How to see if a user is connecting as RPC over HTTPS or as a MAPI user
Hi AllIs thare a way to see if a user is connecting to the server over RPC , or MAPI, on the server side?Thanks!!
February 23rd, 2010 2:44pm

Hi,I think you can use SMTP logging to find it accurately. SMTP protocol logging turned on by default.To enable protocol logging on Receive Connectors, use the following command: Set-ReceiveConnector "Connector Name" -ProtocolLoggingLevel verbose For Send Connectors (equivalent of SMTP Connectors), using the following command: Set-SendConnector "Send Connector Name" -ProtocolLoggingLevel verbose- Receive Connector logs are located in \Exchange Server\TransportRoles\Logs\ProtocolLog\SmtpReceive- Send Connector logs are located in \Exchange Server\TransportRoles\Logs\ProtocolLog\SmtpSend Regards from http://www.windowsadmin.info/
Free Windows Admin Tool Kit Click here and download it now
February 23rd, 2010 3:16pm

Version of Exchange?OliverOliver Moazzezi | Exchange MVP, MCSA:M, MCTS:Exchange 2010, BA (Hons) Anim | http://www.exchange2007.com | http://www.exchange2010.com | http://www.cobweb.com |
February 23rd, 2010 3:17pm

Those connectors are for SMTP connectings that are generated when connecting directy to a HUB server to send mail.So that not that, if im not wrong.
Free Windows Admin Tool Kit Click here and download it now
February 23rd, 2010 3:22pm

If it's RPC over HTTPS, those will be in the IIS logs. If you're asking if there's a way to differentiate MAPI connections from RPC, no. Outlook uses RPC as the underlying protocol for it's MAPI connections. They are inseperable.
February 23rd, 2010 3:45pm

Exchange 2007 SP2
Free Windows Admin Tool Kit Click here and download it now
February 23rd, 2010 4:17pm

You should see the RPC over HTTPS connections in the IIS logs on your CAS server. MAPI connections will be directly to the mailbox servers, so you won't see those on the CAS server.
February 23rd, 2010 4:32pm

Tnx, I totaly forgot about the IIS logs, ant with the malbox servers the only way i can see the conections are with netstat. Am i correct?
Free Windows Admin Tool Kit Click here and download it now
February 23rd, 2010 4:37pm

You can install the User Monitor tool (EXMON) on the mailbox servers to get a more detailed picture of what your user connections are. That will also give you information about that client types being used for the connections.http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9a49c22e-e0c7-4b7c-acef-729d48af7bc9
February 23rd, 2010 4:55pm

Tnx!!!
Free Windows Admin Tool Kit Click here and download it now
February 23rd, 2010 5:03pm

You can install the User Monitor tool (EXMON) on the mailbox servers to get a more detailed picture of what your user connections are. That will also give you information about that client types being used for the connections.http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9a49c22e-e0c7-4b7c-acef-729d48af7bc9 This isn't valid for RPC over HTTPs connection.Exmon will not show you if the connections are Outlook Anywhere/RPC over HTTPs or not...Exmon will only show you the Outlook version and if they are using Cached Exchange mode or not.Read: "Exmon" http://technet.microsoft.com/en-us/library/bb508855(EXCHG.65).aspxChecking IIS logs is valid however.Oliver Moazzezi | Exchange MVP, MCSA:M, MCTS:Exchange 2010, BA (Hons) Anim | http://www.exchange2007.com | http://www.exchange2010.com | http://www.cobweb.com |
February 23rd, 2010 5:06pm

It does have it's limitations, but it provides a lot more information than netstat.
Free Windows Admin Tool Kit Click here and download it now
February 23rd, 2010 5:11pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics