Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Thursday, September 7, 2017 12:55 PM
Hi guys,
I know that such event was already discussed but from what I found the problem is mostly with AirSync while by it is with EWS.
Process w3wp.exe (EWS) (PID=5544). The budget for user 'Sid~S-1-5-21-1330502445-2314489556-838424494-1286~Ews~true~ExchangeServicesClient/16.3.0.1' is locked out until 9/7/2017 12:01:51 PM. Max Burst: 300000, Recharge Rate: 1800000, CutoffBalance: 0
It happens only with one user and always with EWS and in the event it shows True.
Most of the suggestions are to extend the Throttling policy but I don't want to "allow" additional load on the server and I want to find the source of the problem. Is it Outlook or a Browser (Webmail). How I could find which device caused it and tell the user for example to reinstall his Outlook or clean the browser? Which logs should I check about it?
Thanks in advance
All replies (4)
Friday, September 8, 2017 7:33 AM
Hi Kondio,
In general, the IIS log could help us find more clues, please locate the information about this problematic user in following path:
C:\inetpub\logs\LogFiles\W3SVC2
Best Regards,
Niko Cheng
TechNet Community Support
Please remember to mark the replies as answers.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Monday, September 11, 2017 1:20 PM
there is not much info - I mean understandable information for me but I've removed one of the devices for this user to see if it will make any difference. The interesting thing is that he has 2 devices and using there Outlook for Android. I'm wonder if it makes any difference because if there is a problem with a mobile device that the event information should be from AirSync. The another interesting thing is that the user mention in the log is different that the one I found in AD based on the SID.
Tuesday, September 19, 2017 3:15 AM
Hi Kondio,
Before we go further, I would like to confirm the following questions:
========================================================
1.What is the detailed version of Exchange 2016, CU5?
2.When did this issue start to occur? Before the issue happened, did you do any modifications?
3.Did this user have any issue with free/busy?
According to the information of this event, based on my experience, this issue may be caused by the following 2 things:
1.There is any backup runs for backing up the VM's or Exchange databases. If yes, we could wait for its completion and then reboot the Exchange servers.
2.As you mentioned, throttling policy limit.
You said, there is only one user have this issue and this user is different from the event log. In this situation, we suggest you reset IIS, and disable ActiveSync for this issue user, then check if the event still happens.
If anything is unclear, please feel free to let me know.
Best Regards,
Niko Cheng
TechNet Community Support
Please remember to mark the replies as answers.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Friday, September 29, 2017 1:04 PM
Hi Niko,
sorry for the delay, I was sick and couldn't answer.
- we have Exchange 2016 with CU6
- this issue is a couple of months old - even when we were with CU3
- actually the user didn't report about any problems or maybe he didn't pay attention
- yes there is a Veeam Backup running
- I could disable the ActiveSync and try again but then why in the event is EWS and not AirSync or it doesn't matter?