Topic Last Modified: 2007-05-17

Several tools are available for tracking events and monitoring performance. You can use these tools for troubleshooting and determining if system design changes are warranted.

Auditing server activity with log files is a good way to detect if unauthorized external users are trying to access your Simple Mail Transfer Protocol (SMTP) virtual server, or if internal users are trying to access resources that they do not have permission to access. For more information about how to audit and use Event Viewer, see Help and Support Center.

Windows Server 2008 Event Log

The event log can be used to verify that Windows Server 2008 is performing correctly. The event log tracks informational, warning, and error events, all of which require administrator attention. By default, three logs are available: System, Security, and Application.

Logging of predetermined events begins automatically whenever a computer running Windows Server 2008 is started. For each type of log, you can designate the maximum size, how long to save entries, and whether to automatically overwrite existing events when the log is full or manually clear entries.

Reliability and Performance Monitor

Reliability and Performance Monitor measures the responsiveness of the SMTP service and indicates whether it is performing as expected. You can log actual workload statistics for any system components you want to review. Then you can analyze the data to determine whether configuration adjustments are required to make sure that messages are processed efficiently. To do this, you must enable monitoring and designate what to track.

Protocol Log

The Protocol Log tracks individual SMTP transactions. You must first enable logging, and then determine the frequency and format.