hier noch die logs dazu
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status sc-bytes cs-bytes
008-11-18 19:31:45 W3SVC1 SBSERVER1 192.168.0.1 POST /Microsoft-Server-ActiveSync User=ba&DeviceId=86D28A79AD82AEFDB4FD3E31F54A9AED&DeviceType=PocketPC&Cmd=Notify&Log=V2TNASNC:0A0C0D0FS:0A0C0D0SP:0C0I0S0R 443 kanzlei\ba 80.109.56.45 MSFT-PPC/5.2.402 200 0 0 273 408
2008-11-18 19:31:45 W3SVC1 SBSERVER1 192.168.0.1 DELETE /exchange-oma/office/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/86D28A79AD82AEFDB4FD3E31F54A9AED/FolderSyncFile - 80 - 192.168.0.1 Microsoft-Server-ActiveSync/3.0.4215.0 401 2 2148074254 2506 300
2008-11-18 19:31:45 W3SVC1 SBSERVER1 192.168.0.1 DELETE /exchange-oma/office/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/86D28A79AD82AEFDB4FD3E31F54A9AED/FolderSyncFile - 80 - 192.168.0.1 Microsoft-Server-ActiveSync/3.0.4215.0 401 1 0 2470 403
2008-11-18 19:31:52 W3SVC1 SBSERVER1 192.168.0.1 DELETE /exchange-oma/office/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/86D28A79AD82AEFDB4FD3E31F54A9AED/FolderSyncFile - 80 KANZLEI\BA 192.168.0.1 Microsoft-Server-ActiveSync/3.0.4215.0 500 0 2147500037 284 423
2008-11-18 19:31:52 W3SVC1 SBSERVER1 192.168.0.1 DELETE /exchange-oma/office/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/86D28A79AD82AEFDB4FD3E31F54A9AED/FolderHierarchySearch - 80 - 192.168.0.1 Microsoft-Server-ActiveSync/3.0.4215.0 401 2 2148074254 2506 331
2008-11-18 19:31:52 W3SVC1 SBSERVER1 192.168.0.1 DELETE /exchange-oma/office/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/86D28A79AD82AEFDB4FD3E31F54A9AED/FolderHierarchySearch - 80 - 192.168.0.1 Microsoft-Server-ActiveSync/3.0.4215.0 401 1 0 2470 434
2008-11-18 19:31:58 W3SVC1 SBSERVER1 192.168.0.1 DELETE /exchange-oma/office/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/86D28A79AD82AEFDB4FD3E31F54A9AED/FolderHierarchySearch - 80 KANZLEI\BA 192.168.0.1 Microsoft-Server-ActiveSync/3.0.4215.0 500 0 2147500037 284 454
2008-11-18 19:31:58 W3SVC1 SBSERVER1 192.168.0.1 POST /Microsoft-Server-ActiveSync User=ba&DeviceId=86D28A79AD82AEFDB4FD3E31F54A9AED&DeviceType=PocketPC&Cmd=FolderSync&Log=V2TNASFC:0A0C0D0FS:0A0C0D0SP:1C2I476S1136R 443 kanzlei\ba 80.109.56.45 MSFT-PPC/5.2.402 500 0 0 313 434
2008-11-18 19:34:13 W3SVC1 SBSERVER1 192.168.0.1 OPTIONS /Microsoft-Server-ActiveSync User=ba&DeviceId=86D28A79AD82AEFDB4FD3E31F54A9AED&DeviceType=PocketPC&Log=VNATNASNC:0A0C0D0FS:0A0C0D0SP:0C0I0S0R 443 kanzlei\ba 80.109.56.45 MSFT-PPC/5.2.402 200 0 0 530 363
2008-11-18 19:34:15 W3SVC1 SBSERVER1 192.168.0.1 POST /Microsoft-Server-ActiveSync User=ba&DeviceId=86D28A79AD82AEFDB4FD3E31F54A9AED&DeviceType=PocketPC&Cmd=Notify&Log=V2TNASNC:0A0C0D0FS:0A0C0D0SP:0C0I0S0R 443 kanzlei\ba 80.109.56.45 MSFT-PPC/5.2.402 200 0 0 273 408
2008-11-18 19:34:18 W3SVC1 SBSERVER1 192.168.0.1 DELETE /exchange-oma/office/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/86D28A79AD82AEFDB4FD3E31F54A9AED/FolderSyncFile - 80 - 192.168.0.1 Microsoft-Server-ActiveSync/3.0.4215.0 401 2 2148074254 2506 300
2008-11-18 19:34:18 W3SVC1 SBSERVER1 192.168.0.1 DELETE /exchange-oma/office/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/86D28A79AD82AEFDB4FD3E31F54A9AED/FolderSyncFile - 80 - 192.168.0.1 Microsoft-Server-ActiveSync/3.0.4215.0 401 1 0 2470 403
2008-11-18 19:34:24 W3SVC1 SBSERVER1 192.168.0.1 DELETE /exchange-oma/office/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/86D28A79AD82AEFDB4FD3E31F54A9AED/FolderSyncFile - 80 KANZLEI\BA 192.168.0.1 Microsoft-Server-ActiveSync/3.0.4215.0 500 0 2147500037 284 423
2008-11-18 19:34:24 W3SVC1 SBSERVER1 192.168.0.1 DELETE /exchange-oma/office/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/86D28A79AD82AEFDB4FD3E31F54A9AED/FolderHierarchySearch - 80 - 192.168.0.1 Microsoft-Server-ActiveSync/3.0.4215.0 401 2 2148074254 2506 331
2008-11-18 19:34:24 W3SVC1 SBSERVER1 192.168.0.1 DELETE /exchange-oma/office/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/86D28A79AD82AEFDB4FD3E31F54A9AED/FolderHierarchySearch - 80 - 192.168.0.1 Microsoft-Server-ActiveSync/3.0.4215.0 401 1 0 2470 434
2008-11-18 19:34:30 W3SVC1 SBSERVER1 192.168.0.1 DELETE /exchange-oma/office/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/PocketPC/86D28A79AD82AEFDB4FD3E31F54A9AED/FolderHierarchySearch - 80 KANZLEI\BA 192.168.0.1 Microsoft-Server-ActiveSync/3.0.4215.0 500 0 2147500037 284 454
2008-11-18 19:34:30 W3SVC1 SBSERVER1 192.168.0.1 POST /Microsoft-Server-ActiveSync User=ba&DeviceId=86D28A79AD82AEFDB4FD3E31F54A9AED&DeviceType=PocketPC&Cmd=FolderSync&Log=V2TNASFC:0A0C0D0FS:0A0C0D0SP:1C2I476S1136R 443 kanzlei\ba 80.109.56.45 MSFT-PPC/5.2.402 500 0 0 313 434