Ureader.com  
Microsoft software help and Community
   home   |   control panel login   |   archive   |  
 
Exchange
2000.active.directory
2000.admin
2000.announcements
2000.app.conversion
2000.applications
2000.clients
2000.clustering
2000.connectivity
2000.development
2000.documentation
2000.general
2000.information.store
2000.interop
2000.kms
2000.misc
2000.protocols
2000.realtime.collabo.
2000.setup
2000.transport
2000.win2000
admin
application.conversion
applications
clients
clustering
connectivity
design
development
misc
mobility
setup
tools
  
 
date: Wed, 5 Mar 2008 13:44:25 +0200,    group: microsoft.public.exchange.mobility        back       


OWA FBA and Activesync - KB#817379 not helping    
Well, this time it is me asking the question instead of answering it.....

After implementing this successfully in around 85 servers during the last 12 
months, I finally came to a situation in which things are not working and I 
can't find out why. Here is my situation:

1. Server behind a firewall (Checkpoint) which has port 443 wide open for 
HTTPS. I see the events at the Exchange Server, meaning I pass through the 
firewall and arrive to the Exchange.

2. When FBA is not activated EVERYTHING works fine with SSL.

3. When I activate FBA: trying OMA gives me Event ID 1503 with Error (440), 
and Activesync from the devices gives error 85010014 at the device and Event 
ID 3030 on the server.

There isn't any case which is more classic for KB#817379 than this one. The 
only problem is that KB#817379 has already been implemented on the 
server(the exchange-oma virtual directory has been created and the Registry 
Value ExchangeVDir = /exchange-oma has been created as well).

Server has been restarted many times, and the VDir and registry value have 
been many times deleted and re-created from scratch to make sure I am not 
making a mistake. It just doesn't seem to make any difference.

Any ideas?

-- 
----
Helio Diamant
MS-MVP/Mobile Devices
Editor - PocketPCFreak.com
date: Wed, 5 Mar 2008 13:44:25 +0200   author:   Helio Diamant - MS-MVP/Mobile Devices

Re: OWA FBA and Activesync - KB#817379 not helping    
"Helio Diamant - MS-MVP/Mobile Devices"  
wrote in message news:e4%23dEZrfIHA.4436@TK2MSFTNGP02.phx.gbl...
> Well, this time it is me asking the question instead of answering it.....
>
> After implementing this successfully in around 85 servers during the last 
> 12 months, I finally came to a situation in which things are not working 
> and I can't find out why. Here is my situation:
>
> 1. Server behind a firewall (Checkpoint) which has port 443 wide open for 
> HTTPS. I see the events at the Exchange Server, meaning I pass through the 
> firewall and arrive to the Exchange.
>
> 2. When FBA is not activated EVERYTHING works fine with SSL.
>
> 3. When I activate FBA: trying OMA gives me Event ID 1503 with Error 
> (440), and Activesync from the devices gives error 85010014 at the device 
> and Event ID 3030 on the server.
>
> There isn't any case which is more classic for KB#817379 than this one. 
> The only problem is that KB#817379 has already been implemented on the 
> server(the exchange-oma virtual directory has been created and the 
> Registry Value ExchangeVDir = /exchange-oma has been created as well).
>
> Server has been restarted many times, and the VDir and registry value have 
> been many times deleted and re-created from scratch to make sure I am not 
> making a mistake. It just doesn't seem to make any difference.
>
> Any ideas?
>
> -- 
> ----
> Helio Diamant
> MS-MVP/Mobile Devices
> Editor - PocketPCFreak.com

Have a look in the server's IIS Log file to make sure that when you use A/S, 
the server's internal requests are actually going to /exchange-oma , and are 
not still going to /Exchange .  If they are going to /exchange-oma , can you 
paste the logged entries?

Lee.

-- 
______________________________________

Outlook Web Access For PDA , OWA For WAP
www.leederbyshire.com
email a@t leederbyshire d.0.t c.0.m
______________________________________
date: Wed, 5 Mar 2008 13:55:39 -0000   author:   Lee Derbyshire [MVP] email a@t leederbyshire d.0.t c.0.m

Re: OWA FBA and Activesync - KB#817379 not helping    
Thanks, Lee,

I have asked the customer to send me the exchange log. I haven't had the 
idea to look there, I was looking only at te event viewer.

I will past the relevant lines here whenever I have it.

Helio

-- 
----
Helio Diamant - MS-MVP/Mobile Devices
Editor
www.pocketpcfreak.com
"Lee Derbyshire [MVP]" <email a@t leederbyshire d.0.t c.0.m> wrote in 
message news:%23MjDbisfIHA.5160@TK2MSFTNGP05.phx.gbl...
> "Helio Diamant - MS-MVP/Mobile Devices"  
> wrote in message news:e4%23dEZrfIHA.4436@TK2MSFTNGP02.phx.gbl...
>> Well, this time it is me asking the question instead of answering it.....
>>
>> After implementing this successfully in around 85 servers during the last 
>> 12 months, I finally came to a situation in which things are not working 
>> and I can't find out why. Here is my situation:
>>
>> 1. Server behind a firewall (Checkpoint) which has port 443 wide open for 
>> HTTPS. I see the events at the Exchange Server, meaning I pass through 
>> the firewall and arrive to the Exchange.
>>
>> 2. When FBA is not activated EVERYTHING works fine with SSL.
>>
>> 3. When I activate FBA: trying OMA gives me Event ID 1503 with Error 
>> (440), and Activesync from the devices gives error 85010014 at the device 
>> and Event ID 3030 on the server.
>>
>> There isn't any case which is more classic for KB#817379 than this one. 
>> The only problem is that KB#817379 has already been implemented on the 
>> server(the exchange-oma virtual directory has been created and the 
>> Registry Value ExchangeVDir = /exchange-oma has been created as well).
>>
>> Server has been restarted many times, and the VDir and registry value 
>> have been many times deleted and re-created from scratch to make sure I 
>> am not making a mistake. It just doesn't seem to make any difference.
>>
>> Any ideas?
>>
>> -- 
>> ----
>> Helio Diamant
>> MS-MVP/Mobile Devices
>> Editor - PocketPCFreak.com
>
> Have a look in the server's IIS Log file to make sure that when you use 
> A/S, the server's internal requests are actually going to /exchange-oma , 
> and are not still going to /Exchange .  If they are going to /exchange-oma 
> , can you paste the logged entries?
>
> Lee.
>
> -- 
> ______________________________________
>
> Outlook Web Access For PDA , OWA For WAP
> www.leederbyshire.com
> email a@t leederbyshire d.0.t c.0.m
> ______________________________________
>
date: Fri, 7 Mar 2008 08:39:18 +0200   author:   Helio Diamant - MS-MVP/Mobile Devices

Re: OWA FBA and Activesync - KB#817379 not helping    
Lee,

I am attaching a part of the log. It seems to me that it is going through 
exchange-oma, otherwise I am not understanding clearly the contents. Let me 
emphasize that at this moment FBA is OFF so that it can work.

If you can help me with any information I will be very grateful.

Helio

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2008-03-07 00:01:14
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port 
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2008-03-07 00:01:14 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:01:14 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
0
2008-03-07 00:01:14 172.16.1.11 GET 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/20b2343718f3d511a0c900508b552e8b-20040ed 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 
0
2008-03-07 00:01:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 - 
172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:01:15 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:01:15 172.16.1.11 PUT 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/20b2343718f3d511a0c900508b552e8b-20040ed 
 - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:01:22 172.16.1.11 PUT 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/20b2343718f3d511a0c900508b552e8b-20040ed 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 
0
2008-03-07 00:01:22 172.16.1.11 POST /Microsoft-Server-ActiveSync 
User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D25SP:1C4I1039993S2078234R0S0L0H0P 
443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
2008-03-07 00:01:27 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:01:27 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
0
2008-03-07 00:01:27 172.16.1.11 GET 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00001 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 
0
2008-03-07 00:01:27 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 - 
172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:01:27 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:01:27 172.16.1.11 POST /Microsoft-Server-ActiveSync 
User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TCaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3628S214474R0S0L0H0P 
443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
2008-03-07 00:01:27 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:01:27 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
0
2008-03-07 00:01:27 172.16.1.11 GET 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00005 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 
0
2008-03-07 00:01:27 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 - 
172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:01:28 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:01:28 172.16.1.11 POST /Microsoft-Server-ActiveSync 
User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TTaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3015S6262R0S0L0H0P 
443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2008-03-07 00:27:35
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port 
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2008-03-07 00:27:35 172.16.1.11 UNSUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/ - 80 - 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2008-03-07 00:27:35 172.16.1.11 UNSUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/ - 80 - 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:27:35 172.16.1.11 UNSUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/ - 80 PALBAM\Kenneth 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:27:35 172.16.1.11 POST /Microsoft-Server-ActiveSync 
User=kenneth&DeviceId=5E1072598CF5FF4A86C5995FBFB8FFE8&DeviceType=PocketPC&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C17I9393S66516R0S0L1680H0P 
443 palbam\kenneth 80.250.149.60 MSFT-PPC/5.2.402 200 0 0
2008-03-07 00:27:39 172.16.1.11 PROPFIND 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
 - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:27:39 172.16.1.11 PROPFIND 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
0 0
2008-03-07 00:27:39 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 302 
0 0
2008-03-07 00:27:39 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/AutdState.xml 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:27:39 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/FolderSyncFile 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:27:39 172.16.1.11 SUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/Contacts/ - 80 PALBAM\Kenneth 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2008-03-07 00:27:39 172.16.1.11 SUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/Calendar/ - 80 PALBAM\Kenneth 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2008-03-07 00:27:39 172.16.1.11 SUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/Inbox/ - 80 PALBAM\Kenneth 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2008-03-07 00:27:39 172.16.1.11 SUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/Tasks/ - 80 PALBAM\Kenneth 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2008-03-07 00:27:39 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a292 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 80 
PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:27:39 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a291 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 80 
PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:27:39 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 80 
PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:27:39 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a297 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:27:40 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 80 
PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:27:40 172.16.1.11 UNSUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/ - 80 PALBAM\Kenneth 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:27:40 172.16.1.11 POST /Microsoft-Server-ActiveSync 
User=kenneth&DeviceId=5E1072598CF5FF4A86C5995FBFB8FFE8&DeviceType=PocketPC&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:1C17I9393S66516R0S0L1680H0P 
443 palbam\kenneth 80.250.149.60 MSFT-PPC/5.2.402 200 0 0
2008-03-07 00:27:42 172.16.1.11 PROPFIND 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
 - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:27:42 172.16.1.11 PROPFIND 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
0 0
2008-03-07 00:27:42 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:27:42 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:27:42 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 80 
PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:27:42 172.16.1.11 PUT 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
 - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:27:42 172.16.1.11 PUT 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:27:42 172.16.1.11 POST /Microsoft-Server-ActiveSync 
User=kenneth&DeviceId=5E1072598CF5FF4A86C5995FBFB8FFE8&DeviceType=PocketPC&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D3SP:1C4I11277S20874R0S0L0H0P 
443 palbam\kenneth 80.250.149.60 MSFT-PPC/5.2.402 200 0 0
2008-03-07 00:27:44 172.16.1.11 PROPFIND 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
 - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:27:44 172.16.1.11 PROPFIND 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
0 0
2008-03-07 00:27:44 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 302 
0 0
2008-03-07 00:27:44 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/AutdState.xml 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:27:44 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/FolderSyncFile 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:27:44 172.16.1.11 SUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/Contacts/ - 80 PALBAM\Kenneth 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2008-03-07 00:27:44 172.16.1.11 SUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/Calendar/ - 80 PALBAM\Kenneth 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2008-03-07 00:27:44 172.16.1.11 SUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/Inbox/ - 80 PALBAM\Kenneth 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2008-03-07 00:27:44 172.16.1.11 SUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/Tasks/ - 80 PALBAM\Kenneth 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2008-03-07 00:27:44 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a292 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 80 
PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:27:44 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a291 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 80 
PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:27:44 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 80 
PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:27:44 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a297 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 80 
PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:31:14 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:31:14 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
0
2008-03-07 00:31:14 172.16.1.11 GET 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/20b2343718f3d511a0c900508b552e8b-20040ed 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 
0
2008-03-07 00:31:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 - 
172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:31:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:31:14 172.16.1.11 POST /Microsoft-Server-ActiveSync 
User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D0SP:1C3I9650S2076716R0S0L0H0P 
443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
2008-03-07 00:31:15 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:31:15 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
0
2008-03-07 00:31:15 172.16.1.11 GET 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00001 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 
0
2008-03-07 00:31:15 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 - 
172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:31:15 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:31:15 172.16.1.11 POST /Microsoft-Server-ActiveSync 
User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TCaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3628S214474R0S0L0H0P 
443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
2008-03-07 00:31:15 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:31:15 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
0
2008-03-07 00:31:15 172.16.1.11 GET 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00005 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 
0
2008-03-07 00:31:15 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 - 
172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:31:15 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:31:15 172.16.1.11 POST /Microsoft-Server-ActiveSync 
User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TTaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3015S6262R0S0L0H0P 
443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2008-03-07 00:55:48
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port 
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2008-03-07 00:55:48 172.16.1.11 UNSUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/ - 80 - 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
2008-03-07 00:55:48 172.16.1.11 UNSUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/ - 80 - 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:55:48 172.16.1.11 UNSUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/ - 80 PALBAM\Kenneth 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:55:48 172.16.1.11 POST /Microsoft-Server-ActiveSync 
User=kenneth&DeviceId=5E1072598CF5FF4A86C5995FBFB8FFE8&DeviceType=PocketPC&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C17I9393S66562R0S0L1680H0P 
443 palbam\kenneth 80.250.149.60 MSFT-PPC/5.2.402 200 0 0
2008-03-07 00:55:52 172.16.1.11 PROPFIND 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
 - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:55:52 172.16.1.11 PROPFIND 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
0 0
2008-03-07 00:55:52 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 302 
0 0
2008-03-07 00:55:52 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/AutdState.xml 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:55:52 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/FolderSyncFile 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:55:52 172.16.1.11 SUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/Contacts/ - 80 PALBAM\Kenneth 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2008-03-07 00:55:52 172.16.1.11 SUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/Calendar/ - 80 PALBAM\Kenneth 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2008-03-07 00:55:52 172.16.1.11 SUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/Inbox/ - 80 PALBAM\Kenneth 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2008-03-07 00:55:52 172.16.1.11 SUBSCRIBE 
/exchange-oma/Kenneth@ricor.com/Tasks/ - 80 PALBAM\Kenneth 172.16.1.11 
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2008-03-07 00:55:52 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a292 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 80 
PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:55:52 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a291 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 80 
PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:55:52 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 80 
PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 00:55:52 172.16.1.11 GET 
/exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a297 
 - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
0 0
2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 80 
PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 01:01:13 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 01:01:13 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
0
2008-03-07 01:01:13 172.16.1.11 GET 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/20b2343718f3d511a0c900508b552e8b-20040ed 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 
0
2008-03-07 01:01:13 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 - 
172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 01:01:13 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 01:01:13 172.16.1.11 POST /Microsoft-Server-ActiveSync 
User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D0SP:1C3I9650S2076716R0S0L0H0P 
443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
2008-03-07 01:01:13 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 01:01:13 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
0
2008-03-07 01:01:14 172.16.1.11 GET 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00001 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 
0
2008-03-07 01:01:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 - 
172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 01:01:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 01:01:14 172.16.1.11 POST /Microsoft-Server-ActiveSync 
User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TCaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3628S214474R0S0L0H0P 
443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
2008-03-07 01:01:14 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 01:01:14 172.16.1.11 PROPFIND 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
0
2008-03-07 01:01:14 172.16.1.11 GET 
/exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00005 
 - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 
0
2008-03-07 01:01:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 - 
172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2008-03-07 01:01:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2008-03-07 01:01:14 172.16.1.11 POST /Microsoft-Server-ActiveSync 
User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TTaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3015S6262R0S0L0H0P 
443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0


-- 
----
Helio Diamant - MS-MVP/Mobile Devices
Editor
www.pocketpcfreak.com
"Lee Derbyshire [MVP]" <email a@t leederbyshire d.0.t c.0.m> wrote in 
message news:%23MjDbisfIHA.5160@TK2MSFTNGP05.phx.gbl...
> "Helio Diamant - MS-MVP/Mobile Devices"  
> wrote in message news:e4%23dEZrfIHA.4436@TK2MSFTNGP02.phx.gbl...
>> Well, this time it is me asking the question instead of answering it.....
>>
>> After implementing this successfully in around 85 servers during the last 
>> 12 months, I finally came to a situation in which things are not working 
>> and I can't find out why. Here is my situation:
>>
>> 1. Server behind a firewall (Checkpoint) which has port 443 wide open for 
>> HTTPS. I see the events at the Exchange Server, meaning I pass through 
>> the firewall and arrive to the Exchange.
>>
>> 2. When FBA is not activated EVERYTHING works fine with SSL.
>>
>> 3. When I activate FBA: trying OMA gives me Event ID 1503 with Error 
>> (440), and Activesync from the devices gives error 85010014 at the device 
>> and Event ID 3030 on the server.
>>
>> There isn't any case which is more classic for KB#817379 than this one. 
>> The only problem is that KB#817379 has already been implemented on the 
>> server(the exchange-oma virtual directory has been created and the 
>> Registry Value ExchangeVDir = /exchange-oma has been created as well).
>>
>> Server has been restarted many times, and the VDir and registry value 
>> have been many times deleted and re-created from scratch to make sure I 
>> am not making a mistake. It just doesn't seem to make any difference.
>>
>> Any ideas?
>>
>> -- 
>> ----
>> Helio Diamant
>> MS-MVP/Mobile Devices
>> Editor - PocketPCFreak.com
>
> Have a look in the server's IIS Log file to make sure that when you use 
> A/S, the server's internal requests are actually going to /exchange-oma , 
> and are not still going to /Exchange .  If they are going to /exchange-oma 
> , can you paste the logged entries?
>
> Lee.
>
> -- 
> ______________________________________
>
> Outlook Web Access For PDA , OWA For WAP
> www.leederbyshire.com
> email a@t leederbyshire d.0.t c.0.m
> ______________________________________
>
date: Sat, 8 Mar 2008 11:02:14 +0200   author:   Helio Diamant - MS-MVP/Mobile Devices

Re: OWA FBA and Activesync - KB#817379 not helping    
Well, everything looks fine there, but I guess it would if you say it is 
working at the moment.  It does seem to be accessing /exchange-oma .

My suggestion would be this (unless you already did it).  Remove the 
/exchange-oma VDir and registry key, then turn off FBA and SSL, and make 
sure that OMA and A/S will work with the original Exchange VDir before you 
copy it to /exchange-oma .  If it won't work with /exchange (without FBA and 
SSL), then it won't work with the /exchange-oma copy.  KB817379 needs to be 
done at a time when OMA and A/S are actually working.  It doesn't fix a 
broken setup - it only allows you to add FBA and SSL to an already working 
setup.


"Helio Diamant - MS-MVP/Mobile Devices"  
wrote in message news:233920D8-6BF8-47B1-9199-3A141347B56A@microsoft.com...
> Lee,
>
> I am attaching a part of the log. It seems to me that it is going through 
> exchange-oma, otherwise I am not understanding clearly the contents. Let 
> me emphasize that at this moment FBA is OFF so that it can work.
>
> If you can help me with any information I will be very grateful.
>
> Helio
>
> #Software: Microsoft Internet Information Services 6.0
> #Version: 1.0
> #Date: 2008-03-07 00:01:14
> #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port 
> cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
> 2008-03-07 00:01:14 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:01:14 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
> 0 0
> 2008-03-07 00:01:14 172.16.1.11 GET 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/20b2343718f3d511a0c900508b552e8b-20040ed 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
> 0 0
> 2008-03-07 00:01:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:01:15 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
> PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
> 2008-03-07 00:01:15 172.16.1.11 PUT 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/20b2343718f3d511a0c900508b552e8b-20040ed 
>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:01:22 172.16.1.11 PUT 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/20b2343718f3d511a0c900508b552e8b-20040ed 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
> 0 0
> 2008-03-07 00:01:22 172.16.1.11 POST /Microsoft-Server-ActiveSync 
> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D25SP:1C4I1039993S2078234R0S0L0H0P 
> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
> 2008-03-07 00:01:27 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:01:27 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
> 0 0
> 2008-03-07 00:01:27 172.16.1.11 GET 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00001 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
> 0 0
> 2008-03-07 00:01:27 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:01:27 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
> PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
> 2008-03-07 00:01:27 172.16.1.11 POST /Microsoft-Server-ActiveSync 
> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TCaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3628S214474R0S0L0H0P 
> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
> 2008-03-07 00:01:27 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:01:27 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
> 0 0
> 2008-03-07 00:01:27 172.16.1.11 GET 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00005 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
> 0 0
> 2008-03-07 00:01:27 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:01:28 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
> PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
> 2008-03-07 00:01:28 172.16.1.11 POST /Microsoft-Server-ActiveSync 
> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TTaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3015S6262R0S0L0H0P 
> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
> #Software: Microsoft Internet Information Services 6.0
> #Version: 1.0
> #Date: 2008-03-07 00:27:35
> #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port 
> cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
> 2008-03-07 00:27:35 172.16.1.11 UNSUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/ - 80 - 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
> 2008-03-07 00:27:35 172.16.1.11 UNSUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/ - 80 - 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:27:35 172.16.1.11 UNSUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/ - 80 PALBAM\Kenneth 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
> 2008-03-07 00:27:35 172.16.1.11 POST /Microsoft-Server-ActiveSync 
> User=kenneth&DeviceId=5E1072598CF5FF4A86C5995FBFB8FFE8&DeviceType=PocketPC&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C17I9393S66516R0S0L1680H0P 
> 443 palbam\kenneth 80.250.149.60 MSFT-PPC/5.2.402 200 0 0
> 2008-03-07 00:27:39 172.16.1.11 PROPFIND 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:27:39 172.16.1.11 PROPFIND 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 207 0 0
> 2008-03-07 00:27:39 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 302 0 0
> 2008-03-07 00:27:39 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/AutdState.xml 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:27:39 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/FolderSyncFile 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:27:39 172.16.1.11 SUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/Contacts/ - 80 PALBAM\Kenneth 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
> 2008-03-07 00:27:39 172.16.1.11 SUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/Calendar/ - 80 PALBAM\Kenneth 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
> 2008-03-07 00:27:39 172.16.1.11 SUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/Inbox/ - 80 PALBAM\Kenneth 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
> 2008-03-07 00:27:39 172.16.1.11 SUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/Tasks/ - 80 PALBAM\Kenneth 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
> 2008-03-07 00:27:39 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a292 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
> 0
> 2008-03-07 00:27:39 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a291 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
> 0
> 2008-03-07 00:27:39 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
> 0
> 2008-03-07 00:27:39 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a297 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:27:40 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
> 0
> 2008-03-07 00:27:40 172.16.1.11 UNSUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/ - 80 PALBAM\Kenneth 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
> 2008-03-07 00:27:40 172.16.1.11 POST /Microsoft-Server-ActiveSync 
> User=kenneth&DeviceId=5E1072598CF5FF4A86C5995FBFB8FFE8&DeviceType=PocketPC&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:1C17I9393S66516R0S0L1680H0P 
> 443 palbam\kenneth 80.250.149.60 MSFT-PPC/5.2.402 200 0 0
> 2008-03-07 00:27:42 172.16.1.11 PROPFIND 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:27:42 172.16.1.11 PROPFIND 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 207 0 0
> 2008-03-07 00:27:42 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:27:42 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:27:42 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
> 0
> 2008-03-07 00:27:42 172.16.1.11 PUT 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:27:42 172.16.1.11 PUT 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:27:42 172.16.1.11 POST /Microsoft-Server-ActiveSync 
> User=kenneth&DeviceId=5E1072598CF5FF4A86C5995FBFB8FFE8&DeviceType=PocketPC&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D3SP:1C4I11277S20874R0S0L0H0P 
> 443 palbam\kenneth 80.250.149.60 MSFT-PPC/5.2.402 200 0 0
> 2008-03-07 00:27:44 172.16.1.11 PROPFIND 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:27:44 172.16.1.11 PROPFIND 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 207 0 0
> 2008-03-07 00:27:44 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 302 0 0
> 2008-03-07 00:27:44 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/AutdState.xml 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:27:44 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/FolderSyncFile 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:27:44 172.16.1.11 SUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/Contacts/ - 80 PALBAM\Kenneth 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
> 2008-03-07 00:27:44 172.16.1.11 SUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/Calendar/ - 80 PALBAM\Kenneth 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
> 2008-03-07 00:27:44 172.16.1.11 SUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/Inbox/ - 80 PALBAM\Kenneth 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
> 2008-03-07 00:27:44 172.16.1.11 SUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/Tasks/ - 80 PALBAM\Kenneth 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
> 2008-03-07 00:27:44 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a292 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
> 0
> 2008-03-07 00:27:44 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a291 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
> 0
> 2008-03-07 00:27:44 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
> 0
> 2008-03-07 00:27:44 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a297 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
> 0
> 2008-03-07 00:31:14 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:31:14 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
> 0 0
> 2008-03-07 00:31:14 172.16.1.11 GET 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/20b2343718f3d511a0c900508b552e8b-20040ed 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
> 0 0
> 2008-03-07 00:31:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:31:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
> PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
> 2008-03-07 00:31:14 172.16.1.11 POST /Microsoft-Server-ActiveSync 
> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D0SP:1C3I9650S2076716R0S0L0H0P 
> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
> 2008-03-07 00:31:15 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:31:15 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
> 0 0
> 2008-03-07 00:31:15 172.16.1.11 GET 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00001 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
> 0 0
> 2008-03-07 00:31:15 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:31:15 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
> PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
> 2008-03-07 00:31:15 172.16.1.11 POST /Microsoft-Server-ActiveSync 
> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TCaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3628S214474R0S0L0H0P 
> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
> 2008-03-07 00:31:15 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:31:15 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
> 0 0
> 2008-03-07 00:31:15 172.16.1.11 GET 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00005 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
> 0 0
> 2008-03-07 00:31:15 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:31:15 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
> PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
> 2008-03-07 00:31:15 172.16.1.11 POST /Microsoft-Server-ActiveSync 
> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TTaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3015S6262R0S0L0H0P 
> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
> #Software: Microsoft Internet Information Services 6.0
> #Version: 1.0
> #Date: 2008-03-07 00:55:48
> #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port 
> cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
> 2008-03-07 00:55:48 172.16.1.11 UNSUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/ - 80 - 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
> 2008-03-07 00:55:48 172.16.1.11 UNSUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/ - 80 - 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:55:48 172.16.1.11 UNSUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/ - 80 PALBAM\Kenneth 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
> 2008-03-07 00:55:48 172.16.1.11 POST /Microsoft-Server-ActiveSync 
> User=kenneth&DeviceId=5E1072598CF5FF4A86C5995FBFB8FFE8&DeviceType=PocketPC&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C17I9393S66562R0S0L1680H0P 
> 443 palbam\kenneth 80.250.149.60 MSFT-PPC/5.2.402 200 0 0
> 2008-03-07 00:55:52 172.16.1.11 PROPFIND 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:55:52 172.16.1.11 PROPFIND 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 207 0 0
> 2008-03-07 00:55:52 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 302 0 0
> 2008-03-07 00:55:52 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/AutdState.xml 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:55:52 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/FolderSyncFile 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:55:52 172.16.1.11 SUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/Contacts/ - 80 PALBAM\Kenneth 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
> 2008-03-07 00:55:52 172.16.1.11 SUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/Calendar/ - 80 PALBAM\Kenneth 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
> 2008-03-07 00:55:52 172.16.1.11 SUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/Inbox/ - 80 PALBAM\Kenneth 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
> 2008-03-07 00:55:52 172.16.1.11 SUBSCRIBE 
> /exchange-oma/Kenneth@ricor.com/Tasks/ - 80 PALBAM\Kenneth 172.16.1.11 
> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
> 2008-03-07 00:55:52 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a292 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
> 0
> 2008-03-07 00:55:52 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a291 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
> 0
> 2008-03-07 00:55:52 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
> 0
> 2008-03-07 00:55:52 172.16.1.11 GET 
> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a297 
>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
> 200 0 0
> 2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
> 0
> 2008-03-07 01:01:13 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 01:01:13 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
> 0 0
> 2008-03-07 01:01:13 172.16.1.11 GET 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/20b2343718f3d511a0c900508b552e8b-20040ed 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
> 0 0
> 2008-03-07 01:01:13 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 01:01:13 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
> PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
> 2008-03-07 01:01:13 172.16.1.11 POST /Microsoft-Server-ActiveSync 
> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D0SP:1C3I9650S2076716R0S0L0H0P 
> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
> 2008-03-07 01:01:13 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 01:01:13 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
> 0 0
> 2008-03-07 01:01:14 172.16.1.11 GET 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00001 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
> 0 0
> 2008-03-07 01:01:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 01:01:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
> PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
> 2008-03-07 01:01:14 172.16.1.11 POST /Microsoft-Server-ActiveSync 
> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TCaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3628S214474R0S0L0H0P 
> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
> 2008-03-07 01:01:14 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 01:01:14 172.16.1.11 PROPFIND 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
> 0 0
> 2008-03-07 01:01:14 172.16.1.11 GET 
> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00005 
>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 200 
> 0 0
> 2008-03-07 01:01:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
> 2008-03-07 01:01:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 80 
> PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
> 2008-03-07 01:01:14 172.16.1.11 POST /Microsoft-Server-ActiveSync 
> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TTaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3015S6262R0S0L0H0P 
> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
>
>
> -- 
> ----
> Helio Diamant - MS-MVP/Mobile Devices
> Editor
> www.pocketpcfreak.com
> "Lee Derbyshire [MVP]" <email a@t leederbyshire d.0.t c.0.m> wrote in 
> message news:%23MjDbisfIHA.5160@TK2MSFTNGP05.phx.gbl...
>> "Helio Diamant - MS-MVP/Mobile Devices"  
>> wrote in message news:e4%23dEZrfIHA.4436@TK2MSFTNGP02.phx.gbl...
>>> Well, this time it is me asking the question instead of answering 
>>> it.....
>>>
>>> After implementing this successfully in around 85 servers during the 
>>> last 12 months, I finally came to a situation in which things are not 
>>> working and I can't find out why. Here is my situation:
>>>
>>> 1. Server behind a firewall (Checkpoint) which has port 443 wide open 
>>> for HTTPS. I see the events at the Exchange Server, meaning I pass 
>>> through the firewall and arrive to the Exchange.
>>>
>>> 2. When FBA is not activated EVERYTHING works fine with SSL.
>>>
>>> 3. When I activate FBA: trying OMA gives me Event ID 1503 with Error 
>>> (440), and Activesync from the devices gives error 85010014 at the 
>>> device and Event ID 3030 on the server.
>>>
>>> There isn't any case which is more classic for KB#817379 than this one. 
>>> The only problem is that KB#817379 has already been implemented on the 
>>> server(the exchange-oma virtual directory has been created and the 
>>> Registry Value ExchangeVDir = /exchange-oma has been created as well).
>>>
>>> Server has been restarted many times, and the VDir and registry value 
>>> have been many times deleted and re-created from scratch to make sure I 
>>> am not making a mistake. It just doesn't seem to make any difference.
>>>
>>> Any ideas?
>>>
>>> -- 
>>> ----
>>> Helio Diamant
>>> MS-MVP/Mobile Devices
>>> Editor - PocketPCFreak.com
>>
>> Have a look in the server's IIS Log file to make sure that when you use 
>> A/S, the server's internal requests are actually going to /exchange-oma , 
>> and are not still going to /Exchange .  If they are going to 
>> /exchange-oma , can you paste the logged entries?
>>
>> Lee.
>>
>> -- 
>> ______________________________________
>>
>> Outlook Web Access For PDA , OWA For WAP
>> www.leederbyshire.com
>> email a@t leederbyshire d.0.t c.0.m
>> ______________________________________
>>
>
date: Sat, 8 Mar 2008 12:10:32 -0000   author:   Lee Derbyshire [MVP] email a@t leederbyshire d.0.t c.0.m

Re: OWA FBA and Activesync - KB#817379 not helping    
Well, I have already done that...

1. When FBA is OFF, it works with any of the libraries, /Exchange or 
/exchange-oma.
2. When FBA is on, it fails with both.

This thing is getting me crazy, I have seen so many servers and done so many 
installations of this, and never found such a situation.

Would an IIS log of the failure when FBA is ON help in anyway?

Helio

-- 
----
Helio Diamant - MS-MVP/Mobile Devices
Editor
www.pocketpcfreak.com
"Lee Derbyshire [MVP]" <email a@t leederbyshire d.0.t c.0.m> wrote in 
message news:%23EDmpVRgIHA.4436@TK2MSFTNGP02.phx.gbl...
> Well, everything looks fine there, but I guess it would if you say it is 
> working at the moment.  It does seem to be accessing /exchange-oma .
>
> My suggestion would be this (unless you already did it).  Remove the 
> /exchange-oma VDir and registry key, then turn off FBA and SSL, and make 
> sure that OMA and A/S will work with the original Exchange VDir before you 
> copy it to /exchange-oma .  If it won't work with /exchange (without FBA 
> and SSL), then it won't work with the /exchange-oma copy.  KB817379 needs 
> to be done at a time when OMA and A/S are actually working.  It doesn't 
> fix a broken setup - it only allows you to add FBA and SSL to an already 
> working setup.
>
>
> "Helio Diamant - MS-MVP/Mobile Devices"  
> wrote in message 
> news:233920D8-6BF8-47B1-9199-3A141347B56A@microsoft.com...
>> Lee,
>>
>> I am attaching a part of the log. It seems to me that it is going through 
>> exchange-oma, otherwise I am not understanding clearly the contents. Let 
>> me emphasize that at this moment FBA is OFF so that it can work.
>>
>> If you can help me with any information I will be very grateful.
>>
>> Helio
>>
>> #Software: Microsoft Internet Information Services 6.0
>> #Version: 1.0
>> #Date: 2008-03-07 00:01:14
>> #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port 
>> cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
>> 2008-03-07 00:01:14 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:01:14 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 207 0 0
>> 2008-03-07 00:01:14 172.16.1.11 GET 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/20b2343718f3d511a0c900508b552e8b-20040ed 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:01:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:01:15 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
>> 0
>> 2008-03-07 00:01:15 172.16.1.11 PUT 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/20b2343718f3d511a0c900508b552e8b-20040ed 
>>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:01:22 172.16.1.11 PUT 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/20b2343718f3d511a0c900508b552e8b-20040ed 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:01:22 172.16.1.11 POST /Microsoft-Server-ActiveSync 
>> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D25SP:1C4I1039993S2078234R0S0L0H0P 
>> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
>> 2008-03-07 00:01:27 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:01:27 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 207 0 0
>> 2008-03-07 00:01:27 172.16.1.11 GET 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00001 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:01:27 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:01:27 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
>> 0
>> 2008-03-07 00:01:27 172.16.1.11 POST /Microsoft-Server-ActiveSync 
>> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TCaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3628S214474R0S0L0H0P 
>> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
>> 2008-03-07 00:01:27 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:01:27 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 207 0 0
>> 2008-03-07 00:01:27 172.16.1.11 GET 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00005 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:01:27 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:01:28 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
>> 0
>> 2008-03-07 00:01:28 172.16.1.11 POST /Microsoft-Server-ActiveSync 
>> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TTaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3015S6262R0S0L0H0P 
>> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
>> #Software: Microsoft Internet Information Services 6.0
>> #Version: 1.0
>> #Date: 2008-03-07 00:27:35
>> #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port 
>> cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
>> 2008-03-07 00:27:35 172.16.1.11 UNSUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/ - 80 - 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
>> 2008-03-07 00:27:35 172.16.1.11 UNSUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/ - 80 - 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:27:35 172.16.1.11 UNSUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/ - 80 PALBAM\Kenneth 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
>> 2008-03-07 00:27:35 172.16.1.11 POST /Microsoft-Server-ActiveSync 
>> User=kenneth&DeviceId=5E1072598CF5FF4A86C5995FBFB8FFE8&DeviceType=PocketPC&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C17I9393S66516R0S0L1680H0P 
>> 443 palbam\kenneth 80.250.149.60 MSFT-PPC/5.2.402 200 0 0
>> 2008-03-07 00:27:39 172.16.1.11 PROPFIND 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:27:39 172.16.1.11 PROPFIND 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 207 0 0
>> 2008-03-07 00:27:39 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 302 0 0
>> 2008-03-07 00:27:39 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/AutdState.xml 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:27:39 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/FolderSyncFile 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:27:39 172.16.1.11 SUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/Contacts/ - 80 PALBAM\Kenneth 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
>> 2008-03-07 00:27:39 172.16.1.11 SUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/Calendar/ - 80 PALBAM\Kenneth 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
>> 2008-03-07 00:27:39 172.16.1.11 SUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/Inbox/ - 80 PALBAM\Kenneth 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
>> 2008-03-07 00:27:39 172.16.1.11 SUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/Tasks/ - 80 PALBAM\Kenneth 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
>> 2008-03-07 00:27:39 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a292 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
>> 0 0
>> 2008-03-07 00:27:39 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a291 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
>> 0 0
>> 2008-03-07 00:27:39 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
>> 0 0
>> 2008-03-07 00:27:39 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a297 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:27:39 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:27:40 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
>> 0 0
>> 2008-03-07 00:27:40 172.16.1.11 UNSUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/ - 80 PALBAM\Kenneth 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
>> 2008-03-07 00:27:40 172.16.1.11 POST /Microsoft-Server-ActiveSync 
>> User=kenneth&DeviceId=5E1072598CF5FF4A86C5995FBFB8FFE8&DeviceType=PocketPC&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:1C17I9393S66516R0S0L1680H0P 
>> 443 palbam\kenneth 80.250.149.60 MSFT-PPC/5.2.402 200 0 0
>> 2008-03-07 00:27:42 172.16.1.11 PROPFIND 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:27:42 172.16.1.11 PROPFIND 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 207 0 0
>> 2008-03-07 00:27:42 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:27:42 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:27:42 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
>> 0 0
>> 2008-03-07 00:27:42 172.16.1.11 PUT 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
>>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:27:42 172.16.1.11 PUT 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:27:42 172.16.1.11 POST /Microsoft-Server-ActiveSync 
>> User=kenneth&DeviceId=5E1072598CF5FF4A86C5995FBFB8FFE8&DeviceType=PocketPC&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D3SP:1C4I11277S20874R0S0L0H0P 
>> 443 palbam\kenneth 80.250.149.60 MSFT-PPC/5.2.402 200 0 0
>> 2008-03-07 00:27:44 172.16.1.11 PROPFIND 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:27:44 172.16.1.11 PROPFIND 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 207 0 0
>> 2008-03-07 00:27:44 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 302 0 0
>> 2008-03-07 00:27:44 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/AutdState.xml 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:27:44 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/FolderSyncFile 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:27:44 172.16.1.11 SUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/Contacts/ - 80 PALBAM\Kenneth 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
>> 2008-03-07 00:27:44 172.16.1.11 SUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/Calendar/ - 80 PALBAM\Kenneth 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
>> 2008-03-07 00:27:44 172.16.1.11 SUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/Inbox/ - 80 PALBAM\Kenneth 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
>> 2008-03-07 00:27:44 172.16.1.11 SUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/Tasks/ - 80 PALBAM\Kenneth 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
>> 2008-03-07 00:27:44 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a292 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
>> 0 0
>> 2008-03-07 00:27:44 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a291 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
>> 0 0
>> 2008-03-07 00:27:44 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
>> 0 0
>> 2008-03-07 00:27:44 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a297 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:27:44 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
>> 0 0
>> 2008-03-07 00:31:14 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:31:14 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 207 0 0
>> 2008-03-07 00:31:14 172.16.1.11 GET 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/20b2343718f3d511a0c900508b552e8b-20040ed 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:31:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:31:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
>> 0
>> 2008-03-07 00:31:14 172.16.1.11 POST /Microsoft-Server-ActiveSync 
>> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D0SP:1C3I9650S2076716R0S0L0H0P 
>> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
>> 2008-03-07 00:31:15 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:31:15 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 207 0 0
>> 2008-03-07 00:31:15 172.16.1.11 GET 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00001 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:31:15 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:31:15 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
>> 0
>> 2008-03-07 00:31:15 172.16.1.11 POST /Microsoft-Server-ActiveSync 
>> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TCaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3628S214474R0S0L0H0P 
>> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
>> 2008-03-07 00:31:15 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:31:15 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 207 0 0
>> 2008-03-07 00:31:15 172.16.1.11 GET 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00005 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:31:15 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:31:15 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
>> 0
>> 2008-03-07 00:31:15 172.16.1.11 POST /Microsoft-Server-ActiveSync 
>> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TTaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3015S6262R0S0L0H0P 
>> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
>> #Software: Microsoft Internet Information Services 6.0
>> #Version: 1.0
>> #Date: 2008-03-07 00:55:48
>> #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port 
>> cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
>> 2008-03-07 00:55:48 172.16.1.11 UNSUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/ - 80 - 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
>> 2008-03-07 00:55:48 172.16.1.11 UNSUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/ - 80 - 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:55:48 172.16.1.11 UNSUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/ - 80 PALBAM\Kenneth 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
>> 2008-03-07 00:55:48 172.16.1.11 POST /Microsoft-Server-ActiveSync 
>> User=kenneth&DeviceId=5E1072598CF5FF4A86C5995FBFB8FFE8&DeviceType=PocketPC&Cmd=Ping&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:2C17I9393S66562R0S0L1680H0P 
>> 443 palbam\kenneth 80.250.149.60 MSFT-PPC/5.2.402 200 0 0
>> 2008-03-07 00:55:52 172.16.1.11 PROPFIND 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:55:52 172.16.1.11 PROPFIND 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 207 0 0
>> 2008-03-07 00:55:52 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 302 0 0
>> 2008-03-07 00:55:52 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/AutdState.xml 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:55:52 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/FolderSyncFile 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:55:52 172.16.1.11 SUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/Contacts/ - 80 PALBAM\Kenneth 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
>> 2008-03-07 00:55:52 172.16.1.11 SUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/Calendar/ - 80 PALBAM\Kenneth 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
>> 2008-03-07 00:55:52 172.16.1.11 SUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/Inbox/ - 80 PALBAM\Kenneth 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
>> 2008-03-07 00:55:52 172.16.1.11 SUBSCRIBE 
>> /exchange-oma/Kenneth@ricor.com/Tasks/ - 80 PALBAM\Kenneth 172.16.1.11 
>> Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
>> 2008-03-07 00:55:52 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a292 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
>> 0 0
>> 2008-03-07 00:55:52 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a291 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
>> 0 0
>> 2008-03-07 00:55:52 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10f678 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
>> 0 0
>> 2008-03-07 00:55:52 172.16.1.11 GET 
>> /exchange-oma/Kenneth@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/5E1072598CF5FF4A86C5995FBFB8FFE8/31bdf1d92eaed311b45500508b552e8b-10a297 
>>  - 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 00:55:52 172.16.1.11 SEARCH /exchange-oma/Kenneth@ricor.com/ - 
>> 80 PALBAM\Kenneth 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 
>> 0 0
>> 2008-03-07 01:01:13 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 01:01:13 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 207 0 0
>> 2008-03-07 01:01:13 172.16.1.11 GET 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/20b2343718f3d511a0c900508b552e8b-20040ed 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 01:01:13 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 01:01:13 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
>> 0
>> 2008-03-07 01:01:13 172.16.1.11 POST /Microsoft-Server-ActiveSync 
>> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TEmSSC:0A0C0D0FS:0A0C0D0SP:1C3I9650S2076716R0S0L0H0P 
>> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
>> 2008-03-07 01:01:13 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 01:01:13 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 207 0 0
>> 2008-03-07 01:01:14 172.16.1.11 GET 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00001 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 01:01:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 01:01:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
>> 0
>> 2008-03-07 01:01:14 172.16.1.11 POST /Microsoft-Server-ActiveSync 
>> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TCaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3628S214474R0S0L0H0P 
>> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
>> 2008-03-07 01:01:14 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 01:01:14 172.16.1.11 PROPFIND 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 207 0 0
>> 2008-03-07 01:01:14 172.16.1.11 GET 
>> /exchange-oma/erezh@ricor.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/IMEI356996010647237/IMEI356996010647237/21b2343718f3d511a0c900508b552e8b-d00005 
>>  - 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 
>> 200 0 0
>> 2008-03-07 01:01:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 - 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
>> 2008-03-07 01:01:14 172.16.1.11 SEARCH /exchange-oma/erezh@ricor.com/ - 
>> 80 PALBAM\Erez-h 172.16.1.11 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 
>> 0
>> 2008-03-07 01:01:14 172.16.1.11 POST /Microsoft-Server-ActiveSync 
>> User=palbam%5Cerez-h&DeviceId=IMEI356996010647237&DeviceType=IMEI356996010647237&Cmd=Sync&Log=V4TTaSSC:0A0C0D0FS:0A0C0D0SP:1C3I3015S6262R0S0L0H0P 
>> 443 palbam\erez-h 80.250.149.60 NokiaN95/1.0 200 0 0
>>
>>
>> -- 
>> ----
>> Helio Diamant - MS-MVP/Mobile Devices
>> Editor
>> www.pocketpcfreak.com
>> "Lee Derbyshire [MVP]" <email a@t leederbyshire d.0.t c.0.m> wrote in 
>> message news:%23MjDbisfIHA.5160@TK2MSFTNGP05.phx.gbl...
>>> "Helio Diamant - MS-MVP/Mobile Devices"  
>>> wrote in message news:e4%23dEZrfIHA.4436@TK2MSFTNGP02.phx.gbl...
>>>> Well, this time it is me asking the question instead of answering 
>>>> it.....
>>>>
>>>> After implementing this successfully in around 85 servers during the 
>>>> last 12 months, I finally came to a situation in which things are not 
>>>> working and I can't find out why. Here is my situation:
>>>>
>>>> 1. Server behind a firewall (Checkpoint) which has port 443 wide open 
>>>> for HTTPS. I see the events at the Exchange Server, meaning I pass 
>>>> through the firewall and arrive to the Exchange.
>>>>
>>>> 2. When FBA is not activated EVERYTHING works fine with SSL.
>>>>
>>>> 3. When I activate FBA: trying OMA gives me Event ID 1503 with Error 
>>>> (440), and Activesync from the devices gives error 85010014 at the 
>>>> device and Event ID 3030 on the server.
>>>>
>>>> There isn't any case which is more classic for KB#817379 than this one. 
>>>> The only problem is that KB#817379 has already been implemented on the 
>>>> server(the exchange-oma virtual directory has been created and the 
>>>> Registry Value ExchangeVDir = /exchange-oma has been created as well).
>>>>
>>>> Server has been restarted many times, and the VDir and registry value 
>>>> have been many times deleted and re-created from scratch to make sure I 
>>>> am not making a mistake. It just doesn't seem to make any difference.
>>>>
>>>> Any ideas?
>>>>
>>>> -- 
>>>> ----
>>>> Helio Diamant
>>>> MS-MVP/Mobile Devices
>>>> Editor - PocketPCFreak.com
>>>
>>> Have a look in the server's IIS Log file to make sure that when you use 
>>> A/S, the server's internal requests are actually going to /exchange-oma 
>>> , and are not still going to /Exchange .  If they are going to 
>>> /exchange-oma , can you paste the logged entries?
>>>
>>> Lee.
>>>
>>> -- 
>>> ______________________________________
>>>
>>> Outlook Web Access For PDA , OWA For WAP
>>> www.leederbyshire.com
>>> email a@t leederbyshire d.0.t c.0.m
>>> ______________________________________
>>>
>>
>
>
date: Sun, 9 Mar 2008 07:12:05 +0200   author:   Helio Diamant - MS-MVP/Mobile Devices

Re: OWA FBA and Activesync - KB#817379 not helping    
Yes, I think so.

"Helio Diamant - MS-MVP/Mobile Devices"  
wrote in message news:627FCA5D-F82E-4764-83AA-7869C42C0D26@microsoft.com...
> Well, I have already done that...
>
> 1. When FBA is OFF, it works with any of the libraries, /Exchange or 
> /exchange-oma.
> 2. When FBA is on, it fails with both.
>
> This thing is getting me crazy, I have seen so many servers and done so 
> many installations of this, and never found such a situation.
>
> Would an IIS log of the failure when FBA is ON help in anyway?
>
> Helio
>
> -- 
> ----
> Helio Diamant - MS-MVP/Mobile Devices
> Editor
> www.pocketpcfreak.com
> "Lee Derbyshire [MVP]" <email a@t leederbyshire d.0.t c.0.m> wrote in 
> message news:%23EDmpVRgIHA.4436@TK2MSFTNGP02.phx.gbl...
>> Well, everything looks fine there, but I guess it would if you say it is 
>> working at the moment.  It does seem to be accessing /exchange-oma .
>>
>> My suggestion would be this (unless you already did it).  Remove the 
>> /exchange-oma VDir and registry key, then turn off FBA and SSL, and make 
>> sure that OMA and A/S will work with the original Exchange VDir before 
>> you copy it to /exchange-oma .  If it won't work with /exchange (without 
>> FBA and SSL), then it won't work with the /exchange-oma copy.  KB817379 
>> needs to be done at a time when OMA and A/S are actually working.  It 
>> doesn't fix a broken setup - it only allows you to add FBA and SSL to an 
>> already working setup.
>>
>>
>> "Helio Diamant - MS-MVP/Mobile Devices"  
>> wrote in message 
>> news:233920D8-6BF8-47B1-9199-3A141347B56A@microsoft.com...
>>> Lee,
>>>
>>> I am attaching a part of the log. It seems to me that it is going 
>>> through exchange-oma, otherwise I am not understanding clearly the 
>>> contents. Let me emphasize that at this moment FBA is OFF so that it can 
>>> work.
>>>
>>> If you can help me with any information I will be very grateful.
>>>
>>> Helio
>>>
>>> #Software: Microsoft Internet Information Services 6.0
>>> #Version: 1.0
>&