch.exe"

Functions:-Message Tracking logs are generated.
-Transport logs searching.
Related Event ID's : 7001 & 7002

11) Microsoft Exchange Information Store : This service is installed on Mailbox Server Role. It is a required service which needs to be running all the time. It is dependent upon eventlog, NT LM Security Support Provider, RPC, Server & Workstation.

Who is responsible for this service : "store.exe"Path from where it is executed :
"C:\Program Files\Microsoft\Exchange Server\bin\store.exe"

Functions:-It is main core for Mailbox server, it manage the exchange server database
-It is responsible to initialize OLEDB
    o The Microsoft OLE DB Provider for Exchange exposes data stored in a Microsoft Exchange Web Store in tabular form. This data can be queried using an SQL-like language that is similar to the SQL subset supported by the OLE DB Provider for Microsoft Indexing Service
-It is responsible to initialize calendaring agent
-It is responsible to  mount the database

12) Microsoft Exchange Mail Submission Service : This service is installed on Mailbox Server Role. It is a required service which needs to be running all the time. It is dependent upon “Microsoft Exchange Active Directory Service”

Who is responsible for this service: “MSExchangeMailSubmission.exe"Path from where it is executed :
"C:\Program Files\Microsoft\Exchange Server\Bin\MSExchangeMailSubmission.exe"

Functions:-When the message is sent by users, the mail will first move to outbox folder in outlook and then move to sent items, that means it is delivering the message. This is the service who is responsible to send mail from Mailbox Server to Hub Server.
Related Event ID : 1000
13) Microsoft Exchange Mailbox Assistants :
This service is installed on Mailbox Server Role. It is a required service which needs to be running all the time. It is dependent upon “Microsoft Exchange Active Directory Service”

Who is responsible for this service : “MSExchangeMailboxAssistants.exe"Path from where it is executed :
"C:\Program Files\Microsoft\Exchange Server\Bin\MSExchangeMailboxAssistants.exe"

Functions:-It is responsible to initiate the function for Resource Booking, Out of Office, Calendaring and Managed Folder Assistants.
Related Event ID's : 1004 and 1001

14) Microsoft Exchange Replication Service : This service is installed on Mailbox Server Role. It is a required service which needs to be running all the time. It is dependent upon “Microsoft Exchange Active Directory Service”

Who is responsible for this service : “Microsoft.Exchange.Cluster.ReplayService.exe"Path from where it is executed :
"C:\Program Files\Microsoft\Exchange Server\bin\Microsoft.Exchange.Cluster.ReplayService.exe"

Functions:-It is responsible for log shipping where the LCR and CCR is enabled
Related Event ID's: 2018, 2001 & 2133

15) Microsoft Exchange Search Indexer :This service is installed on the mailbox server. It is an optional service which is dependent upon “Microsoft Exchange Active Directory topology Service” and “Microsoft Search”

Who is responsible for this service : " Microsoft.Exchange.Search.ExSearch.exe"Path from it is executed :
"C:\Program Files\Microsoft\Exchange Server\Bin\Microsoft.Exchange.Search.ExSearch.exe"

Functions:-It is responsible to provide the indexing information to “Microsoft Search (Exchange Server) service.
Related Event ID: 0 & 1003

16) Microsoft Search (Exchange Server) :This service is installed on Mailbox Server role. It is an optional service which is dependent upon “Remote procedure call (RPC) service”.

Who is responsible for this service : "msftesql.exe"
Path from where it is executed :
"C:\Program Files\Microsoft\Exchange Server\bin\msftesql.exe"

Functions:-It create full-text indexes on content and properties of structured and semi-structured data to allow fast linguistic searches on the exchange data.
Related Event ID: 1003

17) Microsoft Exchange System Attendant :
This service is installed on Mailbox Server. It is a require service which needs to be running all the time. This service is dependent up on Event Log, NT LM Security Provider, Remote Procedure Call (RPC), Server and workstation

Who is responsible for this service : " mad.exe"
Path from where it is executed :
"C:\Program Files\Microsoft\Exchange Server\bin\mad.exe"

Functions:-It is responsible to initialize the AD Server access detail i.e DSACCESS.dll
-It is responsible to initialize the IIS access details i.e DSProxy.dll
-It is responsible to initialize ABV_DG.Dll for generating OAB.
-It is responsible to initialize madfb.dll for Free Busy Information and in the background it will start the Microsoft Exchange Free Busy Publishing Service
-It will generate OAB, oabgen.dll
-It manage NSPI Proxy listen port on transport Rpc/HTTP is being overridden by registry setting System\CurrentControlSet\Services\MSExchangeSA\Parameters\Rpc/HTTP NSPI Port. NSPI Proxy will listen on port 6004 on this transport.

Note : Many of the responsible of SA is almost same like we had in Exchange 2003. This service will perform all the above actions if you have public folder store and older outlook version i.e mixed environment. It is not necessary all the service will process the information but it will start the function on Mailbox Server for older version.
Related Event  ID's: 1000, 9007, 2068, 9006, 9008, 9013, 9012, 9242, 9410, 9411, 8192, 9316, 9014, 9091, 9070 & 9028

18) Microsoft Exchange ADAM :This service is installed on Edge Server. It is a required service which needs to be running all the time and it is dependent on Com+ Event System

Who is responsible for this service : "dsamain.exe"
Path from where it is executed :
"C:\WINDOWS\ADAM\dsamain.exe"

Functions:-It will store the Configuration partition information of Active Directory.
-It will also store the recipient mailbox data information.
Related Event ID :100

19) Microsoft Exchange Credential Service : This service is installed on Edge Server. It is required service which should be running all the time and it is dependent on Microsoft Exchange ADAM.

Who is responsible for this service : "EdgeCredentialSvc.exe"
Path from where it is executed :
"C:\Program Files\Microsoft\Exchange Server\Bin\EdgeCredentialSvc.exe"

Functions:-It keeps the track of any credential changes on ADAM.
-It will update the credential changes on Edge Transport.

20) Microsoft Exchange Speech Engine : This service is installed on Unified Messaging Server. This is a required service which needs to running all the time and the dependent for this service is  “Windows Management Instrumentation Service”.

Functions:- Provides speech processing services for Unified Messaging.

21) Microsoft Exchange Unified Messaging : This service is installed on Unified Messaging Server. This is a required service which needs to running all the time and this service is dependent upon Microsoft Exchange Active Directory Topology service and the Microsoft Exchange Speech Engine service.”

Functions:Provides Unified Messaging features, such as the storing of inbound faxes and voice mail messages in a user's mailbox, and access to that mailbox via Outlook Voice Access.


Comments

Popular posts from this blog

How To Work On Cross Site Failure in Exchange 2010 Environment (Failover and Failback)

Activate Exchange 2010 Manually

Migrating SBS 2003 to Windows Server 2008 with Exchange 2007