Solved

How can I see a list of all users who access Exchange via the Outlook Web Access (OWA)?

Posted on 2014-11-24
5
619 Views
Last Modified: 2014-11-30
How can I see a list of all users who access Exchange via the Outlook Web Access (OWA)?

I need to see who accessed OWA/ActiveSync in the last 90 days.

I have tried this article, but the sql seems to be giving me some issues:
http://windowsitpro.com/windows/q-how-can-i-see-list-all-users-who-access-exchange-outlook-web-access-owa

The error on log parser 2.2 is this:
Error: Syntax Error: 'AS' not followed by <alias> (\[Date\],)


The SQL is following:
Select

 date as \[Date\],
 time as \[Time\],
 s-ip as \[Server IP\],
 cs-username as \[UserName\],
 c-ip as \[Client-IP\],
 cs-method as \[Request Verb\],
 cs-uri-stem as \[Request URI\]

 FROM C:\inetpub\logs\LogFiles\W3SVC1\*.log

 WHERE cs-method LIKE 'GET' AND cs-uri-stem LIKE '/exchange'
 AND cs-username LIKE'%'
0
Comment
Question by:cdshreve
  • 3
5 Comments
 
LVL 26

Expert Comment

by:pony10us
ID: 40462492
Have you looked at Microsoft's article?

http://support.microsoft.com/kb/246248
0
 
LVL 16

Expert Comment

by:Rajitha Chimmani
ID: 40462588
Try this and see.

Select

*

 FROM C:\inetpub\logs\LogFiles\W3SVC1\*.log

 WHERE cs-method LIKE 'GET' AND cs-uri-stem LIKE '/exchange'
 AND cs-username LIKE '%'
0
 

Author Comment

by:cdshreve
ID: 40463010
Unfortunately neither of the suggestions work.  The article was about 5.5 and the sql command still received no results.
0
 

Accepted Solution

by:
cdshreve earned 0 total points
ID: 40464656
Actually found this and it works!
then I use Powershell to sort and de-dup


http://myriadofthings.com/outlook-web-access-owa-and-activesync-reporting-using-iis-logs/
0
 

Author Closing Comment

by:cdshreve
ID: 40472353
Actually found the solution elsewhere.
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Join & Write a Comment

Ever needed a SQL 2008 Database replicated/mirrored/log shipped on another server but you can't take the downtime inflicted by initial snapshot or disconnect while T-logs are restored or mirror applied? You can use SQL Server Initialize from Backup…
Ever wondered why sometimes your SQL Server is slow or unresponsive with connections spiking up but by the time you go in, all is well? The following article will show you how to install and configure a SQL job that will send you email alerts includ…
This videos aims to give the viewer a basic demonstration of how a user can query current session information by using the SYS_CONTEXT function
Viewers will learn how to use the UPDATE and DELETE statements to change or remove existing data from their tables. Make a table: Update a specific column given a specific row using the UPDATE statement: Remove a set of values using the DELETE s…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now