Exchange 2003 tons of log files because of Activesync - IOS 6
Our 2003 Exchange server is generating tons of 5MB log files that the drive is getting filled up. After a lot of troubleshooting we found out that when Activesync was disabled, the log files were generating normally. So the issue must be with Activesync. This was found after users upgraded their iPhones and iPads to IOS 6. We enabled circular logging so we did not not have to keep logging onto the server to clean up space to prevent a crash. Any suggestions?
September 27th, 2012 3:52pm

We are seeing the same thing on an Exchange 2003 SP2 server, everything else appears normal and Activcsync appears to be working OK for the IOS 6 users. Anyone have any ideas?
Free Windows Admin Tool Kit Click here and download it now
September 27th, 2012 5:12pm

Hello , I suggest to use log-parser to analyze IIS logs , monitor your users & traffic 'Hits' , disable active sync for the users who generates massive traffic Also keep your eye on message tracking logs I am sure you will find user who generate irregular amount of traffic .. maybe you can look for some script which can parse your logs , http://gallery.technet.microsoft.com/scriptcenter/site/search?f%5B0%5D.Type=RootCategory&f%5B0%5D.Value=Exchange&f%5B0%5D.Text=Exchange&f%5B1%5D.Type=SubCategory&f%5B1%5D.Value=Exchange2003&f%5B1%5D.Text=Exchange%202003&pageIndex=3 http://gallery.technet.microsoft.com/scriptcenter/df9b45b1-8199-490e-9074-b4c8fc0d7349 http://gallery.technet.microsoft.com/scriptcenter/ff838b5a-09d9-4731-be98-97fd228cb3e6 I saw it twice , users sent thousands of e-mails from their phones , the phone just went crazy :-) the problem was on end-user phone , disable the user active sync - recreate profile , see if will work if recreating his profile didn't solve the problem , rollback to old IOS http://blogs.technet.com/b/exchange/archive/2012/01/31/a-script-to-troubleshoot-issues-with-exchange-activesync.aspx http://support.microsoft.com/kb/2563324 http://support.apple.com/kb/TS3398
September 27th, 2012 7:00pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics