Within the last week I have started receiving Application Event Log errors on one of my two CAS/Hub servers. I am assuming it is related to a mobile device, however I am not sure how to find out who/what is the problem. I have turned up the event logging for MSExchange Web Services\Core to High and looked through the C:\WINDOWS\system32\LogFiles\W3SVC1\exYYMMDD.log files, however I have not been able to match the timestamps up in any way. The error specifically is: Event Type: Warning Event Source: MSExchange Web Services Event Category: Core Event ID: 6 Date: 11/20/2009 Time: 11:00:37 AM User: N/A Computer: CAS2 Description: Unable to send a notification for subscription FwBxc2MtY2FzLTAyLnFjb21tY29ycC5hZBAAAADk92m+/IU1RLRG8EZZ8KsB. (Send attempts: 4) For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. These happen quite frequently in the event log. Am I looking in the correct log file or is there another place to correlate what FwBxc2MtY2FzLTAyLnFjb21tY29ycC5hZBAAAADk92m+/IU1RLRG8EZZ8KsB is so that I can address the issue? Thanks for the help in advance!

Hi, Based on my research, the event is the result of ActiveSync error. The event 6 are basically event that telling us that the a device/client is subscribing a server event, but when the server when to notify the client/device, the client is not there to respond to it. Currently, I do not find any resource regarding how to address the issue. Would you please let me know whether any users report any ActiveSync problems? ~~~~~~~~~~~~~~~~ Mike Shen TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com ~~~~~~~~~~~~~~~~

At this time, no, no one has raised any complaints about active sync. I too suspected that was what the error was telling me. I have a feeling that its either silently failing for the end user or the phone is no longer in service, but the server does not know this. Its just a hunch. Can you think of any logs that I can look at that would reference the FwBxc2MtY2FzLTAyLnFjb21tY29ycC5hZBAAAADk92m+/IU1RLRG8EZZ8KsB id that is mentioned in the event viewer? Thanks Brian

Hi Brain, Ithink that you may be able to capture Trace for Exchange Web Services which may reference to the FwBxc2MtY2FzLTAyLnFjb21tY29ycC5hZBAAAADk92m+/IU1RLRG8EZZ8KsB id. Nevertheless, as the Trace file is binary and you need to contact PSS support to help readingthe trace file. Therefore, if you would like to get more information regarding the Event, I suggest you submit a new case and contact PSS support regarding the issue. Thanks,Mike