Q: Why is the Exchange System Manager Message Tracking display off by one hour?
A: An issue has been identified in Exchange 2003 where Exchange System Manager’s (ESM) Message Tracking functionality incorrectly displays tracked messages by one hour ahead. This issue occurs after installation of the February 2007 cumulative time zone update (KB 931836). It’s important to note that the actual data in the message tracking logs is correct; it’s merely a presentation issue in ESM’s Message Tracking. Additionally, once we enter into Daylight Savings Time, this issue will no longer manifest itself.
More Information: Our Microsoft Exchange Sustained Engineering Team has been engaged, and both Sustained Engineering and Customer Support Services are currently reviewing our options on how to best address this issue.
Workaround: If you need to verify the message tracking data, you can use Wordpad to manually view correct data in the message tracking logs (by default, located at C:\Program Files\Exchsrvr\SERVERNAME.log). Note that the time will be stored in GMT, and you will have to take into account your current time zone, and adjust accordingly. Alternatively, you could simply subtract one hour from the timestamp shown by ESM’s Message Tracking until this issue is fully addressed.