SESC creates EWS push subscriptions which provide for notification from Exchange when users put email into the spam submission folder. SESC caches this information in a configuration file. This article contains steps to dump the SESC subscription cache to an XML file.
1. Download subscriptionbin.exe to the SESC server.
2. Open a command prompt.
3. Run the tool like this:
subscriptionbin.exe -c <sescinstalldir>\bin\configuration\subscription.bin <outputfilename>
The following is an example where the subscription information is written to c:\temp\subscription.xml:
subscriptionbin.exe -c "c:\program files\symantec\SESC\1.0\bin\configuration\subscription.bin" c:\temp\subscription.xml
NOTE: Double quotes must be used when there is a space in the path.
The following is an example of data that shows up in the XML output:
<?xml version="1.0"?>
<ArrayOfSubscription xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<Subscription>
<SubscriptionID>FwBleDIwMTBkYy4yazhkb21haW4udGVzdBAAAAD+qWvNJOvORrVLDnBlXQQRte+PUOS6zgg=</SubscriptionID>
<LastNotificationTime>0001-01-01T00:00:00</LastNotificationTime>
<Mailbox>
<SmtpAddress>[email protected]</SmtpAddress>
<Status>DIRECT_SUBMITTER</Status>
<SubmissionsFolder>
<FolderID>AAMkAGIzYmI5MGMyLWIyNDEtNGEyOC1hOTg3LWQwODBiMzU1MTFiOAAuAAAAAAD714Oq/ZX8QKfcUvP9vy9EAQB8s+Yae8Y5SZXMWVqW2XvnAAAAoDe2AAA=</FolderID>
<SubscriptionID>FwBleDIwMTBkYy4yazhkb21haW4udGVzdBAAAAD+qWvNJOvORrVLDnBlXQQRte+PUOS6zgg=</SubscriptionID>
<Name>Submit Spam to Symantec</Name>
</SubmissionsFolder>
<ExchangeServer>
<Name>EXCHANGE2010-2</Name>
<DistinguishedName>CN=EXCHANGE2010-2,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=2k8domain,DC=test</DistinguishedName>
<ExchangeRoles>Mailbox ClientAccess HubTransport</ExchangeRoles>
</ExchangeServer>
</Mailbox>
</Subscription>
<Subscription>
<SubscriptionID>FwBleDIwMTBkYy4yazhkb21haW4udGVzdBAAAAAJ4VvqbKE1RKXWgVgLInM+te+PUOS6zgg=</SubscriptionID>
<LastNotificationTime>0001-01-01T00:00:00</LastNotificationTime>
<Mailbox>
<SmtpAddress>[email protected]</SmtpAddress>
<Status>DIRECT_SUBMITTER</Status>
<SubmissionsFolder>
<FolderID>AAMkADNlNDRmMWJlLWEzZjEtNGZmMC04MzA3LWM5OTVkOGQxNmM2MQAuAAAAAAD5AM5kjdbdSqpKQJLDKNzaAQBW/KRoZ5mwS5X/zNmbCFlPAAAAdOplAAA=</FolderID>
<SubscriptionID>FwBleDIwMTBkYy4yazhkb21haW4udGVzdBAAAAAJ4VvqbKE1RKXWgVgLInM+te+PUOS6zgg=</SubscriptionID>
<Name>Submit Spam to Symantec</Name>
</SubmissionsFolder>
<ExchangeServer>
<Name>EX2010DC</Name>
<DistinguishedName>CN=EX2010DC,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=2k8domain,DC=test</DistinguishedName>
<ExchangeRoles>Mailbox ClientAccess HubTransport</ExchangeRoles>
</ExchangeServer>
</Mailbox>
</Subscription>
</ArrayOfSubscription>
Each <Subscription> contains the following information:
Node Name | Description | Example |
SubscriptionID | Identifier Microsoft Exchange provided for the Exchange Web Service (EWS) push subscription | AAMkAGIzYmI5MGMyLWIyNDEtNGEyOC1hOTg3LWQwODBiMzU1MTFiOAAuAAAAAAD714Oq/ZX8QKfcUvP9vy9EAQB8s+Yae8Y5SZXMWVqW2XvnAAAAoDe2AAA= |
Mailbox/SMTPAddress | SMTP address of the user | [email protected] |
Mailbox/Status | Type of submitter. Direct or moderated | DIRECT_SUBMITTER |
Mailbox/SubmissionsFolder/FolderID | Unique identifier of the Exchange folder created for the user | AAMkADNlNDRmMWJlLWEzZjEtNGZmMC04MzA3LWM5OTVkOGQxNmM2MQAuAAAAAAD5AM5kjdbdSqpKQJLDKNzaAQBW/KRoZ5mwS5X/zNmbCFlPAAAAdOplAAA= |
Mailbox/SubmissionsFolder/SubscriptionID | Same as SubscriptionID above | |
Mailbox/SubmissionsFolder/Name | Name of the Exchange folder created | Submit Spam to Symantec |
ExchangeServer/Name | Friendly name of the Exchange server for the user | EX2010DC |
ExchangeServer/DistinguishedName | DN of the Exchange server for the user | CN=EX2010DC,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=2k8domain,DC=test |
Environment