logs for accessing mailbox via smartphone

Are there any default logs whoich could show if a user was accessing their corporate mailbox via their smartphone i.e active-sync? As opposed to say when logged into the network with a PC and accessing the system via outlook.
LVL 4
pma111Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

KimputerCommented:
Yes ActiveSync works of the HTTP/HTTPS ports, and hence through IIS, just enable the IIS logs. You will be able to tell who logged in from which IP. Here's a small sample of my logs (anonymised):

2015-03-16 09:20:36 W3SVC1 IP_SERVER POST /Microsoft-Server-ActiveSync User=username&DeviceId=ApplXXXXXXXXX&DeviceType=iPhone&Cmd=Sync&Log=V4TEmSSC:XXXXXXFS:XXXXXXX:1CXXXXXXXXXXXXX 80 domain\username CLIENT_IP Apple-iPhone5C2/1204.508 200 0 0

You can see the user, and even what device was used.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
pma111Author Commented:
Is there an easy way to see if the logs are enabled or not? on what server in your exchange setup are these logs stored, as exchange comes with a number of roles i.e. mbx, cas etc. this is for exch2010
0
pma111Author Commented:
And what is the default location for them?
0
Acronis Data Cloud 7.8 Enhances Cyber Protection

A closer look at five essential enhancements that benefit end-users and help MSPs take their cloud data protection business further.

KimputerCommented:
Usually something like C:\WINDOWS\system32\LogFiles
It is enabled on the IIS server, you enable logging on the website, not exchange. In the screen where you enable it, you can also either find out where the default location is, or adjust it to a location you want.
0
pma111Author Commented:
Thanks I will take a look. What do the log events include, as its almost like a constant connection once you establish the link between device and mailbox... Would it jiust show the first time the sync and connection was established, or are there regular log events written dependant on mailbox usage on the phone itself?
0
KimputerCommented:
As the phone is on during the day, it will show some form of activity in the log throughout the day too. It's not just the initial connection, it's much more than that.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.