Re: IIS logs for Exchange/OMA Access
- From: "Adrian Marsh (NNTP)" <adrian.marsh@xxxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 01 Mar 2007 23:59:27 +0000
Hi Robert,
The only difference I could see was "anonymous" access on /Exadmin
I restarted IIS and have requested the users to tell me if they have issues.
However, immediately I see a 3005 error in the event log for one user.
The error says I should check the users mailbox is ok.. I know this
particular user has 2000+ contacts in his contact list, and I wonder if
some of these contacts may cause this error - is this possible?
I should have some more feedback tomorrow, and I'll email any new logs
if required.
Thanks,
Adrian
Robert Li [MSFT] wrote:
Hi Adrian,.
Thanks for updating.
I am sorry for the delay due to not in office for a few days.
After researching the IIS MetaBase and logs, I found there are some
difference in the virtual directory setting between your server and my test
machine. The IIS status code 401 is caused by the authentication methods.
Please check the following:
1. Open IIS Manager
2. Open properties of the following virtual directories.
3. Select Directory Security tab
4. Select Edit in Authentication and access control box. Check the
following:
/exchange-oma
Authentication Methods
Enabled Basic authentication
Enabled Integrated Windows authentication
Disabled anonymous access
/OMA virtual directory and Microsoft-Server-ActiveSync virtual directory:
Authentication Methods
Uncheck Enable anonymous access
Uncheck Integrated Windows authentication
Check Basic authentication
/Exchange
Authentication Methods
Enabled Basic authentication
Enabled Integrated Windows authentication
Disabled anonymous access
/Exadmin
Authentication Methods
Disabled Basic authentication
Enable Integrated Windows authentication
Disable anonymous access
/ExchWeb
Authentication Methods
Disabled Basic authentication
Disabled Integrated Windows authentication
Enable anonymous access
When please keep monitoring to see if the problem can be resolved.
If you need further assistance, please don't hesitate to let me know.
Best regards,
Robert Li(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
<Date: Mon, 19 Feb 2007 10:42:51 +0000
<From: "Adrian Marsh (NNTP)" <adrian.marsh@xxxxxxxxxxxxxxxxxxxxxxx>
<User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
<MIME-Version: 1.0
<Subject: Re: IIS logs for Exchange/OMA Access
<References: <45BFCECF.7000806@xxxxxxxxxxxxxxxxxxxxxxx>
<VFC$OpSRHHA.3792@xxxxxxxxxxxxxxxxxxxxxx>
<#0CU3uURHHA.1016@xxxxxxxxxxxxxxxxxxxx>
<p3U1AzfRHHA.196@xxxxxxxxxxxxxxxxxxxxxx>
<u8Ck66sRHHA.5032@xxxxxxxxxxxxxxxxxxxx>
<45C5D606.5030305@xxxxxxxxxxxxxxxxxxxxxxx>
<KApXBeSSHHA.2268@xxxxxxxxxxxxxxxxxxxxxx>
<Uzh#iDZSHHA.4068@xxxxxxxxxxxxxxxxxxxxxx>
<45CF6488.5060306@xxxxxxxxxxxxxxxxxxxxxxx>
<HfNoTb2THHA.3604@xxxxxxxxxxxxxxxxxxxxxx>
<In-Reply-To: <HfNoTb2THHA.3604@xxxxxxxxxxxxxxxxxxxxxx>
<Content-Type: text/plain; charset=ISO-8859-1
<Content-Transfer-Encoding: 8bit
<X-Antivirus: avast! (VPS 000714-4, 19/02/2007), Outbound message
<X-Antivirus-Status: Clean
<Message-ID: <#1cy0KBVHHA.3592@xxxxxxxxxxxxxxxxxxxx>
<Newsgroups: microsoft.public.windows.server.sbs
<NNTP-Posting-Host: AC9F5287.ipt.aol.com 172.159.82.135
<Lines: 1
<Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:17962
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<Hi Robert,
<
<Did you get those logs??
<
<Adrian.
<
<
<Robert Li [MSFT] wrote:
<> Hi Adrian,
<>
<> Please send the logs to me for further research.
<>
<> I am looking forward to hear from you.
<>
<>
<> Best regards,
<>
<> Robert Li(MSFT)
<>
<> Microsoft CSS Online Newsgroup Support
<>
<> Get Secure! - www.microsoft.com/security
<>
<> =====================================================
<>
<> This newsgroup only focuses on SBS technical issues. If you have issues
<> regarding other Microsoft products, you'd better post in the
corresponding
<> newsgroups so that they can be resolved in an efficient and timely
manner.
<> You can locate the newsgroup here:
<> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<>
<> When opening a new thread via the web interface, we recommend you check
the
<> "Notify me of replies" box to receive e-mail notifications when there
are
<> any updates in your thread. When responding to posts via your
newsreader,
<> please "Reply to Group" so that others may learn and benefit from your
<> issue.
<>
<> Microsoft engineers can only focus on one issue per thread. Although we
<> provide other information for your reference, we recommend you post
<> different incidents in different threads to keep the thread clean. In
doing
<> so, it will ensure your issues are resolved in a timely manner.
<>
<> For urgent issues, you may want to contact Microsoft CSS directly.
Please
<> check http://support.microsoft.com for regional support phone numbers.
<>
<> Any input or comments in this thread are highly appreciated.
<>
<> =====================================================
<>
<> This posting is provided "AS IS" with no warranties, and confers no
rights.
<>
<> --------------------
<> <Message-ID: <45CF6488.5060306@xxxxxxxxxxxxxxxxxxxxxxx>
<> <Date: Sun, 11 Feb 2007 18:46:32 +0000
<> <From: "Adrian Marsh (NNTP)" <adrian.marsh@xxxxxxxxxxxxxxxxxxxxxxx>
<> <User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
<> <MIME-Version: 1.0
<> <Subject: Re: IIS logs for Exchange/OMA Access
<> <References: <45BFCECF.7000806@xxxxxxxxxxxxxxxxxxxxxxx>
<> <VFC$OpSRHHA.3792@xxxxxxxxxxxxxxxxxxxxxx>
<> <#0CU3uURHHA.1016@xxxxxxxxxxxxxxxxxxxx>
<> <p3U1AzfRHHA.196@xxxxxxxxxxxxxxxxxxxxxx>
<> <u8Ck66sRHHA.5032@xxxxxxxxxxxxxxxxxxxx>
<> <45C5D606.5030305@xxxxxxxxxxxxxxxxxxxxxxx>
<> <KApXBeSSHHA.2268@xxxxxxxxxxxxxxxxxxxxxx>
<> <Uzh#iDZSHHA.4068@xxxxxxxxxxxxxxxxxxxxxx>
<> <In-Reply-To: <Uzh#iDZSHHA.4068@xxxxxxxxxxxxxxxxxxxxxx>
<> <Content-Type: text/plain; charset=ISO-8859-1
<> <Content-Transfer-Encoding: 8bit
<> <X-Antivirus: avast! (VPS 000712-6, 11/02/2007), Outbound message
<> <X-Antivirus-Status: Clean
<> <Newsgroups: microsoft.public.windows.server.sbs
<> <NNTP-Posting-Host: 213-162-121-253.adrian080.adsl.metronet.co.uk
<> 213.162.121.253
<> <Lines: 1
<> <Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
<> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:16324
<> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <
<> <Robert,
<> <
<> <I've not forgotten about this.. just haven't gotten to it yet. Hope to
<> <email you some logs this week.
<> <
<> <Adrian
<> <
<> <Robert Li [MSFT] wrote:
<> <> Hi Adrian,
<> <>
<> <> You can use the Mobile 5.0 successful but there are many errors in
the
<> IIS
<> <> log. Please give me your IISLog and IISMETABASE and I will have a
check.
<> <>
<> <> 1. Collect IIS Log:
<> <> 1) On Exchange Serves, open IIS MMC, right click Default Web Site and
<> then
<> <> click Properties.
<> <> 2) Click Website tab and then check Enable loggin
<> <> 3) Stop the Default Website and RENAME the existing IIS log files
under
<> <> C:\WINDOWS\system32\LogFiles\W3SVC1.
<> <> 4) Restart the Default Website and reproduce the problem, which will
<> <> generate new IIS log file with the exact error.
<> <> 5). Go to the following folder on Exchange Server:
<> <> C:\WINDOWS\system32\LogFiles\W3SVC
<> <>
<> <> 2.Collect IIS Metabase
<> <> 1) On Exchange Server, install .NET Framework Version 1.1:
<> <>
<>
http://www.microsoft.com/downloads/details.aspx?FamilyID=262d25e3-f589-4842-
<> <> 8157-034d1e7cf3a3&DisplayLang=en.
<> <> 2) Install MBExplorer by installing IIS 6 Resource Kit Tools:
<> <>
<>
http://www.microsoft.com/downloads/details.aspx?FamilyId=56FC92EE-A71A-4C73-
<> <> B628-ADE629C89499&displaylang=en.
<> <> 3) Once it is installed, access it from Start, Programs, IIS
Resources,
<> <> Metabase Explorer.
<> <> 4) In the left pane, right click ''LM'' (under your server computer
<> name)
<> <> to choose ''Export to file'', and then save it as IIS.mbk.
<> <> 5) Compress this mbk file and send it to me for analysis. Please let
me
<> <> know the password if you set on this iis mbk file.
<> <>
<> <> Please send the information to v-robeli@xxxxxxxxxxxxx with subject:
<> <> 37643242-IIS logs for Exchange/OMA Access.
<> <>
<> <> I am looking forward to here from you.
<> <>
<> <>
<> <> Best regards,
<> <>
<> <> Robert Li(MSFT)
<> <>
<> <> Microsoft CSS Online Newsgroup Support
<> <>
<> <> Get Secure! - www.microsoft.com/security
<> <>
<> <> =====================================================
<> <>
<> <> This newsgroup only focuses on SBS technical issues. If you have
issues
<> <> regarding other Microsoft products, you'd better post in the
<> corresponding
<> <> newsgroups so that they can be resolved in an efficient and timely
<> manner.
<> <> You can locate the newsgroup here:
<> <> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<> <>
<> <> When opening a new thread via the web interface, we recommend you
check
<> the
<> <> "Notify me of replies" box to receive e-mail notifications when there
<> are
<> <> any updates in your thread. When responding to posts via your
<> newsreader,
<> <> please "Reply to Group" so that others may learn and benefit from
your
<> <> issue.
<> <>
<> <> Microsoft engineers can only focus on one issue per thread. Although
we
<> <> provide other information for your reference, we recommend you post
<> <> different incidents in different threads to keep the thread clean. In
<> doing
<> <> so, it will ensure your issues are resolved in a timely manner.
<> <>
<> <> For urgent issues, you may want to contact Microsoft CSS directly.
<> Please
<> <> check http://support.microsoft.com for regional support phone numbers.
<> <>
<> <> Any input or comments in this thread are highly appreciated.
<> <>
<> <> =====================================================
<> <>
<> <> This posting is provided "AS IS" with no warranties, and confers no
<> rights.
<> <>
<> <> --------------------
<> <> <X-Tomcat-ID: 241735780
<> <> <References: <45BFCECF.7000806@xxxxxxxxxxxxxxxxxxxxxxx>
<> <> <VFC$OpSRHHA.3792@xxxxxxxxxxxxxxxxxxxxxx>
<> <> <#0CU3uURHHA.1016@xxxxxxxxxxxxxxxxxxxx>
<> <> <p3U1AzfRHHA.196@xxxxxxxxxxxxxxxxxxxxxx>
<> <> <u8Ck66sRHHA.5032@xxxxxxxxxxxxxxxxxxxx>
<> <> <45C5D606.5030305@xxxxxxxxxxxxxxxxxxxxxxx>
<> <> <MIME-Version: 1.0
<> <> <Content-Type: text/plain
<> <> <Content-Transfer-Encoding: 7bit
<> <> <From: v-robeli@xxxxxxxxxxxxxxxxxxxx (Robert Li [MSFT])
<> <> <Organization: Microsoft
<> <> <Date: Mon, 05 Feb 2007 13:13:57 GMT
<> <> <Subject: Re: IIS logs for Exchange/OMA Access
<> <> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <> <Message-ID: <KApXBeSSHHA.2268@xxxxxxxxxxxxxxxxxxxxxx>
<> <> <Newsgroups: microsoft.public.windows.server.sbs
<> <> <Lines: 417
<> <> <Path: TK2MSFTNGHUB02.phx.gbl
<> <> <Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.sbs:14963
<> <> <NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
<> <> <
<> <> <Hi Adrian,
<> <> <
<> <> <After researching your log, I cannot find anything unexpected.
<> Sometimes
<> <> <error occurs even if you take a completely right action.
<> <> <
<> <> <The Default domain field is different in different virtual
directory. I
<> <> <don't recommend you change them manually. Please leave them as they
<> were.
<> <> <
<> <> <The error in the log was caused by random accidents. Please keep
<> <> monitoring
<> <> <your SBS server. If you have any update, please let me know.
<> <> <
<> <> <Best regards,
<> <> <
<> <> <Robert Li(MSFT)
<> <> <
<> <> <Microsoft CSS Online Newsgroup Support
<> <> <
<> <> <Get Secure! - www.microsoft.com/security
<> <> <
<> <> <=====================================================
<> <> <
<> <> <This newsgroup only focuses on SBS technical issues. If you have
issues
<> <> <regarding other Microsoft products, you'd better post in the
<> corresponding
<> <> <newsgroups so that they can be resolved in an efficient and timely
<> manner.
<> <> <You can locate the newsgroup here:
<> <> <http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<> <> <
<> <> <When opening a new thread via the web interface, we recommend you
check
<> <> the
<> <> <"Notify me of replies" box to receive e-mail notifications when
there
<> are
<> <> <any updates in your thread. When responding to posts via your
<> newsreader,
<> <> <please "Reply to Group" so that others may learn and benefit from
your
<> <> <issue.
<> <> <
<> <> <Microsoft engineers can only focus on one issue per thread. Although
we
<> <> <provide other information for your reference, we recommend you post
<> <> <different incidents in different threads to keep the thread clean.
In
<> <> doing
<> <> <so, it will ensure your issues are resolved in a timely manner.
<> <> <
<> <> <For urgent issues, you may want to contact Microsoft CSS directly.
<> Please
<> <> <check http://support.microsoft.com for regional support phone
numbers.
<> <> <
<> <> <Any input or comments in this thread are highly appreciated.
<> <> <
<> <> <=====================================================
<> <> <
<> <> <This posting is provided "AS IS" with no warranties, and confers no
<> rights.
<> <> <
<> <> <--------------------
<> <> <<Message-ID: <45C5D606.5030305@xxxxxxxxxxxxxxxxxxxxxxx>
<> <> <<Date: Sun, 04 Feb 2007 12:48:06 +0000
<> <> <<From: "Adrian Marsh (NNTP)" <adrian.marsh@xxxxxxxxxxxxxxxxxxxxxxx>
<> <> <<User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
<> <> <<MIME-Version: 1.0
<> <> <<Subject: Re: IIS logs for Exchange/OMA Access
<> <> <<References: <45BFCECF.7000806@xxxxxxxxxxxxxxxxxxxxxxx>
<> <> <<VFC$OpSRHHA.3792@xxxxxxxxxxxxxxxxxxxxxx>
<> <> <<#0CU3uURHHA.1016@xxxxxxxxxxxxxxxxxxxx>
<> <> <<p3U1AzfRHHA.196@xxxxxxxxxxxxxxxxxxxxxx>
<> <> <<u8Ck66sRHHA.5032@xxxxxxxxxxxxxxxxxxxx>
<> <> <<In-Reply-To: <u8Ck66sRHHA.5032@xxxxxxxxxxxxxxxxxxxx>
<> <> <<Content-Type: text/plain; charset=ISO-8859-1
<> <> <<Content-Transfer-Encoding: 8bit
<> <> <<X-Antivirus: avast! (VPS 000710-0, 03/02/2007), Outbound message
<> <> <<X-Antivirus-Status: Clean
<> <> <<Newsgroups: microsoft.public.windows.server.sbs
<> <> <<NNTP-Posting-Host: 213-162-121-253.adrian080.adsl.metronet.co.uk
<> <> <213.162.121.253
<> <> <<Lines: 1
<> <> <<Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
<> <> <<Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.sbs:14844
<> <> <<X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <> <<
<> <> <<I've re-run CEICW (again), and again it reset the Recipients Policy,
<> <> <<which I then had to reset again..
<> <> <<
<> <> <<I'll wait and see if thats helped.. I still see lots of 401 errors
in
<> <> <<the log though.
<> <> <<
<> <> <<Adrian Marsh (NNTP) wrote:
<> <> <<> I've sent a smaller log sample now..
<> <> <<>
<> <> <<> Robert Li [MSFT] wrote:
<> <> <<>> Hi Adrian,
<> <> <<>>
<> <> <<>> Thanks for updating.
<> <> <<>>
<> <> <<>> First, I don¡¯t suggest you change the IIS Authentication
Methods
<> <> <manually.
<> <> <<>> When you run the CEICW, the wizard will configure these
settings
<> for
<> <> <you.
<> <> <<>>
<> <> <<>> I would like to provide the default setting for your reference:
<> <> <<>>
<> <> <<>> 1. Open IIS Manager
<> <> <<>> 2. Open properties of the following virtual directories.
<> <> <<>> 3. Select Directory Security tab
<> <> <<>> 4. Select Edit in Authentication and access control box. Check
the
<> <> <<>> following:
<> <> <<>>
<> <> <<>> ?/exchange-oma
<> <> <<>> Authentication Methods
<> <> <<>> Enabled Basic authentication
<> <> <<>> Enabled Integrated Windows authentication
<> <> <<>> Disabled anonymous access
<> <> <<>>
<> <> <<>> /OMA virtual directory and Microsoft-Server-ActiveSync virtual
<> <> <directory:
<> <> <<>> Authentication Methods
<> <> <<>> Uncheck Enable anonymous access
<> <> <<>> ?Uncheck? Integrated Windows authentication
<> <> <<>> ?Check Basic authentication
<> <> <<>>
<> <> <<>> /Exchange
<> <> <<>> Authentication Methods
<> <> <<>> Enabled Basic authentication
<> <> <<>> Enabled Integrated Windows authentication
<> <> <<>> Disabled anonymous access
<> <> <<>>
<> <> <<>> /Exadmin
<> <> <<>> Authentication Methods
<> <> <<>> Disabled Basic authentication
<> <> <<>> Enable Integrated Windows authentication
<> <> <<>> Disable anonymous access
<> <> <<>>
<> <> <<>> /ExchWeb
<> <> <<>> Authentication Methods
<> <> <<>> Disabled Basic authentication
<> <> <<>> Disabled Integrated Windows authentication
<> <> <<>> Enable anonymous access
<> <> <<>>
<> <> <<>> You motioned ¡°I¡¯'ve read through the docs, but they don't make
it
<> <> <clear
<> <> <<>> how these should be configured for SBS2003¡±, I don¡¯t know
which
<> <> <article
<> <> <<>> your refer to. If it¡¯s ¡®IIS Status Codes¡¯, that applies to
<> <> Microsoft
<> <> <<>> Internet Information Server 4.0, 5.0 and 6.0. If you refer to
the
<> way
<> <> <on
<> <> <<>> how to configure the Monitoring and Reporting, you can just do
that
<> on
<> <> <the
<> <> <<>> SBS Server.
<> <> <<>>
<> <> <<>> I haven¡¯t received the e-mail from you, please send to
<> <> <<>> v-robeli@xxxxxxxxxxxxxx
<> <> <<>>
<> <> <<>> I am looking forwarding to hear from you.
<> <> <<>>
<> <> <<>> Best regards,
<> <> <<>>
<> <> <<>> Robert Li(MSFT)
<> <> <<>>
<> <> <<>> Microsoft CSS Online Newsgroup Support
<> <> <<>>
<> <> <<>> Get Secure! - www.microsoft.com/security
<> <> <<>>
<> <> <<>> =====================================================
<> <> <<>>
<> <> <<>> This newsgroup only focuses on SBS technical issues. If you have
<> <> issues
<> <> <<>> regarding other Microsoft products, you'd better post in the
<> <> <corresponding
<> <> <<>> newsgroups so that they can be resolved in an efficient and
timely
<> <> <manner.
<> <> <<>> You can locate the newsgroup here:
<> <> <<>>
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<> <> <<>>
<> <> <<>> When opening a new thread via the web interface, we recommend
you
<> <> check
<> <> <the
<> <> <<>> "Notify me of replies" box to receive e-mail notifications when
<> there
<> <> <are
<> <> <<>> any updates in your thread. When responding to posts via your
<> <> <newsreader,
<> <> <<>> please "Reply to Group" so that others may learn and benefit
from
<> your
<> <> <<>> issue.
<> <> <<>>
<> <> <<>> Microsoft engineers can only focus on one issue per thread.
<> Although
<> <> we
<> <> <<>> provide other information for your reference, we recommend you
post
<> <> <<>> different incidents in different threads to keep the thread
clean.
<> In
<> <> <doing
<> <> <<>> so, it will ensure your issues are resolved in a timely manner.
<> <> <<>>
<> <> <<>> For urgent issues, you may want to contact Microsoft CSS
directly.
<> <> <Please
<> <> <<>> check http://support.microsoft.com for regional support phone
<> numbers.
<> <> <<>>
<> <> <<>> Any input or comments in this thread are highly appreciated.
<> <> <<>>
<> <> <<>> =====================================================
<> <> <<>>
<> <> <<>> This posting is provided "AS IS" with no warranties, and confers
no
<> <> <rights.
<> <> <<>>
<> <> <<>> --------------------
<> <> <<>> <Date: Wed, 31 Jan 2007 15:23:07 +0000
<> <> <<>> <From: "Adrian Marsh (NNTP)"
<adrian.marsh@xxxxxxxxxxxxxxxxxxxxxxx>
<> <> <<>> <User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
<> <> <<>> <MIME-Version: 1.0
<> <> <<>> <Subject: Re: IIS logs for Exchange/OMA Access
<> <> <<>> <References: <45BFCECF.7000806@xxxxxxxxxxxxxxxxxxxxxxx>
<> <> <<>> <VFC$OpSRHHA.3792@xxxxxxxxxxxxxxxxxxxxxx>
<> <> <<>> <In-Reply-To: <VFC$OpSRHHA.3792@xxxxxxxxxxxxxxxxxxxxxx>
<> <> <<>> <Content-Type: text/plain; charset=ISO-8859-1
<> <> <<>> <Content-Transfer-Encoding: 8bit
<> <> <<>> <Message-ID: <#0CU3uURHHA.1016@xxxxxxxxxxxxxxxxxxxx>
<> <> <<>> <Newsgroups: microsoft.public.windows.server.sbs
<> <> <<>> <NNTP-Posting-Host: office.ubiquisys.com 88.96.204.222
<> <> <<>> <Lines: 1
<> <> <<>> <Path:
<> TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
<> <> <<>> <Xref: TK2MSFTNGHUB02.phx.gbl
<> microsoft.public.windows.server.sbs:14134
<> <> <<>> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <> <<>> <
<> <> <<>> <I've also emailed you a copy of the logs as requested..
<> <> <<>> <
<> <> <<>> <Robert Li [MSFT] wrote:
<> <> <<>> <> Hi Adrian,
<> <> <<>> <>
<> <> <<>> <> Thanks for posting in our newsgroup.
<> <> <<>> <>
<> <> <<>> <> First, after researching your IIS logs, I cannot give you
<> valuable
<> <> <<>> <> suggestion. Because the data in the log is closely related to
<> the
<> <> <<>> <> environment of your company, it¡®s hard to judge the values
are
<> <> high
<> <> <or
<> <> <<>> <> low. Some time error occurs even if you take a completely
right
<> <> <action.
<> <> <<>> For
<> <> <<>> <> example, when you visit http://PublicDomainName/exchange,
first
<> <> <<>> <> ¡°401.1-logon failed error¡± may occur, when you input the
<> account
<> <> <and
<> <> <<>> <> password, ¡°200-OK. The client request has successes¡± is
<> produced.
<> <> <So
<> <> <<>> <> it¡¯s difficult to draw a conclusion from these numbers.
<> <> <<>> <>
<> <> <<>> <> If you want to know how IIS Status Codes is created, you must
<> <> <provide
<> <> <<>> the
<> <> <<>> <> following information: Sitename, IP address, Port, username,
<> <> <SC-status
<> <> <<>> and
<> <> <<>> <> so on to us. You can find this information in the IIS log.
You
<> can
<> <> <<>> easily
<> <> <<>> <> gather the log with Monitoring and Reporting.
<> <> <<>> <>
<> <> <<>> <> For more information, please refer to:
<> <> <<>> <> IIS Status Codes
<> <> <<>> <> http://support.microsoft.com/?id=318380
<> <> <<>> <>
<> <> <<>> <> The SBS 2003 Monitoring and Reporting can monitor your server
<> <> <<>> performance,
<> <> <<>> <> usage, health status and create report. You can configure
these
<> <> <<>> services
<> <> <<>> <> to monitoring your IIS and other performance. Although
<> Monitoring
<> <> <and
<> <> <<>> <> Reporting cannot provide the same statistics as AWSTATS
<> software,
<> <> it
<> <> <can
<> <> <<>> <> help you monitor your system and provide information to
prevent
<> <> <critical
<> <> <<>> <> problem from happening.
<> <> <<>> <>
<> <> <<>> <> To do this, please take the following steps:
<> <> <<>> <>
<> <> <<>> <> 1. Open Server Management and then click Monitoring and
<> Reporting.
<> <> <<>> <> 2. Click Set Up Monitoring Reports and Alerts, and click Next.
<> <> <<>> <> 3. Select Receive a daily performance report in e-mail, View
the
<> <> <usage
<> <> <<>> <> report in Server Management, Receive a usage report in e-mail
<> every
<> <> <<>> other
<> <> <<>> <> week, and click OK.
<> <> <<>> <> 4. Input e-mail address to receive the reports and click Next.
<> <> <<>> <> 5. Select a user to view the usage report and click Next.
<> <> <<>> <> 6. Input a e-mail to receive notification of performance
alerts
<> by
<> <> <<>> e-mail,
<> <> <<>> <> and click Next.
<> <> <<>> <> 7. Click Finish.
<> <> <<>> <> 8. Click change Server Status Reporting Setting and click
Next.
<> <> <<>> <> 9. Click Server Performance Report and click Edit. On the
<> Content
<> <> <tab,
<> <> <<>> make
<> <> <<>> <> sure IIS log is selected and then click OK.
<> <> <<>> <> 10. Click Server Usage Report and click Edit. On the Content
<> tab,
<> <> <make
<> <> <<>> sure
<> <> <<>> <> IIS log is selected and then click OK.
<> <> <<>> <> 11. Click Close.
<> <> <<>> <>
<> <> <<>> <> Please also take your time to check IIS setting to make sure
<> they
<> <> <are
<> <> <<>> <> correctly configured.
<> <> <<>> <>
<> <> <<>> <> If you need further assistance, please don¡¯t hesitate to let
me
<> <> <know.
<> <> <<>> <>
<> <> <<>> <>
<> <> <<>> <> Best regards,
<> <> <<>> <>
<> <> <<>> <> Robert Li(MSFT)
<> <> <<>> <>
<> <> <<>> <> Microsoft CSS Online Newsgroup Support
<> <> <<>> <>
<> <> <<>> <> Get Secure! - www.microsoft.com/security
<> <> <<>> <>
<> <> <<>> <> ====================================================
<> <> <<>> <>
<> <> <<>> <> PLEASE NOTE: The partner managed newsgroups are provided
<> toassist
<> <> <with
<> <> <<>> <> break/fix issues and simple how to questions.
<> <> <<>> <> We also love to hear your product feedback! Let us know what
<> you
<> <> <think
<> <> <<>> by
<> <> <<>> <> posting from the web interface: Partner Feedback
<> <> <<>> <> from your newsreader:
<> <> <microsoft.private.directaccess.partnerfeedback.
<> <> <<>> <>
<> <> <<>> <> We look forward to hearing from you!
<> <> <<>> <>
<> <> <<>> <> ====================================================
<> <> <<>> <>
<> <> <<>> <> When responding to posts, please "Reply to Group" via your
<> <> <newsreader so
<> <> <<>> <> that others may learn and benefit from this issue.
<> <> <<>> <>
<> <> <<>> <> ====================================================
<> <> <<>> <>
<> <> <<>> <> This posting is provided "AS IS" with no warranties, and
confers
<> no
<> <> <<>> rights.
<> <> <<>> <>
<> <> <<>> <> ====================================================
<> <> <<>> <>
<> <> <<>> <>
<> <> <<>> <> --------------------
<> <> <<>> <> <Message-ID: <45BFCECF.7000806@xxxxxxxxxxxxxxxxxxxxxxx>
<> <> <<>> <> <Date: Tue, 30 Jan 2007 23:03:43 +0000
<> <> <<>> <> <From: "Adrian Marsh (NNTP)"
<> <adrian.marsh@xxxxxxxxxxxxxxxxxxxxxxx>
<> <> <<>> <> <User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
<> <> <<>> <> <MIME-Version: 1.0
<> <> <<>> <> <Subject: IIS logs for Exchange/OMA Access
<> <> <<>> <> <Content-Type: text/plain; charset=ISO-8859-1
<> <> <<>> <> <Content-Transfer-Encoding: 7bit
<> <> <<>> <> <X-Antivirus: avast! (VPS 000709-0, 30/01/2007), Outbound
message
<> <> <<>> <> <X-Antivirus-Status: Clean
<> <> <<>> <> <Newsgroups: microsoft.public.windows.server.sbs
<> <> <<>> <> <NNTP-Posting-Host:
<> 213-162-121-253.adrian080.adsl.metronet.co.uk
<> <> <<>> <> 213.162.121.253
<> <> <<>> <> <Lines: 1
<> <> <<>> <> <Path:
<> <> <TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
<> <> <<>> <> <Xref: TK2MSFTNGHUB02.phx.gbl
<> <> <microsoft.public.windows.server.sbs:13955
<> <> <<>> <> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <> <<>> <> <
<> <> <<>> <> <All,
<> <> <<>> <> <
<> <> <<>> <> <I'm monitoring my IIS logs in awstats, and I see high
failure
<> <> counts
<> <> <<>> <> <(time period: 1 month, jan)
<> <> <<>> <> <
<> <> <<>> <> <302 Moved temporarily (redirect) 11273 52.5 % 6.41 MB
<> <> <<>> <> <500 Internal server Error 7993 37.2 % 2.39 MB
<> <> <<>> <> <401 Unauthorized 1025 4.7 % 865.85 KB
<> <> <<>> <> <206 Partial Content 670 3.1 % 10.82 MB
<> <> <<>> <> <403 Forbidden 421 1.9 % 154.61 KB
<> <> <<>> <> <404 Document Not Found 52 0.2 % 86.29 KB
<> <> <<>> <> <301 Moved permanently (redirect) 29 0.1 % 11.11 KB
<> <> <<>> <> <400 Bad Request 2 0 % 25 Bytes
<> <> <<>> <> <503 Server busy 1 0 % 424 Bytes
<> <> <<>> <> <440 Unknown error 1 0 % 452 Bytes
<> <> <<>> <> <
<> <> <<>> <> <Are these high numbers? It looks so to me..
<> <> <<>> <> <
<> <> <<>> <> <This is a single card SBS2003 SP2, R1 system, with <10
mobile
<> WM5
<> <> <<>> users.
<> <> <<>> <> <
<> <> <<>> <> <The ones that concern me the most are the 500 messages.
Heres a
<> log
<> <> <<>> <> <snapshot (names changed to protect from SPAM)
<> <> <<>> <> <
<> <> <<>> <> <Whats the event-flow for a WM5 accessing then? I see a 200
<> first
<> <> <for
<> <> <<>> <> </Microsoft-Server-Activesync, followed by a 401 on
<> exchange-oma..
<> <> <<>> <> <
<> <> <<>> <> <The user has all of the Exchange mobile features ticked.
<> <> <<>> <> <
<> <> <<>> <> <2007-01-30 18:52:09 OPTIONS /Microsoft-Server-ActiveSync
<> <> <domain\myuser
<> <> <<>> <> <193.35.129.161 HTTP/1.1 MSFT-PPC/5.1.2300 - 200 587
<> <> <<>> <> <2007-01-30 18:52:09 PROPFIND
<> <> <<>> <>
<> <> <<>>
<> <>
<>
<</exchange-oma/joe.bloggs@xxxxxxxxxxxxx/NON_IPM_SUBTREE/Microsoft-Server-Ac
<> <> t
<> <> <<>> <> iveSync/PocketPC/37376433EC2F107EC86AB9B2AB8CEC09
<> <> <<>> <> <- 192.168.50.3 HTTP/1.1
Microsoft-Server-ActiveSync/6.5.7638.1
<> -
<> <> <401 597
<> <> <<>> <> <2007-01-30 18:52:09 PROPFIND
<> <> <<>> <>
<> <> <<>>
<> <>
<>
<</exchange-oma/joe.bloggs@xxxxxxxxxxxxx/NON_IPM_SUBTREE/Microsoft-Server-Ac
<> <> t
<> <> <<>> <> iveSync/PocketPC/37376433EC2F107EC86AB9B2AB8CEC09
<> <> <<>> <> <domain\myuser 192.168.50.3 HTTP/1.1
<> <> <<>> <> <Microsoft-Server-ActiveSync/6.5.7638.1 - 409 377
<> <> <<>> <> <2007-01-30 18:52:09 MKCOL
<> <> <<>> <>
<> <> <<>>
<> <>
<>
<</exchange-oma/joe.bloggs@xxxxxxxxxxxxx/NON_IPM_SUBTREE/Microsoft-Server-Ac
<> <> t
<> <> <<>> <> iveSync
<> <> <<>> <> <- 192.168.50.3 HTTP/1.1
Microsoft-Server-ActiveSync/6.5.7638.1
<> -
<> <> <403 379
<> <> <<>> <> <2007-01-30 18:52:09 POST /Microsoft-Server-ActiveSync
<> domain\myuser
<> <> <<>> <> <193.35.129.161 HTTP/1.1 MSFT-PPC/5.1.2300 - 403 297
<> <> <<>> <> <
<> <> <<>> <> <I'm trying to verify my IIS folder settings:
<> <> <<>> <> <
<> <> <<>> <> </Exchange
<> <> <<>> <> < Anonymous Access: Unticked
<> <> <<>> <> < Integrated Windows Authentication: Ticked
<> <> <<>> <> < Basic Authentication: Ticked
<> <> <<>> <> < Default Domain: \
<> <> <<>> <> < SSL Required: Ticked, Require 128bit
<> <> <<>> <> <
<> <> <<>> <> </exchange-oma
<> <> <<>> <> < Anonymous Access: Ticked
<> <> <<>> <> < Integrated Windows Authentication: Ticked
<> <> <<>> <> < Basic Authentication: Ticked
<> <> <<>> <> < Default Domain: \
<> <> <<>> <> < SSL Required: Unticked
<> <> <<>> <> <
<> <> <<>> <> </Exadmin
<> <> <<>> <> < Anonymous Access: Unticked
<> <> <<>> <> < Integrated Windows Authentication: Ticked
<> <> <<>> <> < Basic Authentication: Ticked
<> <> <<>> <> < Default Domain: \
<> <> <<>> <> < SSL Required: Ticked, Require 128bit
<> <> <<>> <> <
<> <> <<>> <> </ExchWeb
<> <> <<>> <> < Anonymous Access: Ticked
<> <> <<>> <> < Integrated Windows Authentication: Unticked
<> <> <<>> <> < Basic Authentication: Unticked
<> <> <<>> <> < Default Domain: Greyed out
<> <> <<>> <> < SSL Required: Ticked, Require 128bit
<> <> <<>> <> <
<> <> <<>> <> </Microsoft-Server-Activesync
<> <> <<>> <> < Anonymous Access: Unticked
<> <> <<>> <> < Integrated Windows Authentication: ticked
<> <> <<>> <> < Basic Authentication: ticked
<> <> <<>> <> < Default Domain: \
<> <> <<>> <> < SSL Required: Unticked
<> <> <<>> <> <
<> <> <<>> <> <
<> <> <<>> <>
<> <> <<>> <
<> <> <<>>
<> <> <<
<> <> <
<> <> <
<> <>
<> <
<>
<
- Follow-Ups:
- Re: IIS logs for Exchange/OMA Access
- From: Robert Li [MSFT]
- Re: IIS logs for Exchange/OMA Access
- Prev by Date: Re: PowerChute Network Shutdown for Windows
- Next by Date: Wading through HIPAA regs
- Previous by thread: Re: POP3 Connector Problem
- Next by thread: Re: IIS logs for Exchange/OMA Access
- Index(es):
Relevant Pages
|
