Applies to: Forefront Security for Exchange Server

This section contains troubleshooting information.

Exchange not hooked in

If you receive a message (in the Forefront Server Security Administrator, the Event Log, or the MOM console) that says you are not hooked into the Transport or Mailbox, try recycling the MSExchangeTransport or the MSExchangeIS service (the Event Log indicates the correct one). If that does not solve the problem, close the Forefront Server Security Administrator (if it is open) and restart the FSCController service. If you still receive the errors, contact Microsoft Help and Support.

Getting help

To obtain technical support, visit the Microsoft Web site at Microsoft Help and Support.


Diagnostic logging is helpful information that can be used by Microsoft support technicians to help troubleshoot any problems that are occurring while Forefront Security for Exchange Server is not working properly. Diagnostics can be set independently for each scan job by selecting the appropriate check box for each scan job in the Diagnostics area of the General Options work pane. The settings are: Additional Transport, Additional Realtime, Additional Manual, and Archive Transport Mail. These options are disabled by default. For more information about these settings, see General Options.

For information about collecting diagnostic information, see The FSC diagnostic tool.

Forefront Security for Exchange Server installation failure

Forefront Security for Exchange Server cannot co-exist with any VSAPI-based antivirus product. If you previously used VSAPI to install another antivirus software product, you will receive an error message when attempting to install Forefront Security for Exchange Server and the installation will fail.

When using VSAPI to install antivirus software, the following registry subkey is created to save information about the VSAPI library:


If the VirusScan registry subkey is present in the registry when you try to install Forefront Security for Exchange Server, the installation will fail.

To delete the VirusScan registry entry

  1. Click Start, click Run, type regedit, and then click OK.

  2. In the Registry Editor, expand the following registry subkey:


  3. Right-click the VirusScan registry entry, and then click Delete.

  4. Exit the Registry Editor.