Solved

OWA will not allow user to log in

Posted on 2012-03-29
29
617 Views
Last Modified: 2012-05-22
OWA is not working for one single user. When I go to the site https://mail.tlcdevelopment.com/exchange I am prompted for login.

When one of our users tries to login (with correct user and pass) he is simply prompted for login again and this loop continues. Please help.
0
Comment
Question by:MIT-Techs
  • 12
  • 7
  • 2
  • +5
29 Comments
 
LVL 10

Expert Comment

by:pclinuxguru
ID: 37784413
IN ADUC on exchange goto the users account and under exchange features make sure outlook web access is enabled.
0
 

Author Comment

by:MIT-Techs
ID: 37784423
Outlook web access is enabled. I went in and disabled it and re-enabled as well. Still not working.
0
 
LVL 22

Expert Comment

by:chakko
ID: 37784525
have you tried different forms of logon such as:
domain\username

username@domain.local
0
 

Author Comment

by:MIT-Techs
ID: 37784540
I just tried domain\username and username@domain with the same results.
0
 
LVL 22

Expert Comment

by:chakko
ID: 37784561
that's odd.
Have you tried a different browser or machine.  What about accessing a different user mailbox from that person's machine.  Just to rule out the PC side as an issue.
0
 

Author Comment

by:MIT-Techs
ID: 37784587
Same results on different computers. I am able to access OWA using other accounts, just not the one.
0
 
LVL 5

Expert Comment

by:amenezes0617
ID: 37785295
Are you sure his password isn't expired? Or set to "must change at next login?" or the account could be expired as well.
Are you able to setup an Outlook and Windows profile for that user?
0
 
LVL 3

Expert Comment

by:Padamdeep
ID: 37785534
I have only One question to start with.

What Exchange Version are you running? E2k3/E2k7 or E2010?

~ Singh
0
 
LVL 17

Expert Comment

by:WORKS2011
ID: 37785595
Go into AD, right click user, exchange tasks, select "delete mailbox"

Go into exchange, run  "Run Cleanup Agent", don't purge the mailbox.

In Exchange highlight the deleted email account (has a red x on it) and select "Reconnect" to the user account you're having problems with. I've seen this re-associate the attributes.
0
 
LVL 31

Expert Comment

by:LeeDerbyshire
ID: 37786817
Can you find the iis log file entries generated when this user tries to login?  At what point do they start to differ from a successful login?  Please paste them for us, if you can find them.
0
 
LVL 10

Expert Comment

by:pclinuxguru
ID: 37787264
.
0
 
LVL 1

Expert Comment

by:Bopheak
ID: 37789982
Make sure that you type user log in format base on form-based authentication that you selected in OWA authentication tab properties. and AD that you selected, it uses for users exchange accounts.
0
 

Author Comment

by:MIT-Techs
ID: 37797097
@Padamdeep its a SBS2003 server so E2k3
0
 
LVL 3

Expert Comment

by:Padamdeep
ID: 37797117
Lets go to IIS logs on Exchange Server and check what error it is failing with?

You can go to IIS logs and search for this user's alias.


~ Singh
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 1

Expert Comment

by:Bopheak
ID: 37799074
Go to services.msc on Exchange Server Machine, Stop and then restart service Microsoft Exchange forms-based Authentication service.
0
 

Author Comment

by:MIT-Techs
ID: 37812880
@Padamdeep,

This is all I see on the IIS logs.

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2012-04-05 00:02:48
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2012-04-05 00:02:48 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:02:48 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:02:48 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:02:48 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C23I98662S668288R0S0L600H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 0
2012-04-05 00:07:09 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:07:09 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:07:09 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:07:14 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C23I98662S668288R0S0L600H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 995
2012-04-05 00:07:24 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:07:24 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:07:24 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:07:28 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C24I99600S669866R0S0L600H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 995
2012-04-05 00:09:51 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:09:51 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C24I99600S669866R0S0L600H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 64
2012-04-05 00:09:51 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:09:51 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 302 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:05 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:05 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:05 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:1C24I99600S669866R0S0L600H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 0
2012-04-05 00:11:06 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:06 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:06 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:06 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:06 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:06 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:06 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:06 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:06 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:06 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Sync&Log=V4TCaSSC:0A0C0D0FS:0A0C0D1SP:1C4I16729S33686R0S0L0H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 0
2012-04-05 00:11:20 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:20 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:20 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:20 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:20 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:20 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:20 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:20 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:20 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:20 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D7SP:1C4I49343S97018R0S0L0H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 0
2012-04-05 00:11:20 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:20 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:20 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:20 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:20 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:20 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:21 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:21 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:21 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:21 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D21SP:1C4I182942S364228R0S0L0H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 0
2012-04-05 00:11:24 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 302 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:11:24 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:21:26 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:21:26 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:21:26 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C23I98662S668392R0S0L600H0P 443 TIEMANN\robert 166.147.79.200 Apple-iPhone4C1/902.179 200 0 64
2012-04-05 00:21:26 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:22:36 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 302 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/AutdState.xml - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/FolderSyncFile - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Contacts/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Suggested+Contacts/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Tasks/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Sent+Items/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/Calendar/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/334addcfe2a4f64c83e157eed5691320-81e0005 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b9 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-05 00:22:36 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-13b4 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-05 00:22:36 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
0
 

Author Comment

by:MIT-Techs
ID: 37812899
@Bopheak,

In the services console there is no service called Microsoft Exchange forms-based Authentication service.

It is not present.
0
 
LVL 31

Expert Comment

by:LeeDerbyshire
ID: 37814040
There aren't any OWA requests in that log segment.  OWA requests would start with
 GET /exchange
all the entries listed here are for ActiveSync.  It may be that you have disabled logging on the Exchange VDir, or maybe they are in a different log.  Are the ones above from the latest log file in the W3SVC1 folder?
0
 

Author Comment

by:MIT-Techs
ID: 37823997
Sorry, here is the correct portion of the log.


2012-04-09 15:35:11 192.168.1.150 GET /exchange/ - 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 2 2148074254
2012-04-09 15:35:11 192.168.1.150 GET /exchange/ - 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 1 0
2012-04-09 15:35:11 192.168.1.150 GET /exchange/ - 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 200 0 0
2012-04-09 15:35:11 192.168.1.150 GET /exchange/missionit/ Cmd=navbar 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 200 0 0
2012-04-09 15:35:11 192.168.1.150 GET /exchange/missionit/Inbox/ Cmd=contents 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 2 2148074254
2012-04-09 15:35:11 192.168.1.150 GET /exchange/missionit/Inbox/ Cmd=contents 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 1 0
2012-04-09 15:35:11 192.168.1.150 GET /exchange/missionit/Inbox/ Cmd=contents 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 200 0 0
2012-04-09 15:35:18 192.168.1.150 GET /exchange/missionit/ Cmd=logoff 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 302 0 0
2012-04-09 15:35:18 192.168.1.150 GET /exchweb/bin/USA/logoff.asp - 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 200 0 0
2012-04-09 15:35:33 192.168.1.150 GET /exchange/ - 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 200 0 0
2012-04-09 15:35:33 192.168.1.150 GET /exchange/missionit/ Cmd=navbar 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 200 0 0
2012-04-09 15:35:33 192.168.1.150 GET /exchange/missionit/Inbox/ Cmd=contents 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 2 2148074254
2012-04-09 15:35:33 192.168.1.150 GET /exchange/missionit/Inbox/ Cmd=contents 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 1 0
2012-04-09 15:35:33 192.168.1.150 GET /exchange/missionit/Inbox/ Cmd=contents 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 200 0 0
2012-04-09 15:35:49 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-09 15:35:49 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:35:49 192.168.1.150 UNSUBSCRIBE /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:35:50 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C24I17926S675620R0S0L600H0P 443 TIEMANN\robert 166.147.79.5 Apple-iPhone4C1/902.179 200 0 0
2012-04-09 15:36:08 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:08 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:36:08 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-09 15:36:08 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:08 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-09 15:36:08 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:08 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:36:08 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:08 192.168.1.150 PUT /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-09 15:36:09 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:1A0C0D0SP:1C4I186280S376434R0S21L0H0P 443 TIEMANN\robert 166.147.79.5 Apple-iPhone4C1/902.179 200 0 0
2012-04-09 15:36:09 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:09 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:36:09 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-09 15:36:09 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:09 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-09 15:36:09 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/-FlatUrlSpace-/a97f5a3399961c458f8a807381e40baf-16d5/a97f5a3399961c458f8a807381e40baf-3f81c1 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:09 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/-FlatUrlSpace-/a97f5a3399961c458f8a807381e40baf-16d5/a97f5a3399961c458f8a807381e40baf-3f81c1 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:36:09 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/Schedule+for+Rowe+Lane+Audit.EML - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-09 15:36:09 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/Schedule+for+Rowe+Lane+Audit.EML - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:09 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/Inbox/Schedule+for+Rowe+Lane+Audit.EML - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 64
2012-04-09 15:36:10 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Sync&Log=V4TEmSSC:0A0C0D1FS:0A0C0D0SP:1C4I2203S380744R0S0L0H0P 443 TIEMANN\robert 166.147.79.5 Apple-iPhone4C1/902.179 200 0 0
2012-04-09 15:36:14 192.168.1.150 GET /exchange - 443 - 24.227.167.50 Mozilla/5.0+(compatible;+MSIE+9.0;+Windows+NT+6.1;+WOW64;+Trident/5.0) 401 2 2148074254
2012-04-09 15:36:19 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:19 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:36:19 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-09 15:36:19 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:19 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d7 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-09 15:36:19 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:19 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:36:19 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D0SP:1C3I3443S100072R0S0L0H0P 443 TIEMANN\robert 166.147.79.5 Apple-iPhone4C1/902.179 200 0 0
2012-04-09 15:36:19 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:19 192.168.1.150 PROPFIND /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:36:19 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2012-04-09 15:36:19 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:19 192.168.1.150 GET /exchange-oma/rtiemann@tlcdevelopment.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC39GF97WDTD5/a97f5a3399961c458f8a807381e40baf-16d5 - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2012-04-09 15:36:19 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 - 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2012-04-09 15:36:19 192.168.1.150 SEARCH /exchange-oma/rtiemann@tlcdevelopment.com/ - 80 TIEMANN\robert 192.168.1.150 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2012-04-09 15:36:20 192.168.1.150 POST /Microsoft-Server-ActiveSync User=robert&DeviceId=ApplC39GF97WDTD5&DeviceType=iPhone&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D0SP:1C3I7691S369336R0S0L0H0P 443 TIEMANN\robert 166.147.79.5 Apple-iPhone4C1/902.179 200 0 0
2012-04-09 15:36:22 192.168.1.150 GET /exchange - 443 - 24.227.167.50 Mozilla/5.0+(compatible;+MSIE+9.0;+Windows+NT+6.1;+WOW64;+Trident/5.0) 401 1 0
2012-04-09 15:36:22 192.168.1.150 GET /exchange - 443 - 24.227.167.50 Mozilla/5.0+(compatible;+MSIE+9.0;+Windows+NT+6.1;+WOW64;+Trident/5.0) 401 1 2148074252
0
 
LVL 31

Expert Comment

by:LeeDerbyshire
ID: 37827364
Are the last two entries the relevant ones?
2012-04-09 15:36:22 192.168.1.150 GET /exchange - 443 - 24.227.167.50 Mozilla/5.0+(compatible;+MSIE+9.0;+Windows+NT+6.1;+WOW64;+Trident/5.0) 401 1 0
2012-04-09 15:36:22 192.168.1.150 GET /exchange - 443 - 24.227.167.50 Mozilla/5.0+(compatible;+MSIE+9.0;+Windows+NT+6.1;+WOW64;+Trident/5.0) 401 1 2148074252
The dash (-) after the /exchange part indicates that either the browser hasn't sent the credentials yet, or that they are incorrect.  It's common to see one request logged with a dash, quickly followed by another with a username in place of the dash.  This just means that the server is saying 'try again, but send me some credentials next time'.  However, if you don't see a second line with a username in it, it means that the server has not accepted the credentials, or the browser just isn't sending them.  If there was a username in there and there was still a 401 (access denied) at the end of the line, then that would mean that the credentials were correct, but that the user didn'y have enough permissions to access one or more resources.  But where the username is empty, then the credentials are just not being accepted at all.

Do you have forms-based authentication enabled (i.e. the blue logon page)?  If so, does the affected user see it, or do they get the repeated popup logon prompts before they even get to see the logon page?
0
 

Author Comment

by:MIT-Techs
ID: 37851578
Here is a better sample of the logs

I tried to log in as the user rtiemann twice with no success. I did not get any errors, just re-prompted for username and password. I have already changed the password so I know creds are correct.

At the end I logged in with another user account called missionit which worked.

How do I check to see if forms based authentication is enabled?

2012-04-16 14:38:01 192.168.1.150 GET /exchange/ - 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 2 2148074254
2012-04-16 14:38:10 192.168.1.150 GET /exchange/ - 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 1 0
2012-04-16 14:38:10 192.168.1.150 GET /exchange/ - 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 1 2148074252
2012-04-16 14:38:17 192.168.1.150 GET /exchange/ - 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 1 0
2012-04-16 14:38:17 192.168.1.150 GET /exchange/ - 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 1 2148074252
2012-04-16 14:38:23 192.168.1.150 GET /exchange/ - 443 - 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 401 1 0
2012-04-16 14:38:23 192.168.1.150 GET /exchange/ - 443 TIEMANN\missionit 24.227.167.50 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:11.0)+Gecko/20100101+Firefox/11.0 200 0 0
0
 
LVL 31

Expert Comment

by:LeeDerbyshire
ID: 37851739
You can see where it has accepted the missionit login, because the username is recorded.  However, in the previous lines, there is only a dash, which means that it didn't accept the username at all.  This would normally mean that the user had just supplied the wrong password, but I'm quite sure you've thought of that one.  But it might also mean the account is disabled, or locked out.  Again, you've probably checked that too.  It might be that the user doesn't have the 'log on to this computer' right.  But that only applies if you use Basic auth, which is why I ask about what sort of authentication you use.  You can tell if Forms-Based Auth is enabled easily enough.  When you go to OWA, do you see a little popup logon box, or do you see a page with a (usually) blue background and MS graphics all over it?
0
 

Author Comment

by:MIT-Techs
ID: 37851759
@ LeeDerbyshire,

you are correct about everything you mentioned. When I go to OWA it is a pop up log on box. No page for logging in.
0
 
LVL 31

Expert Comment

by:LeeDerbyshire
ID: 37851819
Okay, so you have Basic auth and/or Integrated auth enabled.  It's hard to be sure which, if you see the popup login box, since they look the same.  But since Firefox only works with Basic auth anyway (only MS browsers understand how to use MS integrated auth), you can be sure that you are using the Basic auth method in this case.  But it raises an interesting question.  Since IE can use Integrated auth, what happens if the affected user tries to access OWA in IE, rather than FF?
0
 

Author Comment

by:MIT-Techs
ID: 37852027
I just tried IE and got the same result.
0
 
LVL 31

Expert Comment

by:LeeDerbyshire
ID: 37852311
Okay, best to have a look in Exchange System Manager at the properties of the HTTP Virtual Directory (unders servers/protocols/http), and see whether Basic and/or Integrated is/are enabled.
0
 

Author Comment

by:MIT-Techs
ID: 37858170
Both Basic and integrated is enabled.
0
 
LVL 31

Accepted Solution

by:
LeeDerbyshire earned 500 total points
ID: 37860380
See if you can find a time when no-one else is using OWA, and try setting it to just Integrated.  Then, ask the user to try to log in with IE (no other browser will work when just Integrated is enabled).  Then try just setting it to Basic, and try again.  Note that when Integrated is enabled, the user will probably need to supply a domain name as well as the username.  There will either be a separate input box for the domain, or they will need to supply a username in the form of DOMAIN\USERNAME or username@domain.com .
0
 

Author Closing Comment

by:MIT-Techs
ID: 37999709
During testing I rebooted the server for the millionth time and all seems to be working now. Been working for a week with no issue.<br /><br />Thank you for your help!
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now