Earlier, I wrote an article referencing Chris Lehr’s Log Parser script to identify and report which Outlook client versions are being used to access Exchange. You can read that article here.
Today, I’m showing you how to do the same thing with Log Parser Studio using a configuration written by my friend Lars Eber, an Exchange Premier Field Engineer at Microsoft. Log Parser Studio 2.0 is a customizable GUI tool that greatly simplifies creating complex Log Parser 2.2 command-line queries and presents the output natively in an easy to read fashion.
If you don’t have Log Parser 2.2 or Log Parser Studio 2.0 installed yet, you will need to do so. Just follow the links to download and install them (you’ll need both). Then run LPS.EXE from the C:LPSV2.D1 folder to run Log Parser Studio.
Download Lars’ ExchangeClientVersion.zip configuration from my website and unzip it to a temporary location. In Log Parser Studio, click File > Import > .XML to Library, select the ExchangeClientVersion.XML file you just extracted, and click the Merge Now button.
To run the query, first configure Log Parser with the log folder location. Click the yellow folder icon and browse to the folder where the IIS logs exist. Normally, this is \servernamec$Program FilesMicrosoftExchange ServerV15LoggingRPC Client Access. Then select the Exchange Client Version Overview query in the library and click the red exclamation point icon to run it.
Log Parser Studio will run the query and provide easy to read results showing the user name, DN, client software, version, client mode (cached or online), client IP address, and the protocol used. Very useful!