Exchange Services in Exchange 2007 and its functions

In this article you will see the description on Exchange 2007 Services which are
responsible for Client Access Server, Hub Transport Server, Mailbox Server, Edge
Server and Unified Messaging.

This article is purely published on the basis of event triggered from my virtual lab. Event
id whatever you see in your production environment may vary compare to this however
the function of each service will remain the same.

1) Microsoft Exchange Active Directory Topology :

This service is responsible to provide the information of Active Directory Information to
Exchange Server Components. This service need to be started on the client Access
Server, Hub Transport Server, Mailbox Server and Unified Messaging Server. It doesn’t
depend on dependency inorder to start. However there are some other Exchange
Services which are dependent on this service.
The following are the services which are dependent on this service are as follows:
a. Microsoft Exchange Transport Log Search
b. Microsoft Exchange Transport
c. Microsoft Exchange Service Host
d. Microsoft Exchange Search Indexer
e. Microsoft Exchange Replication Service
f. Microsoft Exchange Mail Submission
g. Microsoft Exchange Mailbox Assistants
h. Microsoft Exchange File Distribution
i. Microsoft Exchange EdgeSync
j. Microsoft Exch ange Anti-spam Update

Who is responsible to execute this service : "MSExchangeADTopologyService.exe"

Path from where it is executed : "C:\Program Files\Microsoft\Exchange

Server\Bin\MSExchangeADTopologyService.exe"

Functions:
• It will help the Exchange Server component to get the list of domain controllers, global
catalogs server & Configuration Domain Controllers which needs to be used.
• It will help the Exchange Server Component to discover the following server like the
server name, their roles, reachability, synchronize status, GC capable, PDC, SACL
Rights, Net-logon etc which are in the site and the servers which are out of site.
Event Id : 2080 & 2081

2) Microsoft Exchange Monitoring :

This service is installed on Exchange Server Role as part of installation. This service is
optional and set to manual. This service will not depend on any other service.

Who is responsible to execute this service : “Microsoft.Exchange.Monitoring.exe"

Path from where it is executed : "C:\Program Files\Microsoft\Exchange

Server\Bin\Microsoft.Exchange.Monitoring.exe"

Functions:
Provides a remote procedure call (RPC) server that can be used to invoke diagnostic
cmdlets. This service does not have any dependencies.
Event ID : 700 & 701

3) Microsoft Exchange File Distribution Service :

This service is responsible for distribution offline address book and custom unified
messaging prompts. This is a required service for client Access Server & Unified
Messaging Server. It is dependent on Workstation & Microsoft Exchange Active
Directory Topology Service.

Who is responsible to execute this service: MSExchangeFDS.exe

Path from where it is executed : "C:\Program Files\Microsoft\Exchange

Server\Bin\MSExchangeFDS.exe"

Functions:
? This will help the client access server to give the synchronization status of OAB like it
will give the details OAB is synchronized successfully or not. And the name of the OAB.
Event Id: 1008

4) Microsoft Exchange IMAP4 :

This service will get installed on Client Access Server Role. It is an optional which is set
to manual. Service name for this service is MsExchangeIMAP4. This service is
dependent on Microsoft Exchange Active Directory Service.

Who is responsible for this service : "Microsoft.Exchange.Imap4Service.exe"

Path from where it is executed : "C:\Program Files\Microsoft\Exchange

Server\ClientAccess\PopImap\Microsoft.Exchange.Imap4Service.exe"

Functions:
? It provides the IMAP4 access to IMAP4 Client.

Event Id: 2080 (First this service will information about GC DC, synchronize status,
PDC, SACL Rights etc from Microsoft Exchange Active Directory Topology
Event Id: 1000 (This will provide the status of IMAP4 service whether it is getting start)
Event Id : 1001 (Final status of the IMAP4 Service)
5) Microsoft Exchange POP3 : This service will get installed on Client Access Server
Role. It is an optional which is set to manual. Service name for this service is
MsExchangePOP3. This service is dependent on Microsoft Exchange Active Directory
Service.

Who is responsible for this service : "Microsoft.Exchange.Pop3Service.exe"

Path from where it is executed :

"Server\ClientAccess\PopImap\Microsoft.Exchange.Pop3Service.exe"

Functions:
? It provides the POP3 access to POP3 Client.

Event Id: 1000 (This will provide the status of POP3 service whether it is getting start)
Event Id : 1001 (Final status of the POP3 Service)

6) Microsoft Exchange Service Host :

This service will get installed on Client Access Server & Mailbox Server. It is a required
service which needs to be started and running all the time. This service is dependent
upon “Microsoft Exchange Active Directory Topology Service”.

Who is responsible for this service : "Microsoft.Exchange.ServiceHost.exe"

Path from where it is executed : "C:\Program Files\Microsoft\Exchange

Server\bin\Microsoft.Exchange.ServiceHost.exe"

Functions:
? This service will get the information about GC, DC and synchronization & online status
of the AD Servers from Microsoft Exchange Active Directory Service
? It will initially check the server role which is installed on the server where it is running
like if you have installed MBX, CAS & HUB on the same server it will give the status of
all the server role and if you have just ins talled CAS it will give only CAS Server role
installed information.
? If it is just a cas server role then it will load RPC over https autoconfig dll i.e
Microsoft.Exchange.RPCOverHTTPAutoconfig.dll and for Mailbox Server :
Microsoft.Exchange.SystemAttendantMailboxServicelet.dll

Event Id : 2080, 2003, 2014, 2016, 2018, 2001 & 2004

7) Microsoft Exchange EdgeSync :

This service is installed on the Hub Server. It is a required service which needs to be
started and running all the time. It is dependent upon “Microsoft Exchange Active
Directory Topology Service”.

Who is responsible for this service : " Microsoft.Exchange.EdgeSyncSvc.exe"

Path from where it is executed : "C:\Program Files\Microsoft\Exchange
Server\Bin\Microsoft.Exchange.EdgeSyncSvc.exe"

Functions:
? This service will help the hub server to get synchronized with Edge Server by
connecting to ADAM instance on the Edge Server through LDAP.
Event ID : 1059

8) Microsoft Exchange Anti-spam Update :

This service is installed on Hub Server & Edge Server. It is an optional service. In Hub
Server, this service is dependent on “Microsoft Exchange Active Directory Topology
Service” and in Edge Server, this service is dependent on “Microsoft Exchange ADAM".

Who is responsible for this service : "Microsoft.Exchange.AntispamUpdateSvc.exe"

Path from where it is executed : "C:\Program Files\Microsoft\Exchange

Server\Bin\Microsoft.Exchange.AntispamUpdateSvc.exe"

Functions:
? It is used to automatically download anti-spam filter updates from Microsoft Updates.
? Before it initialize the service it will contact the AD topology service for getting the
information of AD Servers if it is a hub server and if it is edge server it will contact
ADAM for getting the access information.

Event ID : 1000

9) Microsoft Exchange Transport :

This service is installed on Hub Transport Server and Edge Transport Server. This
service is dependent on “Microsoft Exchange Active Directory Topology Service” for
Hub Server & In Edge Server “Microsoft Exchange ADAM.

Who is responsible for this service : " MSExchangeTransport.exe"

Path from where it is executed : "C:\Program Files\Microsoft\Exchange

Server\Bin\MSExchangeTransport.exe"

Functions:
? It is responsible for mailflow.
? It will give the SMTP Server information and transport stack.
? This will even load the transport rule collection, configuration update for transport,
content filter in another word Filtering components.

Event ID : 1000, 102, 16022, 4002, 7004, 1001, 2000, 300, 301, 302 & 17010

10) Microsoft Exchange Transport Log Search :

This service is installed on the Hub Server, Edge Server and Mailbox Server Role. This
is an optional service set to manual only on Edge Server. This service is dependent on
“Microsoft Exchange Active Directory Topology Service” on Mailbox and Hub Server.
For Edge Server it is dependent on “Microsoft Exchange ADAM”

Who is responsible to start this service : " MSExchangeTransportLogSearch.exe"

Path from where it is executed : "C:\Program Files\Microsoft\Exchange

Server\Bin\MSExchangeTransportLogSearch.exe"

Functions:
? Message Tracking logs are generated.
? Transport logs searching.

Event id : 7001 & 7002

11) Microsoft Exchange Information Store :

This service is installed on Mailbox Server Role. It is a required service which needs to
be running all the time. It is dependent upon eventlog, NT LM Security Support
Provider, RPC, Server & Workstation.

Who is responsible for this service : "store.exe"

Path from where it is executed : "C:\Program Files\Microsoft\Exchange

Server\bin\store.exe"

Functions:
? It is main core for Mailbox server, it manage the exchange server database
? It is responsible to initialize OLEDB
o The Microsoft OLE DB Provider for Exchange exposes data stored in a Microsoft
Exchange Web Store in tabular form. This data can be queried using an SQL-like
language that is similar to the SQL subset supported by the OLE DB Provider for
Microsoft Indexing Service
? It is responsible to initialize calendaring agent
? It is responsible to mount the database

12) Microsoft Exchange Mail Submission Service :

This service is installed on Mailbox Server Role. It is a required service which needs to
be running all the time. It is dependent upon “Microsoft Exchange Active Directory
Service”

Who is responsible for this service: “MSExchangeMailSubmission.exe"

Path from where it is executed : "C:\Program Files\Microsoft\Exchange

Server\Bin\MSExchangeMailSubmission.exe"

Functions:
? When the message is sent by users, the mail will first move to outbox folder in outlook
and then move to sent items, that means it is delivering the message. This is the service
who is responsible to send mail from Mailbox Server to Hub Server.
Event Id : 1000

13) Microsoft Exchange Mailbox Assistants :

This service is installed on Mailbox Server Role. It is a required service which needs to
be running all the time. It is dependent upon “Microsoft Exchange Active Directory
Service”

Who is responsible for this service : “MSExchangeMailboxAssistants.exe"

Path from where it is executed : "C:\Program Files\Microsoft\Exchange

Server\Bin\MSExchangeMailboxAssistants.exe"

Functions:
? It is responsible to initiate the function for Resource Booking, Out of Office,
Calendaring and Managed Folder Assistants.
Event Id : 1004 and 1001

14) Microsoft Exchange Replication Service :

This service is installed on Mailbox Server Role. It is a required service which needs to
be running all the time. It is dependent upon “Microsoft Exchange Active Directory
Service”

Who is responsible for this service :

“Microsoft.Exchange.Cluster.ReplayService.exe"

Path from where it is executed : "C:\Program Files\Microsoft\Exchange

Server\bin\Microsoft.Exchange.Cluster.ReplayService.exe"

Functions:
? It is responsible for log shipping where the LCR and CCR is enabled

Event id: 2018, 2001 & 2133

15) Microsoft Exchange Search Indexer :

This service is installed on the mailbox server. It is an optional service which is
dependent upon “Microsoft Exchange Active Directory topology Service” and “Microsoft
Search”

Who is responsible for this service : " Microsoft.Exchange.Search.ExSearch.exe"

Path from it is executed : "C:\Program Files\Microsoft\Exchange

Server\Bin\Microsoft.Exchange.Search.ExSearch.exe"
Functions:
? It is responsible to provide the indexing information to “Microsoft Search (Exchange
Server) service.

Event id: 0 & 1003

16) Microsoft Search (Exchange Server) :

This service is installed on Mailbox Server role. It is an optional service which is
dependent upon “Remote procedure call (RPC) service”.

Who is responsible for this service : msftesql.exe

Path from where it is executed : "C:\Program Files\Microsoft\Exchange

Server\bin\msftesql.exe"

Functions:
? It create full-text indexes on content and properties of structured and semi-structured
data to allow fast linguistic searches on the exchange data.
Event id: 1003

17) Microsoft Exchange System Attendant :

This service is installed on Mailbox Server. It is a require service which needs to be
running all the time. This service is dependent up on Event Log, NT LM Security
Provider, Remote Procedure Call (RPC), Server and workstation

Who is responsible for this service : " mad.exe"

Path from where it is executed : "C:\Program Files\Microsoft\Exchange

Server\bin\mad.exe"

Functions:
? It is responsible to initialize the AD Server access detail i.e DSACCESS.dll
? It is responsible to initialize the IIS access details i.e DSProxy.dll
? It is responsible to initialize ABV_DG.Dll for generating OAB.
? It is responsible to initialize madfb.dll for Free Busy Information and in the background
it will start the Microsoft Exchange Free Busy Publishing Service
? It will generate OAB, oabgen.dll< BR>? It manage NSPI Proxy listen port on transport
Rpc/HTTP is being overridden by registry setting
System\CurrentControlSet\Services\MSExchangeSA\Parameters\Rpc/HTTP NSPI Port.
NSPI Proxy will listen on port 6004 on this transport.

Note : Many of the responsible of SA is almost same like we had in Exchange 2003.
This service will perform all the above actions if you have public folder store and older
outlook version i.e mixed environment. It is not necessary all the service will process the
information but it will start the function on Mailbox Server for older version.
Event Id : 1000, 9007, 2068, 9006, 9008, 9013, 9012, 9242, 9410, 9411, 8192, 9316,
9014, 9091, 9070 & 9028

18) Microsoft Exchange ADAM :

This service is installed on Edge Server. It is a required service which needs to be
running all the time and it is dependent on Com+ Event System

Who is responsible for this service : dsamain.exe

Path from where it is executed : C:\WINDOWS\ADAM\dsamain.exe

Functions:
? It will store the Configuration partition information of Active Directory.
? It will also store the recipient mailbox data information.
Event id :100

19) Microsoft Exchange Credential Service :

This service is installed on Edge Server. It is required service which should be running
all the time and it is dependent on Microsoft Exchange ADAM.

Who is responsible for this service : "EdgeCredentialSvc.exe"

Path from where it is executed : "C:\Program Files\Microsoft\Exchange

Server\Bin\EdgeCredentialSvc.exe"

Functions:
? It keeps the track of any credential changes on ADAM.
? It will update the credential changes on Edge Transport.

20) Microsoft Exchange Speech Engine :

This service is installed on Unified Messaging Server. This is a required service which
needs to running all the time and the dependent for this service is “Windows
Management Instrumentation Service”.

Functions:
? Provides speech processing services for Unified Messaging.

21) Microsoft Exchange Unified Messaging :

This service is installed on Unified Messaging Server. This is a required service which
needs to running all the time and this service is dependent upon Microsoft Exchange
Active Directory Topology service and the Microsoft Exchange Speech Engine service.”

Functions:
Provides Unified Messaging features, such as the storing of inbound faxes and voice
mail messages in a user's mailbox, and access to that mailbox via Outlook Voice
Access.