Re: IIS logs for Exchange/OMA Access

Hi Adrian,

Please send the logs to me for further research.

I am looking forward to hear from you.


Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<Message-ID: <45CF6488.5060306@xxxxxxxxxxxxxxxxxxxxxxx>
<Date: Sun, 11 Feb 2007 18:46:32 +0000
<From: "Adrian Marsh (NNTP)" <adrian.marsh@xxxxxxxxxxxxxxxxxxxxxxx>
<User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
<MIME-Version: 1.0
<Subject: Re: IIS logs for Exchange/OMA Access
<References: <45BFCECF.7000806@xxxxxxxxxxxxxxxxxxxxxxx>
<VFC$OpSRHHA.3792@xxxxxxxxxxxxxxxxxxxxxx>
<#0CU3uURHHA.1016@xxxxxxxxxxxxxxxxxxxx>
<p3U1AzfRHHA.196@xxxxxxxxxxxxxxxxxxxxxx>
<u8Ck66sRHHA.5032@xxxxxxxxxxxxxxxxxxxx>
<45C5D606.5030305@xxxxxxxxxxxxxxxxxxxxxxx>
<KApXBeSSHHA.2268@xxxxxxxxxxxxxxxxxxxxxx>
<Uzh#iDZSHHA.4068@xxxxxxxxxxxxxxxxxxxxxx>
<In-Reply-To: <Uzh#iDZSHHA.4068@xxxxxxxxxxxxxxxxxxxxxx>
<Content-Type: text/plain; charset=ISO-8859-1
<Content-Transfer-Encoding: 8bit
<X-Antivirus: avast! (VPS 000712-6, 11/02/2007), Outbound message
<X-Antivirus-Status: Clean
<Newsgroups: microsoft.public.windows.server.sbs
<NNTP-Posting-Host: 213-162-121-253.adrian080.adsl.metronet.co.uk
213.162.121.253
<Lines: 1
<Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:16324
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<Robert,
<
<I've not forgotten about this.. just haven't gotten to it yet. Hope to
<email you some logs this week.
<
<Adrian
<
<Robert Li [MSFT] wrote:
<> Hi Adrian,
<>
<> You can use the Mobile 5.0 successful but there are many errors in the
IIS
<> log. Please give me your IISLog and IISMETABASE and I will have a check.
<>
<> 1. Collect IIS Log:
<> 1) On Exchange Serves, open IIS MMC, right click Default Web Site and
then
<> click Properties.
<> 2) Click Website tab and then check Enable loggin
<> 3) Stop the Default Website and RENAME the existing IIS log files under
<> C:\WINDOWS\system32\LogFiles\W3SVC1.
<> 4) Restart the Default Website and reproduce the problem, which will
<> generate new IIS log file with the exact error.
<> 5). Go to the following folder on Exchange Server:
<> C:\WINDOWS\system32\LogFiles\W3SVC
<>
<> 2.Collect IIS Metabase
<> 1) On Exchange Server, install .NET Framework Version 1.1:
<>
http://www.microsoft.com/downloads/details.aspx?FamilyID=262d25e3-f589-4842-
<> 8157-034d1e7cf3a3&DisplayLang=en.
<> 2) Install MBExplorer by installing IIS 6 Resource Kit Tools:
<>
http://www.microsoft.com/downloads/details.aspx?FamilyId=56FC92EE-A71A-4C73-
<> B628-ADE629C89499&displaylang=en.
<> 3) Once it is installed, access it from Start, Programs, IIS Resources,
<> Metabase Explorer.
<> 4) In the left pane, right click ''LM'' (under your server computer
name)
<> to choose ''Export to file'', and then save it as IIS.mbk.
<> 5) Compress this mbk file and send it to me for analysis. Please let me
<> know the password if you set on this iis mbk file.
<>
<> Please send the information to v-robeli@xxxxxxxxxxxxx with subject:
<> 37643242-IIS logs for Exchange/OMA Access.
<>
<> I am looking forward to here from you.
<>
<>
<> Best regards,
<>
<> Robert Li(MSFT)
<>
<> Microsoft CSS Online Newsgroup Support
<>
<> Get Secure! - www.microsoft.com/security
<>
<> =====================================================
<>
<> This newsgroup only focuses on SBS technical issues. If you have issues
<> regarding other Microsoft products, you'd better post in the
corresponding
<> newsgroups so that they can be resolved in an efficient and timely
manner.
<> You can locate the newsgroup here:
<> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<>
<> When opening a new thread via the web interface, we recommend you check
the
<> "Notify me of replies" box to receive e-mail notifications when there
are
<> any updates in your thread. When responding to posts via your
newsreader,
<> please "Reply to Group" so that others may learn and benefit from your
<> issue.
<>
<> Microsoft engineers can only focus on one issue per thread. Although we
<> provide other information for your reference, we recommend you post
<> different incidents in different threads to keep the thread clean. In
doing
<> so, it will ensure your issues are resolved in a timely manner.
<>
<> For urgent issues, you may want to contact Microsoft CSS directly.
Please
<> check http://support.microsoft.com for regional support phone numbers.
<>
<> Any input or comments in this thread are highly appreciated.
<>
<> =====================================================
<>
<> This posting is provided "AS IS" with no warranties, and confers no
rights.
<>
<> --------------------
<> <X-Tomcat-ID: 241735780
<> <References: <45BFCECF.7000806@xxxxxxxxxxxxxxxxxxxxxxx>
<> <VFC$OpSRHHA.3792@xxxxxxxxxxxxxxxxxxxxxx>
<> <#0CU3uURHHA.1016@xxxxxxxxxxxxxxxxxxxx>
<> <p3U1AzfRHHA.196@xxxxxxxxxxxxxxxxxxxxxx>
<> <u8Ck66sRHHA.5032@xxxxxxxxxxxxxxxxxxxx>
<> <45C5D606.5030305@xxxxxxxxxxxxxxxxxxxxxxx>
<> <MIME-Version: 1.0
<> <Content-Type: text/plain
<> <Content-Transfer-Encoding: 7bit
<> <From: v-robeli@xxxxxxxxxxxxxxxxxxxx (Robert Li [MSFT])
<> <Organization: Microsoft
<> <Date: Mon, 05 Feb 2007 13:13:57 GMT
<> <Subject: Re: IIS logs for Exchange/OMA Access
<> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <Message-ID: <KApXBeSSHHA.2268@xxxxxxxxxxxxxxxxxxxxxx>
<> <Newsgroups: microsoft.public.windows.server.sbs
<> <Lines: 417
<> <Path: TK2MSFTNGHUB02.phx.gbl
<> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:14963
<> <NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
<> <
<> <Hi Adrian,
<> <
<> <After researching your log, I cannot find anything unexpected.
Sometimes
<> <error occurs even if you take a completely right action.
<> <
<> <The Default domain field is different in different virtual directory. I
<> <don't recommend you change them manually. Please leave them as they
were.
<> <
<> <The error in the log was caused by random accidents. Please keep
<> monitoring
<> <your SBS server. If you have any update, please let me know.
<> <
<> <Best regards,
<> <
<> <Robert Li(MSFT)
<> <
<> <Microsoft CSS Online Newsgroup Support
<> <
<> <Get Secure! - www.microsoft.com/security
<> <
<> <=====================================================
<> <
<> <This newsgroup only focuses on SBS technical issues. If you have issues
<> <regarding other Microsoft products, you'd better post in the
corresponding
<> <newsgroups so that they can be resolved in an efficient and timely
manner.
<> <You can locate the newsgroup here:
<> <http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<> <
<> <When opening a new thread via the web interface, we recommend you check
<> the
<> <"Notify me of replies" box to receive e-mail notifications when there
are
<> <any updates in your thread. When responding to posts via your
newsreader,
<> <please "Reply to Group" so that others may learn and benefit from your
<> <issue.
<> <
<> <Microsoft engineers can only focus on one issue per thread. Although we
<> <provide other information for your reference, we recommend you post
<> <different incidents in different threads to keep the thread clean. In
<> doing
<> <so, it will ensure your issues are resolved in a timely manner.
<> <
<> <For urgent issues, you may want to contact Microsoft CSS directly.
Please
<> <check http://support.microsoft.com for regional support phone numbers.
<> <
<> <Any input or comments in this thread are highly appreciated.
<> <
<> <=====================================================
<> <
<> <This posting is provided "AS IS" with no warranties, and confers no
rights.
<> <
<> <--------------------
<> <<Message-ID: <45C5D606.5030305@xxxxxxxxxxxxxxxxxxxxxxx>
<> <<Date: Sun, 04 Feb 2007 12:48:06 +0000
<> <<From: "Adrian Marsh (NNTP)" <adrian.marsh@xxxxxxxxxxxxxxxxxxxxxxx>
<> <<User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
<> <<MIME-Version: 1.0
<> <<Subject: Re: IIS logs for Exchange/OMA Access
<> <<References: <45BFCECF.7000806@xxxxxxxxxxxxxxxxxxxxxxx>
<> <<VFC$OpSRHHA.3792@xxxxxxxxxxxxxxxxxxxxxx>
<> <<#0CU3uURHHA.1016@xxxxxxxxxxxxxxxxxxxx>
<> <<p3U1AzfRHHA.196@xxxxxxxxxxxxxxxxxxxxxx>
<> <<u8Ck66sRHHA.5032@xxxxxxxxxxxxxxxxxxxx>
<> <<In-Reply-To: <u8Ck66sRHHA.5032@xxxxxxxxxxxxxxxxxxxx>
<> <<Content-Type: text/plain; charset=ISO-8859-1
<> <<Content-Transfer-Encoding: 8bit
<> <<X-Antivirus: avast! (VPS 000710-0, 03/02/2007), Outbound message
<> <<X-Antivirus-Status: Clean
<> <<Newsgroups: microsoft.public.windows.server.sbs
<> <<NNTP-Posting-Host: 213-162-121-253.adrian080.adsl.metronet.co.uk
<> <213.162.121.253
<> <<Lines: 1
<> <<Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
<> <<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:14844
<> <<X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <<
<> <<I've re-run CEICW (again), and again it reset the Recipients Policy,
<> <<which I then had to reset again..
<> <<
<> <<I'll wait and see if thats helped.. I still see lots of 401 errors in
<> <<the log though.
<> <<
<> <<Adrian Marsh (NNTP) wrote:
<> <<> I've sent a smaller log sample now..
<> <<>
<> <<> Robert Li [MSFT] wrote:
<> <<>> Hi Adrian,
<> <<>>
<> <<>> Thanks for updating.
<> <<>>
<> <<>> First, I don¡¯t suggest you change the IIS Authentication Methods
<> <manually.
<> <<>> When you run the CEICW, the wizard will configure these settings
for
<> <you.
<> <<>>
<> <<>> I would like to provide the default setting for your reference:
<> <<>>
<> <<>> 1. Open IIS Manager
<> <<>> 2. Open properties of the following virtual directories.
<> <<>> 3. Select Directory Security tab
<> <<>> 4. Select Edit in Authentication and access control box. Check the
<> <<>> following:
<> <<>>
<> <<>> ?/exchange-oma
<> <<>> Authentication Methods
<> <<>> Enabled Basic authentication
<> <<>> Enabled Integrated Windows authentication
<> <<>> Disabled anonymous access
<> <<>>
<> <<>> /OMA virtual directory and Microsoft-Server-ActiveSync virtual
<> <directory:
<> <<>> Authentication Methods
<> <<>> Uncheck Enable anonymous access
<> <<>> ?Uncheck? Integrated Windows authentication
<> <<>> ?Check Basic authentication
<> <<>>
<> <<>> /Exchange
<> <<>> Authentication Methods
<> <<>> Enabled Basic authentication
<> <<>> Enabled Integrated Windows authentication
<> <<>> Disabled anonymous access
<> <<>>
<> <<>> /Exadmin
<> <<>> Authentication Methods
<> <<>> Disabled Basic authentication
<> <<>> Enable Integrated Windows authentication
<> <<>> Disable anonymous access
<> <<>>
<> <<>> /ExchWeb
<> <<>> Authentication Methods
<> <<>> Disabled Basic authentication
<> <<>> Disabled Integrated Windows authentication
<> <<>> Enable anonymous access
<> <<>>
<> <<>> You motioned ¡°I¡¯'ve read through the docs, but they don't make it
<> <clear
<> <<>> how these should be configured for SBS2003¡±, I don¡¯t know which
<> <article
<> <<>> your refer to. If it¡¯s ¡®IIS Status Codes¡¯, that applies to
<> Microsoft
<> <<>> Internet Information Server 4.0, 5.0 and 6.0. If you refer to the
way
<> <on
<> <<>> how to configure the Monitoring and Reporting, you can just do that
on
<> <the
<> <<>> SBS Server.
<> <<>>
<> <<>> I haven¡¯t received the e-mail from you, please send to
<> <<>> v-robeli@xxxxxxxxxxxxxx
<> <<>>
<> <<>> I am looking forwarding to hear from you.
<> <<>>
<> <<>> Best regards,
<> <<>>
<> <<>> Robert Li(MSFT)
<> <<>>
<> <<>> Microsoft CSS Online Newsgroup Support
<> <<>>
<> <<>> Get Secure! - www.microsoft.com/security
<> <<>>
<> <<>> =====================================================
<> <<>>
<> <<>> This newsgroup only focuses on SBS technical issues. If you have
<> issues
<> <<>> regarding other Microsoft products, you'd better post in the
<> <corresponding
<> <<>> newsgroups so that they can be resolved in an efficient and timely
<> <manner.
<> <<>> You can locate the newsgroup here:
<> <<>> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<> <<>>
<> <<>> When opening a new thread via the web interface, we recommend you
<> check
<> <the
<> <<>> "Notify me of replies" box to receive e-mail notifications when
there
<> <are
<> <<>> any updates in your thread. When responding to posts via your
<> <newsreader,
<> <<>> please "Reply to Group" so that others may learn and benefit from
your
<> <<>> issue.
<> <<>>
<> <<>> Microsoft engineers can only focus on one issue per thread.
Although
<> we
<> <<>> provide other information for your reference, we recommend you post
<> <<>> different incidents in different threads to keep the thread clean.
In
<> <doing
<> <<>> so, it will ensure your issues are resolved in a timely manner.
<> <<>>
<> <<>> For urgent issues, you may want to contact Microsoft CSS directly.
<> <Please
<> <<>> check http://support.microsoft.com for regional support phone
numbers.
<> <<>>
<> <<>> Any input or comments in this thread are highly appreciated.
<> <<>>
<> <<>> =====================================================
<> <<>>
<> <<>> This posting is provided "AS IS" with no warranties, and confers no
<> <rights.
<> <<>>
<> <<>> --------------------
<> <<>> <Date: Wed, 31 Jan 2007 15:23:07 +0000
<> <<>> <From: "Adrian Marsh (NNTP)" <adrian.marsh@xxxxxxxxxxxxxxxxxxxxxxx>
<> <<>> <User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
<> <<>> <MIME-Version: 1.0
<> <<>> <Subject: Re: IIS logs for Exchange/OMA Access
<> <<>> <References: <45BFCECF.7000806@xxxxxxxxxxxxxxxxxxxxxxx>
<> <<>> <VFC$OpSRHHA.3792@xxxxxxxxxxxxxxxxxxxxxx>
<> <<>> <In-Reply-To: <VFC$OpSRHHA.3792@xxxxxxxxxxxxxxxxxxxxxx>
<> <<>> <Content-Type: text/plain; charset=ISO-8859-1
<> <<>> <Content-Transfer-Encoding: 8bit
<> <<>> <Message-ID: <#0CU3uURHHA.1016@xxxxxxxxxxxxxxxxxxxx>
<> <<>> <Newsgroups: microsoft.public.windows.server.sbs
<> <<>> <NNTP-Posting-Host: office.ubiquisys.com 88.96.204.222
<> <<>> <Lines: 1
<> <<>> <Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
<> <<>> <Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.sbs:14134
<> <<>> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <<>> <
<> <<>> <I've also emailed you a copy of the logs as requested..
<> <<>> <
<> <<>> <Robert Li [MSFT] wrote:
<> <<>> <> Hi Adrian,
<> <<>> <>
<> <<>> <> Thanks for posting in our newsgroup.
<> <<>> <>
<> <<>> <> First, after researching your IIS logs, I cannot give you
valuable
<> <<>> <> suggestion. Because the data in the log is closely related to
the
<> <<>> <> environment of your company, it¡®s hard to judge the values are
<> high
<> <or
<> <<>> <> low. Some time error occurs even if you take a completely right
<> <action.
<> <<>> For
<> <<>> <> example, when you visit http://PublicDomainName/exchange, first
<> <<>> <> ¡°401.1-logon failed error¡± may occur, when you input the
account
<> <and
<> <<>> <> password, ¡°200-OK. The client request has successes¡± is
produced.
<> <So
<> <<>> <> it¡¯s difficult to draw a conclusion from these numbers.
<> <<>> <>
<> <<>> <> If you want to know how IIS Status Codes is created, you must
<> <provide
<> <<>> the
<> <<>> <> following information: Sitename, IP address, Port, username,
<> <SC-status
<> <<>> and
<> <<>> <> so on to us. You can find this information in the IIS log. You
can
<> <<>> easily
<> <<>> <> gather the log with Monitoring and Reporting.
<> <<>> <>
<> <<>> <> For more information, please refer to:
<> <<>> <> IIS Status Codes
<> <<>> <> http://support.microsoft.com/?id=318380
<> <<>> <>
<> <<>> <> The SBS 2003 Monitoring and Reporting can monitor your server
<> <<>> performance,
<> <<>> <> usage, health status and create report. You can configure these
<> <<>> services
<> <<>> <> to monitoring your IIS and other performance. Although
Monitoring
<> <and
<> <<>> <> Reporting cannot provide the same statistics as AWSTATS
software,
<> it
<> <can
<> <<>> <> help you monitor your system and provide information to prevent
<> <critical
<> <<>> <> problem from happening.
<> <<>> <>
<> <<>> <> To do this, please take the following steps:
<> <<>> <>
<> <<>> <> 1. Open Server Management and then click Monitoring and
Reporting.
<> <<>> <> 2. Click Set Up Monitoring Reports and Alerts, and click Next.
<> <<>> <> 3. Select Receive a daily performance report in e-mail, View the
<> <usage
<> <<>> <> report in Server Management, Receive a usage report in e-mail
every
<> <<>> other
<> <<>> <> week, and click OK.
<> <<>> <> 4. Input e-mail address to receive the reports and click Next.
<> <<>> <> 5. Select a user to view the usage report and click Next.
<> <<>> <> 6. Input a e-mail to receive notification of performance alerts
by
<> <<>> e-mail,
<> <<>> <> and click Next.
<> <<>> <> 7. Click Finish.
<> <<>> <> 8. Click change Server Status Reporting Setting and click Next.
<> <<>> <> 9. Click Server Performance Report and click Edit. On the
Content
<> <tab,
<> <<>> make
<> <<>> <> sure IIS log is selected and then click OK.
<> <<>> <> 10. Click Server Usage Report and click Edit. On the Content
tab,
<> <make
<> <<>> sure
<> <<>> <> IIS log is selected and then click OK.
<> <<>> <> 11. Click Close.
<> <<>> <>
<> <<>> <> Please also take your time to check IIS setting to make sure
they
<> <are
<> <<>> <> correctly configured.
<> <<>> <>
<> <<>> <> If you need further assistance, please don¡¯t hesitate to let me
<> <know.
<> <<>> <>
<> <<>> <>
<> <<>> <> Best regards,
<> <<>> <>
<> <<>> <> Robert Li(MSFT)
<> <<>> <>
<> <<>> <> Microsoft CSS Online Newsgroup Support
<> <<>> <>
<> <<>> <> Get Secure! - www.microsoft.com/security
<> <<>> <>
<> <<>> <> ====================================================
<> <<>> <>
<> <<>> <> PLEASE NOTE: The partner managed newsgroups are provided
toassist
<> <with
<> <<>> <> break/fix issues and simple how to questions.
<> <<>> <> We also love to hear your product feedback! Let us know what
you
<> <think
<> <<>> by
<> <<>> <> posting from the web interface: Partner Feedback
<> <<>> <> from your newsreader:
<> <microsoft.private.directaccess.partnerfeedback.
<> <<>> <>
<> <<>> <> We look forward to hearing from you!
<> <<>> <>
<> <<>> <> ====================================================
<> <<>> <>
<> <<>> <> When responding to posts, please "Reply to Group" via your
<> <newsreader so
<> <<>> <> that others may learn and benefit from this issue.
<> <<>> <>
<> <<>> <> ====================================================
<> <<>> <>
<> <<>> <> This posting is provided "AS IS" with no warranties, and confers
no
<> <<>> rights.
<> <<>> <>
<> <<>> <> ====================================================
<> <<>> <>
<> <<>> <>
<> <<>> <> --------------------
<> <<>> <> <Message-ID: <45BFCECF.7000806@xxxxxxxxxxxxxxxxxxxxxxx>
<> <<>> <> <Date: Tue, 30 Jan 2007 23:03:43 +0000
<> <<>> <> <From: "Adrian Marsh (NNTP)"
<adrian.marsh@xxxxxxxxxxxxxxxxxxxxxxx>
<> <<>> <> <User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
<> <<>> <> <MIME-Version: 1.0
<> <<>> <> <Subject: IIS logs for Exchange/OMA Access
<> <<>> <> <Content-Type: text/plain; charset=ISO-8859-1
<> <<>> <> <Content-Transfer-Encoding: 7bit
<> <<>> <> <X-Antivirus: avast! (VPS 000709-0, 30/01/2007), Outbound message
<> <<>> <> <X-Antivirus-Status: Clean
<> <<>> <> <Newsgroups: microsoft.public.windows.server.sbs
<> <<>> <> <NNTP-Posting-Host:
213-162-121-253.adrian080.adsl.metronet.co.uk
<> <<>> <> 213.162.121.253
<> <<>> <> <Lines: 1
<> <<>> <> <Path:
<> <TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
<> <<>> <> <Xref: TK2MSFTNGHUB02.phx.gbl
<> <microsoft.public.windows.server.sbs:13955
<> <<>> <> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <<>> <> <
<> <<>> <> <All,
<> <<>> <> <
<> <<>> <> <I'm monitoring my IIS logs in awstats, and I see high failure
<> counts
<> <<>> <> <(time period: 1 month, jan)
<> <<>> <> <
<> <<>> <> <302 Moved temporarily (redirect) 11273 52.5 % 6.41 MB
<> <<>> <> <500 Internal server Error 7993 37.2 % 2.39 MB
<> <<>> <> <401 Unauthorized 1025 4.7 % 865.85 KB
<> <<>> <> <206 Partial Content 670 3.1 % 10.82 MB
<> <<>> <> <403 Forbidden 421 1.9 % 154.61 KB
<> <<>> <> <404 Document Not Found 52 0.2 % 86.29 KB
<> <<>> <> <301 Moved permanently (redirect) 29 0.1 % 11.11 KB
<> <<>> <> <400 Bad Request 2 0 % 25 Bytes
<> <<>> <> <503 Server busy 1 0 % 424 Bytes
<> <<>> <> <440 Unknown error 1 0 % 452 Bytes
<> <<>> <> <
<> <<>> <> <Are these high numbers? It looks so to me..
<> <<>> <> <
<> <<>> <> <This is a single card SBS2003 SP2, R1 system, with <10 mobile
WM5
<> <<>> users.
<> <<>> <> <
<> <<>> <> <The ones that concern me the most are the 500 messages. Heres a
log
<> <<>> <> <snapshot (names changed to protect from SPAM)
<> <<>> <> <
<> <<>> <> <Whats the event-flow for a WM5 accessing then? I see a 200
first
<> <for
<> <<>> <> </Microsoft-Server-Activesync, followed by a 401 on
exchange-oma..
<> <<>> <> <
<> <<>> <> <The user has all of the Exchange mobile features ticked.
<> <<>> <> <
<> <<>> <> <2007-01-30 18:52:09 OPTIONS /Microsoft-Server-ActiveSync
<> <domain\myuser
<> <<>> <> <193.35.129.161 HTTP/1.1 MSFT-PPC/5.1.2300 - 200 587
<> <<>> <> <2007-01-30 18:52:09 PROPFIND
<> <<>> <>
<> <<>>
<>
<</exchange-oma/joe.bloggs@xxxxxxxxxxxxx/NON_IPM_SUBTREE/Microsoft-Server-Ac
<> t
<> <<>> <> iveSync/PocketPC/37376433EC2F107EC86AB9B2AB8CEC09
<> <<>> <> <- 192.168.50.3 HTTP/1.1 Microsoft-Server-ActiveSync/6.5.7638.1
-
<> <401 597
<> <<>> <> <2007-01-30 18:52:09 PROPFIND
<> <<>> <>
<> <<>>
<>
<</exchange-oma/joe.bloggs@xxxxxxxxxxxxx/NON_IPM_SUBTREE/Microsoft-Server-Ac
<> t
<> <<>> <> iveSync/PocketPC/37376433EC2F107EC86AB9B2AB8CEC09
<> <<>> <> <domain\myuser 192.168.50.3 HTTP/1.1
<> <<>> <> <Microsoft-Server-ActiveSync/6.5.7638.1 - 409 377
<> <<>> <> <2007-01-30 18:52:09 MKCOL
<> <<>> <>
<> <<>>
<>
<</exchange-oma/joe.bloggs@xxxxxxxxxxxxx/NON_IPM_SUBTREE/Microsoft-Server-Ac
<> t
<> <<>> <> iveSync
<> <<>> <> <- 192.168.50.3 HTTP/1.1 Microsoft-Server-ActiveSync/6.5.7638.1
-
<> <403 379
<> <<>> <> <2007-01-30 18:52:09 POST /Microsoft-Server-ActiveSync
domain\myuser
<> <<>> <> <193.35.129.161 HTTP/1.1 MSFT-PPC/5.1.2300 - 403 297
<> <<>> <> <
<> <<>> <> <I'm trying to verify my IIS folder settings:
<> <<>> <> <
<> <<>> <> </Exchange
<> <<>> <> < Anonymous Access: Unticked
<> <<>> <> < Integrated Windows Authentication: Ticked
<> <<>> <> < Basic Authentication: Ticked
<> <<>> <> < Default Domain: \
<> <<>> <> < SSL Required: Ticked, Require 128bit
<> <<>> <> <
<> <<>> <> </exchange-oma
<> <<>> <> < Anonymous Access: Ticked
<> <<>> <> < Integrated Windows Authentication: Ticked
<> <<>> <> < Basic Authentication: Ticked
<> <<>> <> < Default Domain: \
<> <<>> <> < SSL Required: Unticked
<> <<>> <> <
<> <<>> <> </Exadmin
<> <<>> <> < Anonymous Access: Unticked
<> <<>> <> < Integrated Windows Authentication: Ticked
<> <<>> <> < Basic Authentication: Ticked
<> <<>> <> < Default Domain: \
<> <<>> <> < SSL Required: Ticked, Require 128bit
<> <<>> <> <
<> <<>> <> </ExchWeb
<> <<>> <> < Anonymous Access: Ticked
<> <<>> <> < Integrated Windows Authentication: Unticked
<> <<>> <> < Basic Authentication: Unticked
<> <<>> <> < Default Domain: Greyed out
<> <<>> <> < SSL Required: Ticked, Require 128bit
<> <<>> <> <
<> <<>> <> </Microsoft-Server-Activesync
<> <<>> <> < Anonymous Access: Unticked
<> <<>> <> < Integrated Windows Authentication: ticked
<> <<>> <> < Basic Authentication: ticked
<> <<>> <> < Default Domain: \
<> <<>> <> < SSL Required: Unticked
<> <<>> <> <
<> <<>> <> <
<> <<>> <>
<> <<>> <
<> <<>>
<> <<
<> <
<> <
<>
<

.

Relevant Pages
Loading