Re: ActiveSync + Throttling + IOS
On Thu, Feb 7, 2013 at 12:11 PM, KevinM wrote: > I am tracking an issue for a number of customers where apple IOS devices are > causing the %time in AD throttling policy to fire due to devices performing > full GAL lookups for each key press. My feeling is that this is an IOS > design flaw that should be fixed. Windows Phone searches local device > contacts then presents an option to attach to GAL; A much less expensive > task for an Exchange server. Too an end user the symptoms are delayed send > and receive. Most noticeable are messages waiting to be sent on the device > until the throttling blocking is removed. > > > > The issue can be seen when you correlate IIS logs throttling errors with > Activesync Mailbox logs and you look for > > RequestHeader : > > POST > /Microsoft-Server-ActiveSync/default.eas?User=x&DeviceType=iPhone&Cmd=Search > HTTP/1.1 > > RequestBody : > > > > > > > > > > r > > I am wondering if anyone else is running into this issue? Never heard of such a thing - but just for info, what version(s) of iOS? Kurt --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: ActiveSync + Throttling + IOS
Don't you have more inside access than we do? :) A couple of things are starting to percolate up with this latest iOS update - excessive log generation and throttling hits are being discussed on several forums. I haven't heard of any conclusions out of CSS yet, and none of my customers have reported any issues so I don't personally have a call open. From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013 3:12 PM To: MS-Exchange Admin Issues Subject: ActiveSync + Throttling + IOS I am tracking an issue for a number of customers where apple IOS devices are causing the %time in AD throttling policy to fire due to devices performing full GAL lookups for each key press. My feeling is that this is an IOS design flaw that should be fixed. Windows Phone searches local device contacts then presents an option to attach to GAL; A much less expensive task for an Exchange server. Too an end user the symptoms are delayed send and receive. Most noticeable are messages waiting to be sent on the device until the throttling blocking is removed. The issue can be seen when you correlate IIS logs throttling errors with Activesync Mailbox logs and you look for RequestHeader : POST /Microsoft-Server-ActiveSync/default.eas?User=x&DeviceType=iPhone&Cmd=Search HTTP/1.1 RequestBody : r I am wondering if anyone else is running into this issue? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: ActiveSync + Throttling + IOS
All versions of IOS are coded this way. Some might be more aggressive with the timing of the search between button presses but I've not received a confirmation out of apple on that one yet. -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Thursday, February 7, 2013 12:26 PM To: MS-Exchange Admin Issues Subject: Re: ActiveSync + Throttling + IOS On Thu, Feb 7, 2013 at 12:11 PM, KevinM wrote: > I am tracking an issue for a number of customers where apple IOS > devices are causing the %time in AD throttling policy to fire due to > devices performing full GAL lookups for each key press. My feeling is > that this is an IOS design flaw that should be fixed. Windows Phone > searches local device contacts then presents an option to attach to > GAL; A much less expensive task for an Exchange server. Too an end > user the symptoms are delayed send and receive. Most noticeable are > messages waiting to be sent on the device until the throttling blocking is > removed. > > > > The issue can be seen when you correlate IIS logs throttling errors > with Activesync Mailbox logs and you look for > > RequestHeader : > > POST > /Microsoft-Server-ActiveSync/default.eas?User=x&Device > Type=iPhone&Cmd=Search > HTTP/1.1 > > RequestBody : > > > > > > > > > > r > > I am wondering if anyone else is running into this issue? Never heard of such a thing - but just for info, what version(s) of iOS? Kurt --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: ActiveSync + Throttling + IOS
We had a very excessive Exchange log generation issue. I found that two iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync their calendars. These two phones alone were causing 3 GB of log growth per hour. The way I resolved it was by disabling activsysnc on their mailbox, removed the phone partnership, deleted the active sync account on the phone, rebooting the phone, re-enabled active on the mailbox and re-added the exchange activesync account on the phone. I opened a ticket with Microsoft PSS, but they said they had no way to prevent future occurrences so they just refunded my ticket. No hotfixes or patches. It's too bad. It seems like an easy way to attack a 2010 Exchange server would be to pound activesysnc until the log drive was full and the server crashed. If there's a Microsoft Exchange Team inside guy on this forum that wants to explore this further please feel free to contact me. I think it's a security issue that should be investigated. -Andy From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 7, 2013 3:58 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Don't you have more inside access than we do? :) A couple of things are starting to percolate up with this latest iOS update - excessive log generation and throttling hits are being discussed on several forums. I haven't heard of any conclusions out of CSS yet, and none of my customers have reported any issues so I don't personally have a call open. From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013 3:12 PM To: MS-Exchange Admin Issues Subject: ActiveSync + Throttling + IOS I am tracking an issue for a number of customers where apple IOS devices are causing the %time in AD throttling policy to fire due to devices performing full GAL lookups for each key press. My feeling is that this is an IOS design flaw that should be fixed. Windows Phone searches local device contacts then presents an option to attach to GAL; A much less expensive task for an Exchange server. Too an end user the symptoms are delayed send and receive. Most noticeable are messages waiting to be sent on the device until the throttling blocking is removed. The issue can be seen when you correlate IIS logs throttling errors with Activesync Mailbox logs and you look for RequestHeader : POST /Microsoft-Server-ActiveSync/default.eas?User=x&DeviceType=iPhone&Cmd=Search HTTP/1.1 RequestBody : r I am wondering if anyone else is running into this issue? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist ** CONFIDENTIALITY NOTICE - The information transmitted in this message is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy all copies of this document. Thank you. Butler Schein Animal Health ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: ActiveSync + Throttling + IOS
Wow. Maybe I should look through my logs again... Kurt On Thu, Feb 7, 2013 at 1:00 PM, KevinM wrote: > All versions of IOS are coded this way. Some might be more aggressive with > the timing of the search between button presses but I've not received a > confirmation out of apple on that one yet. > > -Original Message- > From: Kurt Buff [mailto:kurt.b...@gmail.com] > Sent: Thursday, February 7, 2013 12:26 PM > To: MS-Exchange Admin Issues > Subject: Re: ActiveSync + Throttling + IOS > > On Thu, Feb 7, 2013 at 12:11 PM, KevinM wrote: >> I am tracking an issue for a number of customers where apple IOS >> devices are causing the %time in AD throttling policy to fire due to >> devices performing full GAL lookups for each key press. My feeling is >> that this is an IOS design flaw that should be fixed. Windows Phone >> searches local device contacts then presents an option to attach to >> GAL; A much less expensive task for an Exchange server. Too an end >> user the symptoms are delayed send and receive. Most noticeable are >> messages waiting to be sent on the device until the throttling blocking is >> removed. >> >> >> >> The issue can be seen when you correlate IIS logs throttling errors >> with Activesync Mailbox logs and you look for >> >> RequestHeader : >> >> POST >> /Microsoft-Server-ActiveSync/default.eas?User=x&Device >> Type=iPhone&Cmd=Search >> HTTP/1.1 >> >> RequestBody : >> >> >> >> >> >> >> >> >> >> r >> >> I am wondering if anyone else is running into this issue? > > Never heard of such a thing - but just for info, what version(s) of iOS? > > Kurt > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe exchangelist > > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: ActiveSync + Throttling + IOS
Michael, We are currently tracking both of the issues you have mentioned with apple via CSS now. My issue is about to be placed on the list if I have anything to say about it. I have some special access but the best pressure I could apply to apple would be public awareness and calls to them from their customers. Most customers who see the issue will modify their throttling policy and move on not knowing that they are now allowing IOS phones to blow up their CAS servers. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 7, 2013 12:58 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Don't you have more inside access than we do? :) A couple of things are starting to percolate up with this latest iOS update - excessive log generation and throttling hits are being discussed on several forums. I haven't heard of any conclusions out of CSS yet, and none of my customers have reported any issues so I don't personally have a call open. From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013 3:12 PM To: MS-Exchange Admin Issues Subject: ActiveSync + Throttling + IOS I am tracking an issue for a number of customers where apple IOS devices are causing the %time in AD throttling policy to fire due to devices performing full GAL lookups for each key press. My feeling is that this is an IOS design flaw that should be fixed. Windows Phone searches local device contacts then presents an option to attach to GAL; A much less expensive task for an Exchange server. Too an end user the symptoms are delayed send and receive. Most noticeable are messages waiting to be sent on the device until the throttling blocking is removed. The issue can be seen when you correlate IIS logs throttling errors with Activesync Mailbox logs and you look for RequestHeader : POST /Microsoft-Server-ActiveSync/default.eas?User=x&DeviceType=iPhone&Cmd=Search HTTP/1.1 RequestBody : r I am wondering if anyone else is running into this issue? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: ActiveSync + Throttling + IOS
Andy, you are not alone. The issue you are talking about is on the radar. From: Leedy, Andy [mailto:ale...@butlerschein.com] Sent: Thursday, February 7, 2013 1:52 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS We had a very excessive Exchange log generation issue. I found that two iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync their calendars. These two phones alone were causing 3 GB of log growth per hour. The way I resolved it was by disabling activsysnc on their mailbox, removed the phone partnership, deleted the active sync account on the phone, rebooting the phone, re-enabled active on the mailbox and re-added the exchange activesync account on the phone. I opened a ticket with Microsoft PSS, but they said they had no way to prevent future occurrences so they just refunded my ticket. No hotfixes or patches. It's too bad. It seems like an easy way to attack a 2010 Exchange server would be to pound activesysnc until the log drive was full and the server crashed. If there's a Microsoft Exchange Team inside guy on this forum that wants to explore this further please feel free to contact me. I think it's a security issue that should be investigated. -Andy From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 7, 2013 3:58 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Don't you have more inside access than we do? :) A couple of things are starting to percolate up with this latest iOS update - excessive log generation and throttling hits are being discussed on several forums. I haven't heard of any conclusions out of CSS yet, and none of my customers have reported any issues so I don't personally have a call open. From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013 3:12 PM To: MS-Exchange Admin Issues Subject: ActiveSync + Throttling + IOS I am tracking an issue for a number of customers where apple IOS devices are causing the %time in AD throttling policy to fire due to devices performing full GAL lookups for each key press. My feeling is that this is an IOS design flaw that should be fixed. Windows Phone searches local device contacts then presents an option to attach to GAL; A much less expensive task for an Exchange server. Too an end user the symptoms are delayed send and receive. Most noticeable are messages waiting to be sent on the device until the throttling blocking is removed. The issue can be seen when you correlate IIS logs throttling errors with Activesync Mailbox logs and you look for RequestHeader : POST /Microsoft-Server-ActiveSync/default.eas?User=x&DeviceType=iPhone&Cmd=Search HTTP/1.1 RequestBody : r I am wondering if anyone else is running into this issue? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist ** CONFIDENTIALITY NOTICE - The information transmitted in this message is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy all copies of this document. Thank you. Butler Schein Animal Health ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: ActiveSync + Throttling + IOS
...and I just got more info. After the recent release of iOS 6.1 Update, ... are reporting an issue around how iOS is communicating with Exchange server when the user responds to a meeting invite or update using iOS device. The behavior is such that iOS gets an error back from Exchange when trying to issue the meeting response command and simply retries the command over and over again. The recommendations are: [1] call Apple, [2] Don't roll out the new iOS update, [3] delete the device association to prevent it from getting worse. CSS is fully engaged. From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013 5:05 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Andy, you are not alone. The issue you are talking about is on the radar. From: Leedy, Andy [mailto:ale...@butlerschein.com] Sent: Thursday, February 7, 2013 1:52 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS We had a very excessive Exchange log generation issue. I found that two iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync their calendars. These two phones alone were causing 3 GB of log growth per hour. The way I resolved it was by disabling activsysnc on their mailbox, removed the phone partnership, deleted the active sync account on the phone, rebooting the phone, re-enabled active on the mailbox and re-added the exchange activesync account on the phone. I opened a ticket with Microsoft PSS, but they said they had no way to prevent future occurrences so they just refunded my ticket. No hotfixes or patches. It's too bad. It seems like an easy way to attack a 2010 Exchange server would be to pound activesysnc until the log drive was full and the server crashed. If there's a Microsoft Exchange Team inside guy on this forum that wants to explore this further please feel free to contact me. I think it's a security issue that should be investigated. -Andy From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 7, 2013 3:58 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Don't you have more inside access than we do? :) A couple of things are starting to percolate up with this latest iOS update - excessive log generation and throttling hits are being discussed on several forums. I haven't heard of any conclusions out of CSS yet, and none of my customers have reported any issues so I don't personally have a call open. From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013 3:12 PM To: MS-Exchange Admin Issues Subject: ActiveSync + Throttling + IOS I am tracking an issue for a number of customers where apple IOS devices are causing the %time in AD throttling policy to fire due to devices performing full GAL lookups for each key press. My feeling is that this is an IOS design flaw that should be fixed. Windows Phone searches local device contacts then presents an option to attach to GAL; A much less expensive task for an Exchange server. Too an end user the symptoms are delayed send and receive. Most noticeable are messages waiting to be sent on the device until the throttling blocking is removed. The issue can be seen when you correlate IIS logs throttling errors with Activesync Mailbox logs and you look for RequestHeader : POST /Microsoft-Server-ActiveSync/default.eas?User=x&DeviceType=iPhone&Cmd=Search HTTP/1.1 RequestBody : r I am wondering if anyone else is running into this issue? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist ** CONFIDENTIALITY NOTICE - The information transmitted in this message is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy all copies of this document. Thank you. Butler Schein Animal Health ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click her
RE: ActiveSync + Throttling + IOS
Are you certain that this particular issue is throttled on-premises? You have a lot more throttling policies than we do until E15. -Original Message- From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013 4:01 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS All versions of IOS are coded this way. Some might be more aggressive with the timing of the search between button presses but I've not received a confirmation out of apple on that one yet. -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Thursday, February 7, 2013 12:26 PM To: MS-Exchange Admin Issues Subject: Re: ActiveSync + Throttling + IOS On Thu, Feb 7, 2013 at 12:11 PM, KevinM wrote: > I am tracking an issue for a number of customers where apple IOS > devices are causing the %time in AD throttling policy to fire due to > devices performing full GAL lookups for each key press. My feeling is > that this is an IOS design flaw that should be fixed. Windows Phone > searches local device contacts then presents an option to attach to > GAL; A much less expensive task for an Exchange server. Too an end > user the symptoms are delayed send and receive. Most noticeable are > messages waiting to be sent on the device until the throttling blocking is > removed. > > > > The issue can be seen when you correlate IIS logs throttling errors > with Activesync Mailbox logs and you look for > > RequestHeader : > > POST > /Microsoft-Server-ActiveSync/default.eas?User=x&Device > Type=iPhone&Cmd=Search > HTTP/1.1 > > RequestBody : > > > > > > > > > > r > > I am wondering if anyone else is running into this issue? Never heard of such a thing - but just for info, what version(s) of iOS? Kurt --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: ActiveSync + Throttling + IOS
I was just informed in a separate forum that the call to Apple has to be from a client with an Enterprise support agreement with Apple, or with one of their $600 enterprise support pay-per-call. The "cheap" $50 pay-per-call does not have access to EAS support. From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013 5:03 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Michael, We are currently tracking both of the issues you have mentioned with apple via CSS now. My issue is about to be placed on the list if I have anything to say about it. I have some special access but the best pressure I could apply to apple would be public awareness and calls to them from their customers. Most customers who see the issue will modify their throttling policy and move on not knowing that they are now allowing IOS phones to blow up their CAS servers. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 7, 2013 12:58 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Don't you have more inside access than we do? :) A couple of things are starting to percolate up with this latest iOS update - excessive log generation and throttling hits are being discussed on several forums. I haven't heard of any conclusions out of CSS yet, and none of my customers have reported any issues so I don't personally have a call open. From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013 3:12 PM To: MS-Exchange Admin Issues Subject: ActiveSync + Throttling + IOS I am tracking an issue for a number of customers where apple IOS devices are causing the %time in AD throttling policy to fire due to devices performing full GAL lookups for each key press. My feeling is that this is an IOS design flaw that should be fixed. Windows Phone searches local device contacts then presents an option to attach to GAL; A much less expensive task for an Exchange server. Too an end user the symptoms are delayed send and receive. Most noticeable are messages waiting to be sent on the device until the throttling blocking is removed. The issue can be seen when you correlate IIS logs throttling errors with Activesync Mailbox logs and you look for RequestHeader : POST /Microsoft-Server-ActiveSync/default.eas?User=x&DeviceType=iPhone&Cmd=Search HTTP/1.1 RequestBody : r I am wondering if anyone else is running into this issue? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: ActiveSync + Throttling + IOS
Is it possible to roll back from 6.1 on the iPhone? From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 07, 2013 2:31 PM To: Heaton, Joseph@Wildlife; MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS I was just informed in a separate forum that the call to Apple has to be from a client with an Enterprise support agreement with Apple, or with one of their $600 enterprise support pay-per-call. The "cheap" $50 pay-per-call does not have access to EAS support. From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013 5:03 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Michael, We are currently tracking both of the issues you have mentioned with apple via CSS now. My issue is about to be placed on the list if I have anything to say about it. I have some special access but the best pressure I could apply to apple would be public awareness and calls to them from their customers. Most customers who see the issue will modify their throttling policy and move on not knowing that they are now allowing IOS phones to blow up their CAS servers. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 7, 2013 12:58 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Don't you have more inside access than we do? :) A couple of things are starting to percolate up with this latest iOS update - excessive log generation and throttling hits are being discussed on several forums. I haven't heard of any conclusions out of CSS yet, and none of my customers have reported any issues so I don't personally have a call open. From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013 3:12 PM To: MS-Exchange Admin Issues Subject: ActiveSync + Throttling + IOS I am tracking an issue for a number of customers where apple IOS devices are causing the %time in AD throttling policy to fire due to devices performing full GAL lookups for each key press. My feeling is that this is an IOS design flaw that should be fixed. Windows Phone searches local device contacts then presents an option to attach to GAL; A much less expensive task for an Exchange server. Too an end user the symptoms are delayed send and receive. Most noticeable are messages waiting to be sent on the device until the throttling blocking is removed. The issue can be seen when you correlate IIS logs throttling errors with Activesync Mailbox logs and you look for RequestHeader : POST /Microsoft-Server-ActiveSync/default.eas?User=x&DeviceType=iPhone&Cmd=Search HTTP/1.1 RequestBody : r I am wondering if anyone else is running into this issue? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: ActiveSync + Throttling + IOS
> Is it possible to roll back from 6.1 on the iPhone? Ha, without a jailbreak or a hack, no. Welcome to Apple, all your iphone is own by apple. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: ActiveSync + Throttling + IOS
Great. During our migration, we're moving from Blackberries to iPhones. Around 75% of those already issued are on iOS 6.1. I haven't had any issues like you guys have described though. Is there a link someone could provide with more details of the issue and how it occurs? From: Joseph L. Casale [jcas...@activenetwerx.com] Sent: Thursday, February 07, 2013 6:29 PM To: Heaton, Joseph@Wildlife; MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS > Is it possible to roll back from 6.1 on the iPhone? Ha, without a jailbreak or a hack, no. Welcome to Apple, all your iphone is own by apple. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: ActiveSync + Throttling + IOS
> Is there a link someone could provide with more details of the issue and how > it occurs? Honestly bud, this thread outlines as it is. Keep logparser on hand. During the period where I was seeing it, I used a batched job to keep an eye on the growth and email me over and above the normal nms we have with thresholds defined. This way if the growth was increasing I could react quickly. MS provides an active sync report script allows you to pinpoint the errant device and knock it out service if needed. jlc --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: ActiveSync + Throttling + IOS
So basically, just keep an eye on the IIS logs for my CAS servers, and watch for rapid growth, right? I'll look for that active sync report script. I looked at all the IIS logs for my CAS servers, and only one had any "cmd=search" entries, but nothing like the OP described, and the size of the log isn't that big. From: Joseph L. Casale [jcas...@activenetwerx.com] Sent: Thursday, February 07, 2013 8:30 PM To: Heaton, Joseph@Wildlife; MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS > Is there a link someone could provide with more details of the issue and how > it occurs? Honestly bud, this thread outlines as it is. Keep logparser on hand. During the period where I was seeing it, I used a batched job to keep an eye on the growth and email me over and above the normal nms we have with thresholds defined. This way if the growth was increasing I could react quickly. MS provides an active sync report script allows you to pinpoint the errant device and knock it out service if needed. jlc --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: ActiveSync + Throttling + IOS
Thanks! Perfect :( we have users connecting with their home devices and we have zero control. We are having a hard time getting policies approved and in place. On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith wrote: > …and I just got more info. > > ** ** > > After the recent release of iOS 6.1 Update, … are reporting an issue > around how iOS is communicating with Exchange server when the user responds > to a meeting invite or update using iOS device. The behavior is such that > iOS gets an error back from Exchange when trying to issue the meeting > response command and simply retries the command over and over again. > > ** ** > > The recommendations are: [1] call Apple, [2] Don’t roll out the new iOS > update, [3] delete the device association to prevent it from getting worse. > > > ** ** > > CSS is fully engaged. > > ** ** > > *From:* KevinM [mailto:kev...@wlkmmas.org] > *Sent:* Thursday, February 7, 2013 5:05 PM > > *To:* MS-Exchange Admin Issues > *Subject:* RE: ActiveSync + Throttling + IOS > > ** ** > > Andy, you are not alone. The issue you are talking about is on the radar.* > *** > > ** ** > > ** ** > > *From:* Leedy, Andy [mailto:ale...@butlerschein.com] > > *Sent:* Thursday, February 7, 2013 1:52 PM > *To:* MS-Exchange Admin Issues > *Subject:* RE: ActiveSync + Throttling + IOS > > ** ** > > We had a very excessive Exchange log generation issue. I found that two > iphones that were recently updated to IOS 6.1 were stuck in loop trying to > sync their calendars. These two phones alone were causing 3 GB of log > growth per hour. The way I resolved it was by disabling activsysnc on > their mailbox, removed the phone partnership, deleted the active sync > account on the phone, rebooting the phone, re-enabled active on the mailbox > and re-added the exchange activesync account on the phone. > > ** ** > > I opened a ticket with Microsoft PSS, but they said they had no way to > prevent future occurrences so they just refunded my ticket. No hotfixes or > patches. It’s too bad. It seems like an easy way to attack a 2010 Exchange > server would be to pound activesysnc until the log drive was full and the > server crashed. > > ** ** > > If there’s a Microsoft Exchange Team inside guy on this forum that wants > to explore this further please feel free to contact me. I think it’s a > security issue that should be investigated. > > ** ** > > -Andy > > ** ** > > ** ** > > ** ** > > *From:* Michael B. Smith [mailto:mich...@smithcons.com] > > *Sent:* Thursday, February 7, 2013 3:58 PM > *To:* MS-Exchange Admin Issues > *Subject:* RE: ActiveSync + Throttling + IOS > > ** ** > > Don’t you have more inside access than we do? J > > ** ** > > A couple of things are starting to percolate up with this latest iOS > update – excessive log generation and throttling hits are being discussed > on several forums. I haven’t heard of any conclusions out of CSS yet, and > none of my customers have reported any issues so I don’t personally have a > call open. > > ** ** > > *From:* KevinM [mailto:kev...@wlkmmas.org ] > *Sent:* Thursday, February 7, 2013 3:12 PM > *To:* MS-Exchange Admin Issues > *Subject:* ActiveSync + Throttling + IOS > > ** ** > > I am tracking an issue for a number of customers where apple IOS devices > are causing the *%time in AD* throttling policy to fire due to devices > performing full GAL lookups for each key press. My feeling is that this is > an IOS design flaw that should be fixed. Windows Phone searches local > device contacts then presents an option to attach to GAL; A much less > expensive task for an Exchange server. Too an end user the symptoms are > delayed send and receive. Most noticeable are messages waiting to be sent > on the device until the throttling blocking is removed. > > ** ** > > The issue can be seen when you correlate IIS logs throttling errors with > Activesync Mailbox logs and you look for > > RequestHeader : > > POST > /Microsoft-Server-ActiveSync/default.eas?User=x&DeviceType=iPhone&Cmd= > Search HTTP/1.1 > > RequestBody : > > > > > > > > > > r > > ** ** > > ** ** > > I am wondering if anyone else is running into this issue? > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe exchangelist > > --- > To manage subscriptions click here: > htt
Re: ActiveSync + Throttling + IOS
Is there a way to block just iPhone users that have the update installed? I'm not sure I'll even be able to do that, but I'd like to be one step ahead. thanks! On Fri, Feb 8, 2013 at 7:45 AM, Candee wrote: > Thanks! > Perfect :( > we have users connecting with their home devices and we have zero control. > We are having a hard time getting policies approved and in place. > > > > On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith wrote: > >> …and I just got more info. >> >> ** ** >> >> After the recent release of iOS 6.1 Update, … are reporting an issue >> around how iOS is communicating with Exchange server when the user responds >> to a meeting invite or update using iOS device. The behavior is such that >> iOS gets an error back from Exchange when trying to issue the meeting >> response command and simply retries the command over and over again. >> >> ** ** >> >> The recommendations are: [1] call Apple, [2] Don’t roll out the new iOS >> update, [3] delete the device association to prevent it from getting worse. >> >> >> ** ** >> >> CSS is fully engaged. >> >> ** ** >> >> *From:* KevinM [mailto:kev...@wlkmmas.org] >> *Sent:* Thursday, February 7, 2013 5:05 PM >> >> *To:* MS-Exchange Admin Issues >> *Subject:* RE: ActiveSync + Throttling + IOS >> >> ** ** >> >> Andy, you are not alone. The issue you are talking about is on the radar. >> >> >> ** ** >> >> ** ** >> >> *From:* Leedy, Andy [mailto:ale...@butlerschein.com] >> >> *Sent:* Thursday, February 7, 2013 1:52 PM >> *To:* MS-Exchange Admin Issues >> *Subject:* RE: ActiveSync + Throttling + IOS >> >> ** ** >> >> We had a very excessive Exchange log generation issue. I found that two >> iphones that were recently updated to IOS 6.1 were stuck in loop trying to >> sync their calendars. These two phones alone were causing 3 GB of log >> growth per hour. The way I resolved it was by disabling activsysnc on >> their mailbox, removed the phone partnership, deleted the active sync >> account on the phone, rebooting the phone, re-enabled active on the mailbox >> and re-added the exchange activesync account on the phone. >> >> ** ** >> >> I opened a ticket with Microsoft PSS, but they said they had no way to >> prevent future occurrences so they just refunded my ticket. No hotfixes or >> patches. It’s too bad. It seems like an easy way to attack a 2010 Exchange >> server would be to pound activesysnc until the log drive was full and the >> server crashed. >> >> ** ** >> >> If there’s a Microsoft Exchange Team inside guy on this forum that wants >> to explore this further please feel free to contact me. I think it’s a >> security issue that should be investigated. >> >> ** ** >> >> -Andy >> >> ** ** >> >> ** ** >> >> ** ** >> >> *From:* Michael B. Smith >> [mailto:mich...@smithcons.com] >> >> *Sent:* Thursday, February 7, 2013 3:58 PM >> *To:* MS-Exchange Admin Issues >> *Subject:* RE: ActiveSync + Throttling + IOS >> >> ** ** >> >> Don’t you have more inside access than we do? J >> >> ** ** >> >> A couple of things are starting to percolate up with this latest iOS >> update – excessive log generation and throttling hits are being discussed >> on several forums. I haven’t heard of any conclusions out of CSS yet, and >> none of my customers have reported any issues so I don’t personally have a >> call open. >> >> ** ** >> >> *From:* KevinM [mailto:kev...@wlkmmas.org ] >> *Sent:* Thursday, February 7, 2013 3:12 PM >> *To:* MS-Exchange Admin Issues >> *Subject:* ActiveSync + Throttling + IOS >> >> ** ** >> >> I am tracking an issue for a number of customers where apple IOS devices >> are causing the *%time in AD* throttling policy to fire due to devices >> performing full GAL lookups for each key press. My feeling is that this is >> an IOS design flaw that should be fixed. Windows Phone searches local >> device contacts then presents an option to attach to GAL; A much less >> expensive task for an Exchange server. Too an end user the symptoms are >> delayed send and receive. Most noticeable are messages waiting to be sent >> on the device until the throttling blocking is removed. >> >> ** ** >> >> The issue can be seen when you correlate IIS
Re: ActiveSync + Throttling + IOS
I found it. Safe travel today folks - I'm out of here as soon as it starts. :) On Fri, Feb 8, 2013 at 8:32 AM, Candee wrote: > Is there a way to block just iPhone users that have the update installed? > I'm not sure I'll even be able to do that, but I'd like to be one step > ahead. > thanks! > > On Fri, Feb 8, 2013 at 7:45 AM, Candee wrote: > >> Thanks! >> Perfect :( >> we have users connecting with their home devices and we have zero control. >> We are having a hard time getting policies approved and in place. >> >> >> >> On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith >> wrote: >> >>> …and I just got more info. >>> >>> ** ** >>> >>> After the recent release of iOS 6.1 Update, … are reporting an issue >>> around how iOS is communicating with Exchange server when the user responds >>> to a meeting invite or update using iOS device. The behavior is such that >>> iOS gets an error back from Exchange when trying to issue the meeting >>> response command and simply retries the command over and over again. >>> >>> ** ** >>> >>> The recommendations are: [1] call Apple, [2] Don’t roll out the new iOS >>> update, [3] delete the device association to prevent it from getting worse. >>> >>> >>> ** ** >>> >>> CSS is fully engaged. >>> >>> ** ** >>> >>> *From:* KevinM [mailto:kev...@wlkmmas.org] >>> *Sent:* Thursday, February 7, 2013 5:05 PM >>> >>> *To:* MS-Exchange Admin Issues >>> *Subject:* RE: ActiveSync + Throttling + IOS >>> >>> ** ** >>> >>> Andy, you are not alone. The issue you are talking about is on the radar. >>> >>> >>> ** ** >>> >>> ** ** >>> >>> *From:* Leedy, Andy >>> [mailto:ale...@butlerschein.com] >>> >>> *Sent:* Thursday, February 7, 2013 1:52 PM >>> *To:* MS-Exchange Admin Issues >>> *Subject:* RE: ActiveSync + Throttling + IOS >>> >>> ** ** >>> >>> We had a very excessive Exchange log generation issue. I found that two >>> iphones that were recently updated to IOS 6.1 were stuck in loop trying to >>> sync their calendars. These two phones alone were causing 3 GB of log >>> growth per hour. The way I resolved it was by disabling activsysnc on >>> their mailbox, removed the phone partnership, deleted the active sync >>> account on the phone, rebooting the phone, re-enabled active on the mailbox >>> and re-added the exchange activesync account on the phone. >>> >>> ** ** >>> >>> I opened a ticket with Microsoft PSS, but they said they had no way to >>> prevent future occurrences so they just refunded my ticket. No hotfixes or >>> patches. It’s too bad. It seems like an easy way to attack a 2010 Exchange >>> server would be to pound activesysnc until the log drive was full and the >>> server crashed. >>> >>> ** ** >>> >>> If there’s a Microsoft Exchange Team inside guy on this forum that wants >>> to explore this further please feel free to contact me. I think it’s a >>> security issue that should be investigated. >>> >>> ** ** >>> >>> -Andy >>> >>> ** ** >>> >>> ** ** >>> >>> ** ** >>> >>> *From:* Michael B. Smith >>> [mailto:mich...@smithcons.com] >>> >>> *Sent:* Thursday, February 7, 2013 3:58 PM >>> *To:* MS-Exchange Admin Issues >>> *Subject:* RE: ActiveSync + Throttling + IOS >>> >>> ** ** >>> >>> Don’t you have more inside access than we do? J >>> >>> ** ** >>> >>> A couple of things are starting to percolate up with this latest iOS >>> update – excessive log generation and throttling hits are being discussed >>> on several forums. I haven’t heard of any conclusions out of CSS yet, and >>> none of my customers have reported any issues so I don’t personally have a >>> call open. >>> >>> ** ** >>> >>> *From:* KevinM [mailto:kev...@wlkmmas.org ] >>> *Sent:* Thursday, February 7, 2013 3:12 PM >>> *To:* MS-Exchange Admin Issues >>> *Subject:* ActiveSync + Throttling + IOS >>> >>> ** ** >>> >>> I am tracking an issue for a number of customers where apple IOS devices >>>
RE: ActiveSync + Throttling + IOS
I just checked, we have over 170 devices running it. Appreciate the heads-up on this everyone! Regards, Don Guyer Catholic Health East - Information Technology Enterprise Directory & Messaging Services 3805 West Chester Pike, Suite 100, Newtown Square, Pa 19073 email: dgu...@che.org<mailto:dgu...@che.org> Office: 610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440 For immediate assistance, please open a Service Desk ticket or call the helpdesk @ 610-492-3839. [cid:image001.jpg@01CE05D8.62D823D0] From: Candee [mailto:can...@gmail.com] Sent: Friday, February 08, 2013 8:33 AM To: MS-Exchange Admin Issues Subject: Re: ActiveSync + Throttling + IOS Is there a way to block just iPhone users that have the update installed? I'm not sure I'll even be able to do that, but I'd like to be one step ahead. thanks! On Fri, Feb 8, 2013 at 7:45 AM, Candee mailto:can...@gmail.com>> wrote: Thanks! Perfect :( we have users connecting with their home devices and we have zero control. We are having a hard time getting policies approved and in place. On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith mailto:mich...@smithcons.com>> wrote: ...and I just got more info. After the recent release of iOS 6.1 Update, ... are reporting an issue around how iOS is communicating with Exchange server when the user responds to a meeting invite or update using iOS device. The behavior is such that iOS gets an error back from Exchange when trying to issue the meeting response command and simply retries the command over and over again. The recommendations are: [1] call Apple, [2] Don't roll out the new iOS update, [3] delete the device association to prevent it from getting worse. CSS is fully engaged. From: KevinM [mailto:kev...@wlkmmas.org<mailto:kev...@wlkmmas.org>] Sent: Thursday, February 7, 2013 5:05 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Andy, you are not alone. The issue you are talking about is on the radar. From: Leedy, Andy [mailto:ale...@butlerschein.com] Sent: Thursday, February 7, 2013 1:52 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS We had a very excessive Exchange log generation issue. I found that two iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync their calendars. These two phones alone were causing 3 GB of log growth per hour. The way I resolved it was by disabling activsysnc on their mailbox, removed the phone partnership, deleted the active sync account on the phone, rebooting the phone, re-enabled active on the mailbox and re-added the exchange activesync account on the phone. I opened a ticket with Microsoft PSS, but they said they had no way to prevent future occurrences so they just refunded my ticket. No hotfixes or patches. It's too bad. It seems like an easy way to attack a 2010 Exchange server would be to pound activesysnc until the log drive was full and the server crashed. If there's a Microsoft Exchange Team inside guy on this forum that wants to explore this further please feel free to contact me. I think it's a security issue that should be investigated. -Andy From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 7, 2013 3:58 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Don't you have more inside access than we do? :) A couple of things are starting to percolate up with this latest iOS update - excessive log generation and throttling hits are being discussed on several forums. I haven't heard of any conclusions out of CSS yet, and none of my customers have reported any issues so I don't personally have a call open. From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013 3:12 PM To: MS-Exchange Admin Issues Subject: ActiveSync + Throttling + IOS I am tracking an issue for a number of customers where apple IOS devices are causing the %time in AD throttling policy to fire due to devices performing full GAL lookups for each key press. My feeling is that this is an IOS design flaw that should be fixed. Windows Phone searches local device contacts then presents an option to attach to GAL; A much less expensive task for an Exchange server. Too an end user the symptoms are delayed send and receive. Most noticeable are messages waiting to be sent on the device until the throttling blocking is removed. The issue can be seen when you correlate IIS logs throttling errors with Activesync Mailbox logs and you look for RequestHeader : POST /Microsoft-Server-ActiveSync/default.eas?User=x&DeviceType=iPhone&Cmd=Search HTTP/1.1 RequestBody : r I am wondering if anyone else is running into this issue? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.
RE: ActiveSync + Throttling + IOS
Found what? Regards, Don Guyer Catholic Health East - Information Technology Enterprise Directory & Messaging Services 3805 West Chester Pike, Suite 100, Newtown Square, Pa 19073 email: dgu...@che.org<mailto:dgu...@che.org> Office: 610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440 For immediate assistance, please open a Service Desk ticket or call the helpdesk @ 610-492-3839. [cid:image001.jpg@01CE05D8.7774C820] From: Candee [mailto:can...@gmail.com] Sent: Friday, February 08, 2013 8:38 AM To: MS-Exchange Admin Issues Subject: Re: ActiveSync + Throttling + IOS I found it. Safe travel today folks - I'm out of here as soon as it starts. :) On Fri, Feb 8, 2013 at 8:32 AM, Candee mailto:can...@gmail.com>> wrote: Is there a way to block just iPhone users that have the update installed? I'm not sure I'll even be able to do that, but I'd like to be one step ahead. thanks! On Fri, Feb 8, 2013 at 7:45 AM, Candee mailto:can...@gmail.com>> wrote: Thanks! Perfect :( we have users connecting with their home devices and we have zero control. We are having a hard time getting policies approved and in place. On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith mailto:mich...@smithcons.com>> wrote: ...and I just got more info. After the recent release of iOS 6.1 Update, ... are reporting an issue around how iOS is communicating with Exchange server when the user responds to a meeting invite or update using iOS device. The behavior is such that iOS gets an error back from Exchange when trying to issue the meeting response command and simply retries the command over and over again. The recommendations are: [1] call Apple, [2] Don't roll out the new iOS update, [3] delete the device association to prevent it from getting worse. CSS is fully engaged. From: KevinM [mailto:kev...@wlkmmas.org<mailto:kev...@wlkmmas.org>] Sent: Thursday, February 7, 2013 5:05 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Andy, you are not alone. The issue you are talking about is on the radar. From: Leedy, Andy [mailto:ale...@butlerschein.com] Sent: Thursday, February 7, 2013 1:52 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS We had a very excessive Exchange log generation issue. I found that two iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync their calendars. These two phones alone were causing 3 GB of log growth per hour. The way I resolved it was by disabling activsysnc on their mailbox, removed the phone partnership, deleted the active sync account on the phone, rebooting the phone, re-enabled active on the mailbox and re-added the exchange activesync account on the phone. I opened a ticket with Microsoft PSS, but they said they had no way to prevent future occurrences so they just refunded my ticket. No hotfixes or patches. It's too bad. It seems like an easy way to attack a 2010 Exchange server would be to pound activesysnc until the log drive was full and the server crashed. If there's a Microsoft Exchange Team inside guy on this forum that wants to explore this further please feel free to contact me. I think it's a security issue that should be investigated. -Andy From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 7, 2013 3:58 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Don't you have more inside access than we do? :) A couple of things are starting to percolate up with this latest iOS update - excessive log generation and throttling hits are being discussed on several forums. I haven't heard of any conclusions out of CSS yet, and none of my customers have reported any issues so I don't personally have a call open. From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013 3:12 PM To: MS-Exchange Admin Issues Subject: ActiveSync + Throttling + IOS I am tracking an issue for a number of customers where apple IOS devices are causing the %time in AD throttling policy to fire due to devices performing full GAL lookups for each key press. My feeling is that this is an IOS design flaw that should be fixed. Windows Phone searches local device contacts then presents an option to attach to GAL; A much less expensive task for an Exchange server. Too an end user the symptoms are delayed send and receive. Most noticeable are messages waiting to be sent on the device until the throttling blocking is removed. The issue can be seen when you correlate IIS logs throttling errors with Activesync Mailbox logs and you look for RequestHeader : POST /Microsoft-Server-ActiveSync/default.eas?User=x&DeviceType=iPhone&Cmd=Search HTTP/1.1 RequestBody : r I am wondering if anyone else is running into this issue? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or sen
RE: ActiveSync + Throttling + IOS
Could you tell us what you found before you leave. :) From: Candee [mailto:can...@gmail.com] Sent: Friday, February 08, 2013 8:39 AM To: MS-Exchange Admin Issues Subject: Re: ActiveSync + Throttling + IOS I found it. Safe travel today folks - I'm out of here as soon as it starts. :) On Fri, Feb 8, 2013 at 8:32 AM, Candee mailto:can...@gmail.com>> wrote: Is there a way to block just iPhone users that have the update installed? I'm not sure I'll even be able to do that, but I'd like to be one step ahead. thanks! On Fri, Feb 8, 2013 at 7:45 AM, Candee mailto:can...@gmail.com>> wrote: Thanks! Perfect :( we have users connecting with their home devices and we have zero control. We are having a hard time getting policies approved and in place. On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith mailto:mich...@smithcons.com>> wrote: ...and I just got more info. After the recent release of iOS 6.1 Update, ... are reporting an issue around how iOS is communicating with Exchange server when the user responds to a meeting invite or update using iOS device. The behavior is such that iOS gets an error back from Exchange when trying to issue the meeting response command and simply retries the command over and over again. The recommendations are: [1] call Apple, [2] Don't roll out the new iOS update, [3] delete the device association to prevent it from getting worse. CSS is fully engaged. From: KevinM [mailto:kev...@wlkmmas.org<mailto:kev...@wlkmmas.org>] Sent: Thursday, February 7, 2013 5:05 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Andy, you are not alone. The issue you are talking about is on the radar. From: Leedy, Andy [mailto:ale...@butlerschein.com] Sent: Thursday, February 7, 2013 1:52 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS We had a very excessive Exchange log generation issue. I found that two iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync their calendars. These two phones alone were causing 3 GB of log growth per hour. The way I resolved it was by disabling activsysnc on their mailbox, removed the phone partnership, deleted the active sync account on the phone, rebooting the phone, re-enabled active on the mailbox and re-added the exchange activesync account on the phone. I opened a ticket with Microsoft PSS, but they said they had no way to prevent future occurrences so they just refunded my ticket. No hotfixes or patches. It's too bad. It seems like an easy way to attack a 2010 Exchange server would be to pound activesysnc until the log drive was full and the server crashed. If there's a Microsoft Exchange Team inside guy on this forum that wants to explore this further please feel free to contact me. I think it's a security issue that should be investigated. -Andy From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 7, 2013 3:58 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Don't you have more inside access than we do? :) A couple of things are starting to percolate up with this latest iOS update - excessive log generation and throttling hits are being discussed on several forums. I haven't heard of any conclusions out of CSS yet, and none of my customers have reported any issues so I don't personally have a call open. From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013 3:12 PM To: MS-Exchange Admin Issues Subject: ActiveSync + Throttling + IOS I am tracking an issue for a number of customers where apple IOS devices are causing the %time in AD throttling policy to fire due to devices performing full GAL lookups for each key press. My feeling is that this is an IOS design flaw that should be fixed. Windows Phone searches local device contacts then presents an option to attach to GAL; A much less expensive task for an Exchange server. Too an end user the symptoms are delayed send and receive. Most noticeable are messages waiting to be sent on the device until the throttling blocking is removed. The issue can be seen when you correlate IIS logs throttling errors with Activesync Mailbox logs and you look for RequestHeader : POST /Microsoft-Server-ActiveSync/default.eas?User=x&DeviceType=iPhone&Cmd=Search HTTP/1.1 RequestBody : r I am wondering if anyone else is running into this issue? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ex
Re: ActiveSync + Throttling + IOS
First, I found that Exchange will allow you to block only as far as the model - so block all iphone 5s. Um, no. then I found this: http://www.flamingkeys.com/2011/10/how-to-block-iphone-4s-from-connecting-to-exchange-2010/ and this: http://social.technet.microsoft.com/Forums/uk/exchangesvrmobility/thread/7271bbb4-2946-45e9-8e94-9926ccf579bd which I *thought* would do it, but I'm having a hard time making it work. I'm trying to block iOS6.1 10B141 but I'm not sure that's exactly right either. We have over 50 devices on that list, so I'm sure I won't be able to block them anyway. Love to hear what everyone else is doing. On Fri, Feb 8, 2013 at 9:01 AM, Kennedy, Jim wrote: > Could you tell us what you found before you leave. J > > ** ** > > *From:* Candee [mailto:can...@gmail.com] > *Sent:* Friday, February 08, 2013 8:39 AM > > *To:* MS-Exchange Admin Issues > *Subject:* Re: ActiveSync + Throttling + IOS > > ** ** > > I found it. > > Safe travel today folks - I'm out of here as soon as it starts. > :) > > On Fri, Feb 8, 2013 at 8:32 AM, Candee wrote: > > Is there a way to block just iPhone users that have the update installed?* > *** > > I'm not sure I'll even be able to do that, but I'd like to be one step > ahead. > > thanks! > > On Fri, Feb 8, 2013 at 7:45 AM, Candee wrote: > > Thanks! > > Perfect :( > > we have users connecting with their home devices and we have zero control. > > > We are having a hard time getting policies approved and in place. > > > > > > On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith > wrote: > > …and I just got more info. > > > > After the recent release of iOS 6.1 Update, … are reporting an issue > around how iOS is communicating with Exchange server when the user responds > to a meeting invite or update using iOS device. The behavior is such that > iOS gets an error back from Exchange when trying to issue the meeting > response command and simply retries the command over and over again. > > > > The recommendations are: [1] call Apple, [2] Don’t roll out the new iOS > update, [3] delete the device association to prevent it from getting worse. > **** > > > > CSS is fully engaged. > > > > *From:* KevinM [mailto:kev...@wlkmmas.org] > *Sent:* Thursday, February 7, 2013 5:05 PM > > > *To:* MS-Exchange Admin Issues > *Subject:* RE: ActiveSync + Throttling + IOS > > **** > > Andy, you are not alone. The issue you are talking about is on the radar.* > *** > > > > > > *From:* Leedy, Andy [mailto:ale...@butlerschein.com] > > *Sent:* Thursday, February 7, 2013 1:52 PM > *To:* MS-Exchange Admin Issues > *Subject:* RE: ActiveSync + Throttling + IOS > > > > We had a very excessive Exchange log generation issue. I found that two > iphones that were recently updated to IOS 6.1 were stuck in loop trying to > sync their calendars. These two phones alone were causing 3 GB of log > growth per hour. The way I resolved it was by disabling activsysnc on > their mailbox, removed the phone partnership, deleted the active sync > account on the phone, rebooting the phone, re-enabled active on the mailbox > and re-added the exchange activesync account on the phone. > > > > I opened a ticket with Microsoft PSS, but they said they had no way to > prevent future occurrences so they just refunded my ticket. No hotfixes or > patches. It’s too bad. It seems like an easy way to attack a 2010 Exchange > server would be to pound activesysnc until the log drive was full and the > server crashed. > > > > If there’s a Microsoft Exchange Team inside guy on this forum that wants > to explore this further please feel free to contact me. I think it’s a > security issue that should be investigated. > > > > -Andy > > > > > > > > *From:* Michael B. Smith [mailto:mich...@smithcons.com] > > *Sent:* Thursday, February 7, 2013 3:58 PM > *To:* MS-Exchange Admin Issues > *Subject:* RE: ActiveSync + Throttling + IOS > > > > Don’t you have more inside access than we do? J > > > > A couple of things are starting to percolate up with this latest iOS > update – excessive log generation and throttling hits are being discussed > on several forums. I haven’t heard of any conclusions out of CSS yet, and > none of my customers have reported any issues so I don’t personally have a > call open. > > > > *From:* KevinM [mailto:kev...@wlkmmas.or
RE: ActiveSync + Throttling + IOS
> Could you tell us what you found before you leave. :) The answer to her question:) You can block iphones based on software... http://blogs.technet.com/b/exchange/archive/2010/11/15/3411539.aspx --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: ActiveSync + Throttling + IOS
Do you use an MDM system, like Zenprise? We do but, I'm sure we couldn't get buy-in to disable all of our 6.1 device users. Regards, Don Guyer Catholic Health East - Information Technology Enterprise Directory & Messaging Services 3805 West Chester Pike, Suite 100, Newtown Square, Pa 19073 email: dgu...@che.org<mailto:dgu...@che.org> Office: 610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440 For immediate assistance, please open a Service Desk ticket or call the helpdesk @ 610-492-3839. [cid:image001.jpg@01CE05E0.0F2F89F0] From: Candee [mailto:can...@gmail.com] Sent: Friday, February 08, 2013 9:20 AM To: MS-Exchange Admin Issues Subject: Re: ActiveSync + Throttling + IOS First, I found that Exchange will allow you to block only as far as the model - so block all iphone 5s. Um, no. then I found this: http://www.flamingkeys.com/2011/10/how-to-block-iphone-4s-from-connecting-to-exchange-2010/ and this: http://social.technet.microsoft.com/Forums/uk/exchangesvrmobility/thread/7271bbb4-2946-45e9-8e94-9926ccf579bd which I *thought* would do it, but I'm having a hard time making it work. I'm trying to block iOS6.1 10B141 but I'm not sure that's exactly right either. We have over 50 devices on that list, so I'm sure I won't be able to block them anyway. Love to hear what everyone else is doing. On Fri, Feb 8, 2013 at 9:01 AM, Kennedy, Jim mailto:kennedy...@elyriaschools.org>> wrote: Could you tell us what you found before you leave. :) From: Candee [mailto:can...@gmail.com<mailto:can...@gmail.com>] Sent: Friday, February 08, 2013 8:39 AM To: MS-Exchange Admin Issues Subject: Re: ActiveSync + Throttling + IOS I found it. Safe travel today folks - I'm out of here as soon as it starts. :) On Fri, Feb 8, 2013 at 8:32 AM, Candee mailto:can...@gmail.com>> wrote: Is there a way to block just iPhone users that have the update installed? I'm not sure I'll even be able to do that, but I'd like to be one step ahead. thanks! On Fri, Feb 8, 2013 at 7:45 AM, Candee mailto:can...@gmail.com>> wrote: Thanks! Perfect :( we have users connecting with their home devices and we have zero control. We are having a hard time getting policies approved and in place. On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith mailto:mich...@smithcons.com>> wrote: ...and I just got more info. After the recent release of iOS 6.1 Update, ... are reporting an issue around how iOS is communicating with Exchange server when the user responds to a meeting invite or update using iOS device. The behavior is such that iOS gets an error back from Exchange when trying to issue the meeting response command and simply retries the command over and over again. The recommendations are: [1] call Apple, [2] Don't roll out the new iOS update, [3] delete the device association to prevent it from getting worse. CSS is fully engaged. From: KevinM [mailto:kev...@wlkmmas.org<mailto:kev...@wlkmmas.org>] Sent: Thursday, February 7, 2013 5:05 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Andy, you are not alone. The issue you are talking about is on the radar. From: Leedy, Andy [mailto:ale...@butlerschein.com] Sent: Thursday, February 7, 2013 1:52 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS We had a very excessive Exchange log generation issue. I found that two iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync their calendars. These two phones alone were causing 3 GB of log growth per hour. The way I resolved it was by disabling activsysnc on their mailbox, removed the phone partnership, deleted the active sync account on the phone, rebooting the phone, re-enabled active on the mailbox and re-added the exchange activesync account on the phone. I opened a ticket with Microsoft PSS, but they said they had no way to prevent future occurrences so they just refunded my ticket. No hotfixes or patches. It's too bad. It seems like an easy way to attack a 2010 Exchange server would be to pound activesysnc until the log drive was full and the server crashed. If there's a Microsoft Exchange Team inside guy on this forum that wants to explore this further please feel free to contact me. I think it's a security issue that should be investigated. -Andy From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 7, 2013 3:58 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Don't you have more inside access than we do? :) A couple of things are starting to percolate up with this latest iOS update - excessive log generation and throttling hits are being discussed on several forums. I haven't heard of any conclusions out of CSS yet, and none of my customers have reported any issues so I don't personally have a call open. From: KevinM [mailto:kev...@wlkm
RE: ActiveSync + Throttling + IOS
It is my understanding that if you have downloaded all the updates via iTunes (and not over the air), that all are available to use to do a restore. It will blow out the current config, though and resync. -Original Message- From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Thursday, February 07, 2013 9:30 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS > Is it possible to roll back from 6.1 on the iPhone? Ha, without a jailbreak or a hack, no. Welcome to Apple, all your iphone is own by apple. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: ActiveSync + Throttling + IOS
This was true in the past (have done it myself), not sure if that is still valid. Regards, Don Guyer Catholic Health East - Information Technology Enterprise Directory & Messaging Services 3805 West Chester Pike, Suite 100, Newtown Square, Pa 19073 email: dgu...@che.org Office: 610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440 For immediate assistance, please open a Service Desk ticket or call the helpdesk @ 610-492-3839. -Original Message- From: Mayo, Bill [mailto:bill.m...@pittcountync.gov] Sent: Friday, February 08, 2013 9:42 AM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS It is my understanding that if you have downloaded all the updates via iTunes (and not over the air), that all are available to use to do a restore. It will blow out the current config, though and resync. -Original Message- From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Thursday, February 07, 2013 9:30 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS > Is it possible to roll back from 6.1 on the iPhone? Ha, without a jailbreak or a hack, no. Welcome to Apple, all your iphone is own by apple. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Confidentiality Notice: This e-mail, including any attachments is the property of Catholic Health East and is intended for the sole use of the intended recipient(s). It may contain information that is privileged and confidential. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please delete this message, and reply to the sender regarding the error in a separate email. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: ActiveSync + Throttling + IOS
right now - nothing. I've been fighting policy battles since I got here. We are getting closer, though. :) On Fri, Feb 8, 2013 at 9:38 AM, Guyer, Don wrote: > Do you use an MDM system, like Zenprise? We do but, I’m sure we couldn’t > get buy-in to disable all of our 6.1 device users. > > ** ** > > Regards, > > * * > > *Don Guyer** > **Catholic Health East - Information Technology* > > Enterprise Directory & Messaging Services > 3805 West Chester Pike, Suite 100, Newtown Square, Pa 19073 > > email: *dgu...@che.org* > > Office: 610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440 > > *For immediate assistance, please open a Service Desk ticket or call the > helpdesk @ 610-492-3839.* > > [image: Description: Description: Description: InfoService-Logo240] > > ** ** > > *From:* Candee [mailto:can...@gmail.com] > *Sent:* Friday, February 08, 2013 9:20 AM > > *To:* MS-Exchange Admin Issues > *Subject:* Re: ActiveSync + Throttling + IOS > > ** ** > > First, I found that Exchange will allow you to block only as far as the > model - so block all iphone 5s. > > Um, no. > > then I found this: > > > http://www.flamingkeys.com/2011/10/how-to-block-iphone-4s-from-connecting-to-exchange-2010/ > and this: > > > http://social.technet.microsoft.com/Forums/uk/exchangesvrmobility/thread/7271bbb4-2946-45e9-8e94-9926ccf579bd > > > > > which I *thought* would do it, but I'm having a hard time making it work.* > *** > > I'm trying to block iOS6.1 10B141 but I'm not sure that's exactly right > either. > > We have over 50 devices on that list, so I'm sure I won't be able to block > them anyway. > > > > Love to hear what everyone else is doing. > > > > > On Fri, Feb 8, 2013 at 9:01 AM, Kennedy, Jim > wrote:**** > > Could you tell us what you found before you leave. J > > > > *From:* Candee [mailto:can...@gmail.com] > *Sent:* Friday, February 08, 2013 8:39 AM > > > > *To:* MS-Exchange Admin Issues > *Subject:* Re: ActiveSync + Throttling + IOS > > > > I found it. > > Safe travel today folks - I'm out of here as soon as it starts. > :) > > On Fri, Feb 8, 2013 at 8:32 AM, Candee wrote: > > Is there a way to block just iPhone users that have the update installed?* > *** > > I'm not sure I'll even be able to do that, but I'd like to be one step > ahead. > > thanks! > > On Fri, Feb 8, 2013 at 7:45 AM, Candee wrote: > > Thanks! > > Perfect :( > > we have users connecting with their home devices and we have zero control. > > > We are having a hard time getting policies approved and in place. > > > > > > On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith > wrote: > > …and I just got more info. > > > > After the recent release of iOS 6.1 Update, … are reporting an issue > around how iOS is communicating with Exchange server when the user responds > to a meeting invite or update using iOS device. The behavior is such that > iOS gets an error back from Exchange when trying to issue the meeting > response command and simply retries the command over and over again. > > > > The recommendations are: [1] call Apple, [2] Don’t roll out the new iOS > update, [3] delete the device association to prevent it from getting worse. > > > > > CSS is fully engaged.**** > > > > *From:* KevinM [mailto:kev...@wlkmmas.org] > *Sent:* Thursday, February 7, 2013 5:05 PM > > > *To:* MS-Exchange Admin Issues > *Subject:* RE: ActiveSync + Throttling + IOS > > > > Andy, you are not alone. The issue you are talking about is on the radar.* > *** > > > > > > *From:* Leedy, Andy [mailto:ale...@butlerschein.com] > > *Sent:* Thursday, February 7, 2013 1:52 PM > *To:* MS-Exchange Admin Issues > *Subject:* RE: ActiveSync + Throttling + IOS > > > > We had a very excessive Exchange log generation issue. I found that two > iphones that were recently updated to IOS 6.1 were stuck in loop trying to > sync their calendars. These two phones alone were causing 3 GB of log > growth per hour. The way I resolved it was by disabling activsysnc on > their mailbox, removed the phone partnership, deleted the active sync > account on the phone, rebooting the phone, re-enabled active on the mailbox > and re-added the exchange activesync account on the phone.
RE: ActiveSync + Throttling + IOS
Were you referring to Log Parser from Microsoft, or LogParser, part of Splunk? I guess it doesn't matter, but just wondering. -Original Message- From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Thursday, February 07, 2013 8:30 PM To: Heaton, Joseph@Wildlife; MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS > Is there a link someone could provide with more details of the issue > and how it occurs? Honestly bud, this thread outlines as it is. Keep logparser on hand. During the period where I was seeing it, I used a batched job to keep an eye on the growth and email me over and above the normal nms we have with thresholds defined. This way if the growth was increasing I could react quickly. MS provides an active sync report script allows you to pinpoint the errant device and knock it out service if needed. jlc --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: ActiveSync + Throttling + IOS
It looks to me like that will only block, say, all iPhone 5's not just those that have applied the update. Am I missing something? Thanks! On Fri, Feb 8, 2013 at 9:32 AM, Joseph L. Casale wrote: > > Could you tell us what you found before you leave. J > > > The answer to her question:) You can block iphones based on software... > > > http://blogs.technet.com/b/exchange/archive/2010/11/15/3411539.aspx > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe exchangelist > --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: ActiveSync + Throttling + IOS
Does anyone have any links to any of this info? Management is asking for (further) proof. Regards, Don Guyer Catholic Health East - Information Technology Enterprise Directory & Messaging Services 3805 West Chester Pike, Suite 100, Newtown Square, Pa 19073 email: dgu...@che.org<mailto:dgu...@che.org> Office: 610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440 For immediate assistance, please open a Service Desk ticket or call the helpdesk @ 610-492-3839. [cid:image001.jpg@01CE05F1.B251B700] From: Candee [mailto:can...@gmail.com] Sent: Friday, February 08, 2013 9:20 AM To: MS-Exchange Admin Issues Subject: Re: ActiveSync + Throttling + IOS First, I found that Exchange will allow you to block only as far as the model - so block all iphone 5s. Um, no. then I found this: http://www.flamingkeys.com/2011/10/how-to-block-iphone-4s-from-connecting-to-exchange-2010/ and this: http://social.technet.microsoft.com/Forums/uk/exchangesvrmobility/thread/7271bbb4-2946-45e9-8e94-9926ccf579bd which I *thought* would do it, but I'm having a hard time making it work. I'm trying to block iOS6.1 10B141 but I'm not sure that's exactly right either. We have over 50 devices on that list, so I'm sure I won't be able to block them anyway. Love to hear what everyone else is doing. On Fri, Feb 8, 2013 at 9:01 AM, Kennedy, Jim mailto:kennedy...@elyriaschools.org>> wrote: Could you tell us what you found before you leave. :) From: Candee [mailto:can...@gmail.com<mailto:can...@gmail.com>] Sent: Friday, February 08, 2013 8:39 AM To: MS-Exchange Admin Issues Subject: Re: ActiveSync + Throttling + IOS I found it. Safe travel today folks - I'm out of here as soon as it starts. :) On Fri, Feb 8, 2013 at 8:32 AM, Candee mailto:can...@gmail.com>> wrote: Is there a way to block just iPhone users that have the update installed? I'm not sure I'll even be able to do that, but I'd like to be one step ahead. thanks! On Fri, Feb 8, 2013 at 7:45 AM, Candee mailto:can...@gmail.com>> wrote: Thanks! Perfect :( we have users connecting with their home devices and we have zero control. We are having a hard time getting policies approved and in place. On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith mailto:mich...@smithcons.com>> wrote: ...and I just got more info. After the recent release of iOS 6.1 Update, ... are reporting an issue around how iOS is communicating with Exchange server when the user responds to a meeting invite or update using iOS device. The behavior is such that iOS gets an error back from Exchange when trying to issue the meeting response command and simply retries the command over and over again. The recommendations are: [1] call Apple, [2] Don't roll out the new iOS update, [3] delete the device association to prevent it from getting worse. CSS is fully engaged. From: KevinM [mailto:kev...@wlkmmas.org<mailto:kev...@wlkmmas.org>] Sent: Thursday, February 7, 2013 5:05 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Andy, you are not alone. The issue you are talking about is on the radar. From: Leedy, Andy [mailto:ale...@butlerschein.com] Sent: Thursday, February 7, 2013 1:52 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS We had a very excessive Exchange log generation issue. I found that two iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync their calendars. These two phones alone were causing 3 GB of log growth per hour. The way I resolved it was by disabling activsysnc on their mailbox, removed the phone partnership, deleted the active sync account on the phone, rebooting the phone, re-enabled active on the mailbox and re-added the exchange activesync account on the phone. I opened a ticket with Microsoft PSS, but they said they had no way to prevent future occurrences so they just refunded my ticket. No hotfixes or patches. It's too bad. It seems like an easy way to attack a 2010 Exchange server would be to pound activesysnc until the log drive was full and the server crashed. If there's a Microsoft Exchange Team inside guy on this forum that wants to explore this further please feel free to contact me. I think it's a security issue that should be investigated. -Andy From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 7, 2013 3:58 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Don't you have more inside access than we do? :) A couple of things are starting to percolate up with this latest iOS update - excessive log generation and throttling hits are being discussed on several forums. I haven't heard of any conclusions out of CSS yet, and none of my customers have reported any issues so I don't personally have a call open. From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013
RE: ActiveSync + Throttling + IOS
FYI... It looks like the fix may be coming out this week. iOS 6.1.2 to Address Exchange and Passcode Bugs Reportedly Coming Early This Week http://www.macrumors.com/2013/02/15/ios-6-1-2-to-address-exchange-and-passcode-bugs-reportedly-coming-early-next-week/?utm_medium=referral&utm_source=pulsenews -Andy From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 7, 2013 5:20 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS ...and I just got more info. After the recent release of iOS 6.1 Update, ... are reporting an issue around how iOS is communicating with Exchange server when the user responds to a meeting invite or update using iOS device. The behavior is such that iOS gets an error back from Exchange when trying to issue the meeting response command and simply retries the command over and over again. The recommendations are: [1] call Apple, [2] Don't roll out the new iOS update, [3] delete the device association to prevent it from getting worse. CSS is fully engaged. From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013 5:05 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Andy, you are not alone. The issue you are talking about is on the radar. From: Leedy, Andy [mailto:ale...@butlerschein.com] Sent: Thursday, February 7, 2013 1:52 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS We had a very excessive Exchange log generation issue. I found that two iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync their calendars. These two phones alone were causing 3 GB of log growth per hour. The way I resolved it was by disabling activsysnc on their mailbox, removed the phone partnership, deleted the active sync account on the phone, rebooting the phone, re-enabled active on the mailbox and re-added the exchange activesync account on the phone. I opened a ticket with Microsoft PSS, but they said they had no way to prevent future occurrences so they just refunded my ticket. No hotfixes or patches. It's too bad. It seems like an easy way to attack a 2010 Exchange server would be to pound activesysnc until the log drive was full and the server crashed. If there's a Microsoft Exchange Team inside guy on this forum that wants to explore this further please feel free to contact me. I think it's a security issue that should be investigated. -Andy From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 7, 2013 3:58 PM To: MS-Exchange Admin Issues Subject: RE: ActiveSync + Throttling + IOS Don't you have more inside access than we do? :) A couple of things are starting to percolate up with this latest iOS update - excessive log generation and throttling hits are being discussed on several forums. I haven't heard of any conclusions out of CSS yet, and none of my customers have reported any issues so I don't personally have a call open. From: KevinM [mailto:kev...@wlkmmas.org] Sent: Thursday, February 7, 2013 3:12 PM To: MS-Exchange Admin Issues Subject: ActiveSync + Throttling + IOS I am tracking an issue for a number of customers where apple IOS devices are causing the %time in AD throttling policy to fire due to devices performing full GAL lookups for each key press. My feeling is that this is an IOS design flaw that should be fixed. Windows Phone searches local device contacts then presents an option to attach to GAL; A much less expensive task for an Exchange server. Too an end user the symptoms are delayed send and receive. Most noticeable are messages waiting to be sent on the device until the throttling blocking is removed. The issue can be seen when you correlate IIS logs throttling errors with Activesync Mailbox logs and you look for RequestHeader : POST /Microsoft-Server-ActiveSync/default.eas?User=x&DeviceType=iPhone&Cmd=Search HTTP/1.1 RequestBody : r I am wondering if anyone else is running into this issue? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist ** CONFIDENTIALITY NOTICE - The information transmitted in this message is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If