I experienced in our environment substantially large growth in logs in our exchange databases. I took a look at this in Exmon and saw several users with spiked CPU time and also logbytes out. I then ran the activesync powershell script to get rid of users who have not connected in 60 days. This took it down some but not all. I then ran the export-activesynclog as shown here http://pipe2text.com/?page_id=1454
I then found several users who were sending 1,000 or more emails over there phone. I have not ran message tracking yet to verify but this seem kind of odd for users in fact to send this amount on any given day. I am trying to gain a better understanding for whats going on. The site I just placed mentioned hits and items received as being a bad thing. Can anyone explain this in lamens terms and what do you suggest as a long term fix rather than block the user.
Let me pause here and ask this question sort of unrelated. First question I have related to this if users are being locked out of AD/Exchange does running a script to kill active sync devices who have not connected in such in such days really resolve the password prompt issue to any degree.