Greetings Fellow SBSers,
I've recently started to notice a problem on a few (several) of the SBS 2003
servers that I support for various clients. At this point the problem
appears limited to iPhone 4 and iPad 2 devices connecting to these servers
via Activesync as that is the only place I've seen it so far. Other phones
such as Windows 7 phones or Android phones do not seem to be affected or
afflicted.
The iPhones and iPads seem to set up and work properly initially using
activesync for several weeks or even months without issue. Then, out of the
blue without any warning or indication, the phone will essentially begin
communication with the Exchange Activesync server just about non-stop. The
phone user may complain about poor battery life but other than that is
usually unaffected by this problem.
This non-stop communication between the phone and server cause the log files
(normally located in C:\windows\system32\logfiles\w3svc1) to grow enormously
to up to 50 times larger than normal. On smaller servers this can quickly
cause space problems on the C drive.
The log files look something like this (I've changed the normal email
address to user@domain.com and the actual Domain\user to DOMAIN\user).
2012-01-10 08:02:19 W3SVC1 10.0.0.210 PROPFIND
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7
- 80 - 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0 2039 409
2012-01-10 08:02:19 W3SVC1 10.0.0.210 PROPFIND
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7
- 80 DOMAIN\user 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
591 626
2012-01-10 08:02:19 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/ad40d7a48b52e344bcf0bdde6512fa19-180d
- 80 - 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
1958 323
2012-01-10 08:02:19 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/ad40d7a48b52e344bcf0bdde6512fa19-180d
- 80 - 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0 2039 422
2012-01-10 08:02:19 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/ad40d7a48b52e344bcf0bdde6512fa19-180d
- 80 DOMAIN\user 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
20730 446
2012-01-10 08:02:19 W3SVC1 10.0.0.210 SEARCH
/exchange-oma/user@domain.com/ - 80 - 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0 2039 348
2012-01-10 08:02:19 W3SVC1 10.0.0.210 SEARCH
/exchange-oma/user@domain.com/ - 80 DOMAIN\user 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0 1154 1932
2012-01-10 08:02:19 W3SVC1 10.0.0.210 POST /Microsoft-Server-ActiveSync
User=glusby&DeviceId=ApplC8RG4LXGDDP7&DeviceType=iPhone&Cmd=Sync&Log=V4TCaSSC:0A0C0D0FS:0A0C0D0SP:1C3I2556S44902R0S0L0H0P
443 glusby 67.189.78.128 Apple-iPhone3C3/901.405 200 0 0 578 544
2012-01-10 08:02:24 W3SVC1 10.0.0.210 PROPFIND
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7
- 80 - 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0 2039 409
2012-01-10 08:02:24 W3SVC1 10.0.0.210 PROPFIND
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7
- 80 DOMAIN\user 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
591 626
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7
- 80 - 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
1958 285
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7
- 80 - 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0 2039 384
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7
- 80 DOMAIN\user 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 302 0 0
580 408
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/AutdState.xml
- 80 - 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
1958 299
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/AutdState.xml
- 80 - 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0 2039 398
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/AutdState.xml
- 80 DOMAIN\user 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
1025 422
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/FolderSyncFile
- 80 - 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
1958 300
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/FolderSyncFile
- 80 - 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0 2039 399
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/FolderSyncFile
- 80 DOMAIN\user 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
1748 423
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SUBSCRIBE
/exchange-oma/user@domain.com/Tasks/ - 80 - 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254 1960 330
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SUBSCRIBE
/exchange-oma/user@domain.com/Tasks/ - 80 - 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0 2039 429
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SUBSCRIBE
/exchange-oma/user@domain.com/Tasks/ - 80 DOMAIN\user 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0 475 453
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SUBSCRIBE
/exchange-oma/user@domain.com/Bberry+Contacts/ - 80 - 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254 1960 342
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SUBSCRIBE
/exchange-oma/user@domain.com/Bberry+Contacts/ - 80 - 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0 2039 441
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SUBSCRIBE
/exchange-oma/user@domain.com/Bberry+Contacts/ - 80 DOMAIN\user 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0 487 465
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SUBSCRIBE
/exchange-oma/user@domain.com/Inbox/ - 80 - 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254 1960 340
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SUBSCRIBE
/exchange-oma/user@domain.com/Inbox/ - 80 - 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0 2039 439
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SUBSCRIBE
/exchange-oma/user@domain.com/Inbox/ - 80 DOMAIN\user 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0 485 463
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SUBSCRIBE
/exchange-oma/user@domain.com/Contacts/ - 80 - 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254 1960 333
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SUBSCRIBE
/exchange-oma/user@domain.com/Contacts/ - 80 - 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0 2039 432
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SUBSCRIBE
/exchange-oma/user@domain.com/Contacts/ - 80 DOMAIN\user 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0 478 456
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SUBSCRIBE
/exchange-oma/user@domain.com/Calendar/ - 80 - 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254 1960 333
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SUBSCRIBE
/exchange-oma/user@domain.com/Calendar/ - 80 - 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0 2039 432
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SUBSCRIBE
/exchange-oma/user@domain.com/Calendar/ - 80 DOMAIN\user 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0 478 456
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/ad40d7a48b52e344bcf0bdde6512fa19-1812
- 80 - 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
1958 323
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/ad40d7a48b52e344bcf0bdde6512fa19-1812
- 80 - 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0 2039 422
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/ad40d7a48b52e344bcf0bdde6512fa19-1812
- 80 DOMAIN\user 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
894 446
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SEARCH
/exchange-oma/user@domain.com/ - 80 - 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0 2039 356
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SEARCH
/exchange-oma/user@domain.com/ - 80 DOMAIN\user 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0 655 1129
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/3e50098244e4e3458d740f85e95fd33c-2d000b
- 80 - 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
1958 325
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/3e50098244e4e3458d740f85e95fd33c-2d000b
- 80 - 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0 2039 424
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/3e50098244e4e3458d740f85e95fd33c-2d000b
- 80 DOMAIN\user 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 200 0 0
2158 448
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SEARCH
/exchange-oma/user@domain.com/ - 80 - 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0 2039 356
2012-01-10 08:02:24 W3SVC1 10.0.0.210 SEARCH
/exchange-oma/user@domain.com/ - 80 DOMAIN\user 10.0.0.210
Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0 703 1179
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/ad40d7a48b52e344bcf0bdde6512fa19-6057
- 80 - 10.0.0.210 Microsoft-Server-ActiveSync/6.5.7638.1 401 2 2148074254
1958 323
2012-01-10 08:02:24 W3SVC1 10.0.0.210 GET
/exchange-oma/user@domain.com/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPhone/ApplC8RG4LXGDDP7/ad40d7a48b52e344bcf0bdde6512fa
The logs seem to go on like this endlessly, and may approach 500 mb daily
where they normally would be 20-30mb in size. I've verified that the
iPhones/iPads are set up properly and are using push for the emails. In
short, I've compared properly working phones and problem phones side by side
and can see no difference between the two. Not all iPhones or iPads that
are connecting to each server are affected. Just one or two affected
devices are all it takes for the log files to explode in size.
The fix has been rather simple. Just delete the Exchange account off of the
phone and then re-add it back on to the phone . After that, the iPhone/iPad
goes back to normal operation for the time being. I've not had a
re-occurrence of the problem with a device that I've fixed in this manner,
but I feel that it's only a matter of time, as my data subset at this point
is rather small.
So far I've seen this recently on 4 different SBS 2003 servers (all fully
patched and SBS BPA reports clean) and about 10 different iPhones/iPads.
Since I'm not seeing the problem with Android or Windows 7 phones I am
leaning towards this being a problem with the Apple IOS infrastructure,
specifically IOS 5.
Is anyone else seeing this problem and if so what are you doing to control
it? It's really a pain to have to monitor these server log files for
indications of problem phones. It's not like we don't have enough to do
already. I'm also interested in hearing about permanent fixes if anyone has
one to offer.
Thanks... :)