Home → LOGbinder for EX KB → Getting Started Guide → Appendix D: Troubleshooting

2.8. Appendix D: Troubleshooting

Initial checks

Check the Inputs in LOGbinder for Exchange control panel:

1. If there are entries under Transaction, then the Powershell URL is set good.
2. If the Completed column is filled, then the Exchange URL and Recipient are set good.

Verifying Mailbox Access

(In the following steps, some examples are shown. Please replace the bold parts with the appropriate details of your environment.)

1. Open Internet Explorer and logon as the LOGbinder service account, to the mailbox via Outlook Web Access using the server name specified in LOGbinder for Exchange control panel, such as

   https://ex1.acme.com/owa

   You should see emails in the Inbox or in Deleted Items from Microsoft Exchange with subjects, such as “Administrator Audit Log Search …” and “Mailbox Audit Log Search …”

2. In Internet Explorer go to the Exchange URL of your Input setting, such as

   https://ex1.acme.com/ews/exchange.asmx

   You should get the WSDL xml for Exchange, something like this

   

   Make sure there are no certificate errors in the browser.

   If it doesn’t work, you could try to identify the correct URL by executing the following PowerShell command from the Exchange Management Shell on the Exchange server:

   Get-WebServicesVirtualDirectory | fl *url

Verifying PowerShell Connectivity and Exchange Authority

(In the following steps, some examples are shown. Please replace the bold parts with the appropriate details of your environment.)

1. Double-check what account LOGbinder for Exchange service is configured to Logon as.
2. Logon to the desktop using that account.

Verifying PowerShell Connectivity

3. Open PowerShell – Not the Exchange Management Shell
4. Run (on line b, replace the URL with the correct PowerShell URL):
1. whoami
2. $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://ex1.acme.com/PowerShell/
3. Import-PSSession $Session

Verifying Exchange Authority

5. After the previous steps, run the following commands (on lines c and d, replace the email address with an email address where you want the results to be sent to):
   1. $enddate = Get-Date (Get-Date).AddHours(-24) -Format "MM/dd/yyyy HH:mm"
   2. $startdate = Get-Date (Get-Date $enddate).AddMinutes(-10) -Format "MM/dd/yyyy HH:mm"
   3. New-AdminAuditLogSearch -StartDate $startdate -EndDate $enddate -Name LOGbinder-test -StatusMailRecipients administrator@acme.com
   4. New-MailboxAuditLogSearch -StartDate $startdate -EndDate $enddate -Name LOGbinder-test -StatusMailRecipients administrator@acme.com

6. After sufficient time elapsed, you should see emails in the Inbox or in Deleted Items from Microsoft Exchange with subjects, such as “Administrator Audit Log Search …” and “Mailbox Audit Log Search …”

   Note: Exchange server might take up to 15 minutes (or more) to generate the audit report.

Additional notes

On the server where LOGbinder for Exchange is installed, what version of Windows are you running? Windows Server 2003, 2008, 2008 R2, etc.?

• Windows Management Framework 2.0 is integrated with Windows Server 2008 R2.
• If you have Windows Server 2003 or Windows Server 2008 (but not R2), have you installed the Windows Management Framework 2.0?
  http://technet.microsoft.com/en-us/library/dd335083.aspx

  Note the requirements for Exchange 2010:

  • Windows Management Framework installed
    • Windows Management Framework includes Windows PowerShell V2 and Windows Remote Management (WinRM) 2.0.
  • The fully qualified domain name (FQDN) of an Exchange 2010 server in your organization
  • The domain this server is joined to must be trusted by the domain where the Exchange server resides.
  • TCP port 80 must be open between your computer and the remote Exchange 2010 server, and the port must be allowed through Windows Firewall on the Exchange 2010 server.
  • A user that's enabled for remote Shell