Link to home
Start Free TrialLog in
Avatar of MIT-Techs
MIT-TechsFlag for United States of America

asked on

OWA will not allow user to log in

OWA is not working for one single user. When I go to the site https://mail.tlcdevelopment.com/exchange I am prompted for login.

When one of our users tries to login (with correct user and pass) he is simply prompted for login again and this loop continues. Please help.
Avatar of pclinuxguru
pclinuxguru
Flag of United States of America image

IN ADUC on exchange goto the users account and under exchange features make sure outlook web access is enabled.
Avatar of MIT-Techs

ASKER

Outlook web access is enabled. I went in and disabled it and re-enabled as well. Still not working.
have you tried different forms of logon such as:
domain\username

username@domain.local
I just tried domain\username and username@domain with the same results.
that's odd.
Have you tried a different browser or machine.  What about accessing a different user mailbox from that person's machine.  Just to rule out the PC side as an issue.
Same results on different computers. I am able to access OWA using other accounts, just not the one.
Are you sure his password isn't expired? Or set to "must change at next login?" or the account could be expired as well.
Are you able to setup an Outlook and Windows profile for that user?
I have only One question to start with.

What Exchange Version are you running? E2k3/E2k7 or E2010?

~ Singh
Go into AD, right click user, exchange tasks, select "delete mailbox"

Go into exchange, run  "Run Cleanup Agent", don't purge the mailbox.

In Exchange highlight the deleted email account (has a red x on it) and select "Reconnect" to the user account you're having problems with. I've seen this re-associate the attributes.
Avatar of LeeDerbyshire
Can you find the iis log file entries generated when this user tries to login?  At what point do they start to differ from a successful login?  Please paste them for us, if you can find them.
Make sure that you type user log in format base on form-based authentication that you selected in OWA authentication tab properties. and AD that you selected, it uses for users exchange accounts.
@Padamdeep its a SBS2003 server so E2k3
Lets go to IIS logs on Exchange Server and check what error it is failing with?

You can go to IIS logs and search for this user's alias.


~ Singh
Go to services.msc on Exchange Server Machine, Stop and then restart service Microsoft Exchange forms-based Authentication service.
@Padamdeep,

This is all I see on the IIS logs.

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2012-04-05 00:02:48
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2012-04-05 00:02:48 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:02:48 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:02:48 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:02:48 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C23I98662S668288R0S0L600H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 0
2012-04-05 00:07:09 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:07:09 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:07:09 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:07:14 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C23I98662S668288R0S0L600H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 995
2012-04-05 00:07:24 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:07:24 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:07:24 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:07:28 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C24I99600S669866R0S0L600H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 995
2012-04-05 00:09:51 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:09:51 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C24I99600S669866R0S0L600H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 64
2012-04-05 00:09:51 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:09:51 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 302 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:1C24I99600S669866R0S0L600H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 0
2012-04-05 00:11:06 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:06 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:06 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:06 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:06 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:06 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:06 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:06 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:06 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:06 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Sync&Log=V4TCaSSC:0A0C0D0FS:0A0C0D1SP:1C4I16729S33686R0S0L0H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 0
2012-04-05 00:11:20 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:20 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:20 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:20 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:20 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:20 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:20 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:20 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:20 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:20 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D7SP:1C4I49343S97018R0S0L0H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 0
2012-04-05 00:11:20 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:20 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:20 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:20 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:20 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:20 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:21 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:21 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:21 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:21 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D21SP:1C4I182942S364228R0S0L0H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 0
2012-04-05 00:11:24 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 302 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:21:26 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:21:26 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:21:26 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C23I98662S668392R0S0L600H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 64
2012-04-05 00:21:26 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:22:36 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 302 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
@Bopheak,

In the services console there is no service called Microsoft Exchange forms-based Authentication service.

It is not present.
There aren't any OWA requests in that log segment.  OWA requests would start with
 GET /exchange
all the entries listed here are for ActiveSync.  It may be that you have disabled logging on the Exchange VDir, or maybe they are in a different log.  Are the ones above from the latest log file in the W3SVC1 folder?
Sorry, here is the correct portion of the log.


2012-04-09 15:35:11 192.168.1.150 GET /exchange/ - 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 2 2148074254
2012-04-09 15:35:11 192.168.1.150 GET /exchange/ - 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 1 0
2012-04-09 15:35:11 192.168.1.150 GET /exchange/ - 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 200 0 0
2012-04-09 15:35:11 192.168.1.150 GET /exchange/missionit/ Cmd=navbar 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 200 0 0
2012-04-09 15:35:11 192.168.1.150 GET /exchange/missionit/Inbox/ Cmd=contents 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 2 2148074254
2012-04-09 15:35:11 192.168.1.150 GET /exchange/missionit/Inbox/ Cmd=contents 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 1 0
2012-04-09 15:35:11 192.168.1.150 GET /exchange/missionit/Inbox/ Cmd=contents 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 200 0 0
2012-04-09 15:35:18 192.168.1.150 GET /exchange/missionit/ Cmd=logoff 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 302 0 0
2012-04-09 15:35:18 192.168.1.150 GET /exchweb/bin/USA/logoff.asp - 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 200 0 0
2012-04-09 15:35:33 192.168.1.150 GET /exchange/ - 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 200 0 0
2012-04-09 15:35:33 192.168.1.150 GET /exchange/missionit/ Cmd=navbar 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 200 0 0
2012-04-09 15:35:33 192.168.1.150 GET /exchange/missionit/Inbox/ Cmd=contents 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 2 2148074254
2012-04-09 15:35:33 192.168.1.150 GET /exchange/missionit/Inbox/ Cmd=contents 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 1 0
2012-04-09 15:35:33 192.168.1.150 GET /exchange/missionit/Inbox/ Cmd=contents 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 200 0 0
2012-04-09 15:35:49 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-09 15:35:49 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:35:49 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:35:50 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C24I17926S675620R0S0L600H0P 443 TIEMANN\robert 166.147.79.5 Apple-iPhone4C1/902.179 200 0 0
2012-04-09 15:36:08 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:08 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:36:08 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-09 15:36:08 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:08 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-09 15:36:08 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:08 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:36:08 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:08 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-09 15:36:09 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:1A0C0D0SP:1C4I186280S376434R0S21L0H0P 443 TIEMANN\robert 166.147.79.5 Apple-iPhone4C1/902.179 200 0 0
2012-04-09 15:36:09 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:09 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:36:09 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-09 15:36:09 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:09 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-09 15:36:09 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/-FlatUrlSpace-/a97f5a3399961c458f8a807381e40baf-16d5/a97f5a3399961c458f8a807381e40baf-3f81c1 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:09 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/-FlatUrlSpace-/a97f5a3399961c458f8a807381e40baf-16d5/a97f5a3399961c458f8a807381e40baf-3f81c1 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:36:09 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/Schedule+for+Rowe+Lane+Audit.EML - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-09 15:36:09 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/Schedule+for+Rowe+Lane+Audit.EML - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:09 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/Schedule+for+Rowe+Lane+Audit.EML - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 64
2012-04-09 15:36:10 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Sync&Log=V4TEmSSC:0A0C0D1FS:0A0C0D0SP:1C4I2203S380744R0S0L0H0P 443 TIEMANN\robert 166.147.79.5 Apple-iPhone4C1/902.179 200 0 0
2012-04-09 15:36:14 192.168.1.150 GET /exchange - 443 - 24.227.167.50 Mozilla/5.0+(compatible;+MSIE+9.0;+Windows+NT+6.1;+WOW64;+Trident/5.0) 401 2 2148074254
2012-04-09 15:36:19 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:19 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:36:19 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-09 15:36:19 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:19 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-09 15:36:19 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:19 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:36:19 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D0SP:1C3I3443S100072R0S0L0H0P 443 TIEMANN\robert 166.147.79.5 Apple-iPhone4C1/902.179 200 0 0
2012-04-09 15:36:19 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:19 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:36:19 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-09 15:36:19 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:19 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-09 15:36:19 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:19 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:36:20 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D0SP:1C3I7691S369336R0S0L0H0P 443 TIEMANN\robert 166.147.79.5 Apple-iPhone4C1/902.179 200 0 0
2012-04-09 15:36:22 192.168.1.150 GET /exchange - 443 - 24.227.167.50 Mozilla/5.0+(compatible;+MSIE+9.0;+Windows+NT+6.1;+WOW64;+Trident/5.0) 401 1 0
2012-04-09 15:36:22 192.168.1.150 GET /exchange - 443 - 24.227.167.50 Mozilla/5.0+(compatible;+MSIE+9.0;+Windows+NT+6.1;+WOW64;+Trident/5.0) 401 1 2148074252
Are the last two entries the relevant ones?
2012-04-09 15:36:22 192.168.1.150 GET /exchange - 443 - 24.227.167.50 Mozilla/5.0+(compatible;+MSIE+9.0;+Windows+NT+6.1;+WOW64;+Trident/5.0) 401 1 0
2012-04-09 15:36:22 192.168.1.150 GET /exchange - 443 - 24.227.167.50 Mozilla/5.0+(compatible;+MSIE+9.0;+Windows+NT+6.1;+WOW64;+Trident/5.0) 401 1 2148074252
The dash (-) after the /exchange part indicates that either the browser hasn't sent the credentials yet, or that they are incorrect.  It's common to see one request logged with a dash, quickly followed by another with a username in place of the dash.  This just means that the server is saying 'try again, but send me some credentials next time'.  However, if you don't see a second line with a username in it, it means that the server has not accepted the credentials, or the browser just isn't sending them.  If there was a username in there and there was still a 401 (access denied) at the end of the line, then that would mean that the credentials were correct, but that the user didn'y have enough permissions to access one or more resources.  But where the username is empty, then the credentials are just not being accepted at all.

Do you have forms-based authentication enabled (i.e. the blue logon page)?  If so, does the affected user see it, or do they get the repeated popup logon prompts before they even get to see the logon page?
Here is a better sample of the logs

I tried to log in as the user rtiemann twice with no success. I did not get any errors, just re-prompted for username and password. I have already changed the password so I know creds are correct.

At the end I logged in with another user account called missionit which worked.

How do I check to see if forms based authentication is enabled?

2012-04-16 14:38:01 192.168.1.150 GET /exchange/ - 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 2 2148074254
2012-04-16 14:38:10 192.168.1.150 GET /exchange/ - 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 1 0
2012-04-16 14:38:10 192.168.1.150 GET /exchange/ - 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 1 2148074252
2012-04-16 14:38:17 192.168.1.150 GET /exchange/ - 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 1 0
2012-04-16 14:38:17 192.168.1.150 GET /exchange/ - 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 1 2148074252
2012-04-16 14:38:23 192.168.1.150 GET /exchange/ - 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 1 0
2012-04-16 14:38:23 192.168.1.150 GET /exchange/ - 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 200 0 0
You can see where it has accepted the missionit login, because the username is recorded.  However, in the previous lines, there is only a dash, which means that it didn't accept the username at all.  This would normally mean that the user had just supplied the wrong password, but I'm quite sure you've thought of that one.  But it might also mean the account is disabled, or locked out.  Again, you've probably checked that too.  It might be that the user doesn't have the 'log on to this computer' right.  But that only applies if you use Basic auth, which is why I ask about what sort of authentication you use.  You can tell if Forms-Based Auth is enabled easily enough.  When you go to OWA, do you see a little popup logon box, or do you see a page with a (usually) blue background and MS graphics all over it?
@ LeeDerbyshire,

you are correct about everything you mentioned. When I go to OWA it is a pop up log on box. No page for logging in.
Okay, so you have Basic auth and/or Integrated auth enabled.  It's hard to be sure which, if you see the popup login box, since they look the same.  But since Firefox only works with Basic auth anyway (only MS browsers understand how to use MS integrated auth), you can be sure that you are using the Basic auth method in this case.  But it raises an interesting question.  Since IE can use Integrated auth, what happens if the affected user tries to access OWA in IE, rather than FF?
I just tried IE and got the same result.
Okay, best to have a look in Exchange System Manager at the properties of the HTTP Virtual Directory (unders servers/protocols/http), and see whether Basic and/or Integrated is/are enabled.
Both Basic and integrated is enabled.
ASKER CERTIFIED SOLUTION
Avatar of LeeDerbyshire
LeeDerbyshire
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
During testing I rebooted the server for the millionth time and all seems to be working now. Been working for a week with no issue.<br /><br />Thank you for your help!