Using the Exchange Dump Utility (ExchDump)
Get your copy of the German language "Microsoft ISA Server 2004 - Das Handbuch"
ExchDump is a command line utility to collect configuration information about the Exchange Server configuration. ExchDump is very useful in troubleshooting various Exchange Support issues. You can download the ExchDump utility from the following website.
Exchdump creates two output files: One .HTM file and one .XML file. You will find the files in the directory from where you start ExchDump.
ExchDump collects information from the following sources, depending on the parameter you specified at the command prompt:
- Active Directory
- RPC Endpoint Mapper
- IIS Metabase
- Local Security Database
It is possible to execute Exchdump from Windows 2000, Windwos XP and Windows Server 2003 and you can use Exchdump to dump information about Exchange Server 2000 and 2003.
The following table shows the available command line options for using ExchDump. I simply pasted the help from the ExchDump Readme into this article.
Dumps configuration information specific to the Exchange HTTP components including OWA, IM, OMA, Active Synch and RPC/HTTP. For more detailed RPC/HTTP information you should also use /RPC.
Dumps configuration information specific to Exchange SMTP. Also includes Recipient Policy and Routing Group information
Dumps IIS W3SVC configuration information, includes CACLs reports for all valid paths as well as user rights information.
Dumps configuration information helpful in troubleshooting RPC from the server side, not available in "Remote Mode"
Dump configuration information specific to Instant Messaging
Dumps information specific to Routing Groups such as connectors installed and their configuration.
Dumps configuration information specific to Recipient Policies
Dumps contents of the Address List Container including the Recipient Update Service
Dump Folder Hierarchies configuration information
Dump ADC Connection Agreement configuration information
Dumps Exchange Server configuration information including child objects. If the name of the Exchange server is different than that of the computer name as in the case of a cluster configuration you can specify the Exchange server name here.
Dump a report of all of the above items, this does not include any of the items below.
Dumps configuration information for every Server and Administrative Group object in the organization. Depending on the size of the organization this report might be quite large and take a long time to be generated.
Dump a report helpful in troubleshooting Hosting or Application Service Provider specific issues.
Dumps Computer object configuration information
Dump a single user object, you must provide either a valid User logon name or User Principle Name for a user in the Forest.
Dump a single Active Directory object, you must provide a valid GUID in one of two formats "Binary String" or "Guid String"
Binary String /GUID:ACEFA3E81F20694E953EB2DAA1E8B1B6
Also finds Extended Rights or Schema objects based on SchemaGUID.
Dump a single Active Directory object, you must provide a valid distinguishedName, default is to dump only the requested object. Use the /V switch to dump child objects.
Dump only objects which have an ACE that meets the criteria specified in the ModifierString. This switch must be used along with the /DN switch. The ModifierString is a 4 part, comma seperated string in the following format:
For example the following command would dump all objects under the supplied DN to which the everyone group has been granted read rights
ExchDump /DN:<"Distinguished Name"> /ACE:everyone,allowed,read,Match
Dump only objects that have been modified since the date specified. This switch must be used along with the /DN switch and the date must be in the format: MM/DD/YYYY
For example the following command would dump all objects under the supplied DN that have been changed since February 1st, 2003
ExchDump /DN:<"Distinguished Name"> /DATE:02/01/2003
Specify a remote server to gather information from default is to query the local computer. This option places ExchDump in "Remote Mode" some items will not be available in this mode
When used with the /SERVER switch or a DN/GUID of an Exchange Storage Group or Information Store object a Dir listing will be dumped for each database or log file storage path.
Adds extra configuration information to the report that would not be needed under most circumstances.
Prevents dumping of ACL information on an Object. If ExchDump fails dumping an object or runs extremely slow try adding this switch.
Display this usage screen(Default)
You can start ExchDump without any parameters to see which options are available.
Figure 1: ExchDump options
In our example we collect information about the SMTP component of our Exchange Server.
Figure 2: ExchDump /smtp
After executing Exchdump with the /Smtp option and some processing you will find two files in the directory from which you start ExchDump. One .XML and one .HTM file. For most troubleshooting tasks you will only need the .HTM file. The files are named ExchDump_Data_Time.HTM/XML so you can find different ExchDump files very quickly.
Figure 3: ExchDump output files
Doubleclick the ExchDump HTML file and you will see the following report.
Figure 4: ExchDump output file
If you "click for more details" you will find very helpful details about the SMTP service configuration.
Figure 5: ExchDump /SMTP detailed informations
If you "Click for general information" you will find some general information about the Windows Server version, Computername, Logged in user and installed hotfixes and many more.
Figure 6: ExchDump /SMTP general information
These are only some examples of ExchDump so I recommend playing with this tool to collect all information you need.
Exchdump is a small but very powerful utility to collect useful information about your Exchange servers and your Exchange Organization for troubleshooting purposes.