The ChangeAuditor Agent uses the COM+ and Distributed Transaction
Coordinator (DTC) services locally on the host server for detecting Exchange Server 2003 message created, moved, copied and deleted events. If the COM+ or DTC services are disabled or inoperative, these events will not be detected but the Agent will otherwise run normally. Network access to DTC is not
required. When enabling the COM+ service, a ChangeAuditor Agent restart is required, because COM+ service registration occurs at agent startup time.