Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 636
  • Last Modified:

Active sync issue exchange 2010

I experienced in our environment substantially large growth in logs in our exchange databases. I took a look at this in Exmon and saw several users with spiked CPU time and also logbytes out. I then ran the activesync powershell script to get rid of users who have not connected in 60 days. This took it down some but not all. I then ran the export-activesynclog as shown here http://pipe2text.com/?page_id=1454 I then found several users who were sending 1,000 or more emails over there phone. I have not ran message tracking yet to verify but this seem kind of odd for users in fact to send this amount on any given day. I am trying to gain a better understanding for whats going on. The site I just placed mentioned hits and items received as being a bad thing. Can anyone explain this in lamens terms and what do you suggest as a long term fix rather than block the user.


Let me pause here and ask this question sort of unrelated. First question I have related to this if users are being locked out of AD/Exchange does running a script to kill active sync devices who have not connected in such in such days really resolve the password prompt issue to any degree.
0
techdrive
Asked:
techdrive
  • 4
  • 3
1 Solution
 
Simon Butler (Sembee)ConsultantCommented:
First.
Review this article from the Exchange product team. It outlines the most common reasons for the growth.
http://blogs.technet.com/b/exchange/archive/2013/04/18/troubleshooting-rapid-growth-in-databases-and-transaction-log-files-in-exchange-server-2007-and-2010.aspx

In my experience it could be a single user with an out of date Apple device that has adjusted a calendar entry. You should ensure that all users keep their iOS right up to date.
This isn't a problem that you can fix once and it goes away unfortunately.

You should also review and keep bookmarked the known issues with ActiveSync KB article:
http://support.microsoft.com/kb/2563324

Run a query to look for old ActiveSync partnerships and remove any that are older than 90 days. You can also look at the version of iOS being used using the same queries, then hassle the users involved to update. This is particularly the case if they have an early version 6 OS.

If you have users being locked out of their accounts, that is probably due to cached credentials somewhere. Removing old devices isn't going to help because they aren't causing the lock out, it will be a current device.

Simon.
0
 
techdriveAuthor Commented:
I ran a total and here are the numbers for active sync. I just wonder how far back they go. It appears it is with the phone as the growth with mailboxes and client data are ok.


Hits      Ping      Sync      FolderSync      DeviceType
831908      0      727877      103959      SAMSUNGS
362627      0      359227      2671      SAMSUNGS
359374      357987      848      216      Android
273599      99864      170944      2122      iPhone
272848      102494      168104      1772      iPhone
250647      126120      3977      119454      MotoDROID
237919      144070      90777      1911      iPhone
231055      14791      198905      334      iPhone
224618      215133      5315      36      Android
223069      212559      9580      7      MotoDROID
0
 
Simon Butler (Sembee)ConsultantCommented:
Cannot answer the question on how far they go back.
Have you queried the ActiveSync Statistics ? That may well give you more of a clue.

Simon.
0
Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

 
techdriveAuthor Commented:
If you are talking about get-activesyncdevicestatistics yes and all the devices are within 30 days now lastsuccessfulsync. If not can you elaborate on what you are pointing to with active sync statistics.
0
 
Simon Butler (Sembee)ConsultantCommented:
Have you looked at the OS version of the devices to ensure that they are up to date?

Simon.
0
 
techdriveAuthor Commented:
Yes I did I think I found the issue. We have over 100 devices that are not up to date and are IOS 6.01 devices. Another thing I am not sure about is I ran the activesync script and there are over 200 users over the 1,000 hits mark. What are hits in relationship to activeync and how does this work.
0
 
Simon Butler (Sembee)ConsultantCommented:
If you have a high number of Apple users then they are probably upgrading the devices frequently. You should look at the last sync time and remove any that haven't synchronised in over 90 days, that will probably remove a lot of the older devices.

That could also be why you have so many IOS 6 devices - as I would find it surprising that so many would be out of date considering how much Apple nags.

Simon.
0

Featured Post

Free recovery tool for Microsoft Active Directory

Veeam Explorer for Microsoft Active Directory provides fast and reliable object-level recovery for Active Directory from a single-pass, agentless backup or storage snapshot — without the need to restore an entire virtual machine or use third-party tools.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now