How to use the Antigen utility (Antutil.exe) in Antigen to disconnect the Antigen services from the Microsoft Exchange Server services (905996)

MORE INFORMATION

If you are an administrator, you can use Antutil.exe to disconnect the Antigen services from the Exchange services. After you disconnect the Antigen services from the Exchange services, Antigen will be disabled. Antigen will still be installed, but it will no longer be connected to the Exchange server. Therefore, Antigen cannot scan incoming and outgoing e-mail messages. You may have to disable Antigen to troubleshoot issues with Antigen, to run diagnostics on the server, or to install a service pack on the server. For example, you can use Antutil.exe in the following scenario. You are experiencing an issue with Antigen. However, you are not sure whether the issue is caused by Antigen. In this scenario, you can use Antutil.exe to disable Antigen. Then, you can test to see whether the issue still occurs.

You can use the following command-line options with Antutil.exe:

• /status: Use this option to display the status of Antigen and of the Exchange server.
• /enable: Use this option to enable Antigen if the Exchange services have been stopped.
• /disable: Use this option to disable Antigen if the Exchange services have been stopped.
• /mode: Use this command to display the monitoring mode that is being used by Antigen. Antigen can use either the ESE monitoring mode or the VSAPI2 monitoring mode.

To use Antutil.exe to disconnect the Antigen services from the Exchange services, follow these steps:

1. Stop the Exchange services and the Antigen services:
   1. Click Start, click Run, type services.msc, and then click OK.
   2. Right-click the service that you want to stop, and then click Stop.
      
      Stop the Exchange services in the following order:
      • System Attendant
      • Information Store
      • MTA Stacks
      • Routing Engine
      • SMTP
      • IIS Admin Services
      • Windows Management Instrumentation
      Note When you stop the Exchange services, the Antigen services will automatically be stopped. If an Antigen service is still running after you stop the Exchange services, right-click the Antigen service that is still running. Then, click Stop.
2. Start a command prompt, and then move to the Antigen for Exchange folder. By default, the Antigen for Exchange folder is at the following path:

   C:\Program Files\Sybari Software\Antigen for Exchange

3. Type antutil /disable, and then press ENTER.
   
   Important When you run this command, the Antigen services will be disconnected from the Exchange services. During this time, Antigen will be disabled. Antigen will not be providing your environment with enhanced virus protection. We recommend that you use Antutil.exe to disable Antigen only in a controlled environment. Additionally, make sure to use an alternative method to maintain enhanced virus protection while Antigen is disabled.
4. To make sure that the Antigen services are disconnected from the Exchange services, type antutil /status, and then press ENTER.
   
   If the Antigen services are disconnected from Exchange services, the following text appears:

   Antigen currently not integrated.

5. Perform the tasks that are required to troubleshoot Antigen, to run diagnostics, or to install a service pack.
6. Restart the Exchange services that you stopped. To do this, follow these steps:
   1. Click Start, click Run, type services.msc, and then click OK.
   2. Right-click the Exchange service that you want to start, and then click Start.
      
      After you start the Exchange services, make sure that the Antigen services have restarted. The Antigen services should automatically restart after you restart the Exchanges services. If an Antigen service has not restarted, right-click the Antigen service. Then, click Start.