Exchange 2007: How can I tell which connections are Outlook Anywhere?

Question

I'm curious as to how many active Outlook Anywhere (RPC over HTTPS) connections a server has active vs. normal RPC connections.

I've looked through the results out of the get-logonstatistics commandlet and none of the fields seem to show what connection type is in use.

Can an Exchange 2007 distinguish between these connection types and if so what commands are available to pull that data?

score 3 · Accepted Answer · answered Dec 21 '09 at 17:01

Whilst you set-up Outlook Anywhere from the Exchange console, it's actually using the RPC proxy feature, which is separate to Exchange. Exchange doesn't actually care where the RPC connection comes from, whether its local or over http, as they all look the same when they get to Exchange, the RPC proxy and IIS handle the incoming traffic and forward it to Exchange.

To get some statistics on how many RPC users you have your going to have to look at the IIS logs. There is a good article here on using Log parser to get these kind of statistics.

For example, getting the RPC statistics would look like this:

logparser "SELECT cs-username, Count(*) AS RPCProxyHits from c:\windows\system32
\logfiles\w3svc1\ex*.log WHERE cs-uri-stem LIKE '%rpcproxy.dll%' AND cs-username IS NOT 
NULL GROUP BY cs-username ORDER BY RpcProxyHits Desc" -rtp:-1

ok, as for the log parser, does it needs to be installed on the CAS server or in the workstation laptop ? — Senior Systems Engineer, Mar 09 '11 at 00:10

Exchange 2007: How can I tell which connections are Outlook Anywhere?

1 Answers1