Not-So-Common Forefront Registry Keys
Forefront’s TechNet site covers the common registry keys but I wanted to provide a little (very little) information about some not-so-common registry keys. By default, these keys will be listed under the Exchange Server folder within the following registry values:
32-bit: HKLM\Software\Microsoft\Forefront Server Security\
64-bit: HKLM\Wow6432Node\Software\Microsoft\Forefront Server Security\
Advanced Logging Registry Keys
These keys are related to advanced logging when troubleshooting Forefront issues. However, by enabling these keys, there is a performance hit that could impact how quickly email is processed by Forefront.
- EventLogTraceCategory (Set to “2”)
- TextFileTraceCategory (Set to “2”)
- TraceEventLog (setting of 0 = off)
- TraceTextWriter (setting of 0 = off)
Engine Timeout Keys (often related to event 6014)
- EngineDownloadTimeout – Controls the time it takes to download engines (default is 300 sec – 5min)
- GetFileHTTPTimeout – Controls timeout value for WinHttp calls
Other Registry Keys
- DisablePurgeOnMultipleScanFailures – Used as a means to get around memory error deletions that might occur on Forefront. Consult with Microsoft Support prior to implementing.
- DoNotScanIPMReplicationMessages - Setting this DWORD registry key to 1 prevents the Transport Scan Job from scanning IPM (Public Folder) replication messages
- ExpirationNotifications - Setting to 0 turns Expiration Notifications off (default is 1 - on)
- InternetTimeout - Used to prevent timeouts during Transport scanning (https://technet.microsoft.com/en-us/library/bb795154.aspx)
Good Luck
Doug