DOCUMENT:Q246248  11-JUN-2002  [exchange]
TITLE   :XWEB: Diagnostic Logging Levels for OWA Defined in Admin.exe
PRODUCT :Microsoft Exchange
PROD/VER:winnt:5.5,5.5 SP1,5.5 SP2,5.5 SP3
OPER/SYS:
KEYWORDS:

======================================================================
-------------------------------------------------------------------------------
The information in this article applies to:

 - Microsoft Exchange Server, versions 5.5, 5.5 SP1, 5.5 SP2, 5.5 SP3 
-------------------------------------------------------------------------------

IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

   Q256986 Description of the Microsoft Windows Registry

SUMMARY
=======

You may want to enable logging on a server to gather diagnostics information for
troubleshooting purposes. This article describes the diagnostics logging
settings that allow monitoring of Outlook Web Access (OWA) activity.

MORE INFORMATION
================

To monitor OWA client connections to the directory service and the information
store on the Exchange Server computer:

1. Start the Microsoft Exchange Server Administrator progam.

2. Click the server you want to monitor, and on the File menu, click Properties.

3. Click the Diagnostics Logging tab.

4. Click MSExchangeDS in the left pane, and in the right pane, set Security,
   ExDS Interface, MAPI Interface, Directory Access, LDAP Interface, and Name
   Resolution to Maximum.

5. Click the plus sign (+) by MSExchangeIS in the left pane, click System, and
   then in right pane, set Connections and General to Maximum.

6. Under MSExchangeIS, click Private, and set General and Logons to Maximum.

If you look at one logon through OWA, you see three MAPI Interface events from
the directory service, then a Connections event to the information store, then a
Logons event, again to the information store, and then another Connections event
to the information store.

The following events are recorded in the application log in Event Viewer if the
above listed diagnostic logging is enabled. Several events such as 1136, 1137,
and 1170 may appear multiple times during one user's logon.

   Event ID 1170 MSExchangeDS MAPI Interface
   A client process connected to the directory with remote procedure call (RPC)
   string binding ncalrpc:SERVER1[MSExchangeDS_LPC].

   Event ID 1136 MSExchangeDS MAPI Interface
   Internal event: Function NspiBind entered

   Event ID 1170 MSExchangeDS MAPI Interface
   A client process connected to the directory with remote procedure call (RPC)
   string binding nvalrpc:SERVER1(MSExchangeDS_LPC)

   Event ID 1136 MSExchangeDS ExDS Interface
   Internal event: Function ds_read entered

   Event ID 1137 MSExchangeDS ExDS Interface
   Internal event: Function ds_read completed with an elapsed time of 0.

   Event ID 1007 MSExchangeIS Connections
   Kermitdom\administrator connected as
   /o=Microsoft/ou=server1/cn=Recipients/cn=administrator

   Event ID 1009 MSExchangeIS Private Logons
   Kermitdom\administrator logged on as
   /o=Microsoft/ou=server1/cn=Recipients/cn=administrator

If you have more than one OWA server, you can modify the RPC Binding order in the
registry to allow logging to show the binding of the OWA server's IP address to
the directory service port:

WARNING: If you use Registry Editor incorrectly, you may cause serious problems
that may require you to reinstall your operating system. Microsoft cannot
guarantee that you can solve problems that result from using Registry Editor
incorrectly. Use Registry Editor at your own risk.

1. Click Start, click Run, type Regedit in the Open box, and then click OK.

2. Locate the following registry key.

   HKEY_Local_Machine\Software\Microsoft\Exchange\Exchange Provider

3. Click RPC_Binding_Order, and then remove NCALRPC from the binding order value
   in the right pane.

For additional information, click the article number below to view the article in
the Microsoft Knowledge Base:

   Q163576 XGEN: Changing the RPC Binding Order

Additional query words:

======================================================================
Keywords          :  
Technology        : kbExchangeSearch kbExchange550 kbZNotKeyword2 kbExchange550SP1 kbExchange550SP2 kbExchange550SP3
Version           : winnt:5.5,5.5 SP1,5.5 SP2,5.5 SP3
Issue type        : kbhowto

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND.  MICROSOFT DISCLAIMS
ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  IN NO
EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR
ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL,
CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF
MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.  SOME STATES DO NOT ALLOW THE EXCLUSION
OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES
SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright Microsoft Corporation 2002.