Trend ScanMail configuration: ScanMail_Monitor service is not dependent on Cluster Service

[This topic is intended to address a specific issue called out by the Exchange Server Analyzer Tool. You should apply it only to systems that have had the Exchange Server Analyzer Tool run against them and are experiencing that specific issue. The Exchange Server Analyzer Tool, available as a free download, remotely collects configuration data from each server in the topology and automatically analyzes the data. The resulting report details important configuration issues, potential problems, and nondefault product settings. By following these recommendations, you can achieve better performance, scalability, reliability, and uptime. For more information about the tool or to download the latest versions, see "Microsoft Exchange Analyzers" at]  

Topic Last Modified: 2009-09-23

The Microsoft® Exchange Server Analyzer Tool reads the following registry entry on each server that is a node of a cluster:

HKEY_LOCAL_MACHINE\Software\TrendMicro\ScanMail for Exchange\CurrentVersion\Version

A Version value of 6.2.000 indicates that version 6.2 of ScanMail for Microsoft Exchange is installed.

The Exchange Server Analyzer also queries the Win32_Service Microsoft Windows® Management Instrumentation (WMI) class to determine the value of the Started key for ClusSvc, the Cluster service. A value of True indicates the Cluster service is running, and a value of False indicates it is not running.

The Exchange Server Analyzer also reads the following registry entry on each server that is a node of a cluster:


If the Exchange Server Analyzer finds that the ScanMail_Monitor key does not include the Multi-Value registry entry DependOnService with a value of ClusSvc, the ScanMail_Monitor service is not dependent on the Cluster service.

The Exchange Server Analyzer displays a Warning message if the following conditions are true:

  • The server is running version TrendMicro ScanMail for Microsoft Exchange 6.2.

  • The server is running the Cluster service (ClusSvc).

  • The ScanMail_Monitor service is not configured to depend on the Cluster service.

After you install builds of ScanMail for Microsoft Exchange 6.2, you must configure the ScanMail_Monitor service to depend on the Cluster service. If you do not configure this dependency, the Cluster service will stop responding every time that the node is restarted.

To correct this warning
The third-party Web site information in this topic is provided to help you find the technical information you need. The URLs are subject to change without notice.

For more information about other Trend Micro product updates, see the Trend Micro Update Center Web site (

For more information about how to use antivirus software with Exchange Server, see the following Microsoft Knowledge Base articles:

For a list of third-party antivirus software available for Exchange Server, see Exchange Server Partners: Antivirus (


Community Additions