Is there an effective way to determine what could be causing a large amount of logs to be created on a specific SG? Any logging in particular that could be increased to see what's going on? Out of 10SG's, one of them is generating 6x more logs than the others. Thanks.

I would fire up the Exchange Toolbox, and play around with some of the logging in there....I cant remmeber off the top of my head but there is a way you can find out who/what is creating/hitting that SG hard. I had a similiar issue way back when I first moved to Exch 07, and I was able to track it to an IP address...I'll take a look through my notes.

In theory you could try using the Exchange Monitor tool which watches all MAPI connectivity to a server. I haven't tried it against Exchange 2007 yet, but it has helped me find "culprits" of large amounts of Exchange I/O before in the past. http://www.microsoft.com/downloads/details.aspx?familyid=9a49c22e-e0c7-4b7c-acef-729d48af7bc9&displaylang=en