mackinop
asked on
Inbox Won't Load on Outlook Web Access
After installing an ASA 5505 appliance and removing one NIC, our Outlook Web Access and Mobile Access will not show inbox content or synchronize. SSL is configured on IIS default web, along with a GoDaddy certificate. I have rebuilt the Exchange virtual directories, reset the IUSR and IWAM passwords, and generally tried everything. Seems like a directory access or simple security issue, but . . .
Clients browsing OWA get to login, everything loads except for the actual content in the inbox. With the message: " The folder can't be displayed. You don't have permission to perform this action."
Clients using Active Synch on a mobile device get "encountered a problem on the server" 0x85010014
Clients browsing OWA get to login, everything loads except for the actual content in the inbox. With the message: " The folder can't be displayed. You don't have permission to perform this action."
Clients using Active Synch on a mobile device get "encountered a problem on the server" 0x85010014
Place the IIS logs here please along with the time of testing being done.
ASKER
Time is included, though it does not match my local time (GMT I suppose?). I attempted to connect during the logging using both activesync and webmail. Thanks.
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2009-03-14 16:32:42
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2009-03-14 16:32:42 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS ync 443 - 75.158.88.199 Apple-iPhone/508.11 - - webmail.DOMAIN 404 0 2 1795 287 46
2009-03-14 16:32:42 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS ync 443 - 75.158.88.199 Apple-iPhone/508.11 - - webmail.DOMAIN 404 0 2 1795 287 0
2009-03-14 16:32:42 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS ync 443 - 75.158.88.199 Apple-iPhone/508.11 - - webmail.DOMAIN 404 0 2 1795 287 0
2009-03-14 16:37:43 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS ync 443 - 75.158.88.199 Apple-iPhone/508.11 - - webmail.DOMAIN 404 0 2 1795 287 31
2009-03-14 16:37:43 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS ync 443 - 75.158.88.199 Apple-iPhone/508.11 - - webmail.DOMAIN 404 0 2 1795 287 0
2009-03-14 16:37:44 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS ync 443 - 75.158.88.199 Apple-iPhone/508.11 - - webmail.DOMAIN 404 0 2 1795 287 0
2009-03-14 16:38:36 W3SVC1 SERVER 192.168.31.5 GET /exchange - 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) - - webmail.DOMAIN 401 2 2148074254 322 465 15
2009-03-14 16:38:36 W3SVC1 SERVER 192.168.31.5 GET /exchweb/bin/auth/owalogon .asp url=https://webmail.DOMAIN/exchange&reason=0 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) - - webmail.DOMAIN 200 0 0 13982 532 453
2009-03-14 16:38:56 W3SVC1 SERVER 192.168.31.5 POST /exchweb/bin/auth/owaauth. dll - 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) - https://webmail.DOMAIN/exchweb/bin/auth/owalogon.asp?url=https://webmail.DOMAIN/exchange&reason=0 webmail.DOMAIN 302 0 0 366 836 0
2009-03-14 16:38:56 W3SVC1 SERVER 192.168.31.5 GET /exchange - 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=720a0542-0f59-45 f0-aaa7-9e f5c8ef92ac ;+cadata=" 2WeTqHGFjE z1DvI2Gwvj U1rG5U4rlx b0/BcXIEfT BPU4N9+UAE VjuyJN7ff6 ZD7Hr" https://webmail.DOMAIN/exchweb/bin/auth/owalogon.asp?url=https://webmail.DOMAIN/exchange&reason=0 webmail.DOMAIN 302 0 0 363 732 437
2009-03-14 16:38:56 W3SVC1 SERVER 192.168.31.5 GET /exchange/ - 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=720a0542-0f59-45 f0-aaa7-9e f5c8ef92ac ;+cadata=" 2WeTqHGFjE z1DvI2Gwvj U1rG5U4rlx b0/BcXIEfT BPU4N9+UAE VjuyJN7ff6 ZD7Hr" https://webmail.DOMAIN/exchweb/bin/auth/owalogon.asp?url=https://webmail.DOMAIN/exchange&reason=0 webmail.DOMAIN 200 0 0 1308 733 281
2009-03-14 16:38:57 W3SVC1 SERVER 192.168.31.5 GET /exchange/archive/ Cmd=navbar 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=720a0542-0f59-45 f0-aaa7-9e f5c8ef92ac :0x1009;+c adata="2We TqHGFjEz1D vI2GwvjU1r G5U4rlxb0/ BcXIEfTBPU 4N9+UAEVju yJN7ff6ZD7 Hr" https://webmail.DOMAIN/exchange/ webmail.DOMAIN 200 0 0 4143 668 156
2009-03-14 16:38:57 W3SVC1 SERVER 192.168.31.5 GET /exchange/archive/Inbox/ Cmd=contents 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=720a0542-0f59-45 f0-aaa7-9e f5c8ef92ac :0x1009;+c adata="2We TqHGFjEz1D vI2GwvjU1r G5U4rlxb0/ BcXIEfTBPU 4N9+UAEVju yJN7ff6ZD7 Hr" https://webmail.DOMAIN/exchange/ webmail.DOMAIN 200 0 0 5463 676 171
2009-03-14 16:38:57 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchweb/6.5.7651.60/cont rols/tf_Me ssages.xsl 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=720a0542-0f59-45 f0-aaa7-9e f5c8ef92ac :0x1009;+c adata="2We TqHGFjEz1D vI2GwvjU1r G5U4rlxb0/ BcXIEfTBPU 4N9+UAEVju yJN7ff6ZD7 Hr" https://webmail.DOMAIN/exchange/archive/Inbox/?Cmd=contents webmail.DOMAIN 404 0 2 1795 526 15
2009-03-14 16:38:58 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchange/archive/Inbox/ 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=720a0542-0f59-45 f0-aaa7-9e f5c8ef92ac :0x1009;+c adata="2We TqHGFjEz1D vI2GwvjU1r G5U4rlxb0/ BcXIEfTBPU 4N9+UAEVju yJN7ff6ZD7 Hr" https://webmail.DOMAIN/exchange/archive/Inbox/?Cmd=contents webmail.DOMAIN 404 0 2 1795 626 15
2009-03-14 16:38:58 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchange/archive/Calenda r 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=720a0542-0f59-45 f0-aaa7-9e f5c8ef92ac :0x1009;+c adata="2We TqHGFjEz1D vI2GwvjU1r G5U4rlxb0/ BcXIEfTBPU 4N9+UAEVju yJN7ff6ZD7 Hr" https://webmail.DOMAIN/exchange/archive/?Cmd=navbar webmail.DOMAIN 404 0 2 1795 624 0
2009-03-14 16:38:58 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchange/archive/Tasks 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=720a0542-0f59-45 f0-aaa7-9e f5c8ef92ac :0x1009;+c adata="2We TqHGFjEz1D vI2GwvjU1r G5U4rlxb0/ BcXIEfTBPU 4N9+UAEVju yJN7ff6ZD7 Hr" https://webmail.DOMAIN/exchange/archive/?Cmd=navbar webmail.DOMAIN 404 0 2 1795 621 0
2009-03-14 16:39:57 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchange/archive/Inbox 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=720a0542-0f59-45 f0-aaa7-9e f5c8ef92ac :0x1009;+c adata="2We TqHGFjEz1D vI2GwvjU1r G5U4rlxb0/ BcXIEfTBPU 4N9+UAEVju yJN7ff6ZD7 Hr" https://webmail.DOMAIN/exchange/archive/?Cmd=navbar webmail.DOMAIN 404 0 2 1795 669 0
2009-03-14 16:42:45 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS ync 443 - 75.158.88.199 Apple-iPhone/508.11 - - webmail.DOMAIN 404 0 2 1795 287 31
2009-03-14 16:42:45 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS ync 443 - 75.158.88.199 Apple-iPhone/508.11 - - webmail.DOMAIN 404 0 2 1795 287 15
2009-03-14 16:42:46 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS ync 443 - 75.158.88.199 Apple-iPhone/508.11 - - webmail.DOMAIN 404 0 2 1795 287 0
2009-03-14 16:42:46 W3SVC1 SERVER 192.168.31.5 GET /exchange/archive/ Cmd=logoff 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=720a0542-0f59-45 f0-aaa7-9e f5c8ef92ac :0x1009;+c adata="2We TqHGFjEz1D vI2GwvjU1r G5U4rlxb0/ BcXIEfTBPU 4N9+UAEVju yJN7ff6ZD7 Hr" - webmail.DOMAIN 302 0 0 323 624 31
2009-03-14 16:42:46 W3SVC1 SERVER 192.168.31.5 GET /exchweb/bin/auth/owalogon .asp url=https://webmail.DOMAIN/exchange/&reason=1 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) - - webmail.DOMAIN 200 0 0 15443 533 125
2009-03-14 16:46:27 W3SVC1 SERVER 192.168.31.5 GET /exchange - 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) - - webmail.DOMAIN 401 2 2148074254 322 465 15
2009-03-14 16:46:27 W3SVC1 SERVER 192.168.31.5 GET /exchweb/bin/auth/owalogon .asp url=https://webmail.DOMAIN/exchange&reason=0 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) - - webmail.DOMAIN 200 0 0 13982 532 312
2009-03-14 16:46:36 W3SVC1 SERVER 192.168.31.5 POST /exchweb/bin/auth/owaauth. dll - 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) - https://webmail.DOMAIN/exchweb/bin/auth/owalogon.asp?url=https://webmail.DOMAIN/exchange&reason=0 webmail.DOMAIN 302 0 0 366 836 0
2009-03-14 16:46:36 W3SVC1 SERVER 192.168.31.5 GET /exchange - 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=75c9504d-e12c-42 f9-938e-47 6099974ea8 ;+cadata=" 039qojIWyh VZ0Lcyt43e hC9WjLRcUI NvoTk46GPx eT9M3eLo4c gQXHhLDovr kSdav" https://webmail.DOMAIN/exchweb/bin/auth/owalogon.asp?url=https://webmail.DOMAIN/exchange&reason=0 webmail.DOMAIN 302 0 0 363 732 171
2009-03-14 16:46:36 W3SVC1 SERVER 192.168.31.5 GET /exchange/ - 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=75c9504d-e12c-42 f9-938e-47 6099974ea8 ;+cadata=" 039qojIWyh VZ0Lcyt43e hC9WjLRcUI NvoTk46GPx eT9M3eLo4c gQXHhLDovr kSdav" https://webmail.DOMAIN/exchweb/bin/auth/owalogon.asp?url=https://webmail.DOMAIN/exchange&reason=0 webmail.DOMAIN 200 0 0 1308 733 156
2009-03-14 16:46:36 W3SVC1 SERVER 192.168.31.5 GET /exchange/archive/ Cmd=navbar 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=75c9504d-e12c-42 f9-938e-47 6099974ea8 :0x1009;+c adata="039 qojIWyhVZ0 Lcyt43ehC9 WjLRcUINvo Tk46GPxeT9 M3eLo4cgQX HhLDovrkSd av" https://webmail.DOMAIN/exchange/ webmail.DOMAIN 200 0 0 4144 668 171
2009-03-14 16:46:36 W3SVC1 SERVER 192.168.31.5 GET /exchange/archive/Inbox/ Cmd=contents 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=75c9504d-e12c-42 f9-938e-47 6099974ea8 :0x1009;+c adata="039 qojIWyhVZ0 Lcyt43ehC9 WjLRcUINvo Tk46GPxeT9 M3eLo4cgQX HhLDovrkSd av" https://webmail.DOMAIN/exchange/ webmail.DOMAIN 200 0 0 5464 676 171
2009-03-14 16:46:39 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchweb/6.5.7651.60/cont rols/tf_Me ssages.xsl 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=75c9504d-e12c-42 f9-938e-47 6099974ea8 :0x1009;+c adata="039 qojIWyhVZ0 Lcyt43ehC9 WjLRcUINvo Tk46GPxeT9 M3eLo4cgQX HhLDovrkSd av" https://webmail.DOMAIN/exchange/archive/Inbox/?Cmd=contents webmail.DOMAIN 404 0 2 1795 526 31
2009-03-14 16:46:39 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchange/archive/Inbox/ 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=75c9504d-e12c-42 f9-938e-47 6099974ea8 :0x1009;+c adata="039 qojIWyhVZ0 Lcyt43ehC9 WjLRcUINvo Tk46GPxeT9 M3eLo4cgQX HhLDovrkSd av" https://webmail.DOMAIN/exchange/archive/Inbox/?Cmd=contents webmail.DOMAIN 404 0 2 1795 626 0
2009-03-14 16:46:39 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchange/archive/Calenda r 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=75c9504d-e12c-42 f9-938e-47 6099974ea8 :0x1009;+c adata="039 qojIWyhVZ0 Lcyt43ehC9 WjLRcUINvo Tk46GPxeT9 M3eLo4cgQX HhLDovrkSd av" https://webmail.DOMAIN/exchange/archive/?Cmd=navbar webmail.DOMAIN 404 0 2 1795 624 0
2009-03-14 16:46:39 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchange/archive/Tasks 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=75c9504d-e12c-42 f9-938e-47 6099974ea8 :0x1009;+c adata="039 qojIWyhVZ0 Lcyt43ehC9 WjLRcUINvo Tk46GPxeT9 M3eLo4cgQX HhLDovrkSd av" https://webmail.DOMAIN/exchange/archive/?Cmd=navbar webmail.DOMAIN 404 0 2 1795 621 0
2009-03-14 16:47:38 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchange/archive/Inbox 443 - X.X.245.18 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+GTB5; +.NET+CLR+ 1.0.3705;+ .NET+CLR+1 .1.4322;+M edia+Cente r+PC+2.8;+ .NET+CLR+2 .0.50727) sessionid=75c9504d-e12c-42 f9-938e-47 6099974ea8 :0x1009;+c adata="039 qojIWyhVZ0 Lcyt43ehC9 WjLRcUINvo Tk46GPxeT9 M3eLo4cgQX HhLDovrkSd av" https://webmail.DOMAIN/exchange/archive/?Cmd=navbar webmail.DOMAIN 404 0 2 1795 669 93
2009-03-14 16:47:48 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS ync 443 - 75.158.88.199 Apple-iPhone/508.11 - - webmail.DOMAIN 404 0 2 1795 287 0
2009-03-14 16:47:48 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS ync 443 - 75.158.88.199 Apple-iPhone/508.11 - - webmail.DOMAIN 404 0 2 1795 287 0
2009-03-14 16:47:48 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS ync 443 - 75.158.88.199 Apple-iPhone/508.11 - - webmail.DOMAIN 404 0 2 1795 287 0
2009-03-14 16:49:03 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS ync?User=U SER&Device Id=2B7133C CCA6C67351 27F2A4629D F8DA8&Devi ceType=Poc ketPC 443 - 209.153.204.169 MSFT-PPC/5.2.402 - - webmail.DOMAIN 404 0 2 1795 373 0
2009-03-14 16:49:06 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~//exchange-oma/USER@DOMAI N/NON_IPM_ SUBTREE/Mi crosoft-Se rver-Activ eSync/Pock etPC/2B713 3CCCA6C673 5127F2A462 9DF8DA8 80 - 192.168.31.5 Microsoft-Server-ActiveSyn c/6.5.7638 .1 - - webmail.DOMAIN 302 0 0 340 426 0
2009-03-14 16:49:36 W3SVC1 SERVER 192.168.31.5 POST /Microsoft-Server-ActiveSy nc User=USER&DeviceId=2B7133C CCA6C67351 27F2A4629D F8DA8&Devi ceType=Poc ketPC&Cmd= FolderSync &Log=V4TNA SNC:0A0C0D 0FS:0A0C0D 0SP:1C1I46 5S0R0S0L0H 0P 443 SBS\USER 209.153.204.169 MSFT-PPC/5.2.402 - - webmail.DOMAIN 500 0 0 278 482 29921
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2009-03-14 16:32:42
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2009-03-14 16:32:42 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS
2009-03-14 16:32:42 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS
2009-03-14 16:32:42 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS
2009-03-14 16:37:43 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS
2009-03-14 16:37:43 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS
2009-03-14 16:37:44 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS
2009-03-14 16:38:36 W3SVC1 SERVER 192.168.31.5 GET /exchange - 443 - X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:38:36 W3SVC1 SERVER 192.168.31.5 GET /exchweb/bin/auth/owalogon
2009-03-14 16:38:56 W3SVC1 SERVER 192.168.31.5 POST /exchweb/bin/auth/owaauth.
2009-03-14 16:38:56 W3SVC1 SERVER 192.168.31.5 GET /exchange - 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:38:56 W3SVC1 SERVER 192.168.31.5 GET /exchange/ - 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:38:57 W3SVC1 SERVER 192.168.31.5 GET /exchange/archive/ Cmd=navbar 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:38:57 W3SVC1 SERVER 192.168.31.5 GET /exchange/archive/Inbox/ Cmd=contents 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:38:57 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchweb/6.5.7651.60/cont
2009-03-14 16:38:58 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchange/archive/Inbox/ 443 - X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:38:58 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchange/archive/Calenda
2009-03-14 16:38:58 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchange/archive/Tasks 443 - X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:39:57 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchange/archive/Inbox 443 - X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:42:45 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS
2009-03-14 16:42:45 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS
2009-03-14 16:42:46 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS
2009-03-14 16:42:46 W3SVC1 SERVER 192.168.31.5 GET /exchange/archive/ Cmd=logoff 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:42:46 W3SVC1 SERVER 192.168.31.5 GET /exchweb/bin/auth/owalogon
2009-03-14 16:46:27 W3SVC1 SERVER 192.168.31.5 GET /exchange - 443 - X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:46:27 W3SVC1 SERVER 192.168.31.5 GET /exchweb/bin/auth/owalogon
2009-03-14 16:46:36 W3SVC1 SERVER 192.168.31.5 POST /exchweb/bin/auth/owaauth.
2009-03-14 16:46:36 W3SVC1 SERVER 192.168.31.5 GET /exchange - 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:46:36 W3SVC1 SERVER 192.168.31.5 GET /exchange/ - 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:46:36 W3SVC1 SERVER 192.168.31.5 GET /exchange/archive/ Cmd=navbar 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:46:36 W3SVC1 SERVER 192.168.31.5 GET /exchange/archive/Inbox/ Cmd=contents 443 USER X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:46:39 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchweb/6.5.7651.60/cont
2009-03-14 16:46:39 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchange/archive/Inbox/ 443 - X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:46:39 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchange/archive/Calenda
2009-03-14 16:46:39 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchange/archive/Tasks 443 - X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:47:38 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/exchange/archive/Inbox 443 - X.X.245.18 Mozilla/4.0+(compatible;+M
2009-03-14 16:47:48 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS
2009-03-14 16:47:48 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS
2009-03-14 16:47:48 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS
2009-03-14 16:49:03 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~/Microsoft-Server-ActiveS
2009-03-14 16:49:06 W3SVC1 SERVER 192.168.31.5 GET /Rejected-By-UrlScan ~//exchange-oma/USER@DOMAI
2009-03-14 16:49:36 W3SVC1 SERVER 192.168.31.5 POST /Microsoft-Server-ActiveSy
ASKER
I have also posted the results of an IIS Auth Diagnostics User Rights, as I think it might be something to do with permissions?
System time=Sat, 14 Mar 2009 17:03:51 GMT
OS=Windows 2003 Service Pack 2
W3SVC=IIS6 - World Wide Web Publishing service is running
MSFTPSVC=IIS6 - FTP Publishing service is running
Host name=server
Dns suffix=sbs.domain
Domain name=SBS
ModuleFileName=C:\Program Files\IIS Resources\AuthDiag\authdia g.exe version: 1.0:43.0
Status Result
NT AUTHORITY\LOCAL SERVICE Found privileges: Log on as a batch job; Adjust memory quotas for a process; Replace a process level token
NT AUTHORITY\NETWORK SERVICE Found privileges: Log on as a service; Adjust memory quotas for a process; Replace a process level token
BUILTIN\Administrators Found privileges: Allow log on locally; Access this computer from the network; Adjust memory quotas for a process; Impersonate a client after authentication
Error: BUILTIN\Users Not found privileges: Access this computer from the network
SBS\IUSR_server Found privileges: Log on as a batch job; Allow log on locally; Access this computer from the network
SBS\IWAM_server Found privileges: Log on as a batch job; Access this computer from the network; Adjust memory quotas for a process; Replace a process level token
SBS\IIS_WPG Found privileges: Log on as a batch job; Impersonate a client after authentication; Log on as a batch job
Everyone Found privileges: Bypass traverse checking
NT AUTHORITY\SERVICE Found privileges: Impersonate a client after authentication
To check privileges of custom Anonymous user (if it configured) run 'Check Authentication' for appropriate Site
Diagnostics complete
Finished, system time: Sat, 14 Mar 2009 17:03:51 GMT
System time=Sat, 14 Mar 2009 17:03:51 GMT
OS=Windows 2003 Service Pack 2
W3SVC=IIS6 - World Wide Web Publishing service is running
MSFTPSVC=IIS6 - FTP Publishing service is running
Host name=server
Dns suffix=sbs.domain
Domain name=SBS
ModuleFileName=C:\Program Files\IIS Resources\AuthDiag\authdia
Status Result
NT AUTHORITY\LOCAL SERVICE Found privileges: Log on as a batch job; Adjust memory quotas for a process; Replace a process level token
NT AUTHORITY\NETWORK SERVICE Found privileges: Log on as a service; Adjust memory quotas for a process; Replace a process level token
BUILTIN\Administrators Found privileges: Allow log on locally; Access this computer from the network; Adjust memory quotas for a process; Impersonate a client after authentication
Error: BUILTIN\Users Not found privileges: Access this computer from the network
SBS\IUSR_server Found privileges: Log on as a batch job; Allow log on locally; Access this computer from the network
SBS\IWAM_server Found privileges: Log on as a batch job; Access this computer from the network; Adjust memory quotas for a process; Replace a process level token
SBS\IIS_WPG Found privileges: Log on as a batch job; Impersonate a client after authentication; Log on as a batch job
Everyone Found privileges: Bypass traverse checking
NT AUTHORITY\SERVICE Found privileges: Impersonate a client after authentication
To check privileges of custom Anonymous user (if it configured) run 'Check Authentication' for appropriate Site
Diagnostics complete
Finished, system time: Sat, 14 Mar 2009 17:03:51 GMT
Is this an sbs server? When you pulled the nic, did the IP address change? You might want to add the SBS zone to this question as well. When did this problem start in relation to the changes?
ASKER
I have had SBS 2003 in the "Tags" since the original post -- not sure how to add it to the SBS Zone at this point -- I can't seem to edit that now that comments have been posted. IP did change, but all was working after the initial change. We then had some problems requiring lockdown of our router and at some point during that work, something must have been changed or broken in re-running the SBS Wizards or something else? Though I am not sure it is related, the problems started after I configured LDAP connection on our Barracuda spam appliance that is located in a DMZ.
As this is SBS, you need to run the Configure Internet and Email wizard again, to ensure that everything is setup correctly.
-M
-M
What changes were made to the router? You can make an admin request to add a zone.
ASKER
Made the admin request -- thxs for the tip. Respecting the router changes, opened all traffic between spam filter in DMZ and SBS box that resides in LAN, also restricted all traffic from LAN out through port 25 (spam issue) to only the SBS box. Only HTTP and HTTPS ports are open from internet to SBS box.
Sorryry for not seeing this, it got buried under a pile of email...
Did you already run the internet wizzard that mestha asked about? Have you put in a support call to Barracuda regarding the issue?
Dumb question - what if you try OWA locally in the network? Does it load? This will help you determine if it is a firewall or sbs issue.
Did you already run the internet wizzard that mestha asked about? Have you put in a support call to Barracuda regarding the issue?
Dumb question - what if you try OWA locally in the network? Does it load? This will help you determine if it is a firewall or sbs issue.
ASKER
Internet wizard has been run . . . several times. Been running SBS boxes for a while, so I am familiar with the power of the Wizards. Had a support call with Barracuda, but don't think it is their problem. OWA locally -- local host, or on LAN client produce the same result. So I have ruled out the firewall issue -- has to be IIS/SBS.
Does Outlook load fine? This helps determine IIS versus Exchange. If so, then you can try rebuilding the Exchange virtual directories to see if that solves the problem.
https://www.experts-exchange.com/questions/21878530/Rebuild-Exchange-OMA-and-ActiveSync.html
http://geekswithblogs.net/jemimus/archive/2004/12/09/17085.aspx
Try this first, then after that, delete and re-post the question.
https://www.experts-exchange.com/questions/21878530/Rebuild-Exchange-OMA-and-ActiveSync.html
http://geekswithblogs.net/jemimus/archive/2004/12/09/17085.aspx
Try this first, then after that, delete and re-post the question.
ASKER
I've rebuilt the virtual directories a few times with no benefit.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
The link you posted: http://msmvps.com/blogs/bradley/archive/2005/03/22/39332.aspx
doesn't work anymore! Please repost a good link?
doesn't work anymore! Please repost a good link?