RE: ActiveSync + Throttling + IOS

2013-02-18 Thread Leedy, Andy
FYI... It looks like the fix may be coming out this week.

iOS 6.1.2 to Address Exchange and Passcode Bugs Reportedly Coming Early This 
Week

http://www.macrumors.com/2013/02/15/ios-6-1-2-to-address-exchange-and-passcode-bugs-reportedly-coming-early-next-week/?utm_medium=referralutm_source=pulsenews

-Andy


From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, February 7, 2013 5:20 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

...and I just got more info.

After the recent release of iOS 6.1 Update, ... are reporting an issue around 
how iOS is communicating with Exchange server when the user responds to a 
meeting invite or update using iOS device. The behavior is such that iOS gets 
an error back from Exchange when trying to issue the meeting response command 
and simply retries the command over and over again.

The recommendations are: [1] call Apple, [2] Don't roll out the new iOS update, 
[3] delete the device association to prevent it from getting worse.

CSS is fully engaged.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 5:05 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Andy, you are not alone. The issue you are talking about is on the radar.


From: Leedy, Andy [mailto:ale...@butlerschein.com]
Sent: Thursday, February 7, 2013 1:52 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

We had a very excessive Exchange log generation issue.  I found that two 
iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync 
their calendars.  These two phones alone were causing  3 GB of log growth per 
hour.  The way I resolved it was by disabling activsysnc on their mailbox, 
removed the phone partnership, deleted the active sync account on the phone, 
rebooting the phone, re-enabled active on the mailbox and re-added the exchange 
activesync account on the phone.

I opened a ticket with Microsoft PSS, but they said they had no way to prevent 
future occurrences so they just refunded my ticket.  No hotfixes or patches. 
It's too bad.  It seems like an easy way to attack a 2010 Exchange server would 
be to pound activesysnc until the log drive was full and the server crashed.

If there's a Microsoft Exchange Team inside guy on this forum that wants to 
explore this further please feel free to contact me.  I think it's a security 
issue that should be investigated.

-Andy



From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, February 7, 2013 3:58 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Don't you have more inside access than we do? :)

A couple of things are starting to percolate up with this latest iOS update - 
excessive log generation and throttling hits are being discussed on several 
forums. I haven't heard of any conclusions out of CSS yet, and none of my 
customers have reported any issues so I don't personally have a call open.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 3:12 PM
To: MS-Exchange Admin Issues
Subject: ActiveSync + Throttling + IOS

I am tracking an issue for a number of customers where apple IOS devices are 
causing the %time in AD throttling policy to fire due to devices performing 
full GAL lookups for each key press. My feeling is that this is an IOS design 
flaw that should be fixed. Windows Phone searches local device contacts then 
presents an option to  attach to GAL; A much less expensive task for an 
Exchange server.  Too an end user the symptoms are delayed send and receive. 
Most noticeable are messages waiting to be sent on the device until the 
throttling blocking is removed.

The issue can be seen when you correlate IIS logs throttling errors with 
Activesync Mailbox logs and you look for query

RequestHeader :

POST 
/Microsoft-Server-ActiveSync/default.eas?User=xDeviceType=iPhoneCmd=Search
 HTTP/1.1

RequestBody :

?xml version=1.0 encoding=utf-8 ?

Search xmlns=Search:

Store

Name bytes=3/

Queryr/Query


I am wondering if anyone else is running into this issue?

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

**

CONFIDENTIALITY NOTICE - The information transmitted in this message is 
intended only for the person or entity to which it is addressed and may contain 
confidential and/or privileged material. Any review, retransmission, 
dissemination or other use of this information by persons or entities other 
than the intended recipient

Re: ActiveSync + Throttling + IOS

2013-02-08 Thread Candee
Thanks!
Perfect :(
we have users connecting with their home devices and we have zero control.
We are having a hard time getting policies approved and in place.



On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith mich...@smithcons.comwrote:

  …and I just got more info.

 ** **

 After the recent release of iOS 6.1 Update, … are reporting an issue
 around how iOS is communicating with Exchange server when the user responds
 to a meeting invite or update using iOS device. The behavior is such that
 iOS gets an error back from Exchange when trying to issue the meeting
 response command and simply retries the command over and over again.

 ** **

 The recommendations are: [1] call Apple, [2] Don’t roll out the new iOS
 update, [3] delete the device association to prevent it from getting worse.
 

 ** **

 CSS is fully engaged.

 ** **

 *From:* KevinM [mailto:kev...@wlkmmas.org]
 *Sent:* Thursday, February 7, 2013 5:05 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* RE: ActiveSync + Throttling + IOS

  ** **

 Andy, you are not alone. The issue you are talking about is on the radar.*
 ***

 ** **

 ** **

 *From:* Leedy, Andy [mailto:ale...@butlerschein.comale...@butlerschein.com]

 *Sent:* Thursday, February 7, 2013 1:52 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* RE: ActiveSync + Throttling + IOS

 ** **

 We had a very excessive Exchange log generation issue.  I found that two
 iphones that were recently updated to IOS 6.1 were stuck in loop trying to
 sync their calendars.  These two phones alone were causing  3 GB of log
 growth per hour.  The way I resolved it was by disabling activsysnc on
 their mailbox, removed the phone partnership, deleted the active sync
 account on the phone, rebooting the phone, re-enabled active on the mailbox
 and re-added the exchange activesync account on the phone.

 ** **

 I opened a ticket with Microsoft PSS, but they said they had no way to
 prevent future occurrences so they just refunded my ticket.  No hotfixes or
 patches. It’s too bad.  It seems like an easy way to attack a 2010 Exchange
 server would be to pound activesysnc until the log drive was full and the
 server crashed.

 ** **

 If there’s a Microsoft Exchange Team inside guy on this forum that wants
 to explore this further please feel free to contact me.  I think it’s a
 security issue that should be investigated.

 ** **

 -Andy

 ** **

 ** **

 ** **

 *From:* Michael B. Smith [mailto:mich...@smithcons.commich...@smithcons.com]

 *Sent:* Thursday, February 7, 2013 3:58 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* RE: ActiveSync + Throttling + IOS

 ** **

 Don’t you have more inside access than we do? J

 ** **

 A couple of things are starting to percolate up with this latest iOS
 update – excessive log generation and throttling hits are being discussed
 on several forums. I haven’t heard of any conclusions out of CSS yet, and
 none of my customers have reported any issues so I don’t personally have a
 call open.

 ** **

 *From:* KevinM [mailto:kev...@wlkmmas.org kev...@wlkmmas.org]
 *Sent:* Thursday, February 7, 2013 3:12 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* ActiveSync + Throttling + IOS

 ** **

 I am tracking an issue for a number of customers where apple IOS devices
 are causing the *%time in AD* throttling policy to fire due to devices
 performing full GAL lookups for each key press. My feeling is that this is
 an IOS design flaw that should be fixed. Windows Phone searches local
 device contacts then presents an option to  attach to GAL; A much less
 expensive task for an Exchange server.  Too an end user the symptoms are
 delayed send and receive. Most noticeable are messages waiting to be sent
 on the device until the throttling blocking is removed.

 ** **

 The issue can be seen when you correlate IIS logs throttling errors with
 Activesync Mailbox logs and you look for query

 RequestHeader : 

 POST
 /Microsoft-Server-ActiveSync/default.eas?User=xDeviceType=iPhoneCmd=
 Search HTTP/1.1

 RequestBody : 

 ?xml version=1.0 encoding=utf-8 ?

 Search xmlns=Search:

 Store

 Name bytes=3/

 Queryr/Query

 ** **

 ** **

 I am wondering if anyone else is running into this issue?

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 **

 CONFIDENTIALITY NOTICE - The information transmitted in this message is
 intended only for the person or entity to which it is addressed and may
 contain confidential and/or privileged material. Any review,
 retransmission

Re: ActiveSync + Throttling + IOS

2013-02-08 Thread Candee
I found it.
Safe travel today folks - I'm out of here as soon as it starts.
:)

On Fri, Feb 8, 2013 at 8:32 AM, Candee can...@gmail.com wrote:

 Is there a way to block just iPhone users that have the update installed?
 I'm not sure I'll even be able to do that, but I'd like to be one step
 ahead.
 thanks!

 On Fri, Feb 8, 2013 at 7:45 AM, Candee can...@gmail.com wrote:

 Thanks!
 Perfect :(
 we have users connecting with their home devices and we have zero control.
 We are having a hard time getting policies approved and in place.



 On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith 
 mich...@smithcons.comwrote:

  …and I just got more info.

 ** **

 After the recent release of iOS 6.1 Update, … are reporting an issue
 around how iOS is communicating with Exchange server when the user responds
 to a meeting invite or update using iOS device. The behavior is such that
 iOS gets an error back from Exchange when trying to issue the meeting
 response command and simply retries the command over and over again.

 ** **

 The recommendations are: [1] call Apple, [2] Don’t roll out the new iOS
 update, [3] delete the device association to prevent it from getting worse.
 

 ** **

 CSS is fully engaged.

 ** **

 *From:* KevinM [mailto:kev...@wlkmmas.org]
 *Sent:* Thursday, February 7, 2013 5:05 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* RE: ActiveSync + Throttling + IOS

  ** **

 Andy, you are not alone. The issue you are talking about is on the radar.
 

 ** **

 ** **

 *From:* Leedy, Andy 
 [mailto:ale...@butlerschein.comale...@butlerschein.com]

 *Sent:* Thursday, February 7, 2013 1:52 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* RE: ActiveSync + Throttling + IOS

 ** **

 We had a very excessive Exchange log generation issue.  I found that two
 iphones that were recently updated to IOS 6.1 were stuck in loop trying to
 sync their calendars.  These two phones alone were causing  3 GB of log
 growth per hour.  The way I resolved it was by disabling activsysnc on
 their mailbox, removed the phone partnership, deleted the active sync
 account on the phone, rebooting the phone, re-enabled active on the mailbox
 and re-added the exchange activesync account on the phone.

 ** **

 I opened a ticket with Microsoft PSS, but they said they had no way to
 prevent future occurrences so they just refunded my ticket.  No hotfixes or
 patches. It’s too bad.  It seems like an easy way to attack a 2010 Exchange
 server would be to pound activesysnc until the log drive was full and the
 server crashed.

 ** **

 If there’s a Microsoft Exchange Team inside guy on this forum that wants
 to explore this further please feel free to contact me.  I think it’s a
 security issue that should be investigated.

 ** **

 -Andy

 ** **

 ** **

 ** **

 *From:* Michael B. Smith 
 [mailto:mich...@smithcons.commich...@smithcons.com]

 *Sent:* Thursday, February 7, 2013 3:58 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* RE: ActiveSync + Throttling + IOS

 ** **

 Don’t you have more inside access than we do? J

 ** **

 A couple of things are starting to percolate up with this latest iOS
 update – excessive log generation and throttling hits are being discussed
 on several forums. I haven’t heard of any conclusions out of CSS yet, and
 none of my customers have reported any issues so I don’t personally have a
 call open.

 ** **

 *From:* KevinM [mailto:kev...@wlkmmas.org kev...@wlkmmas.org]
 *Sent:* Thursday, February 7, 2013 3:12 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* ActiveSync + Throttling + IOS

 ** **

 I am tracking an issue for a number of customers where apple IOS devices
 are causing the *%time in AD* throttling policy to fire due to devices
 performing full GAL lookups for each key press. My feeling is that this is
 an IOS design flaw that should be fixed. Windows Phone searches local
 device contacts then presents an option to  attach to GAL; A much less
 expensive task for an Exchange server.  Too an end user the symptoms are
 delayed send and receive. Most noticeable are messages waiting to be sent
 on the device until the throttling blocking is removed.

 ** **

 The issue can be seen when you correlate IIS logs throttling errors with
 Activesync Mailbox logs and you look for query

 RequestHeader : 

 POST
 /Microsoft-Server-ActiveSync/default.eas?User=xDeviceType=iPhoneCmd=
 Search HTTP/1.1

 RequestBody : 

 ?xml version=1.0 encoding=utf-8 ?

 Search xmlns=Search:

 Store

 Name bytes=3/

 Queryr/Query

 ** **

 ** **

 I am wondering if anyone else is running into this issue?

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email

RE: ActiveSync + Throttling + IOS

2013-02-08 Thread Guyer, Don
I just checked, we have over 170 devices running it.

Appreciate the heads-up on this everyone!

Regards,

Don Guyer
Catholic Health East - Information Technology
Enterprise Directory  Messaging Services
3805 West Chester Pike, Suite 100, Newtown Square, Pa  19073
email: dgu...@che.orgmailto:dgu...@che.org
Office:  610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440
For immediate assistance, please open a Service Desk ticket or call the 
helpdesk @ 610-492-3839.
[cid:image001.jpg@01CE05D8.62D823D0]

From: Candee [mailto:can...@gmail.com]
Sent: Friday, February 08, 2013 8:33 AM
To: MS-Exchange Admin Issues
Subject: Re: ActiveSync + Throttling + IOS

Is there a way to block just iPhone users that have the update installed?
I'm not sure I'll even be able to do that, but I'd like to be one step ahead.
thanks!
On Fri, Feb 8, 2013 at 7:45 AM, Candee 
can...@gmail.commailto:can...@gmail.com wrote:
Thanks!
Perfect :(
we have users connecting with their home devices and we have zero control.
We are having a hard time getting policies approved and in place.



On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith 
mich...@smithcons.commailto:mich...@smithcons.com wrote:
...and I just got more info.

After the recent release of iOS 6.1 Update, ... are reporting an issue around 
how iOS is communicating with Exchange server when the user responds to a 
meeting invite or update using iOS device. The behavior is such that iOS gets 
an error back from Exchange when trying to issue the meeting response command 
and simply retries the command over and over again.

The recommendations are: [1] call Apple, [2] Don't roll out the new iOS update, 
[3] delete the device association to prevent it from getting worse.

CSS is fully engaged.

From: KevinM [mailto:kev...@wlkmmas.orgmailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 5:05 PM

To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Andy, you are not alone. The issue you are talking about is on the radar.


From: Leedy, Andy [mailto:ale...@butlerschein.com]
Sent: Thursday, February 7, 2013 1:52 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

We had a very excessive Exchange log generation issue.  I found that two 
iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync 
their calendars.  These two phones alone were causing  3 GB of log growth per 
hour.  The way I resolved it was by disabling activsysnc on their mailbox, 
removed the phone partnership, deleted the active sync account on the phone, 
rebooting the phone, re-enabled active on the mailbox and re-added the exchange 
activesync account on the phone.

I opened a ticket with Microsoft PSS, but they said they had no way to prevent 
future occurrences so they just refunded my ticket.  No hotfixes or patches. 
It's too bad.  It seems like an easy way to attack a 2010 Exchange server would 
be to pound activesysnc until the log drive was full and the server crashed.

If there's a Microsoft Exchange Team inside guy on this forum that wants to 
explore this further please feel free to contact me.  I think it's a security 
issue that should be investigated.

-Andy



From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, February 7, 2013 3:58 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Don't you have more inside access than we do? :)

A couple of things are starting to percolate up with this latest iOS update - 
excessive log generation and throttling hits are being discussed on several 
forums. I haven't heard of any conclusions out of CSS yet, and none of my 
customers have reported any issues so I don't personally have a call open.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 3:12 PM
To: MS-Exchange Admin Issues
Subject: ActiveSync + Throttling + IOS

I am tracking an issue for a number of customers where apple IOS devices are 
causing the %time in AD throttling policy to fire due to devices performing 
full GAL lookups for each key press. My feeling is that this is an IOS design 
flaw that should be fixed. Windows Phone searches local device contacts then 
presents an option to  attach to GAL; A much less expensive task for an 
Exchange server.  Too an end user the symptoms are delayed send and receive. 
Most noticeable are messages waiting to be sent on the device until the 
throttling blocking is removed.

The issue can be seen when you correlate IIS logs throttling errors with 
Activesync Mailbox logs and you look for query

RequestHeader :

POST 
/Microsoft-Server-ActiveSync/default.eas?User=xDeviceType=iPhoneCmd=Search
 HTTP/1.1

RequestBody :

?xml version=1.0 encoding=utf-8 ?

Search xmlns=Search:

Store

Name bytes=3/

Queryr/Query


I am wondering if anyone else is running into this issue?

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana

RE: ActiveSync + Throttling + IOS

2013-02-08 Thread Guyer, Don
Found what?

Regards,

Don Guyer
Catholic Health East - Information Technology
Enterprise Directory  Messaging Services
3805 West Chester Pike, Suite 100, Newtown Square, Pa  19073
email: dgu...@che.orgmailto:dgu...@che.org
Office:  610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440
For immediate assistance, please open a Service Desk ticket or call the 
helpdesk @ 610-492-3839.
[cid:image001.jpg@01CE05D8.7774C820]

From: Candee [mailto:can...@gmail.com]
Sent: Friday, February 08, 2013 8:38 AM
To: MS-Exchange Admin Issues
Subject: Re: ActiveSync + Throttling + IOS

I found it.
Safe travel today folks - I'm out of here as soon as it starts.
:)
On Fri, Feb 8, 2013 at 8:32 AM, Candee 
can...@gmail.commailto:can...@gmail.com wrote:
Is there a way to block just iPhone users that have the update installed?
I'm not sure I'll even be able to do that, but I'd like to be one step ahead.
thanks!
On Fri, Feb 8, 2013 at 7:45 AM, Candee 
can...@gmail.commailto:can...@gmail.com wrote:
Thanks!
Perfect :(
we have users connecting with their home devices and we have zero control.
We are having a hard time getting policies approved and in place.



On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith 
mich...@smithcons.commailto:mich...@smithcons.com wrote:
...and I just got more info.

After the recent release of iOS 6.1 Update, ... are reporting an issue around 
how iOS is communicating with Exchange server when the user responds to a 
meeting invite or update using iOS device. The behavior is such that iOS gets 
an error back from Exchange when trying to issue the meeting response command 
and simply retries the command over and over again.

The recommendations are: [1] call Apple, [2] Don't roll out the new iOS update, 
[3] delete the device association to prevent it from getting worse.

CSS is fully engaged.

From: KevinM [mailto:kev...@wlkmmas.orgmailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 5:05 PM

To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Andy, you are not alone. The issue you are talking about is on the radar.


From: Leedy, Andy [mailto:ale...@butlerschein.com]
Sent: Thursday, February 7, 2013 1:52 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

We had a very excessive Exchange log generation issue.  I found that two 
iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync 
their calendars.  These two phones alone were causing  3 GB of log growth per 
hour.  The way I resolved it was by disabling activsysnc on their mailbox, 
removed the phone partnership, deleted the active sync account on the phone, 
rebooting the phone, re-enabled active on the mailbox and re-added the exchange 
activesync account on the phone.

I opened a ticket with Microsoft PSS, but they said they had no way to prevent 
future occurrences so they just refunded my ticket.  No hotfixes or patches. 
It's too bad.  It seems like an easy way to attack a 2010 Exchange server would 
be to pound activesysnc until the log drive was full and the server crashed.

If there's a Microsoft Exchange Team inside guy on this forum that wants to 
explore this further please feel free to contact me.  I think it's a security 
issue that should be investigated.

-Andy



From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, February 7, 2013 3:58 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Don't you have more inside access than we do? :)

A couple of things are starting to percolate up with this latest iOS update - 
excessive log generation and throttling hits are being discussed on several 
forums. I haven't heard of any conclusions out of CSS yet, and none of my 
customers have reported any issues so I don't personally have a call open.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 3:12 PM
To: MS-Exchange Admin Issues
Subject: ActiveSync + Throttling + IOS

I am tracking an issue for a number of customers where apple IOS devices are 
causing the %time in AD throttling policy to fire due to devices performing 
full GAL lookups for each key press. My feeling is that this is an IOS design 
flaw that should be fixed. Windows Phone searches local device contacts then 
presents an option to  attach to GAL; A much less expensive task for an 
Exchange server.  Too an end user the symptoms are delayed send and receive. 
Most noticeable are messages waiting to be sent on the device until the 
throttling blocking is removed.

The issue can be seen when you correlate IIS logs throttling errors with 
Activesync Mailbox logs and you look for query

RequestHeader :

POST 
/Microsoft-Server-ActiveSync/default.eas?User=xDeviceType=iPhoneCmd=Search
 HTTP/1.1

RequestBody :

?xml version=1.0 encoding=utf-8 ?

Search xmlns=Search:

Store

Name bytes=3/

Queryr/Query


I am wondering if anyone else is running into this issue?

---
To manage subscriptions click here: 
http://lyris.sunbelt

RE: ActiveSync + Throttling + IOS

2013-02-08 Thread Kennedy, Jim
Could you tell us what you found before you leave. :)

From: Candee [mailto:can...@gmail.com]
Sent: Friday, February 08, 2013 8:39 AM
To: MS-Exchange Admin Issues
Subject: Re: ActiveSync + Throttling + IOS

I found it.
Safe travel today folks - I'm out of here as soon as it starts.
:)
On Fri, Feb 8, 2013 at 8:32 AM, Candee 
can...@gmail.commailto:can...@gmail.com wrote:
Is there a way to block just iPhone users that have the update installed?
I'm not sure I'll even be able to do that, but I'd like to be one step ahead.
thanks!
On Fri, Feb 8, 2013 at 7:45 AM, Candee 
can...@gmail.commailto:can...@gmail.com wrote:
Thanks!
Perfect :(
we have users connecting with their home devices and we have zero control.
We are having a hard time getting policies approved and in place.



On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith 
mich...@smithcons.commailto:mich...@smithcons.com wrote:
...and I just got more info.

After the recent release of iOS 6.1 Update, ... are reporting an issue around 
how iOS is communicating with Exchange server when the user responds to a 
meeting invite or update using iOS device. The behavior is such that iOS gets 
an error back from Exchange when trying to issue the meeting response command 
and simply retries the command over and over again.

The recommendations are: [1] call Apple, [2] Don't roll out the new iOS update, 
[3] delete the device association to prevent it from getting worse.

CSS is fully engaged.

From: KevinM [mailto:kev...@wlkmmas.orgmailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 5:05 PM

To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Andy, you are not alone. The issue you are talking about is on the radar.


From: Leedy, Andy [mailto:ale...@butlerschein.com]
Sent: Thursday, February 7, 2013 1:52 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

We had a very excessive Exchange log generation issue.  I found that two 
iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync 
their calendars.  These two phones alone were causing  3 GB of log growth per 
hour.  The way I resolved it was by disabling activsysnc on their mailbox, 
removed the phone partnership, deleted the active sync account on the phone, 
rebooting the phone, re-enabled active on the mailbox and re-added the exchange 
activesync account on the phone.

I opened a ticket with Microsoft PSS, but they said they had no way to prevent 
future occurrences so they just refunded my ticket.  No hotfixes or patches. 
It's too bad.  It seems like an easy way to attack a 2010 Exchange server would 
be to pound activesysnc until the log drive was full and the server crashed.

If there's a Microsoft Exchange Team inside guy on this forum that wants to 
explore this further please feel free to contact me.  I think it's a security 
issue that should be investigated.

-Andy



From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, February 7, 2013 3:58 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Don't you have more inside access than we do? :)

A couple of things are starting to percolate up with this latest iOS update - 
excessive log generation and throttling hits are being discussed on several 
forums. I haven't heard of any conclusions out of CSS yet, and none of my 
customers have reported any issues so I don't personally have a call open.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 3:12 PM
To: MS-Exchange Admin Issues
Subject: ActiveSync + Throttling + IOS

I am tracking an issue for a number of customers where apple IOS devices are 
causing the %time in AD throttling policy to fire due to devices performing 
full GAL lookups for each key press. My feeling is that this is an IOS design 
flaw that should be fixed. Windows Phone searches local device contacts then 
presents an option to  attach to GAL; A much less expensive task for an 
Exchange server.  Too an end user the symptoms are delayed send and receive. 
Most noticeable are messages waiting to be sent on the device until the 
throttling blocking is removed.

The issue can be seen when you correlate IIS logs throttling errors with 
Activesync Mailbox logs and you look for query

RequestHeader :

POST 
/Microsoft-Server-ActiveSync/default.eas?User=xDeviceType=iPhoneCmd=Search
 HTTP/1.1

RequestBody :

?xml version=1.0 encoding=utf-8 ?

Search xmlns=Search:

Store

Name bytes=3/

Queryr/Query


I am wondering if anyone else is running into this issue?

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com

Re: ActiveSync + Throttling + IOS

2013-02-08 Thread Candee
First, I found that Exchange will allow you to block only as far as the
model - so block all iphone 5s.
Um, no.
then I found this:
http://www.flamingkeys.com/2011/10/how-to-block-iphone-4s-from-connecting-to-exchange-2010/
and this:
http://social.technet.microsoft.com/Forums/uk/exchangesvrmobility/thread/7271bbb4-2946-45e9-8e94-9926ccf579bd

which I *thought* would do it, but I'm having a hard time making it work.
I'm trying to block iOS6.1 10B141 but I'm not sure that's exactly right
either.
We have over 50 devices on that list, so I'm sure I won't be able to block
them anyway.

Love to hear what everyone else is doing.


On Fri, Feb 8, 2013 at 9:01 AM, Kennedy, Jim
kennedy...@elyriaschools.orgwrote:

  Could you tell us what you found before you leave. J

 ** **

 *From:* Candee [mailto:can...@gmail.com]
 *Sent:* Friday, February 08, 2013 8:39 AM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: ActiveSync + Throttling + IOS

 ** **

 I found it.

 Safe travel today folks - I'm out of here as soon as it starts.
 :)

 On Fri, Feb 8, 2013 at 8:32 AM, Candee can...@gmail.com wrote:

 Is there a way to block just iPhone users that have the update installed?*
 ***

 I'm not sure I'll even be able to do that, but I'd like to be one step
 ahead.

 thanks!

 On Fri, Feb 8, 2013 at 7:45 AM, Candee can...@gmail.com wrote:

  Thanks!

 Perfect :(

 we have users connecting with their home devices and we have zero control.
 

 We are having a hard time getting policies approved and in place.



  

 On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith mich...@smithcons.com
 wrote:

 …and I just got more info.

  

 After the recent release of iOS 6.1 Update, … are reporting an issue
 around how iOS is communicating with Exchange server when the user responds
 to a meeting invite or update using iOS device. The behavior is such that
 iOS gets an error back from Exchange when trying to issue the meeting
 response command and simply retries the command over and over again.

  

 The recommendations are: [1] call Apple, [2] Don’t roll out the new iOS
 update, [3] delete the device association to prevent it from getting worse.
 

  

 CSS is fully engaged.

  

 *From:* KevinM [mailto:kev...@wlkmmas.org]
 *Sent:* Thursday, February 7, 2013 5:05 PM


 *To:* MS-Exchange Admin Issues
 *Subject:* RE: ActiveSync + Throttling + IOS

  

 Andy, you are not alone. The issue you are talking about is on the radar.*
 ***

  

  

 *From:* Leedy, Andy [mailto:ale...@butlerschein.comale...@butlerschein.com]

 *Sent:* Thursday, February 7, 2013 1:52 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* RE: ActiveSync + Throttling + IOS

  

 We had a very excessive Exchange log generation issue.  I found that two
 iphones that were recently updated to IOS 6.1 were stuck in loop trying to
 sync their calendars.  These two phones alone were causing  3 GB of log
 growth per hour.  The way I resolved it was by disabling activsysnc on
 their mailbox, removed the phone partnership, deleted the active sync
 account on the phone, rebooting the phone, re-enabled active on the mailbox
 and re-added the exchange activesync account on the phone.

  

 I opened a ticket with Microsoft PSS, but they said they had no way to
 prevent future occurrences so they just refunded my ticket.  No hotfixes or
 patches. It’s too bad.  It seems like an easy way to attack a 2010 Exchange
 server would be to pound activesysnc until the log drive was full and the
 server crashed.

  

 If there’s a Microsoft Exchange Team inside guy on this forum that wants
 to explore this further please feel free to contact me.  I think it’s a
 security issue that should be investigated.

  

 -Andy

  

  

  

 *From:* Michael B. Smith [mailto:mich...@smithcons.commich...@smithcons.com]

 *Sent:* Thursday, February 7, 2013 3:58 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* RE: ActiveSync + Throttling + IOS

  

 Don’t you have more inside access than we do? J

  

 A couple of things are starting to percolate up with this latest iOS
 update – excessive log generation and throttling hits are being discussed
 on several forums. I haven’t heard of any conclusions out of CSS yet, and
 none of my customers have reported any issues so I don’t personally have a
 call open.

  

 *From:* KevinM [mailto:kev...@wlkmmas.org kev...@wlkmmas.org]
 *Sent:* Thursday, February 7, 2013 3:12 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* ActiveSync + Throttling + IOS

  

 I am tracking an issue for a number of customers where apple IOS devices
 are causing the *%time in AD* throttling policy to fire due to devices
 performing full GAL lookups for each key press. My feeling is that this is
 an IOS design flaw that should be fixed. Windows Phone searches local
 device contacts then presents an option to  attach to GAL

RE: ActiveSync + Throttling + IOS

2013-02-08 Thread Joseph L. Casale
 Could you tell us what you found before you leave. :)

The answer to her question:) You can block iphones based on software...

http://blogs.technet.com/b/exchange/archive/2010/11/15/3411539.aspx

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: ActiveSync + Throttling + IOS

2013-02-08 Thread Guyer, Don
Do you use an MDM system, like Zenprise? We do but, I'm sure we couldn't get 
buy-in to disable all of our 6.1 device users.

Regards,

Don Guyer
Catholic Health East - Information Technology
Enterprise Directory  Messaging Services
3805 West Chester Pike, Suite 100, Newtown Square, Pa  19073
email: dgu...@che.orgmailto:dgu...@che.org
Office:  610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440
For immediate assistance, please open a Service Desk ticket or call the 
helpdesk @ 610-492-3839.
[cid:image001.jpg@01CE05E0.0F2F89F0]

From: Candee [mailto:can...@gmail.com]
Sent: Friday, February 08, 2013 9:20 AM
To: MS-Exchange Admin Issues
Subject: Re: ActiveSync + Throttling + IOS

First, I found that Exchange will allow you to block only as far as the model - 
so block all iphone 5s.
Um, no.
then I found this:
http://www.flamingkeys.com/2011/10/how-to-block-iphone-4s-from-connecting-to-exchange-2010/
and this:
http://social.technet.microsoft.com/Forums/uk/exchangesvrmobility/thread/7271bbb4-2946-45e9-8e94-9926ccf579bd

which I *thought* would do it, but I'm having a hard time making it work.
I'm trying to block iOS6.1 10B141 but I'm not sure that's exactly right either.
We have over 50 devices on that list, so I'm sure I won't be able to block them 
anyway.

Love to hear what everyone else is doing.


On Fri, Feb 8, 2013 at 9:01 AM, Kennedy, Jim 
kennedy...@elyriaschools.orgmailto:kennedy...@elyriaschools.org wrote:
Could you tell us what you found before you leave. :)

From: Candee [mailto:can...@gmail.commailto:can...@gmail.com]
Sent: Friday, February 08, 2013 8:39 AM

To: MS-Exchange Admin Issues
Subject: Re: ActiveSync + Throttling + IOS

I found it.
Safe travel today folks - I'm out of here as soon as it starts.
:)
On Fri, Feb 8, 2013 at 8:32 AM, Candee 
can...@gmail.commailto:can...@gmail.com wrote:
Is there a way to block just iPhone users that have the update installed?
I'm not sure I'll even be able to do that, but I'd like to be one step ahead.
thanks!
On Fri, Feb 8, 2013 at 7:45 AM, Candee 
can...@gmail.commailto:can...@gmail.com wrote:
Thanks!
Perfect :(
we have users connecting with their home devices and we have zero control.
We are having a hard time getting policies approved and in place.



On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith 
mich...@smithcons.commailto:mich...@smithcons.com wrote:
...and I just got more info.

After the recent release of iOS 6.1 Update, ... are reporting an issue around 
how iOS is communicating with Exchange server when the user responds to a 
meeting invite or update using iOS device. The behavior is such that iOS gets 
an error back from Exchange when trying to issue the meeting response command 
and simply retries the command over and over again.

The recommendations are: [1] call Apple, [2] Don't roll out the new iOS update, 
[3] delete the device association to prevent it from getting worse.

CSS is fully engaged.

From: KevinM [mailto:kev...@wlkmmas.orgmailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 5:05 PM

To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Andy, you are not alone. The issue you are talking about is on the radar.


From: Leedy, Andy [mailto:ale...@butlerschein.com]
Sent: Thursday, February 7, 2013 1:52 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

We had a very excessive Exchange log generation issue.  I found that two 
iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync 
their calendars.  These two phones alone were causing  3 GB of log growth per 
hour.  The way I resolved it was by disabling activsysnc on their mailbox, 
removed the phone partnership, deleted the active sync account on the phone, 
rebooting the phone, re-enabled active on the mailbox and re-added the exchange 
activesync account on the phone.

I opened a ticket with Microsoft PSS, but they said they had no way to prevent 
future occurrences so they just refunded my ticket.  No hotfixes or patches. 
It's too bad.  It seems like an easy way to attack a 2010 Exchange server would 
be to pound activesysnc until the log drive was full and the server crashed.

If there's a Microsoft Exchange Team inside guy on this forum that wants to 
explore this further please feel free to contact me.  I think it's a security 
issue that should be investigated.

-Andy



From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, February 7, 2013 3:58 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Don't you have more inside access than we do? :)

A couple of things are starting to percolate up with this latest iOS update - 
excessive log generation and throttling hits are being discussed on several 
forums. I haven't heard of any conclusions out of CSS yet, and none of my 
customers have reported any issues so I don't personally have a call open.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 3:12 PM
To: MS-Exchange Admin Issues

RE: ActiveSync + Throttling + IOS

2013-02-08 Thread Mayo, Bill
It is my understanding that if you have downloaded all the updates via iTunes 
(and not over the air), that all are available to use to do a restore.  It will 
blow out the current config, though and resync.

-Original Message-
From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] 
Sent: Thursday, February 07, 2013 9:30 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS


 Is it possible to roll back from 6.1 on the iPhone?   


Ha, without a jailbreak or a hack, no.


Welcome to Apple, all your iphone is own by apple.
---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



RE: ActiveSync + Throttling + IOS

2013-02-08 Thread Guyer, Don
This was true in the past (have done it myself), not sure if that is still 
valid.

Regards,

Don Guyer
Catholic Health East - Information Technology
Enterprise Directory  Messaging Services
3805 West Chester Pike, Suite 100, Newtown Square, Pa  19073
email: dgu...@che.org
Office:  610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440
For immediate assistance, please open a Service Desk ticket or call the 
helpdesk @ 610-492-3839.


-Original Message-
From: Mayo, Bill [mailto:bill.m...@pittcountync.gov] 
Sent: Friday, February 08, 2013 9:42 AM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

It is my understanding that if you have downloaded all the updates via iTunes 
(and not over the air), that all are available to use to do a restore.  It will 
blow out the current config, though and resync.

-Original Message-
From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] 
Sent: Thursday, February 07, 2013 9:30 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS


 Is it possible to roll back from 6.1 on the iPhone?   


Ha, without a jailbreak or a hack, no.


Welcome to Apple, all your iphone is own by apple.
---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


Confidentiality Notice:
This e-mail, including any attachments is the
property of Catholic Health East and is intended
for the sole use of the intended recipient(s). 
It may contain information that is privileged and
confidential.  Any unauthorized review, use,
disclosure, or distribution is prohibited. If you are
not the intended recipient, please delete this message, and
reply to the sender regarding the error in a separate email.
 


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



RE: ActiveSync + Throttling + IOS

2013-02-08 Thread Heaton, Joseph@Wildlife
Were you referring to Log Parser from Microsoft, or LogParser, part of Splunk?  
I guess it doesn't matter, but just wondering.

-Original Message-
From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] 
Sent: Thursday, February 07, 2013 8:30 PM
To: Heaton, Joseph@Wildlife; MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

 Is there a link someone could provide with more details of the issue 
 and how it occurs?


Honestly bud, this thread outlines as it is. Keep logparser on hand. During the 
period where I was seeing it, I used a batched job to keep an eye on the growth 
and email me over and above the normal nms we have with thresholds defined. 
This way if the growth was increasing I could react quickly.


MS provides an active sync report script allows you to pinpoint the errant 
device and knock it out service if needed.


jlc
---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist




---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



Re: ActiveSync + Throttling + IOS

2013-02-08 Thread Candee
It looks to me like that will only block, say, all iPhone 5's
not just those that have applied the update.
Am I missing something?
Thanks!



On Fri, Feb 8, 2013 at 9:32 AM, Joseph L. Casale
jcas...@activenetwerx.comwrote:

   Could you tell us what you found before you leave. J


  The answer to her question:) You can block iphones based on software...


  http://blogs.technet.com/b/exchange/archive/2010/11/15/3411539.aspx

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: ActiveSync + Throttling + IOS

2013-02-08 Thread Guyer, Don
Does anyone have any links to any of this info? Management is asking for 
(further) proof.

Regards,

Don Guyer
Catholic Health East - Information Technology
Enterprise Directory  Messaging Services
3805 West Chester Pike, Suite 100, Newtown Square, Pa  19073
email: dgu...@che.orgmailto:dgu...@che.org
Office:  610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440
For immediate assistance, please open a Service Desk ticket or call the 
helpdesk @ 610-492-3839.
[cid:image001.jpg@01CE05F1.B251B700]

From: Candee [mailto:can...@gmail.com]
Sent: Friday, February 08, 2013 9:20 AM
To: MS-Exchange Admin Issues
Subject: Re: ActiveSync + Throttling + IOS

First, I found that Exchange will allow you to block only as far as the model - 
so block all iphone 5s.
Um, no.
then I found this:
http://www.flamingkeys.com/2011/10/how-to-block-iphone-4s-from-connecting-to-exchange-2010/
and this:
http://social.technet.microsoft.com/Forums/uk/exchangesvrmobility/thread/7271bbb4-2946-45e9-8e94-9926ccf579bd

which I *thought* would do it, but I'm having a hard time making it work.
I'm trying to block iOS6.1 10B141 but I'm not sure that's exactly right either.
We have over 50 devices on that list, so I'm sure I won't be able to block them 
anyway.

Love to hear what everyone else is doing.


On Fri, Feb 8, 2013 at 9:01 AM, Kennedy, Jim 
kennedy...@elyriaschools.orgmailto:kennedy...@elyriaschools.org wrote:
Could you tell us what you found before you leave. :)

From: Candee [mailto:can...@gmail.commailto:can...@gmail.com]
Sent: Friday, February 08, 2013 8:39 AM

To: MS-Exchange Admin Issues
Subject: Re: ActiveSync + Throttling + IOS

I found it.
Safe travel today folks - I'm out of here as soon as it starts.
:)
On Fri, Feb 8, 2013 at 8:32 AM, Candee 
can...@gmail.commailto:can...@gmail.com wrote:
Is there a way to block just iPhone users that have the update installed?
I'm not sure I'll even be able to do that, but I'd like to be one step ahead.
thanks!
On Fri, Feb 8, 2013 at 7:45 AM, Candee 
can...@gmail.commailto:can...@gmail.com wrote:
Thanks!
Perfect :(
we have users connecting with their home devices and we have zero control.
We are having a hard time getting policies approved and in place.



On Thu, Feb 7, 2013 at 5:19 PM, Michael B. Smith 
mich...@smithcons.commailto:mich...@smithcons.com wrote:
...and I just got more info.

After the recent release of iOS 6.1 Update, ... are reporting an issue around 
how iOS is communicating with Exchange server when the user responds to a 
meeting invite or update using iOS device. The behavior is such that iOS gets 
an error back from Exchange when trying to issue the meeting response command 
and simply retries the command over and over again.

The recommendations are: [1] call Apple, [2] Don't roll out the new iOS update, 
[3] delete the device association to prevent it from getting worse.

CSS is fully engaged.

From: KevinM [mailto:kev...@wlkmmas.orgmailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 5:05 PM

To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Andy, you are not alone. The issue you are talking about is on the radar.


From: Leedy, Andy [mailto:ale...@butlerschein.com]
Sent: Thursday, February 7, 2013 1:52 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

We had a very excessive Exchange log generation issue.  I found that two 
iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync 
their calendars.  These two phones alone were causing  3 GB of log growth per 
hour.  The way I resolved it was by disabling activsysnc on their mailbox, 
removed the phone partnership, deleted the active sync account on the phone, 
rebooting the phone, re-enabled active on the mailbox and re-added the exchange 
activesync account on the phone.

I opened a ticket with Microsoft PSS, but they said they had no way to prevent 
future occurrences so they just refunded my ticket.  No hotfixes or patches. 
It's too bad.  It seems like an easy way to attack a 2010 Exchange server would 
be to pound activesysnc until the log drive was full and the server crashed.

If there's a Microsoft Exchange Team inside guy on this forum that wants to 
explore this further please feel free to contact me.  I think it's a security 
issue that should be investigated.

-Andy



From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, February 7, 2013 3:58 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Don't you have more inside access than we do? :)

A couple of things are starting to percolate up with this latest iOS update - 
excessive log generation and throttling hits are being discussed on several 
forums. I haven't heard of any conclusions out of CSS yet, and none of my 
customers have reported any issues so I don't personally have a call open.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 3:12 PM
To: MS-Exchange Admin Issues
Subject: ActiveSync + Throttling

Re: ActiveSync + Throttling + IOS

2013-02-07 Thread Kurt Buff
On Thu, Feb 7, 2013 at 12:11 PM, KevinM kev...@wlkmmas.org wrote:
 I am tracking an issue for a number of customers where apple IOS devices are
 causing the %time in AD throttling policy to fire due to devices performing
 full GAL lookups for each key press. My feeling is that this is an IOS
 design flaw that should be fixed. Windows Phone searches local device
 contacts then presents an option to  attach to GAL; A much less expensive
 task for an Exchange server.  Too an end user the symptoms are delayed send
 and receive. Most noticeable are messages waiting to be sent on the device
 until the throttling blocking is removed.



 The issue can be seen when you correlate IIS logs throttling errors with
 Activesync Mailbox logs and you look for query

 RequestHeader :

 POST
 /Microsoft-Server-ActiveSync/default.eas?User=xDeviceType=iPhoneCmd=Search
 HTTP/1.1

 RequestBody :

 ?xml version=1.0 encoding=utf-8 ?

 Search xmlns=Search:

 Store

 Name bytes=3/

 Queryr/Query

 I am wondering if anyone else is running into this issue?

Never heard of such a thing - but just for info, what version(s) of iOS?

Kurt

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


RE: ActiveSync + Throttling + IOS

2013-02-07 Thread Michael B. Smith
Don't you have more inside access than we do? :)

A couple of things are starting to percolate up with this latest iOS update - 
excessive log generation and throttling hits are being discussed on several 
forums. I haven't heard of any conclusions out of CSS yet, and none of my 
customers have reported any issues so I don't personally have a call open.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 3:12 PM
To: MS-Exchange Admin Issues
Subject: ActiveSync + Throttling + IOS

I am tracking an issue for a number of customers where apple IOS devices are 
causing the %time in AD throttling policy to fire due to devices performing 
full GAL lookups for each key press. My feeling is that this is an IOS design 
flaw that should be fixed. Windows Phone searches local device contacts then 
presents an option to  attach to GAL; A much less expensive task for an 
Exchange server.  Too an end user the symptoms are delayed send and receive. 
Most noticeable are messages waiting to be sent on the device until the 
throttling blocking is removed.

The issue can be seen when you correlate IIS logs throttling errors with 
Activesync Mailbox logs and you look for query

RequestHeader :

POST 
/Microsoft-Server-ActiveSync/default.eas?User=xDeviceType=iPhoneCmd=Search
 HTTP/1.1

RequestBody :

?xml version=1.0 encoding=utf-8 ?

Search xmlns=Search:

Store

Name bytes=3/

Queryr/Query


I am wondering if anyone else is running into this issue?

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: ActiveSync + Throttling + IOS

2013-02-07 Thread KevinM
All versions of IOS are coded this way. Some might be more aggressive with the 
timing of the search between button presses but I've not received a 
confirmation out of apple on that one yet. 

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Thursday, February 7, 2013 12:26 PM
To: MS-Exchange Admin Issues
Subject: Re: ActiveSync + Throttling + IOS

On Thu, Feb 7, 2013 at 12:11 PM, KevinM kev...@wlkmmas.org wrote:
 I am tracking an issue for a number of customers where apple IOS 
 devices are causing the %time in AD throttling policy to fire due to 
 devices performing full GAL lookups for each key press. My feeling is 
 that this is an IOS design flaw that should be fixed. Windows Phone 
 searches local device contacts then presents an option to  attach to 
 GAL; A much less expensive task for an Exchange server.  Too an end 
 user the symptoms are delayed send and receive. Most noticeable are 
 messages waiting to be sent on the device until the throttling blocking is 
 removed.



 The issue can be seen when you correlate IIS logs throttling errors 
 with Activesync Mailbox logs and you look for query

 RequestHeader :

 POST
 /Microsoft-Server-ActiveSync/default.eas?User=xDevice
 Type=iPhoneCmd=Search
 HTTP/1.1

 RequestBody :

 ?xml version=1.0 encoding=utf-8 ?

 Search xmlns=Search:

 Store

 Name bytes=3/

 Queryr/Query

 I am wondering if anyone else is running into this issue?

Never heard of such a thing - but just for info, what version(s) of iOS?

Kurt

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: ActiveSync + Throttling + IOS

2013-02-07 Thread Leedy, Andy
We had a very excessive Exchange log generation issue.  I found that two 
iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync 
their calendars.  These two phones alone were causing  3 GB of log growth per 
hour.  The way I resolved it was by disabling activsysnc on their mailbox, 
removed the phone partnership, deleted the active sync account on the phone, 
rebooting the phone, re-enabled active on the mailbox and re-added the exchange 
activesync account on the phone.

I opened a ticket with Microsoft PSS, but they said they had no way to prevent 
future occurrences so they just refunded my ticket.  No hotfixes or patches. 
It's too bad.  It seems like an easy way to attack a 2010 Exchange server would 
be to pound activesysnc until the log drive was full and the server crashed.

If there's a Microsoft Exchange Team inside guy on this forum that wants to 
explore this further please feel free to contact me.  I think it's a security 
issue that should be investigated.

-Andy



From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, February 7, 2013 3:58 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Don't you have more inside access than we do? :)

A couple of things are starting to percolate up with this latest iOS update - 
excessive log generation and throttling hits are being discussed on several 
forums. I haven't heard of any conclusions out of CSS yet, and none of my 
customers have reported any issues so I don't personally have a call open.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 3:12 PM
To: MS-Exchange Admin Issues
Subject: ActiveSync + Throttling + IOS

I am tracking an issue for a number of customers where apple IOS devices are 
causing the %time in AD throttling policy to fire due to devices performing 
full GAL lookups for each key press. My feeling is that this is an IOS design 
flaw that should be fixed. Windows Phone searches local device contacts then 
presents an option to  attach to GAL; A much less expensive task for an 
Exchange server.  Too an end user the symptoms are delayed send and receive. 
Most noticeable are messages waiting to be sent on the device until the 
throttling blocking is removed.

The issue can be seen when you correlate IIS logs throttling errors with 
Activesync Mailbox logs and you look for query

RequestHeader :

POST 
/Microsoft-Server-ActiveSync/default.eas?User=xDeviceType=iPhoneCmd=Search
 HTTP/1.1

RequestBody :

?xml version=1.0 encoding=utf-8 ?

Search xmlns=Search:

Store

Name bytes=3/

Queryr/Query


I am wondering if anyone else is running into this issue?

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


**

CONFIDENTIALITY NOTICE - The information transmitted in this message is 
intended only for the person or entity to which it is addressed and may contain 
confidential and/or privileged material. Any review, retransmission, 
dissemination or other use of this information by persons or entities other 
than the intended recipient is prohibited. If you received this in error, 
please contact the sender and destroy all copies of this document. Thank you.

Butler Schein Animal Health

**

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: ActiveSync + Throttling + IOS

2013-02-07 Thread Kurt Buff
Wow.

Maybe I should look through my logs again...

Kurt

On Thu, Feb 7, 2013 at 1:00 PM, KevinM kev...@wlkmmas.org wrote:
 All versions of IOS are coded this way. Some might be more aggressive with 
 the timing of the search between button presses but I've not received a 
 confirmation out of apple on that one yet.

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Thursday, February 7, 2013 12:26 PM
 To: MS-Exchange Admin Issues
 Subject: Re: ActiveSync + Throttling + IOS

 On Thu, Feb 7, 2013 at 12:11 PM, KevinM kev...@wlkmmas.org wrote:
 I am tracking an issue for a number of customers where apple IOS
 devices are causing the %time in AD throttling policy to fire due to
 devices performing full GAL lookups for each key press. My feeling is
 that this is an IOS design flaw that should be fixed. Windows Phone
 searches local device contacts then presents an option to  attach to
 GAL; A much less expensive task for an Exchange server.  Too an end
 user the symptoms are delayed send and receive. Most noticeable are
 messages waiting to be sent on the device until the throttling blocking is 
 removed.



 The issue can be seen when you correlate IIS logs throttling errors
 with Activesync Mailbox logs and you look for query

 RequestHeader :

 POST
 /Microsoft-Server-ActiveSync/default.eas?User=xDevice
 Type=iPhoneCmd=Search
 HTTP/1.1

 RequestBody :

 ?xml version=1.0 encoding=utf-8 ?

 Search xmlns=Search:

 Store

 Name bytes=3/

 Queryr/Query

 I am wondering if anyone else is running into this issue?

 Never heard of such a thing - but just for info, what version(s) of iOS?

 Kurt

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


RE: ActiveSync + Throttling + IOS

2013-02-07 Thread KevinM
Michael, We are currently tracking both of the issues you have mentioned with 
apple via CSS now. My issue is about to be placed on the list if I have 
anything to say about it. I have some special access but the best pressure I 
could apply to apple would be public awareness and calls to them from their 
customers.

Most customers who see the issue will modify their throttling policy and move 
on not knowing that they are now allowing IOS phones to blow up their CAS 
servers.

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, February 7, 2013 12:58 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Don't you have more inside access than we do? :)

A couple of things are starting to percolate up with this latest iOS update - 
excessive log generation and throttling hits are being discussed on several 
forums. I haven't heard of any conclusions out of CSS yet, and none of my 
customers have reported any issues so I don't personally have a call open.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 3:12 PM
To: MS-Exchange Admin Issues
Subject: ActiveSync + Throttling + IOS

I am tracking an issue for a number of customers where apple IOS devices are 
causing the %time in AD throttling policy to fire due to devices performing 
full GAL lookups for each key press. My feeling is that this is an IOS design 
flaw that should be fixed. Windows Phone searches local device contacts then 
presents an option to  attach to GAL; A much less expensive task for an 
Exchange server.  Too an end user the symptoms are delayed send and receive. 
Most noticeable are messages waiting to be sent on the device until the 
throttling blocking is removed.

The issue can be seen when you correlate IIS logs throttling errors with 
Activesync Mailbox logs and you look for query

RequestHeader :

POST 
/Microsoft-Server-ActiveSync/default.eas?User=xDeviceType=iPhoneCmd=Search
 HTTP/1.1

RequestBody :

?xml version=1.0 encoding=utf-8 ?

Search xmlns=Search:

Store

Name bytes=3/

Queryr/Query


I am wondering if anyone else is running into this issue?

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: ActiveSync + Throttling + IOS

2013-02-07 Thread KevinM
Andy, you are not alone. The issue you are talking about is on the radar.


From: Leedy, Andy [mailto:ale...@butlerschein.com]
Sent: Thursday, February 7, 2013 1:52 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

We had a very excessive Exchange log generation issue.  I found that two 
iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync 
their calendars.  These two phones alone were causing  3 GB of log growth per 
hour.  The way I resolved it was by disabling activsysnc on their mailbox, 
removed the phone partnership, deleted the active sync account on the phone, 
rebooting the phone, re-enabled active on the mailbox and re-added the exchange 
activesync account on the phone.

I opened a ticket with Microsoft PSS, but they said they had no way to prevent 
future occurrences so they just refunded my ticket.  No hotfixes or patches. 
It's too bad.  It seems like an easy way to attack a 2010 Exchange server would 
be to pound activesysnc until the log drive was full and the server crashed.

If there's a Microsoft Exchange Team inside guy on this forum that wants to 
explore this further please feel free to contact me.  I think it's a security 
issue that should be investigated.

-Andy



From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, February 7, 2013 3:58 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Don't you have more inside access than we do? :)

A couple of things are starting to percolate up with this latest iOS update - 
excessive log generation and throttling hits are being discussed on several 
forums. I haven't heard of any conclusions out of CSS yet, and none of my 
customers have reported any issues so I don't personally have a call open.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 3:12 PM
To: MS-Exchange Admin Issues
Subject: ActiveSync + Throttling + IOS

I am tracking an issue for a number of customers where apple IOS devices are 
causing the %time in AD throttling policy to fire due to devices performing 
full GAL lookups for each key press. My feeling is that this is an IOS design 
flaw that should be fixed. Windows Phone searches local device contacts then 
presents an option to  attach to GAL; A much less expensive task for an 
Exchange server.  Too an end user the symptoms are delayed send and receive. 
Most noticeable are messages waiting to be sent on the device until the 
throttling blocking is removed.

The issue can be seen when you correlate IIS logs throttling errors with 
Activesync Mailbox logs and you look for query

RequestHeader :

POST 
/Microsoft-Server-ActiveSync/default.eas?User=xDeviceType=iPhoneCmd=Search
 HTTP/1.1

RequestBody :

?xml version=1.0 encoding=utf-8 ?

Search xmlns=Search:

Store

Name bytes=3/

Queryr/Query


I am wondering if anyone else is running into this issue?

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

**

CONFIDENTIALITY NOTICE - The information transmitted in this message is 
intended only for the person or entity to which it is addressed and may contain 
confidential and/or privileged material. Any review, retransmission, 
dissemination or other use of this information by persons or entities other 
than the intended recipient is prohibited. If you received this in error, 
please contact the sender and destroy all copies of this document. Thank you.

Butler Schein Animal Health

**

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: ActiveSync + Throttling + IOS

2013-02-07 Thread Michael B. Smith
...and I just got more info.

After the recent release of iOS 6.1 Update, ... are reporting an issue around 
how iOS is communicating with Exchange server when the user responds to a 
meeting invite or update using iOS device. The behavior is such that iOS gets 
an error back from Exchange when trying to issue the meeting response command 
and simply retries the command over and over again.

The recommendations are: [1] call Apple, [2] Don't roll out the new iOS update, 
[3] delete the device association to prevent it from getting worse.

CSS is fully engaged.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 5:05 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Andy, you are not alone. The issue you are talking about is on the radar.


From: Leedy, Andy [mailto:ale...@butlerschein.com]
Sent: Thursday, February 7, 2013 1:52 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

We had a very excessive Exchange log generation issue.  I found that two 
iphones that were recently updated to IOS 6.1 were stuck in loop trying to sync 
their calendars.  These two phones alone were causing  3 GB of log growth per 
hour.  The way I resolved it was by disabling activsysnc on their mailbox, 
removed the phone partnership, deleted the active sync account on the phone, 
rebooting the phone, re-enabled active on the mailbox and re-added the exchange 
activesync account on the phone.

I opened a ticket with Microsoft PSS, but they said they had no way to prevent 
future occurrences so they just refunded my ticket.  No hotfixes or patches. 
It's too bad.  It seems like an easy way to attack a 2010 Exchange server would 
be to pound activesysnc until the log drive was full and the server crashed.

If there's a Microsoft Exchange Team inside guy on this forum that wants to 
explore this further please feel free to contact me.  I think it's a security 
issue that should be investigated.

-Andy



From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, February 7, 2013 3:58 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Don't you have more inside access than we do? :)

A couple of things are starting to percolate up with this latest iOS update - 
excessive log generation and throttling hits are being discussed on several 
forums. I haven't heard of any conclusions out of CSS yet, and none of my 
customers have reported any issues so I don't personally have a call open.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 3:12 PM
To: MS-Exchange Admin Issues
Subject: ActiveSync + Throttling + IOS

I am tracking an issue for a number of customers where apple IOS devices are 
causing the %time in AD throttling policy to fire due to devices performing 
full GAL lookups for each key press. My feeling is that this is an IOS design 
flaw that should be fixed. Windows Phone searches local device contacts then 
presents an option to  attach to GAL; A much less expensive task for an 
Exchange server.  Too an end user the symptoms are delayed send and receive. 
Most noticeable are messages waiting to be sent on the device until the 
throttling blocking is removed.

The issue can be seen when you correlate IIS logs throttling errors with 
Activesync Mailbox logs and you look for query

RequestHeader :

POST 
/Microsoft-Server-ActiveSync/default.eas?User=xDeviceType=iPhoneCmd=Search
 HTTP/1.1

RequestBody :

?xml version=1.0 encoding=utf-8 ?

Search xmlns=Search:

Store

Name bytes=3/

Queryr/Query


I am wondering if anyone else is running into this issue?

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

**

CONFIDENTIALITY NOTICE - The information transmitted in this message is 
intended only for the person or entity to which it is addressed and may contain 
confidential and/or privileged material. Any review, retransmission, 
dissemination or other use of this information by persons or entities other 
than the intended recipient is prohibited. If you received this in error, 
please contact the sender and destroy all copies of this document. Thank you.

Butler Schein Animal Health

**

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage

RE: ActiveSync + Throttling + IOS

2013-02-07 Thread Michael B. Smith
Are you certain that this particular issue is throttled on-premises? You have a 
lot more throttling policies than we do until E15.

-Original Message-
From: KevinM [mailto:kev...@wlkmmas.org] 
Sent: Thursday, February 7, 2013 4:01 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

All versions of IOS are coded this way. Some might be more aggressive with the 
timing of the search between button presses but I've not received a 
confirmation out of apple on that one yet. 

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com]
Sent: Thursday, February 7, 2013 12:26 PM
To: MS-Exchange Admin Issues
Subject: Re: ActiveSync + Throttling + IOS

On Thu, Feb 7, 2013 at 12:11 PM, KevinM kev...@wlkmmas.org wrote:
 I am tracking an issue for a number of customers where apple IOS 
 devices are causing the %time in AD throttling policy to fire due to 
 devices performing full GAL lookups for each key press. My feeling is 
 that this is an IOS design flaw that should be fixed. Windows Phone 
 searches local device contacts then presents an option to  attach to 
 GAL; A much less expensive task for an Exchange server.  Too an end 
 user the symptoms are delayed send and receive. Most noticeable are 
 messages waiting to be sent on the device until the throttling blocking is 
 removed.



 The issue can be seen when you correlate IIS logs throttling errors 
 with Activesync Mailbox logs and you look for query

 RequestHeader :

 POST
 /Microsoft-Server-ActiveSync/default.eas?User=xDevice
 Type=iPhoneCmd=Search
 HTTP/1.1

 RequestBody :

 ?xml version=1.0 encoding=utf-8 ?

 Search xmlns=Search:

 Store

 Name bytes=3/

 Queryr/Query

 I am wondering if anyone else is running into this issue?

Never heard of such a thing - but just for info, what version(s) of iOS?

Kurt

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: ActiveSync + Throttling + IOS

2013-02-07 Thread Michael B. Smith
I was just informed in a separate forum that the call to Apple has to be from a 
client with an Enterprise support agreement with Apple, or with one of their 
$600 enterprise support pay-per-call. The cheap $50 pay-per-call does not 
have access to EAS support.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 5:03 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Michael, We are currently tracking both of the issues you have mentioned with 
apple via CSS now. My issue is about to be placed on the list if I have 
anything to say about it. I have some special access but the best pressure I 
could apply to apple would be public awareness and calls to them from their 
customers.

Most customers who see the issue will modify their throttling policy and move 
on not knowing that they are now allowing IOS phones to blow up their CAS 
servers.

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, February 7, 2013 12:58 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Don't you have more inside access than we do? :)

A couple of things are starting to percolate up with this latest iOS update - 
excessive log generation and throttling hits are being discussed on several 
forums. I haven't heard of any conclusions out of CSS yet, and none of my 
customers have reported any issues so I don't personally have a call open.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 3:12 PM
To: MS-Exchange Admin Issues
Subject: ActiveSync + Throttling + IOS

I am tracking an issue for a number of customers where apple IOS devices are 
causing the %time in AD throttling policy to fire due to devices performing 
full GAL lookups for each key press. My feeling is that this is an IOS design 
flaw that should be fixed. Windows Phone searches local device contacts then 
presents an option to  attach to GAL; A much less expensive task for an 
Exchange server.  Too an end user the symptoms are delayed send and receive. 
Most noticeable are messages waiting to be sent on the device until the 
throttling blocking is removed.

The issue can be seen when you correlate IIS logs throttling errors with 
Activesync Mailbox logs and you look for query

RequestHeader :

POST 
/Microsoft-Server-ActiveSync/default.eas?User=xDeviceType=iPhoneCmd=Search
 HTTP/1.1

RequestBody :

?xml version=1.0 encoding=utf-8 ?

Search xmlns=Search:

Store

Name bytes=3/

Queryr/Query


I am wondering if anyone else is running into this issue?

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: ActiveSync + Throttling + IOS

2013-02-07 Thread Heaton, Joseph@Wildlife
Is it possible to roll back from 6.1 on the iPhone?

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, February 07, 2013 2:31 PM
To: Heaton, Joseph@Wildlife; MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

I was just informed in a separate forum that the call to Apple has to be from a 
client with an Enterprise support agreement with Apple, or with one of their 
$600 enterprise support pay-per-call. The cheap $50 pay-per-call does not 
have access to EAS support.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 5:03 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Michael, We are currently tracking both of the issues you have mentioned with 
apple via CSS now. My issue is about to be placed on the list if I have 
anything to say about it. I have some special access but the best pressure I 
could apply to apple would be public awareness and calls to them from their 
customers.

Most customers who see the issue will modify their throttling policy and move 
on not knowing that they are now allowing IOS phones to blow up their CAS 
servers.

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, February 7, 2013 12:58 PM
To: MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

Don't you have more inside access than we do? :)

A couple of things are starting to percolate up with this latest iOS update - 
excessive log generation and throttling hits are being discussed on several 
forums. I haven't heard of any conclusions out of CSS yet, and none of my 
customers have reported any issues so I don't personally have a call open.

From: KevinM [mailto:kev...@wlkmmas.org]
Sent: Thursday, February 7, 2013 3:12 PM
To: MS-Exchange Admin Issues
Subject: ActiveSync + Throttling + IOS

I am tracking an issue for a number of customers where apple IOS devices are 
causing the %time in AD throttling policy to fire due to devices performing 
full GAL lookups for each key press. My feeling is that this is an IOS design 
flaw that should be fixed. Windows Phone searches local device contacts then 
presents an option to  attach to GAL; A much less expensive task for an 
Exchange server.  Too an end user the symptoms are delayed send and receive. 
Most noticeable are messages waiting to be sent on the device until the 
throttling blocking is removed.

The issue can be seen when you correlate IIS logs throttling errors with 
Activesync Mailbox logs and you look for query

RequestHeader :

POST 
/Microsoft-Server-ActiveSync/default.eas?User=xDeviceType=iPhoneCmd=Search
 HTTP/1.1

RequestBody :

?xml version=1.0 encoding=utf-8 ?

Search xmlns=Search:

Store

Name bytes=3/

Queryr/Query


I am wondering if anyone else is running into this issue?

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: ActiveSync + Throttling + IOS

2013-02-07 Thread Joseph L. Casale

 Is it possible to roll back from 6.1 on the iPhone?   


Ha, without a jailbreak or a hack, no.


Welcome to Apple, all your iphone is own by apple.
---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



RE: ActiveSync + Throttling + IOS

2013-02-07 Thread Heaton, Joseph@Wildlife
Great.  During our migration, we're moving from Blackberries to iPhones.  
Around 75% of those already issued are on iOS 6.1.  I haven't had any issues 
like you guys have described though.

Is there a link someone could provide with more details of the issue and how it 
occurs?

From: Joseph L. Casale [jcas...@activenetwerx.com]
Sent: Thursday, February 07, 2013 6:29 PM
To: Heaton, Joseph@Wildlife; MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

 Is it possible to roll back from 6.1 on the iPhone?


Ha, without a jailbreak or a hack, no.


Welcome to Apple, all your iphone is own by apple.
---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist




---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



RE: ActiveSync + Throttling + IOS

2013-02-07 Thread Joseph L. Casale
 Is there a link someone could provide with more details of the issue and how 
 it occurs? 


Honestly bud, this thread outlines as it is. Keep logparser on hand. During the 
period where
I was seeing it, I used a batched job to keep an eye on the growth and email me 
over and above
the normal nms we have with thresholds defined. This way if the growth was 
increasing I could
react quickly.


MS provides an active sync report script allows you to pinpoint the errant 
device and knock
it out service if needed.


jlc
---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



RE: ActiveSync + Throttling + IOS

2013-02-07 Thread Heaton, Joseph@Wildlife
So basically, just keep an eye on the IIS logs for my CAS servers, and watch 
for rapid growth, right?  I'll look for that active sync report script.  I 
looked at all the IIS logs for my CAS servers, and only one had any 
cmd=search entries, but nothing like the OP described, and the size of the 
log isn't that big.

From: Joseph L. Casale [jcas...@activenetwerx.com]
Sent: Thursday, February 07, 2013 8:30 PM
To: Heaton, Joseph@Wildlife; MS-Exchange Admin Issues
Subject: RE: ActiveSync + Throttling + IOS

 Is there a link someone could provide with more details of the issue and how 
 it occurs?


Honestly bud, this thread outlines as it is. Keep logparser on hand. During the 
period where
I was seeing it, I used a batched job to keep an eye on the growth and email me 
over and above
the normal nms we have with thresholds defined. This way if the growth was 
increasing I could
react quickly.


MS provides an active sync report script allows you to pinpoint the errant 
device and knock
it out service if needed.


jlc
---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist




---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist