I am looking for the easiest way to view/audit which users are logging in to ActiveSync on my Exchange Server 2003 machine. For example, various adroid/iphone and other mobile devices are set up this way. I would like to be able to report or view who is currently using it, ideally for a time frame.
I am assuming there is probably a log file in IIS, and I could run that through some kind of analysis software, but is there some other built in reporting / analysis tool (or easier method)?
Your question is truncated (stopping with "but is"), but I suspect you were asking if there is some "easier" log file than the IIS logs. While it's possible that the "Security" event log could yield some information (depending on how your Audit Policy is configured) the logs for the IIS Web Site hosting the Exchange-ActiveSync folder really are your best bet.
The analysis doesn't have to be too difficult, though. Unix-style text processing utilities would be one avenue if you're comfortable with
cut
,grep
,sort
, anduniq
.Another, possibly more "friendly" avenue, would be to use Microsoft LogParser (which the Exchange Team Blog has some coverage on in a couple of different postings).