--- sourceDocument: Yokohama IT Operations Management sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/it-operations-management Release : - yokohama ft:locale : - en-US ft:publication_title : - Yokohama IT Operations Management ft:clusterId : - itom bundleId : - itom workflow : - Technology --- # Application services with Microsoft Exchange Server # Application services with Microsoft Exchange Server {#ariaid-title1} * Release version: Yokohama * * Updated January 30, 2025 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read Service Mapping can discover service instances containing a Microsoft Exchange Server and the Exchange Server components. ## Discovered components {#mapping-service-exchange__section_dns_ndse57s_32b} If e-mail services in your organization deploy Microsoft Exchange Server, the discovered application service includes the following components: {#mapping-service-exchange__SupportedApplications__entry__6} | Name | Platform | Version | Protocol | Discovery type | Pattern (or probe if indicated) | |-|-|-|-|-|-| | Microsoft Active Directory Domain Services | Windows | 13, 30, 31, 44, 47, 52, 56, 69 | WMI WinRM | Top-down | Active Directory Service pattern | | [Microsoft server (as a Microsoft Exchange component)](https://servicenow-prod.fluidtopics.net/544zoKCmRkz~O8nnmnYCsw "Discovery creates or updates a CMDB record when it detects a running instance of Microsoft Exchange Client Access Server (Microsoft Exchange CAS).") | Windows | 2003, 2007, 2010, 2013, 2016 | WMI WinRM | Horizontal and top-down | ExchangeFrontEndServer On Windows; PatternExchangeBackEndServer On Windows pattern | | [HUB Transport Server (as a Microsoft Exchange component)](https://servicenow-prod.fluidtopics.net/jKkrGcvl832Lgb4q8_2uMw "Discovery creates or updates a CMDB record when it detects a running instance of Exchange Hub.") | Windows | 2003, 2007, 2010, 2013, 2016 | WMI WinRM | Horizontal and top-down | Hub Transport Server On Windows pattern | | Client Access Server (CAS) (as a Microsoft Exchange component) | Windows | 2003, 2007, 2010, 2013, 2016 | WMI WinRM | Horizontal and top-down | CAS On Windows pattern | [ ] {#mapping-service-exchange__SupportedApplications} Typically, you do not want to discover Outlook clients connected to the Exchange Server to avoid noise. If this is the case, disable the traffic-based discovery for this application service. For information on the discovery flow, refer to pattern-based discovery in Service Mapping. Failure to provide users with required permissions may cause Service Mapping to perform [traffic-based discovery](https://servicenow-prod.fluidtopics.net/N~7rM~61XplreSWjhnedAg "Service Mapping can discover and map configuration items (CIs) following their traffic-based connections. This method is referred to as traffic-based mapping and complements pattern-based mapping."). ## Limitations {#mapping-service-exchange__section_dqq_znx_32b} Discovery and Service Mapping cannot discover the Exchange Server if its configuration does not support public folders, edge transports, and public messaging. Create a pattern or customize the existing pattern to discover the Exchange Server with such configuration. ## Map application services containing Microsoft Exchange Servers {#ariaid-title2} Map an application service containing an Microsoft Exchange Server and verify that Service Mapping discovered all Microsoft Exchange Server components correctly. ### Before you begin * On the ServiceNow AI Platform, configure a domain user for accessing the Windows OS as described in [Windows credentials](https://www.servicenow.com/docs/access?context=r_WindowsCredentialsForm&version=yokohama&pubname=yokohama-platform-security&ft:locale=en-US). Use the Microsoft Exchange Server administrator's user name and password as Windows credentials. For example, user name: local\\administrator and password: Are1300. Note: If you configure Windows credentials for a user different from the Microsoft Exchange Server administrator, Service Mapping uses traffic-based discovery that results in mapping all Microsoft Exchange clients. * (For Exchange CAS 2010 and 2013, 2016) On the ServiceNow AI Platform, configure [applicative credentials](https://www.servicenow.com/docs/access?context=applicative-creds&version=yokohama&pubname=yokohama-platform-security&ft:locale=en-US), setting the CI type to Exchange Mailbox. Warning: Do not confuse the Exchange Mailbox CI type with the Exchange Mailbox Server CI type. Service Mapping uses these applicative credentials to access the of/Servers/Servers.slab folder on the Key Exchange Admin Center (EAC). Service Mapping also uses the applicative credentials to run the following PowerShell commands against the MID Servers: * Get-ExchangeServer * Get-ExchangeServer * Get-MailboxServer * Get-ClusteredMailBoxServerStatus * Get-ExchangeServer * Get-StorageGroup * Get-MailboxDatabase {#map-service-containing-exchange-server__ul_ofg_p22_5fb} * (For Microsoft Exchange CAS 2010 and 2016) On the Windows Server hosting Microsoft Exchange CAS, install the Microsoft.Exchange.Management.PowerShell.E2010 module. * (For Microsoft Exchange CAS 2007) On the Windows Server hosting Microsoft Exchange CAS, install the Microsoft.Exchange.Management.PowerShell.Admin module. * (For Microsoft Exchange CAS 2007, 2010) On the ServiceNow AI Platform, upload the rctrlx tool for running PowerShell commands as described in [Upload the rctrlx.exe file to MID Servers](https://servicenow-prod.fluidtopics.net/Lg12WyHx7xFVPiVrKw_R_Q "Upload the rctrlx.exe file to MID Servers to enable running discovery commands on Microsoft Exchange 2007 and 2010, and Citrix XenApp."). * (For Microsoft Exchange CAS 2007 and 2010) Provide an Exchange Mailbox OS user with the rights to run Exchange services on Windows and has permission to query Exchange repository: On the ServiceNow AI Platform, configure [Windows credentials](https://www.servicenow.com/docs/access?context=r_WindowsCredentialsForm&version=yokohama&pubname=yokohama-platform-security&ft:locale=en-US) setting the Credential alias attribute to \[cmdb_ci_exchange_mailbox\]. Configuring this attribute allows you later to use the credential for this CI in patterns. * (Optional) For discovering using the WinRM protocol, see [Configure WinRM trusted hosts on MID Server](https://www.servicenow.com/docs/access?context=enable-winRM-MID-servers&version=yokohama&pubname=yokohama-servicenow-platform&ft:locale=en-US). * Verify that you know the entry point necessary for discovering the Microsoft Exchange Server. Use the URL for the Outlook web access in the following format: http(s)://\:\/owa For example, http(s)://myhost:\<443\>/owa {#map-service-containing-exchange-server__ul_ghq_dh2_5fb}Role required: service_mapping_admin ### Procedure 1. Create a service instance. 1. Navigate to AllService MappingService Instances. 2. Click New. The Discoverable by Service Mapping option is selected by default. 3. In the Name field, enter a descriptive name for the service instance. {#map-service-containing-exchange-server__substeps_fmn_1by_32b} 2. Define the entry point for this service instance: 1. Select the Web Application tile. The Discoverable by Service Mapping option is selected by default. 2. In the URL field, enter the URL of the Outlook web access. For example, http(s)://myhost:\<443\>/owa. 3. Click Add. 4. Click Save. {#map-service-containing-exchange-server__substeps_jxv_qby_32b} 3. Click Additional Info on the left and clear the Traffic based discovery check box. 4. Click Update. 5. Verify that the mapping result is satisfactory: 1. Click View Map and wait until the mapping is complete. It may take a few minutes. 2. Review the application service map and make sure that the service layout is as in the examples below.
{#map-service-containing-exchange-server__substeps_tzh_ycy_32b} If the mapping result is not as you expected, perform basic troubleshooting. {#map-service-containing-exchange-server__table_kjv_sdy_32b__entry__3} | Symptom | Cause | Solution | |-|-|-| | Discovery failed. The discovery log displays the message that starts with the following text: You must have the Exchange Common Commands PowerShell Snapin installed to use this script. | The indication sections of the pattern fail, because the user does not have permissions for running PowerShell commands. | Make sure that you provided a user with permissions to run PowerShell commands on servers that host Microsoft Exchange Server components, for example, CAS. | | Discovery failed. The discovery log displays the error message that starts with the following text: \[servername.destination.com\] Connecting to remote server failed with the following error message: The WinRM client can not process the request. The authentication mechanism requested by the client is not supported by the server or unencrypted traffic is disabled in the service configuration. Verify the unencrypted traffic setting in the service configuration or specify one of the authentication mechanisms supported by the server. | The indication sections of the pattern fail, because the MID Server is not configured as a trusted host on the component you are discovering. | Add the MID Server to the list of trusted hosts on all hosts that you want to discover. | | The application service map is very large, because it includes connections to all Outlook clients. | (In deployments using Microsoft Exchange Server 2007, 2010 or 2013), Service Mapping created connections using traffic-based discovery, which traces all open connections, instead of using PowerShell commands. | Make sure that you provided a user with permissions to run PowerShell commands on servers that host Microsoft Exchange Server components, for example, CAS. | [ ] {#map-service-containing-exchange-server__table_kjv_sdy_32b} *[\>]: and then