What is the difference between Journaling and the Exchange Store Manager and do I need both?
JOURNALING:
Journaling is Microsoft's method of making a copy of every message which travels through your mailstores. It ensures that you can retain a copy of every message sent regardless of if the user deletes it. The problem with this method is that the messages stay in the Journal Mailbox and it continues to grow and grow.
Archive Manager provides the ability to log into this Journal Mailbox, make a copy of each message and delete it from the mailbox, freeing space on your Exchange Server.
Archive Manager does not require journaling to function. It merely provides the added benefits to Microsoft's solution.
ESM:
Quest's own Exchange Store Manager (ESM) service logs into each mailbox and makes a copy of each message (or as configured) and stores it in the Archive Manager database, associating it to the user's mailbox. The potential drawback to this is that the ESM logs into each mailbox one at a time so it can take some time to fully process each mailbox. If a user receives a message then promptly deletes it before the ESM has had time to log into their mailbox and make a copy, that message will not be stored in the Archive Manager database.
For this reason, Journaling is often used in conjunction with the ESM to ensure all mail messages are captured in the Archive Manager database. This is particularly important if your company is bound by strict compliancy regulations.
When the journal mailbox is processed, the messages are stored in the Archive Manager database, but they are unassociated to any users until the ESM has processed the user's mailbox and associates that same message to their mailbox (if it exists in their Exchange mailbox).