Exchange 2003 Activesync Usage and Reporting
The need for getting information on users using Activesync as well as devices connecting to the environment has become a big ask for a number of customers. While all the information is on the Exchange Frontend Servers there isn’t any way to get this information from the Exchange GUI. Here I’ve taken a few Scripts from the exchange team as well as a partner have developed which should help you get all that information you need out of the Exchange server in a manner that will allow you to monitor your Activesync Usage.
The Exchange Team has written 2 Scripts that do the following:
Hits by User
It returns information by individual user such as, devices type used, number of Syncs, Emails Sent, Attachments downloaded, Meeting Responses, etc.
Hits by DeviceType
This report gives you a breakdown of the DeviceTypes (SmartPhone, PocketPC, etc.) that are hitting your EAS Server. This report can give you a better idea of what types of devices your users prefer, which can help you make more informed planning decisions in the future.
Partner Solution using LogParser
Hits by Number of Users using Active Sync
LogParser could do this fairly easily for you.
SELECT COUNT(distinct MyDeviceId) as [# Devices]
USING
EXTRACT_VALUE(cs-uri-query,'DeviceId') AS MyDeviceID
FROM .\*.log
WHERE cs-uri-stem = '/Microsoft-Server-ActiveSync'
That would give you a count of distinct devices. This:
SELECT EXTRACT_VALUE(cs-uri-query,'DeviceType') AS MyDeviceType, COUNT(*) AS Hits
FROM .\*.log
WHERE cs-uri-stem LIKE '/Microsoft-Server-ActiveSync'
GROUP BY MyDeviceType
Would break it down by device type. You might have to tweak the syntax a little for 2007.
Just drop the iis logs from your CAS servers into the directory you are working in. To execute these, put the command in a SQL file and execute thusly:
logparser file:hitsbydevicetype.sql -i:iisw3c
Source: Mike Ireland from HP
Exchange Active Sync Protocol Logging for Exchange Server 2007
In addition you can use LogParser to create your own filter. To do this you will need a better idea of what to look for. Here I've put a link to the Exchange 2007 Protocol Logging information which is slightly different from Exchange 2003. There a a number of new commands here as well as the fact that a few of them have been renamed from 2003. Its more of a reference.
https://www.exchangeninjas.com/ExchangeActiveSyncProtocolLogging
COM object interface for Log Parser
Here the Exchange team has taken the capabilities of Log Parser one step further by leveraging the pluggable COM object interface. They have put together an EAS specific Log Parser COM object to help make building queries much easier. You will find this Log Parser COM object very useful in further drilling into sync activity.