Exchange 2010 Transport Rules and SCL Threshold
I have a test Exchange 2010 server. I use forefront in the cloud for my anti-virus anti-spam. I tag the email headers that I consider suspected spam with "X-EHS-MARKED-SPAM" and "This message is possibly spam". I have a transport rule that looks for the above comments in the email header and sets the SCL score to 6. From there it goes into all users Junk Email Folders. SCL of 5 and below go to all users inboxes. I am trying to reproduce this on a production server and cannot remember the two commands that must be typed into the Exchange Managment Shell. Set-OrganizationConfig -SCLJunkThreshold 6 may have been one command. The other made all users be a part of the rule. I see in my notes that I used Set-Mailbox John@contoso.com - SCLJunkEnabled $True. I did not end up doing the single user command. There is a similar command that covers all users in the organization. Does any of this sound familure to anyone? Thank You, Scott
March 5th, 2012 5:13pm

Scott, Is this helps: get-Mailbox |set-Mailbox -SCLJunkThreshold 6Regards from www.windowsadmin.info | www.blog.windowsadmin.info
Free Windows Admin Tool Kit Click here and download it now
March 6th, 2012 1:00pm

Does the Set-Mailbox -SCLJunkThreshold 6 set this feature for all users? Do you know how to enable this feature for all users in the organization? I believe it needs to be enabled as well. Thank You, Scott
March 6th, 2012 1:31pm

On Tue, 6 Mar 2012 18:31:16 +0000, Scott Tosti wrote: >Does the Set-Mailbox -SCLJunkThreshold 6 set this feature for all users? If you pipe the output of an unqualified "get-mailbox" into a "set-mailbox" the answer is "yes, it does", at least for all of the users that have an active mailbox. >Do you know how to enable this feature for all users in the organization? I believe it needs to be enabled as well. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
March 6th, 2012 3:59pm

I'm sorry I do not understand. In the past I had to enter only two commands. I think these were them below. SCL=5 or less will go to inbox and and 6 and above will go into the users junk email folder. Does this look right? Set-MailboxJunkEmailConfiguration - SCLJunkEnabled $true Set-OrganizationConfig -SCLJunkThreshold 6Thank You, Scott
March 6th, 2012 4:08pm

On Tue, 6 Mar 2012 21:08:57 +0000, Scott Tosti wrote: >I'm sorry I do not understand. The only question I answered was the one where you asked if the example given would apply to all users. The answer is still yes. >In the past I had to enter only two commands. I think these were them below. SCL=5 or less will go to inbox and and 6 and above will go into the users junk email folder. Does this look right? > >Set-MailboxJunkEmailConfiguration - SCLJunkEnabled $true There's no "-SCLJunkEnabled" parameter for the Set-MailboxJunkEmailConfiguration cmdlet. There's an "-Enabled" parameter. Using "help Set-MailboxJunkEmailConfiguration -det" would have shown you that pretty quickly. >Set-OrganizationConfig -SCLJunkThreshold 6 This would apply to any mailbox that didn't have its own SCLJunkThreshold configured. If you don't want to configure individual thresholds on mailboxes (which is what the example did) then this is the way to do it. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
March 6th, 2012 5:19pm

So it does not need to be enabled? The microsoft engineer who got this working two years ago on my test server typed in two comands. Set-OrganizationConfig -SCLJunkThreshold 6 is the first. I already have that set. I'm missing the second command to make this function properly. Email with SCL 6 is still going into the inbox on all of my users. Thank You, Scott
March 6th, 2012 6:55pm

On Tue, 6 Mar 2012 23:55:59 +0000, Scott Tosti wrote: >So it does not need to be enabled? The microsoft engineer who got this working two years ago on my test server typed in two comands. Set-OrganizationConfig -SCLJunkThreshold 6 is the first. I already have that set. I'm missing the second command to make this function properly. Email with SCL 6 is still going into the inbox on all of my users. Can I ask how you know the SCL value assigned to the messages? Unless FOPE is using an authenticated connection I think your server is removing the X-EHS-MARKED-SPAM header. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
March 6th, 2012 10:23pm

So it does not need to be enabled? The microsoft engineer who got this working two years ago on my test server typed in two comands. Set-OrganizationConfig -SCLJunkThreshold 6 is the first. I already have that set. I'm missing the second command to make this function properly. Email with SCL 6 is still going into the inbox on all of my users. Thank You, Scott Yes, if you use command "Set-OrganizationConfig -SCLJunkThreshold 6" to set for the SCLJunkThreshold, email with SCL 6 will not go to the junk folder. The SCLJunkThreshold parameter specifies the spam confidence level (SCL) threshold. Messages with an SCL greater than the value that you specify for the SCLJunkThreshold parameter are moved to the Junk E-mail folder. So if you want email with SCL 6 go to the junk folder, you need set SCLJunkThreshold to 5 Set-OrganizationConfig -SCLJunkThreshold 5 After that, emails with SCL greater than 5 will go to junk folder. You can know more detail from this document: Set-OrganizationConfig http://technet.microsoft.com/en-us/library/aa997443.aspx Just as Rich said, "Set-OrganizationConfig -SCLJunkThreshold" will apply to any mailbox that didn't have its own SCLJunkThreshold setting. if you want to set that based on user's mailbox, you can use this command: Set-Mailbox -Identity username -SCLJunkEnabled $true -SCLJunkThreshold 5 Related document for you: Set-Mailbox http://technet.microsoft.com/en-us/library/bb123981.aspx Thanks, Evan Liu TechNet Subscriber Supportin forum If you have any feedback on our support, please contact tngfb@microsoft.com Evan Liu TechNet Community Support
March 7th, 2012 1:54am

Hello, Any updates on this issue? Thanks, Evan Liu TechNet Subscriber Supportin forum If you have any feedback on our support, please contacttngfb@microsoft.comEvan Liu TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
March 7th, 2012 9:13pm

I need to check in with my users today. Is there anyway to test this with an external email? Is an SCL of 5 to the inbox to high? I read somewhere that people are setting the delivery of mail to inboxes to 4 and 5 to junk.Thank You, Scott
March 8th, 2012 9:35am

On Thu, 8 Mar 2012 14:35:46 +0000, Scott Tosti wrote: > > >I need to check in with my users today. Is there anyway to test this with an external email? > >Is an SCL of 5 to the inbox to high? I read somewhere that people are setting the delivery of mail to inboxes to 4 and 5 to junk. That depends on our tolerance for spam and your trust that whatever is setting the SCL level is acceptable according to your policies. This is true of any spam filter. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
March 8th, 2012 5:17pm

I understand that. Is there any way to test this by sending an email that is already scored a 6? There must be a way to see if this is working correctly without just looking at what is ending up where. Exchange 2010 is feature rich. It is not rich with documentation that is easy to read and understand. I went to exchange 5.0 school. I have been administering Exchange since the mid nineties. This is the most difficult version to setup and test to date in my opinion. It should get easier every release. At a minimum great documentation would suffice... This is not the case. Thank You, Scott
March 8th, 2012 8:44pm

Hello Scott, If you want to confrim whether it well, you can go to check the SCL value in mesage header. Find whether the email goes to junk folder is the SCL value greater than the value you sat for SCLJunkThreshold. Thanks, Evan Liu TechNet Subscriber Supportin forum If you have any feedback on our support, please contacttngfb@microsoft.com Evan Liu TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
March 9th, 2012 1:52am

That is what I currently do. Last night I read that you can add an SCL column in outlook on a users machine. That way you can "test" this function. I just need to find the instructions. I'm sure if I keep digging I will find a way to send an email with the necessary string in the header from outside the organization with the necessary string to cause the message to be tagged a 6. If this does not exist it needs too... Thank You, Scott
March 9th, 2012 7:06am

On Fri, 9 Mar 2012 12:06:19 +0000, Scott Tosti wrote: > > >That is what I currently do. Last night I read that you can add an SCL column in outlook on a users machine. That way you can "test" this function. I just need to find the instructions. > >I'm sure if I keep digging I will find a way to send an email with the necessary string in the header from outside the organization with the necessary string to cause the message to be tagged a 6. If this does not exist it needs too... What about the X-MS-Exchange-Organization-SCL header in the message? --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
March 9th, 2012 9:06pm

You can find X-MS-Exchange-Organization-SCL value in the message header. How to check message header in Outlook 2010: View the Internet header information for an email message http://office.microsoft.com/en-us/outlook-help/view-the-internet-header-information-for-an-email-message-HA101836448.aspx If you want to expose SCL in Outlook, here is a related document for you: Exposing SCL (Spam Confidence Level) in Outlook http://blogs.technet.com/b/exchange/archive/2004/05/26/142607.aspx Thanks, Evan Liu TechNet Subscriber Supportin forum If you have any feedback on our support, please contacttngfb@microsoft.com Evan Liu TechNet Community Support
March 12th, 2012 5:27am

Hello, Any updates on this issue? Evan Liu TechNet Subscriber Supportin forum If you have any feedback on our support, please contacttngfb@microsoft.comEvan Liu TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
March 15th, 2012 12:48am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics