XWEB: Diagnostic Logging Levels for OWA Defined in the Exchange Administrator Program

You may want to enable logging on a server to gather diagnostics information for troubleshooting purposes. This article describes the diagnostics logging settings that allow monitoring of Outlook Web Access (OWA) activity.

To monitor OWA client connections to the directory service and the information store on the Exchange Server computer:

1. Start the Microsoft Exchange Server Administrator progam.
2. Click the server you want to monitor, and on the File menu, click Properties.
3. Click the Diagnostics Logging tab.
4. Click MSExchangeDS in the left pane, and in the right pane, set Security, ExDS Interface, MAPI Interface, Directory Access, LDAP Interface, and Name Resolution to Maximum.
5. Click the plus sign (+) by MSExchangeIS in the left pane, click System, and then in right pane, set Connections and General to Maximum.
6. Under MSExchangeIS, click Private, and set General and Logons to Maximum.

If you look at one logon through OWA, you see three MAPI Interface events from the directory service, then a Connections event to the information store, then a Logons event, again to the information store, and then another Connections event to the information store.

The following events are recorded in the application log in Event Viewer if the above listed diagnostic logging is enabled. Several events such as 1136, 1137, and 1170 may appear multiple times during one user's logon. If you have more than one OWA server, you can modify the RPC Binding order in the registry to allow logging to show the binding of the OWA server's IP address to the directory service port:

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

1. Click Start, click Run, type Regedit in the Open box, and then click OK.
2. Locate the following registry key.
   HKEY_Local_Machine\Software\Microsoft\Exchange\Exchange Provider
3. Click RPC_Binding_Order, and then remove NCALRPC from the binding order value in the right pane.

For additional information, click the article number below to view the article in the Microsoft Knowledge Base: