Microsoft KB Archive/943612

= Real-time scan jobs and manual scan jobs do not work correctly after you install Forefront Security for Exchange Server =

Article ID: 943612

Article Last Modified on 11/9/2007

-

APPLIES TO


 * Microsoft Forefront Security for Exchange Server

-



Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756 How to back up and restore the registry in Windows XP and Windows Vista



SYMPTOMS
After you install Microsoft Forefront Security for Exchange Server on a computer that is running Microsoft Exchange Server, you experience the following symptoms:
 * When you view the Incidents pane and the Statistics pane in the Report shuttle, you find that no report is displayed for incidents. This behavior occurs even though e-mail messages are currently handled by the Exchange server. Additionally, this behavior indicates that no real-time scan jobs or manual scan jobs are run on the Exchange store.
 * You cannot use Exchange ActiveSync to synchronize mobile devices.



CAUSE
This issue occurs if the computer contains incorrect virus scanning API (VSAPI) registry entries for a third-party antivirus product that was previously installed.

Typically, this issue occurs when you install and then uninstall a third-party antivirus product.



RESOLUTION
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To resolve this issue, follow these steps:  Click Start, click Run, type regedit, and then click OK. Click the following registry subkey:

 In the details pane, right-click Enabled, click Modify, type 1, and then click OK. In the details pane, right-click BackgroundScanning, click Modify, type one of the following values in the Value data box, and then click OK.  In the details pane, right-click ProactiveScanning, click Modify, type one of the following values in the Value data box, and then click OK.

 Click the following registry subkey:

</li> Right-click VirusScanEnabled, click Modify, type 1, and then click OK.</li> Right-click VirusScanBackgroundScanning, click Modify, type 1 in the Value data box, and then click OK.</li> Right-click VirusScanProactiveScanning, click Modify, type 1 in the Value data box, and then click OK.</li> Click the following registry subkey:

</li> Right-click VirusScanEnabled, click Modify, type 1 in the Value data box, and then click OK.</li> Right-click VirusScanBackgroundScanning, click Modify, type 1 in the Value data box, and then click OK.</li> Right-click VirusScanProactiveScanning, click Modify, type 1 in the Value data box, and then click OK.</li></ol>

Notes <ul> Repeat steps 6 through 13 for each Exchange Server database that is listed in the registry.</li> If you do not require \mdb-specific VSAPI parameters, we recommend that you back up these registry entries and then delete these registry entries.</li> Mdb-specific VSAPI parameters override general VSAPI parameters. For example, steps 6 through 13 enable the following parameters: <ul> Background scanning</li> Proactive scanning</li></ul>

These settings override the general VSAPI parameters that you set in steps 4 and 5.</li> If the changes are made in a cluster scenario, make sure that you make the changes on the active node. The changes will then be applied to the other nodes during the next failover.</li></ul>

Keywords: kbtshoot kbexpertiseadvanced kbexpertiseinter KB943612

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.