Re: IIS logs for Exchange/OMA Access
- From: "Adrian Marsh (NNTP)" <adrian.marsh@xxxxxxxxxxxxxxxxxxxxxxx>
- Date: Wed, 31 Jan 2007 15:15:17 +0000
Hi Robert,
"Please also take your time to check IIS setting to make sure they are
correctly configured. "
This is the bit I'm trying to check against, which is why I listed my
config. I've no idea what is "correct". Its currently set to whatever
CEICW left them as..
I've read through the docs, but they don't make it clear how these
should be configured for SBS2003, they always seem to talk in terms of
and Exchange Front/backend, which of course SBS is both..
Thanks,
adrian
Robert Li [MSFT] wrote:
Hi Adrian,.
Thanks for posting in our newsgroup.
First, after researching your IIS logs, I cannot give you valuable
suggestion. Because the data in the log is closely related to the
environment of your company, it¡®s hard to judge the values are high or
low. Some time error occurs even if you take a completely right action. For
example, when you visit http://PublicDomainName/exchange, first
¡°401.1-logon failed error¡± may occur, when you input the account and
password, ¡°200-OK. The client request has successes¡± is produced. So
it¡¯s difficult to draw a conclusion from these numbers.
If you want to know how IIS Status Codes is created, you must provide the
following information: Sitename, IP address, Port, username, SC-status and
so on to us. You can find this information in the IIS log. You can easily
gather the log with Monitoring and Reporting.
For more information, please refer to:
IIS Status Codes
http://support.microsoft.com/?id=318380
The SBS 2003 Monitoring and Reporting can monitor your server performance,
usage, health status and create report. You can configure these services
to monitoring your IIS and other performance. Although Monitoring and
Reporting cannot provide the same statistics as AWSTATS software, it can
help you monitor your system and provide information to prevent critical
problem from happening.
To do this, please take the following steps:
1. Open Server Management and then click Monitoring and Reporting.
2. Click Set Up Monitoring Reports and Alerts, and click Next.
3. Select Receive a daily performance report in e-mail, View the usage
report in Server Management, Receive a usage report in e-mail every other
week, and click OK.
4. Input e-mail address to receive the reports and click Next.
5. Select a user to view the usage report and click Next.
6. Input a e-mail to receive notification of performance alerts by e-mail,
and click Next.
7. Click Finish.
8. Click change Server Status Reporting Setting and click Next.
9. Click Server Performance Report and click Edit. On the Content tab, make
sure IIS log is selected and then click OK.
10. Click Server Usage Report and click Edit. On the Content tab, make sure
IIS log is selected and then click OK.
11. Click Close.
Please also take your time to check IIS setting to make sure they are
correctly configured.
If you need further assistance, please don¡¯t hesitate to let me know.
Best regards,
Robert Li(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
====================================================
PLEASE NOTE: The partner managed newsgroups are provided toassist with
break/fix issues and simple how to questions.
We also love to hear your product feedback! Let us know what you think by
posting from the web interface: Partner Feedback
from your newsreader: microsoft.private.directaccess.partnerfeedback.
We look forward to hearing from you!
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from this issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
====================================================
--------------------
<Message-ID: <45BFCECF.7000806@xxxxxxxxxxxxxxxxxxxxxxx>
<Date: Tue, 30 Jan 2007 23:03:43 +0000
<From: "Adrian Marsh (NNTP)" <adrian.marsh@xxxxxxxxxxxxxxxxxxxxxxx>
<User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
<MIME-Version: 1.0
<Subject: IIS logs for Exchange/OMA Access
<Content-Type: text/plain; charset=ISO-8859-1
<Content-Transfer-Encoding: 7bit
<X-Antivirus: avast! (VPS 000709-0, 30/01/2007), Outbound message
<X-Antivirus-Status: Clean
<Newsgroups: microsoft.public.windows.server.sbs
<NNTP-Posting-Host: 213-162-121-253.adrian080.adsl.metronet.co.uk
213.162.121.253
<Lines: 1
<Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:13955
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<All,
<
<I'm monitoring my IIS logs in awstats, and I see high failure counts
<(time period: 1 month, jan)
<
<302 Moved temporarily (redirect) 11273 52.5 % 6.41 MB
<500 Internal server Error 7993 37.2 % 2.39 MB
<401 Unauthorized 1025 4.7 % 865.85 KB
<206 Partial Content 670 3.1 % 10.82 MB
<403 Forbidden 421 1.9 % 154.61 KB
<404 Document Not Found 52 0.2 % 86.29 KB
<301 Moved permanently (redirect) 29 0.1 % 11.11 KB
<400 Bad Request 2 0 % 25 Bytes
<503 Server busy 1 0 % 424 Bytes
<440 Unknown error 1 0 % 452 Bytes
<
<Are these high numbers? It looks so to me..
<
<This is a single card SBS2003 SP2, R1 system, with <10 mobile WM5 users.
<
<The ones that concern me the most are the 500 messages. Heres a log
<snapshot (names changed to protect from SPAM)
<
<Whats the event-flow for a WM5 accessing then? I see a 200 first for
</Microsoft-Server-Activesync, followed by a 401 on exchange-oma..
<
<The user has all of the Exchange mobile features ticked.
<
<2007-01-30 18:52:09 OPTIONS /Microsoft-Server-ActiveSync domain\myuser
<193.35.129.161 HTTP/1.1 MSFT-PPC/5.1.2300 - 200 587
<2007-01-30 18:52:09 PROPFIND
</exchange-oma/joe.bloggs@xxxxxxxxxxxxx/NON_IPM_SUBTREE/Microsoft-Server-Act
iveSync/PocketPC/37376433EC2F107EC86AB9B2AB8CEC09
<- 192.168.50.3 HTTP/1.1 Microsoft-Server-ActiveSync/6.5.7638.1 - 401 597
<2007-01-30 18:52:09 PROPFIND
</exchange-oma/joe.bloggs@xxxxxxxxxxxxx/NON_IPM_SUBTREE/Microsoft-Server-Act
iveSync/PocketPC/37376433EC2F107EC86AB9B2AB8CEC09
<domain\myuser 192.168.50.3 HTTP/1.1
<Microsoft-Server-ActiveSync/6.5.7638.1 - 409 377
<2007-01-30 18:52:09 MKCOL
</exchange-oma/joe.bloggs@xxxxxxxxxxxxx/NON_IPM_SUBTREE/Microsoft-Server-Act
iveSync
<- 192.168.50.3 HTTP/1.1 Microsoft-Server-ActiveSync/6.5.7638.1 - 403 379
<2007-01-30 18:52:09 POST /Microsoft-Server-ActiveSync domain\myuser
<193.35.129.161 HTTP/1.1 MSFT-PPC/5.1.2300 - 403 297
<
<I'm trying to verify my IIS folder settings:
<
</Exchange
< Anonymous Access: Unticked
< Integrated Windows Authentication: Ticked
< Basic Authentication: Ticked
< Default Domain: \
< SSL Required: Ticked, Require 128bit
<
</exchange-oma
< Anonymous Access: Ticked
< Integrated Windows Authentication: Ticked
< Basic Authentication: Ticked
< Default Domain: \
< SSL Required: Unticked
<
</Exadmin
< Anonymous Access: Unticked
< Integrated Windows Authentication: Ticked
< Basic Authentication: Ticked
< Default Domain: \
< SSL Required: Ticked, Require 128bit
<
</ExchWeb
< Anonymous Access: Ticked
< Integrated Windows Authentication: Unticked
< Basic Authentication: Unticked
< Default Domain: Greyed out
< SSL Required: Ticked, Require 128bit
<
</Microsoft-Server-Activesync
< Anonymous Access: Unticked
< Integrated Windows Authentication: ticked
< Basic Authentication: ticked
< Default Domain: \
< SSL Required: Unticked
<
<
- References:
- IIS logs for Exchange/OMA Access
- From: Adrian Marsh (NNTP)
- RE: IIS logs for Exchange/OMA Access
- From: Robert Li [MSFT]
- IIS logs for Exchange/OMA Access
- Prev by Date: scheduled tasks
- Next by Date: Re: XCOPY syncronise?
- Previous by thread: RE: IIS logs for Exchange/OMA Access
- Next by thread: Re: IIS logs for Exchange/OMA Access
- Index(es):
Relevant Pages
|