RE: SBS 2003 stand, useage report file

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

HI Paul,

Thanks for updates.

Have you checked my last reply, all the information you might find it in
IIS log, you can check the log files, we have no option to check it in ISA,
if you did not see my last reply, I will paste again here:

With the information, you could know the users log time, but the source
computer will not be displayed since the client computer use IE to logon to
IIS pages. If you want to know more information about the IIS session, you
could use IIS logs.

1. Open Internet Information Services (IIS) console <Server name>
right click ''Default Web Site'' to choose ''Properties''.

2. Under the ''Web Site'' tab, check the option ''Enable Logging''.

3. With ''W3C Extended Log File Format'', click ''Properties''.

4. Under ''General Properties'', make sure ''Use local time for file
naming and rollover'' is CHECKED.

5. Switch to the ''Extended Properties'', and then select to enable
All the logging Options.

6. Click OK to apply the modification.

7. By Default, the log files are created in the
''%systemroot%\system32\logfiles\W3SVC1'' folder.

You could view more information through log files.

More info:

1. In SBS today, we do audit failed and successful AD logons and RWW
logons are included here, but not currently distinguishable from other
logons. If you are concerned about password attacks, this is the right
place to look as these would not be limited to RWW. You could check the
event logs on clients to know when users log on and off if you are truly
concerned about knowing when people telecommute.

2. TS provides advanced auditing functionality that may be able to be
used here: Server Management->Advanced Management->Terminal Services
Configuration->Connections->Right click RDP-TCP->Properties->Permissions
tab->Advanced->Auditing tab->Add select a user from AD->OK-> Here you'll
see auditing you can perform around connections, etc.

3. You can update the RWW pages to run a script or write to the event
log each time someone logs in. For updating the RWW page, you may need to
develop it. However, we may consider this for the next version of SBS.

We are sorry for any inconvenience, I will be here waiting for your
updates.



Best regards,

Charles Yang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: SBS 2003 stand, useage report file
| thread-index: AcWk3KT9rrS6aGEwQcyc6jQwZroBvg==
| X-WBNR-Posting-Host: 86.133.94.146
| From: "=?Utf-8?B?UGF1bF9ISVQ=?=" <PaulHIT@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <6EF00950-20C9-4AE9-8FC4-7ABC553DA8C0@xxxxxxxxxxxxx>
<Ol3Hn6SXFHA.3052@xxxxxxxxxxxxxxxxxxxxx>
<BC65877C-BFB6-466D-BF41-2AFBEEA01082@xxxxxxxxxxxxx>
<qdcRKm4XFHA.388@xxxxxxxxxxxxxxxxxxxxx>
<DC7D3948-71F1-4FE1-8CB7-E472811A2F71@xxxxxxxxxxxxx>
<CKJMKDAYFHA.3336@xxxxxxxxxxxxxxxxxxxxx>
<3ABD1F76-E125-4B63-83B5-2AB22B6A3BD0@xxxxxxxxxxxxx>
<FnfsMVHnFHA.944@xxxxxxxxxxxxxxxxxxxxx>
<DE5C9648-35D7-44FC-92F2-796C520991A1@xxxxxxxxxxxxx>
<TV$50VMnFHA.944@xxxxxxxxxxxxxxxxxxxxx>
<0BFB2715-BE5B-41EE-9F3B-59481E550FFA@xxxxxxxxxxxxx>
| Subject: RE: SBS 2003 stand, useage report file
| Date: Fri, 19 Aug 2005 09:40:02 -0700
| Lines: 316
| Message-ID: <27DC1554-E116-40DB-8A23-2DD489D77108@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:145975
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi Charles,
|
| Many Thanks for the info, useful stuff.
|
| What I want to monitor is the web activity (web sites visited, MSN
| Messeneger Usage, etc,etc) of the locally logged on AD users. There does
not
| seem to be any detail in the of the sites visited by which users at what
| times. Is there any way of getting this detail. Is this done via ISA and
if
| so how do I access/monitor/confgiure ISA?
|
| Once again many thanks for your help.
|
| Paul.
|
| "Paul_HIT" wrote:
|
| > Charles,
| >
| > Many thanks for your help - the monotoring is working fine now
following the
| > re-install.
| >
| > Just another slight problem - although the reports are now working
there
| > does not seem to be any detail regarding internet useage. Is there any
way I
| > can monitor and log the actual web sites that users are accessing, this
does
| > not appear to be in the logs that I can access?
| >
| > Once again many thanks for your help.
| >
| > Paul.
| >
| >
| >
| >
| >
| > ""Charles Yang [MSFT]"" wrote:
| >
| > > Hi,
| > >
| > > Thanks for updates.
| > >
| > > I suggest you try to use reinstall option when running monitoring
wizard,
| > > it will help reinstall all the option on the monitoring wizard. As
you
| > > referred the error, it should not relate to monitoring wizard, it
might
| > > relate to sharepoint error. IF you did not encountered any problem in
| > > sharepoint services, you can refer to the KB article below to see if
the
| > > issue can be resolved.
| > >
| > > 840685 An event ID 1000 error message is logged to the application
event log
| > > http://support.microsoft.com/?id=840685
| > >
| > > Please also rerun CEICW to make sure that IIS is configure correctly.
| > >
| > > Thanks for your effort in this issue.
| > >
| > >
| > >
| > > Best regards,
| > >
| > > Charles Yang (MSFT)
| > >
| > > Microsoft CSS Online Newsgroup Support
| > >
| > > Get Secure! - www.microsoft.com/security
| > >
| > > ======================================================
| > > This newsgroup only focuses on SBS technical issues. If you have
issues
| > > regarding other Microsoft products, you'd better post in the
corresponding
| > > newsgroups so that they can be resolved in an efficient and timely
manner.
| > > You can locate the newsgroup here:
| > > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > >
| > > When opening a new thread via the web interface, we recommend you
check the
| > > "Notify me of replies" box to receive e-mail notifications when there
are
| > > any updates in your thread. When responding to posts via your
newsreader,
| > > please "Reply to Group" so that others may learn and benefit from
your
| > > issue.
| > >
| > > Microsoft engineers can only focus on one issue per thread. Although
we
| > > provide other information for your reference, we recommend you post
| > > different incidents in different threads to keep the thread clean. In
doing
| > > so, it will ensure your issues are resolved in a timely manner.
| > >
| > > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > > check http://support.microsoft.com for regional support phone numbers.
| > >
| > > Any input or comments in this thread are highly appreciated.
| > > ======================================================
| > > This posting is provided "AS IS" with no warranties, and confers no
rights.
| > >
| > >
| > > =====================================================
| > > When responding to posts, please "Reply to Group" via your newsreader
so
| > > that others may learn and benefit from your issue.
| > > =====================================================
| > >
| > > This posting is provided "AS IS" with no warranties, and confers no
rights.
| > >
| > > --------------------
| > > | Thread-Topic: SBS 2003 stand, useage report file
| > > | thread-index: AcWcv5xTc7C2s5FaRnuYQvvH0oZwiQ==
| > > | X-WBNR-Posting-Host: 81.157.71.132
| > > | From: "=?Utf-8?B?UGF1bF9ISVQ=?=" <PaulHIT@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > > | References: <6EF00950-20C9-4AE9-8FC4-7ABC553DA8C0@xxxxxxxxxxxxx>
| > > <Ol3Hn6SXFHA.3052@xxxxxxxxxxxxxxxxxxxxx>
| > > <BC65877C-BFB6-466D-BF41-2AFBEEA01082@xxxxxxxxxxxxx>
| > > <qdcRKm4XFHA.388@xxxxxxxxxxxxxxxxxxxxx>
| > > <DC7D3948-71F1-4FE1-8CB7-E472811A2F71@xxxxxxxxxxxxx>
| > > <CKJMKDAYFHA.3336@xxxxxxxxxxxxxxxxxxxxx>
| > > <3ABD1F76-E125-4B63-83B5-2AB22B6A3BD0@xxxxxxxxxxxxx>
| > > <FnfsMVHnFHA.944@xxxxxxxxxxxxxxxxxxxxx>
| > > | Subject: RE: SBS 2003 stand, useage report file
| > > | Date: Tue, 9 Aug 2005 01:52:02 -0700
| > > | Lines: 168
| > > | Message-ID: <DE5C9648-35D7-44FC-92F2-796C520991A1@xxxxxxxxxxxxx>
| > > | MIME-Version: 1.0
| > > | Content-Type: text/plain;
| > > | charset="Utf-8"
| > > | Content-Transfer-Encoding: 7bit
| > > | X-Newsreader: Microsoft CDO for Windows 2000
| > > | Content-Class: urn:content-classes:message
| > > | Importance: normal
| > > | Priority: normal
| > > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > > | Newsgroups: microsoft.public.windows.server.sbs
| > > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > > | Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.sbs:142659
| > > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > > |
| > > | Hi Charles,
| > > |
| > > | Thanks for the prompt response.
| > > |
| > > | I have ran the wizard a number of times and still no data after
several
| > > days.
| > > |
| > > | However this morning there is an alert for the "Performance Logs
and
| > > Alerts
| > > | Service" is not running. (I think this has now come up since I set
the
| > > | service to automatic recently?)
| > > |
| > > | When I try to start the service manually it briefly starts and then
stops
| > > | with the message that it started but then stopped because it has no
work
| > > to
| > > | do!
| > > |
| > > | I have checked the Event Viewer but there are very few errors and
nothing
| > > | specfic to monitoring but there is one error for Share Point as
follows:-
| > > |
| > > | " #50070: Unable to connect to the database STS_Config on
| > > | SERVER2003\SharePoint. Check the database connection information
and
| > > make
| > > | sure that the database server is running."
| > > |
| > > | Is this relevant?
| > > |
| > > | Many Thanks
| > > |
| > > | Paul.
| > > |
| > > |
| > > |
| > > |
| > > |
| > > | ""Charles Yang [MSFT]"" wrote:
| > > |
| > > | > HI,
| > > | >
| > > | > Thanks for updates.
| > > | >
| > > | > As I know, this issue might be caused by the reports data is not
| > > available,
| > > | > please make sure that you have configure the monitoring to
collect
| > > | > information and then after some time you can check if the
information
| > > is
| > > | > collected, if not please help check event view to see if any
related
| > > error
| > > | > messages, so that we can know if the monitoring component is
corrupted.
| > > | >
| > > | > Thanks for understanding.
| > > | >
| > > | >
| > > | >
| > > | >
| > > | >
| > > | > Best regards,
| > > | >
| > > | > Charles Yang (MSFT)
| > > | >
| > > | > Microsoft CSS Online Newsgroup Support
| > > | >
| > > | > Get Secure! - www.microsoft.com/security
| > > | >
| > > | > ======================================================
| > > | > This newsgroup only focuses on SBS technical issues. If you have
issues
| > > | > regarding other Microsoft products, you'd better post in the
| > > corresponding
| > > | > newsgroups so that they can be resolved in an efficient and
timely
| > > manner.
| > > | > You can locate the newsgroup here:
| > > | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > > | >
| > > | > When opening a new thread via the web interface, we recommend you
check
| > > the
| > > | > "Notify me of replies" box to receive e-mail notifications when
there
| > > are
| > > | > any updates in your thread. When responding to posts via your
| > > newsreader,
| > > | > please "Reply to Group" so that others may learn and benefit from
your
| > > | > issue.
| > > | >
| > > | > Microsoft engineers can only focus on one issue per thread.
Although we
| > > | > provide other information for your reference, we recommend you
post
| > > | > different incidents in different threads to keep the thread
clean. In
| > > doing
| > > | > so, it will ensure your issues are resolved in a timely manner.
| > > | >
| > > | > For urgent issues, you may want to contact Microsoft CSS
directly.
| > > Please
| > > | > check http://support.microsoft.com for regional support phone
numbers.
| > > | >
| > > | > Any input or comments in this thread are highly appreciated.
| > > | > ======================================================
| > > | > This posting is provided "AS IS" with no warranties, and confers
no
| > > rights.
| > > | >
| > > | >
| > > | > =====================================================
| > > | > When responding to posts, please "Reply to Group" via your
newsreader
| > > so
| > > | > that others may learn and benefit from your issue.
| > > | > =====================================================
| > > | >
| > > | > This posting is provided "AS IS" with no warranties, and confers
no
| > > rights.
| > > | >
| > > | > --------------------
| > > | > | Thread-Topic: SBS 2003 stand, useage report file
| > > | > | thread-index: AcWcPs7XZSgMnO5MRBKNw6g1M/gG0g==
| > > | > | X-WBNR-Posting-Host: 81.157.71.132
| > > | > | From: "=?Utf-8?B?UGF1bF9ISVQ=?="
<Paul_HIT@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > > | > | References:
<6EF00950-20C9-4AE9-8FC4-7ABC553DA8C0@xxxxxxxxxxxxx>
| > > | > <Ol3Hn6SXFHA.3052@xxxxxxxxxxxxxxxxxxxxx>
| > > | > <BC65877C-BFB6-466D-BF41-2AFBEEA01082@xxxxxxxxxxxxx>
| > > | > <qdcRKm4XFHA.388@xxxxxxxxxxxxxxxxxxxxx>
| > > | > <DC7D3948-71F1-4FE1-8CB7-E472811A2F71@xxxxxxxxxxxxx>
| > > | > <CKJMKDAYFHA.3336@xxxxxxxxxxxxxxxxxxxxx>
| > > | > | Subject: RE: SBS 2003 stand, useage report file
| > > | > | Date: Mon, 8 Aug 2005 10:30:02 -0700
| > > | > | Lines: 39
| > > | > | Message-ID: <3ABD1F76-E125-4B63-83B5-2AB22B6A3BD0@xxxxxxxxxxxxx>
| > > | > | MIME-Version: 1.0
| > > | > | Content-Type: text/plain;
| > > | > | charset="Utf-8"
| > > | > | Content-Transfer-Encoding: 7bit
| > > | > | X-Newsreader: Microsoft CDO for Windows 2000
| > > | > | Content-Class: urn:content-classes:message
| > > | > | Importance: normal
| > > | > | Priority: normal
| > > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > > | > | Newsgroups: microsoft.public.windows.server.sbs
| > > | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > > | > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > > | > | Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.sbs:142431
| > > | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > > | > |
| > > | > | Can I please ask a related question on monitroing and reporting?
| > > | > | My problem is that I get the message "No usage data is
available for
| > > this
| > > | > | time period" no matter what settings I seem to use. I have ran
the
| > > setup
| > > | > | wizard several times and also applied SBS 2003 SP1 over the
weekend
| > > all
| > > | > to no
| > > | > | avail. Any help greatfully appreciated.
| > > | > |
| > > | > | Paul.
| > > | > |
| > > | > | ""Charles Yang [MSFT]"" wrote:
| > > | > |
| > > | > | > Hi,
| > > | > | > Thanks for updates.
| > > | > | >
| > > | > | > From your description, it seems you want to reset the setting
for
| > > the
| > > | > | > monitoring and reporting. As I know, the best way to reset
this
| > > setting
| > > | > is
| > > | > | > to configure the monitoring and reporting wizard, you can run
the
| > > | > "Change
| > > | > | > server statue report" wizard to configure the setting for the
usage
| > > | > | > reports, you can create a new log file in the event view to
filter
| > > the
| > > | > | > event you want to display in the usage reports. And add the
log in
| > > | > usage
| > > | > | > report.
| > > | > | >
| > > | > | > Hope the above information helpful. Your satisfaction is our
top
| > > goal.
| > > | > | >
| > > | > | > Best regards,
| > > | > | >
| > > | > | > Charles Yang (MSFT)
| > > | > | >
| > > | > | > Microsoft CSS Online Newsgroup Support
| > > | > | >
| > > | > | > Get Secure! - www.microsoft.com/security
| > > | > | >
| > > | > | > =====================================================
| > > | > | > When responding to posts, please "Reply to Group" via your
| > > newsreader
| > > | > so
| > > | > | > that others may learn and benefit from your issue.
| > > | > | > =====================================================
| > > | > | >
| > > | > | > This posting is provided "AS IS" with no warranties, and
confers no
|

.

Relevant Pages

  • RE: OMA-ActiveSynch broken - HTTP_403 and Cat: 1000 error: 0 error
    ... I have emailed you the data and log files as requested. ... Go to Start/Administrative Tools/Internet Information Services (IIS) ... Under Virtual Directory tab, please double confirm the content of the ... Restart the Microsoft Exchange System Attendant service. ...
    (microsoft.public.windows.server.sbs)
  • RE: Office 07 - Vista: 52F Failures for Office Security/Outlook Update
    ... I have had the same problem with Office 2003 updates getting the same ... Viewer and various log files such as the MSI*.log files. ... the MS Sync feature to effectively share 1 master IE7 favorites. ... This post is a suggestion for Microsoft, ...
    (microsoft.public.officeupdate)
  • Re: Deleted web site
    ... of the IIS. ... You can find this log files at the locations: ... I am here waiting for your updates. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Problem with connect computer wizard
    ... Make sure the Windows XP client is pointing to the SBS 2003 server as ... Please collect the IIS metabase and the latest IIS log files further ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: unexpected failure during the setup - help!
    ... I have conducted a lot of research in the log files and I suggest we check ... If the "Remote Registry Service" is ... Microsoft Online Support ... Microsoft Global Technical Support Center ...
    (microsoft.public.sqlserver.setup)