Archive for the ‘Exchange 2007’ Category

Extracting Activesync Logs from Exchange 2007

October 29, 2009

Had to try and troubleshoot an ActiveSync connectivity problem as I discovered though there is  no GUI mechanism that analyzes ActiveSync logs, so you I  had to use the Exchange Management Shell and the Export-ActiveSyncLog cmdlet to export the data.

To do so, you need to know the date that the desired data was collected, and the path to which you want to dump the extracted data. For example, suppose that you wanted to extract data that was collected on October 29 2009 and move it to a folder called C:\Logs. In this situation, you would use the following command:

Export-ActiveSyncLog -FileName:’C:\Inetpub\logs\LogFiles\W3SVC1\u_ex091029.log -UseGMT:$true -OutputPath C:\aslogs\(this was run on windows 2008)


This file name is based on the date chosen, which is entered in YYMMDD format. Exchange Server will then create six csv files in the target directory. The first CSV file that Exchange Server creates is Users.csv. This file logs user activity.

User-Agents.csv is the second CSV file that Exchange Server 2007 creates. This file logs activity according to device type. 

The Servers.csv file reports ActiveSync-related activity on a mailbox server-by-mailbox server basis. 

The PolicyCompliance.csv file reports on how well various wireless devices comply with established ActiveSync mailbox policies. 

The StatusCodes.csv file contains various undocumented codes designed for use by Microsoft technical support staff


Renewing a self-signed certicate in Exchange 2007

September 16, 2009

While I was looking in the event logs of one of my Exchange 2007 Hub Transport Servers this morning I noticed the following warning message:


This is because Exchange 2007 issues a self-signed certificate for use with services like SMTP,IMAP,POP,IIS and UM and these certificates have validity period of 1 year.

To renew the certificate, open the Exchange Management Shell on the server in question and run the following powershell command:

Get-ExchangeCertificate -domain “fqdn of server”  | fl

Copy the thumbprint of the certificate which is displayed and then to renew the certificate run

Get-ExchangeCertificate -thumbprint “thumbprint” | New-ExchangeCertificate

When prompted enter y to continue, the new certificate is then generated and enabled.