logs for accessing mailbox via smartphone

pma111
pma111 used Ask the Experts™
on
Are there any default logs whoich could show if a user was accessing their corporate mailbox via their smartphone i.e active-sync? As opposed to say when logged into the network with a PC and accessing the system via outlook.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Commented:
Yes ActiveSync works of the HTTP/HTTPS ports, and hence through IIS, just enable the IIS logs. You will be able to tell who logged in from which IP. Here's a small sample of my logs (anonymised):

2015-03-16 09:20:36 W3SVC1 IP_SERVER POST /Microsoft-Server-ActiveSync User=username&DeviceId=ApplXXXXXXXXX&DeviceType=iPhone&Cmd=Sync&Log=V4TEmSSC:XXXXXXFS:XXXXXXX:1CXXXXXXXXXXXXX 80 domain\username CLIENT_IP Apple-iPhone5C2/1204.508 200 0 0

You can see the user, and even what device was used.

Author

Commented:
Is there an easy way to see if the logs are enabled or not? on what server in your exchange setup are these logs stored, as exchange comes with a number of roles i.e. mbx, cas etc. this is for exch2010

Author

Commented:
And what is the default location for them?
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Commented:
Usually something like C:\WINDOWS\system32\LogFiles
It is enabled on the IIS server, you enable logging on the website, not exchange. In the screen where you enable it, you can also either find out where the default location is, or adjust it to a location you want.

Author

Commented:
Thanks I will take a look. What do the log events include, as its almost like a constant connection once you establish the link between device and mailbox... Would it jiust show the first time the sync and connection was established, or are there regular log events written dependant on mailbox usage on the phone itself?

Commented:
As the phone is on during the day, it will show some form of activity in the log throughout the day too. It's not just the initial connection, it's much more than that.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial