Security Performance Counter Availability

Security Performance Counters are collected and used by services and applications. If they are installed incorrectly or with improper permissions, those services or applications cannot collect or interpret the data.

Events

Event ID Source Message

4001

Microsoft-Windows-Essential Business Server

The servers running Windows Essential Business Servers are not yet completely installed. Performance counters will not be run until installation is finished for all servers running Windows Essential Business Server.

4002

Microsoft-Windows-Essential Business Server

Performance counters for Exchange Server: deleted: %1, rejected: %2, quarantined: %3, scanned: %4.

4003

Microsoft-Windows-Essential Business Server

Performance counters for Forefront Security for Exchange: messages purged: %1, messages detected: %2, messages scanned: %3, attachments removed: %4, attachments cleaned: %5.

4021

Microsoft-Windows-Essential Business Server

Performance Counter values could not be collected. This could be caused by: An inability to contact the Security server or Messaging Server. The read permission settings requested are invalid for the counters. Exchange Server 2007 or Forefront Security 2007 For Exchange are not properly installed on the Security or Messaging Servers. The exception is %1.

Performance Counters

Windows EBS