6/6/2014 5:23:20 PM [516,60] #############################################################
6/6/2014 5:23:20 PM [516,60] Request processing started
6/6/2014 5:23:20 PM [516,60] Url: http://webmail.abc.com/owa/forms/premium/StartPage.aspx
6/6/2014 5:23:20 PM [516,60] RawUrl: /owa/Default.aspx
6/6/2014 5:23:20 PM [516,60] Query String parameters:
6/6/2014 5:23:20 PM [516,60] Form: 
6/6/2014 5:23:20 PM [516,60] OWA Session details
6/6/2014 5:23:20 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:20 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:20 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:20 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:20 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:20 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:20 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:20 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:20 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:20 PM [516,60] [EVContext::Initialise] Loading EVContext
6/6/2014 5:23:20 PM [516,60] [Resources::LoadLanguageFile] Trying to opening language file: C:\Program Files\Microsoft\Exchange Server\ClientAccess\owa\EnterpriseVault\v8.0.3.1845\Languages\en-us.lan
6/6/2014 5:23:20 PM [516,60] [Resources::LoadLanguageFile] Language file not found
6/6/2014 5:23:20 PM [516,60] [Resources::LoadLanguageFile] Trying to opening language file: C:\Program Files\Microsoft\Exchange Server\ClientAccess\owa\EnterpriseVault\v8.0.3.1845\Languages\en.lan
6/6/2014 5:23:20 PM [516,60] [Resources::LoadLanguageFile] Loaded language: en
6/6/2014 5:23:20 PM [516,60] [EVContext::ResetHiddenSettings] Resetting hidden settings to defaults
6/6/2014 5:23:20 PM [516,60] [EVContext::LoadHiddenSettings] Loading hidden settings
6/6/2014 5:23:20 PM [516,60] [EVContext::LoadHiddenSettings] Getting hidden message entry id using SMTP address: alex@abc.com
6/6/2014 5:23:20 PM [516,60] [WebDAVHelpers::GetEVHiddenMessageId] Mailbox Url: https://localhost/exchange/alex@abc.com
6/6/2014 5:23:20 PM [516,60] [WebDAVRequest::Send] Request url: https://localhost/exchange/alex@abc.com
6/6/2014 5:23:20 PM [516,60] [WebDAVRequest::Send] Request method: PROPFIND
6/6/2014 5:23:20 PM [516,60] [WebDAVRequest::Send] Request timeout (milliseconds): 30000
6/6/2014 5:23:20 PM [516,60] [WebDAVRequest::Send] Adding FBA cookies
6/6/2014 5:23:20 PM [516,60] [WebDAVRequest::Send] Adding Depth header: 0
6/6/2014 5:23:20 PM [516,60] [WebDAVRequest::Send] Request body: <?xml version="1.0"?><d:propfind xmlns:d="DAV:" ><d:prop><u:inbox xmlns:u="urn:schemas:httpmail:" /></d:prop></d:propfind>
6/6/2014 5:23:20 PM [516,60] [WebDAVRequest::Send] Exception sending WebDAV request: System.Net.WebException: The remote server returned an error: (501) Not Implemented.
   at System.Net.HttpWebRequest.GetResponse()
   at Symantec.EnterpriseVault.Owa.ExchangeStoreAccess.WebDAVRequest.Send()
6/6/2014 5:23:20 PM [516,60] [EVContext::LoadHiddenSettings] Exception loading hidden settings: 
6/6/2014 5:23:20 PM [516,60] [EVContext::LoadHiddenSettings]     System.NullReferenceException: Object reference not set to an instance of an object.
   at Symantec.EnterpriseVault.Owa.ExchangeStoreAccess.WebDAVHelpers.GetEVHiddenMessageId(Log oLog, EVContext oEVContext)
   at Symantec.EnterpriseVault.Owa.Core.EVContext.LoadHiddenSettings(Log oLog, Boolean brefresh)
6/6/2014 5:23:20 PM [516,60] [EVContext::LoadHiddenSettings] Using default settings
6/6/2014 5:23:20 PM [516,60] [EVContext::ResetHiddenSettings] Resetting hidden settings to defaults
6/6/2014 5:23:20 PM [516,60] [EVContext::LogHiddenSettings] Mailbox Settings loaded at: Monday, January 01, 0001, 12:00:00 AM
6/6/2014 5:23:20 PM [516,60] [EVContext::LogHiddenSettings]     Enabled for archiving: Never Enabled
6/6/2014 5:23:20 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:20 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:20 PM [516,60] [EVContext::IsValidBrowser] Checking browser...
6/6/2014 5:23:20 PM [516,60] [EVContext::IsValidBrowser] User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:20 PM [516,60] [EVContext::IsValidBrowser] Using premium client - browser valid
6/6/2014 5:23:20 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:20 PM [516,60] [RequestProcessor::ProcessRequest] Setting response filter: Premium.WunderBar
6/6/2014 5:23:20 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:20 PM [516,60] Request processing finished
6/6/2014 5:23:20 PM [516,60] #############################################################
6/6/2014 5:23:20 PM [516,60] Request processing started
6/6/2014 5:23:20 PM [516,60] Url: http://webmail.abc.com/owa/forms/premium/StartPage.aspx
6/6/2014 5:23:20 PM [516,60] RawUrl: /owa/Default.aspx
6/6/2014 5:23:20 PM [516,60] Query String parameters:
6/6/2014 5:23:20 PM [516,60] Form: 
6/6/2014 5:23:20 PM [516,60] OWA Session details
6/6/2014 5:23:20 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:20 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:20 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:20 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:20 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:20 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:20 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:20 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:20 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:20 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:20 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:20 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:20 PM [516,60] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:20 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:20 PM [516,60] Request processing finished
6/6/2014 5:23:20 PM [516,60] #############################################################
6/6/2014 5:23:20 PM [516,60] Response filter started
6/6/2014 5:23:20 PM [516,60] Url: http://webmail.abc.com/owa/forms/premium/StartPage.aspx
6/6/2014 5:23:20 PM [516,60] RawUrl: /owa/Default.aspx
6/6/2014 5:23:20 PM [516,60] Query String parameters:
6/6/2014 5:23:20 PM [516,60] Form: 
6/6/2014 5:23:20 PM [516,60] EV Extensions Resource version: v8.0.3.1845
6/6/2014 5:23:20 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:20 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:20 PM [516,60] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.WunderBar
6/6/2014 5:23:20 PM [516,60] Response filter finished
6/6/2014 5:23:20 PM [516,43] #############################################################
6/6/2014 5:23:20 PM [516,43] Request processing started
6/6/2014 5:23:20 PM [516,43] Url: http://webmail.abc.com/owa/forms/premium/clientstrings.aspx?v=8.3.327.1&l=en-US
6/6/2014 5:23:20 PM [516,43] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.327.1&l=en-US
6/6/2014 5:23:20 PM [516,43] Query String parameters:
6/6/2014 5:23:20 PM [516,43]     v: 8.3.327.1
6/6/2014 5:23:20 PM [516,43]     l: en-US
6/6/2014 5:23:20 PM [516,43] Form: 
6/6/2014 5:23:20 PM [516,43] OWA Session details
6/6/2014 5:23:20 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:20 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:20 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:20 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:20 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:20 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:20 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:20 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:20 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:20 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:20 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:20 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:20 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:20 PM [516,43] Request processing finished
6/6/2014 5:23:20 PM [516,43] #############################################################
6/6/2014 5:23:20 PM [516,43] Request processing started
6/6/2014 5:23:20 PM [516,43] Url: http://webmail.abc.com/owa/forms/premium/clientstrings.aspx?v=8.3.327.1&l=en-US
6/6/2014 5:23:20 PM [516,43] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.327.1&l=en-US
6/6/2014 5:23:20 PM [516,43] Query String parameters:
6/6/2014 5:23:20 PM [516,43]     v: 8.3.327.1
6/6/2014 5:23:20 PM [516,43]     l: en-US
6/6/2014 5:23:20 PM [516,43] Form: 
6/6/2014 5:23:20 PM [516,43] OWA Session details
6/6/2014 5:23:20 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:20 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:20 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:20 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:20 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:20 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:20 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:20 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:20 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:20 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:20 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:20 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:20 PM [516,43] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:20 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:20 PM [516,43] Request processing finished
6/6/2014 5:23:21 PM [516,60] #############################################################
6/6/2014 5:23:21 PM [516,60] Request processing started
6/6/2014 5:23:21 PM [516,60] Url: http://webmail.abc.com/owa/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&a=
6/6/2014 5:23:21 PM [516,60] RawUrl: /owa/Default.aspx?ae=Folder&t=IPF.Note&a=
6/6/2014 5:23:21 PM [516,60] Query String parameters:
6/6/2014 5:23:21 PM [516,60]     ae: Folder
6/6/2014 5:23:21 PM [516,60]     t: IPF.Note
6/6/2014 5:23:21 PM [516,60]     a: 
6/6/2014 5:23:21 PM [516,60] Form: 
6/6/2014 5:23:21 PM [516,60] OWA Session details
6/6/2014 5:23:21 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:21 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:21 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:21 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:21 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:21 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:21 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:21 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:21 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:21 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:21 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:21 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:21 PM [516,60] [RequestProcessor::ProcessRequest] Setting response filter: Premium.Folder
6/6/2014 5:23:21 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:21 PM [516,60] Request processing finished
6/6/2014 5:23:21 PM [516,60] #############################################################
6/6/2014 5:23:21 PM [516,60] Request processing started
6/6/2014 5:23:21 PM [516,60] Url: http://webmail.abc.com/owa/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&a=
6/6/2014 5:23:21 PM [516,60] RawUrl: /owa/Default.aspx?ae=Folder&t=IPF.Note&a=
6/6/2014 5:23:21 PM [516,60] Query String parameters:
6/6/2014 5:23:21 PM [516,60]     ae: Folder
6/6/2014 5:23:21 PM [516,60]     t: IPF.Note
6/6/2014 5:23:21 PM [516,60]     a: 
6/6/2014 5:23:21 PM [516,60] Form: 
6/6/2014 5:23:21 PM [516,60] OWA Session details
6/6/2014 5:23:21 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:21 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:21 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:21 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:21 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:21 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:21 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:21 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:21 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:21 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:21 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:21 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:21 PM [516,60] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:21 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:21 PM [516,60] Request processing finished
6/6/2014 5:23:21 PM [516,60] #############################################################
6/6/2014 5:23:21 PM [516,60] Response filter started
6/6/2014 5:23:21 PM [516,60] Url: http://webmail.abc.com/owa/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&a=
6/6/2014 5:23:21 PM [516,60] RawUrl: /owa/Default.aspx?ae=Folder&t=IPF.Note&a=
6/6/2014 5:23:21 PM [516,60] Query String parameters:
6/6/2014 5:23:21 PM [516,60]     ae: Folder
6/6/2014 5:23:21 PM [516,60]     t: IPF.Note
6/6/2014 5:23:21 PM [516,60]     a: 
6/6/2014 5:23:21 PM [516,60] Form: 
6/6/2014 5:23:21 PM [516,60] EV Extensions Resource version: v8.0.3.1845
6/6/2014 5:23:21 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:21 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:21 PM [516,60] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.Folder
6/6/2014 5:23:21 PM [516,60] Response filter finished
6/6/2014 5:23:22 PM [516,60] #############################################################
6/6/2014 5:23:22 PM [516,60] Request processing started
6/6/2014 5:23:22 PM [516,60] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAB9Up+iiqbWT6PR/JQQ3fLgAPq5AM+8AAAJ
6/6/2014 5:23:22 PM [516,60] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAB9Up%2biiqbWT6PR%2fJQQ3fLgAPq5AM%2b8AAAJ
6/6/2014 5:23:22 PM [516,60] Query String parameters:
6/6/2014 5:23:22 PM [516,60]     ae: Item
6/6/2014 5:23:22 PM [516,60]     a: Preview
6/6/2014 5:23:22 PM [516,60]     t: IPM.Note
6/6/2014 5:23:22 PM [516,60]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAB9Up+iiqbWT6PR/JQQ3fLgAPq5AM+8AAAJ
6/6/2014 5:23:22 PM [516,60] Form: 
6/6/2014 5:23:22 PM [516,60] OWA Session details
6/6/2014 5:23:22 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:22 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:22 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:22 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:22 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:22 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:22 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:22 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:22 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:22 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:22 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:22 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:22 PM [516,60] [RequestProcessor::ProcessItem] started
6/6/2014 5:23:22 PM [516,60] [RequestProcessor::ProcessItem] Finished
6/6/2014 5:23:22 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:22 PM [516,60] Request processing finished
6/6/2014 5:23:22 PM [516,60] #############################################################
6/6/2014 5:23:22 PM [516,60] Request processing started
6/6/2014 5:23:22 PM [516,60] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAB9Up+iiqbWT6PR/JQQ3fLgAPq5AM+8AAAJ
6/6/2014 5:23:22 PM [516,60] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAB9Up%2biiqbWT6PR%2fJQQ3fLgAPq5AM%2b8AAAJ
6/6/2014 5:23:22 PM [516,60] Query String parameters:
6/6/2014 5:23:22 PM [516,60]     ae: Item
6/6/2014 5:23:22 PM [516,60]     a: Preview
6/6/2014 5:23:22 PM [516,60]     t: IPM.Note
6/6/2014 5:23:22 PM [516,60]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAB9Up+iiqbWT6PR/JQQ3fLgAPq5AM+8AAAJ
6/6/2014 5:23:22 PM [516,60] Form: 
6/6/2014 5:23:22 PM [516,60] OWA Session details
6/6/2014 5:23:22 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:22 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:22 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:22 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:22 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:22 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:22 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:22 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:22 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:22 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:22 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:22 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:22 PM [516,60] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:22 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:22 PM [516,60] Request processing finished
6/6/2014 5:23:22 PM [516,60] #############################################################
6/6/2014 5:23:22 PM [516,60] Request processing started
6/6/2014 5:23:22 PM [516,60] Url: http://webmail.abc.com/owa/attachment.ashx?id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAB9Up+iiqbWT6PR/JQQ3fLgAPq5AM+8AAAJ&attcnt=1&attid0=EABxIU/i9IzTToLjlaY4RRH2
6/6/2014 5:23:22 PM [516,60] RawUrl: /owa/attachment.ashx?id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAB9Up%2biiqbWT6PR%2fJQQ3fLgAPq5AM%2b8AAAJ&attcnt=1&attid0=EABxIU%2fi9IzTToLjlaY4RRH2
6/6/2014 5:23:22 PM [516,60] Query String parameters:
6/6/2014 5:23:22 PM [516,60]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAB9Up+iiqbWT6PR/JQQ3fLgAPq5AM+8AAAJ
6/6/2014 5:23:22 PM [516,60]     attcnt: 1
6/6/2014 5:23:22 PM [516,60]     attid0: EABxIU/i9IzTToLjlaY4RRH2
6/6/2014 5:23:22 PM [516,60] Form: 
6/6/2014 5:23:22 PM [516,60] OWA Session details
6/6/2014 5:23:22 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:22 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:22 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:22 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:22 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:22 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:22 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:22 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:22 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:22 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:22 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:22 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:22 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:22 PM [516,60] Request processing finished
6/6/2014 5:23:22 PM [516,60] #############################################################
6/6/2014 5:23:22 PM [516,60] Request processing started
6/6/2014 5:23:22 PM [516,60] Url: http://webmail.abc.com/owa/attachment.ashx?id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAB9Up+iiqbWT6PR/JQQ3fLgAPq5AM+8AAAJ&attcnt=1&attid0=EABxIU/i9IzTToLjlaY4RRH2
6/6/2014 5:23:22 PM [516,60] RawUrl: /owa/attachment.ashx?id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAB9Up%2biiqbWT6PR%2fJQQ3fLgAPq5AM%2b8AAAJ&attcnt=1&attid0=EABxIU%2fi9IzTToLjlaY4RRH2
6/6/2014 5:23:22 PM [516,60] Query String parameters:
6/6/2014 5:23:22 PM [516,60]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAB9Up+iiqbWT6PR/JQQ3fLgAPq5AM+8AAAJ
6/6/2014 5:23:22 PM [516,60]     attcnt: 1
6/6/2014 5:23:22 PM [516,60]     attid0: EABxIU/i9IzTToLjlaY4RRH2
6/6/2014 5:23:22 PM [516,60] Form: 
6/6/2014 5:23:22 PM [516,60] OWA Session details
6/6/2014 5:23:22 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:22 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:22 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:22 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:22 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:22 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:22 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:22 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:22 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:22 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:22 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:22 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:22 PM [516,60] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:22 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:22 PM [516,60] Request processing finished
6/6/2014 5:23:22 PM [516,43] #############################################################
6/6/2014 5:23:22 PM [516,43] Request processing started
6/6/2014 5:23:22 PM [516,43] Url: http://webmail.abc.com/owa/attachment.ashx?id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAB9Up+iiqbWT6PR/JQQ3fLgAPq5AM+8AAAJ&attcnt=1&attid0=EACvv+Uc1eCAQLPMBOw17u/i
6/6/2014 5:23:22 PM [516,43] RawUrl: /owa/attachment.ashx?id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAB9Up%2biiqbWT6PR%2fJQQ3fLgAPq5AM%2b8AAAJ&attcnt=1&attid0=EACvv%2bUc1eCAQLPMBOw17u%2fi
6/6/2014 5:23:22 PM [516,43] Query String parameters:
6/6/2014 5:23:22 PM [516,43]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAB9Up+iiqbWT6PR/JQQ3fLgAPq5AM+8AAAJ
6/6/2014 5:23:22 PM [516,43]     attcnt: 1
6/6/2014 5:23:22 PM [516,43]     attid0: EACvv+Uc1eCAQLPMBOw17u/i
6/6/2014 5:23:22 PM [516,43] Form: 
6/6/2014 5:23:22 PM [516,43] OWA Session details
6/6/2014 5:23:22 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:22 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:22 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:22 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:22 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:22 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:22 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:22 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:22 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:22 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:22 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:22 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:22 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:22 PM [516,43] Request processing finished
6/6/2014 5:23:22 PM [516,43] #############################################################
6/6/2014 5:23:22 PM [516,43] Request processing started
6/6/2014 5:23:22 PM [516,43] Url: http://webmail.abc.com/owa/attachment.ashx?id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAB9Up+iiqbWT6PR/JQQ3fLgAPq5AM+8AAAJ&attcnt=1&attid0=EACvv+Uc1eCAQLPMBOw17u/i
6/6/2014 5:23:22 PM [516,43] RawUrl: /owa/attachment.ashx?id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAB9Up%2biiqbWT6PR%2fJQQ3fLgAPq5AM%2b8AAAJ&attcnt=1&attid0=EACvv%2bUc1eCAQLPMBOw17u%2fi
6/6/2014 5:23:22 PM [516,43] Query String parameters:
6/6/2014 5:23:22 PM [516,43]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAB9Up+iiqbWT6PR/JQQ3fLgAPq5AM+8AAAJ
6/6/2014 5:23:22 PM [516,43]     attcnt: 1
6/6/2014 5:23:22 PM [516,43]     attid0: EACvv+Uc1eCAQLPMBOw17u/i
6/6/2014 5:23:22 PM [516,43] Form: 
6/6/2014 5:23:22 PM [516,43] OWA Session details
6/6/2014 5:23:22 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:22 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:22 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:22 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:22 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:22 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:22 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:22 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:22 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:22 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:22 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:22 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:22 PM [516,43] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:22 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:22 PM [516,43] Request processing finished
6/6/2014 5:23:27 PM [516,60] #############################################################
6/6/2014 5:23:27 PM [516,60] Request processing started
6/6/2014 5:23:27 PM [516,60] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=MsgListView&ev=LastPage
6/6/2014 5:23:27 PM [516,60] RawUrl: /owa/ev.owa?oeh=1&ns=MsgListView&ev=LastPage
6/6/2014 5:23:27 PM [516,60] Query String parameters:
6/6/2014 5:23:27 PM [516,60]     oeh: 1
6/6/2014 5:23:27 PM [516,60]     ns: MsgListView
6/6/2014 5:23:27 PM [516,60]     ev: LastPage
6/6/2014 5:23:27 PM [516,60] Form: 
6/6/2014 5:23:27 PM [516,60] OWA Session details
6/6/2014 5:23:27 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:27 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:27 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:27 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:27 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:27 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:27 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:27 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:27 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:27 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:27 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:27 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:27 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:27 PM [516,60] Request processing finished
6/6/2014 5:23:27 PM [516,60] #############################################################
6/6/2014 5:23:27 PM [516,60] Request processing started
6/6/2014 5:23:27 PM [516,60] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=MsgListView&ev=LastPage
6/6/2014 5:23:27 PM [516,60] RawUrl: /owa/ev.owa?oeh=1&ns=MsgListView&ev=LastPage
6/6/2014 5:23:27 PM [516,60] Query String parameters:
6/6/2014 5:23:27 PM [516,60]     oeh: 1
6/6/2014 5:23:27 PM [516,60]     ns: MsgListView
6/6/2014 5:23:27 PM [516,60]     ev: LastPage
6/6/2014 5:23:27 PM [516,60] Form: 
6/6/2014 5:23:27 PM [516,60] OWA Session details
6/6/2014 5:23:27 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:27 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:27 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:27 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:27 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:27 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:27 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:27 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:27 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:27 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:27 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:27 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:27 PM [516,60] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:27 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:27 PM [516,60] Request processing finished
6/6/2014 5:23:28 PM [516,43] #############################################################
6/6/2014 5:23:28 PM [516,43] Request processing started
6/6/2014 5:23:28 PM [516,43] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN26/AAAJ
6/6/2014 5:23:28 PM [516,43] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAD4nFvXd1BqS4ewWt%2b34QMrAAAEN26%2fAAAJ
6/6/2014 5:23:28 PM [516,43] Query String parameters:
6/6/2014 5:23:28 PM [516,43]     ae: Item
6/6/2014 5:23:28 PM [516,43]     a: Preview
6/6/2014 5:23:28 PM [516,43]     t: IPM.Note
6/6/2014 5:23:28 PM [516,43]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN26/AAAJ
6/6/2014 5:23:28 PM [516,43] Form: 
6/6/2014 5:23:28 PM [516,43] OWA Session details
6/6/2014 5:23:28 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:28 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:28 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:28 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:28 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:28 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:28 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:28 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:28 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:28 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:28 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:28 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:28 PM [516,43] [RequestProcessor::ProcessItem] started
6/6/2014 5:23:28 PM [516,43] [RequestProcessor::ProcessItem] Finished
6/6/2014 5:23:28 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:28 PM [516,43] Request processing finished
6/6/2014 5:23:28 PM [516,43] #############################################################
6/6/2014 5:23:28 PM [516,43] Request processing started
6/6/2014 5:23:28 PM [516,43] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN26/AAAJ
6/6/2014 5:23:28 PM [516,43] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAD4nFvXd1BqS4ewWt%2b34QMrAAAEN26%2fAAAJ
6/6/2014 5:23:28 PM [516,43] Query String parameters:
6/6/2014 5:23:28 PM [516,43]     ae: Item
6/6/2014 5:23:28 PM [516,43]     a: Preview
6/6/2014 5:23:28 PM [516,43]     t: IPM.Note
6/6/2014 5:23:28 PM [516,43]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN26/AAAJ
6/6/2014 5:23:28 PM [516,43] Form: 
6/6/2014 5:23:28 PM [516,43] OWA Session details
6/6/2014 5:23:28 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:28 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:28 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:28 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:28 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:28 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:28 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:28 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:28 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:28 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:28 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:28 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:28 PM [516,43] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:28 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:28 PM [516,43] Request processing finished
6/6/2014 5:23:29 PM [516,43] #############################################################
6/6/2014 5:23:29 PM [516,43] Request processing started
6/6/2014 5:23:29 PM [516,43] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:29 PM [516,43] RawUrl: /owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:29 PM [516,43] Query String parameters:
6/6/2014 5:23:29 PM [516,43]     oeh: 1
6/6/2014 5:23:29 PM [516,43]     ns: MsgListView
6/6/2014 5:23:29 PM [516,43]     ev: PreviousPage
6/6/2014 5:23:29 PM [516,43] Form: 
6/6/2014 5:23:29 PM [516,43] OWA Session details
6/6/2014 5:23:29 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:29 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:29 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:29 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:29 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:29 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:29 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:29 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:29 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:29 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:29 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:29 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:29 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:29 PM [516,43] Request processing finished
6/6/2014 5:23:29 PM [516,43] #############################################################
6/6/2014 5:23:29 PM [516,43] Request processing started
6/6/2014 5:23:29 PM [516,43] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:29 PM [516,43] RawUrl: /owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:29 PM [516,43] Query String parameters:
6/6/2014 5:23:29 PM [516,43]     oeh: 1
6/6/2014 5:23:29 PM [516,43]     ns: MsgListView
6/6/2014 5:23:29 PM [516,43]     ev: PreviousPage
6/6/2014 5:23:29 PM [516,43] Form: 
6/6/2014 5:23:29 PM [516,43] OWA Session details
6/6/2014 5:23:29 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:29 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:29 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:29 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:29 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:29 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:29 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:29 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:29 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:29 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:29 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:29 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:29 PM [516,43] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:29 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:29 PM [516,43] Request processing finished
6/6/2014 5:23:29 PM [516,43] #############################################################
6/6/2014 5:23:29 PM [516,43] Request processing started
6/6/2014 5:23:29 PM [516,43] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9sqAAAJ
6/6/2014 5:23:29 PM [516,43] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAD4nFvXd1BqS4ewWt%2b34QMrAAAEN9sqAAAJ
6/6/2014 5:23:29 PM [516,43] Query String parameters:
6/6/2014 5:23:29 PM [516,43]     ae: Item
6/6/2014 5:23:29 PM [516,43]     a: Preview
6/6/2014 5:23:29 PM [516,43]     t: IPM.Note.EnterpriseVault.Shortcut
6/6/2014 5:23:29 PM [516,43]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9sqAAAJ
6/6/2014 5:23:29 PM [516,43] Form: 
6/6/2014 5:23:29 PM [516,43] OWA Session details
6/6/2014 5:23:29 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:29 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:29 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:29 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:29 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:29 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:29 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:29 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:29 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:29 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:29 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:29 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:29 PM [516,43] [RequestProcessor::ProcessItem] started
6/6/2014 5:23:29 PM [516,43] [RequestProcessor::ProcessItem] Processing EV item
6/6/2014 5:23:29 PM [516,43] [RequestProcessor::ProcessOWAItemAction] started
6/6/2014 5:23:29 PM [516,43] [RequestProcessor::ProcessOWAItemAction] Previewing EV item
6/6/2014 5:23:29 PM [516,43] [Id::EwsId] Converting OwaId to EwsId
6/6/2014 5:23:29 PM [516,43] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
6/6/2014 5:23:31 PM [516,43] [ConvertId::DoConvertId] Converting ID using web services
6/6/2014 5:23:31 PM [516,43] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADQ4NjYzYjc3LWIwY2ItNDg3ZC1iMjczLTA4ZTVkYjQ2NzYzMQBGAAAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9sqAAA=
6/6/2014 5:23:31 PM [516,43] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
6/6/2014 5:23:31 PM [516,43] [MailboxItem::LoadProperties] Loading properties for: AAMkADQ4NjYzYjc3LWIwY2ItNDg3ZC1iMjczLTA4ZTVkYjQ2NzYzMQBGAAAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9sqAAA=
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties] Loaded item properties: 
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   Id: AAMkADQ4NjYzYjc3LWIwY2ItNDg3ZC1iMjczLTA4ZTVkYjQ2NzYzMQBGAAAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9sqAAA=
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAB9Up+iiqbWT6PR/JQQ3fLgAEalHCHO
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   Size: 12905
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADQ4NjYzYjc3LWIwY2ItNDg3ZC1iMjczLTA4ZTVkYjQ2NzYzMQAuAAAAAADqKS/EI7X7T4W1P57r8KgzAQD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAA=
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   Archive Id: 1CCDE9C4B54DADE4EB35C9C8D5D3A685A1110000EVSYS
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   Saveset Id: 201003299834395~200505240242380000~Z~20AD302DB801A4BD120FB214023AD061
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   Original Content Class: urn:content-classes:message
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   Original Size: 128948
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   View Item Ref Count: 
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   Archived Date: 3/29/2010 11:46:40 AM
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   Restored Date: 
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   Post Processed Date: 
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   Last modified time: 5/29/2012 3:43:25 AM
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   PR_URL_NAME: /收件匣/FW%3A Reminder%3A Invitation%3A An Intelligent Way for Data Lifecycle  Management (Jun 01).EML
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
6/6/2014 5:23:32 PM [516,43] [MailboxItem::LoadProperties]   Original Icon Index: -1
6/6/2014 5:23:32 PM [516,43] [RequestProcessor::ProcessOWAItemAction] Setting response filter: Premium.ArchivedItem
6/6/2014 5:23:32 PM [516,43] [RequestProcessor::ProcessOWAItemAction] Finished
6/6/2014 5:23:32 PM [516,43] [RequestProcessor::ProcessItem] Finished
6/6/2014 5:23:32 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:32 PM [516,43] Request processing finished
6/6/2014 5:23:32 PM [516,43] #############################################################
6/6/2014 5:23:32 PM [516,43] Request processing started
6/6/2014 5:23:32 PM [516,43] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9sqAAAJ
6/6/2014 5:23:32 PM [516,43] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAD4nFvXd1BqS4ewWt%2b34QMrAAAEN9sqAAAJ
6/6/2014 5:23:32 PM [516,43] Query String parameters:
6/6/2014 5:23:32 PM [516,43]     ae: Item
6/6/2014 5:23:32 PM [516,43]     a: Preview
6/6/2014 5:23:32 PM [516,43]     t: IPM.Note.EnterpriseVault.Shortcut
6/6/2014 5:23:32 PM [516,43]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9sqAAAJ
6/6/2014 5:23:32 PM [516,43] Form: 
6/6/2014 5:23:32 PM [516,43] OWA Session details
6/6/2014 5:23:32 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:32 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:32 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:32 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:32 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:32 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:32 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:32 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:32 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:32 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:32 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:32 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:32 PM [516,43] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:32 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:32 PM [516,43] Request processing finished
6/6/2014 5:23:32 PM [516,43] #############################################################
6/6/2014 5:23:32 PM [516,43] Response filter started
6/6/2014 5:23:32 PM [516,43] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9sqAAAJ
6/6/2014 5:23:32 PM [516,43] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAD4nFvXd1BqS4ewWt%2b34QMrAAAEN9sqAAAJ
6/6/2014 5:23:32 PM [516,43] Query String parameters:
6/6/2014 5:23:32 PM [516,43]     ae: Item
6/6/2014 5:23:32 PM [516,43]     a: Preview
6/6/2014 5:23:32 PM [516,43]     t: IPM.Note.EnterpriseVault.Shortcut
6/6/2014 5:23:32 PM [516,43]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9sqAAAJ
6/6/2014 5:23:32 PM [516,43] Form: 
6/6/2014 5:23:32 PM [516,43] EV Extensions Resource version: v8.0.3.1845
6/6/2014 5:23:32 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:32 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:32 PM [516,43] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.ArchivedItem
6/6/2014 5:23:32 PM [516,43] Response filter finished
6/6/2014 5:23:32 PM [516,60] #############################################################
6/6/2014 5:23:32 PM [516,60] Request processing started
6/6/2014 5:23:32 PM [516,60] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:32 PM [516,60] RawUrl: /owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:32 PM [516,60] Query String parameters:
6/6/2014 5:23:32 PM [516,60]     oeh: 1
6/6/2014 5:23:32 PM [516,60]     ns: MsgListView
6/6/2014 5:23:32 PM [516,60]     ev: PreviousPage
6/6/2014 5:23:32 PM [516,60] Form: 
6/6/2014 5:23:32 PM [516,60] OWA Session details
6/6/2014 5:23:32 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:32 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:32 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:32 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:32 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:32 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:32 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:32 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:32 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:32 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:32 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:32 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:32 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:32 PM [516,60] Request processing finished
6/6/2014 5:23:32 PM [516,60] #############################################################
6/6/2014 5:23:32 PM [516,60] Request processing started
6/6/2014 5:23:32 PM [516,60] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:32 PM [516,60] RawUrl: /owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:32 PM [516,60] Query String parameters:
6/6/2014 5:23:32 PM [516,60]     oeh: 1
6/6/2014 5:23:32 PM [516,60]     ns: MsgListView
6/6/2014 5:23:32 PM [516,60]     ev: PreviousPage
6/6/2014 5:23:32 PM [516,60] Form: 
6/6/2014 5:23:32 PM [516,60] OWA Session details
6/6/2014 5:23:32 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:32 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:32 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:32 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:32 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:32 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:32 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:32 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:32 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:32 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:32 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:32 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:32 PM [516,60] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:32 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:32 PM [516,60] Request processing finished
6/6/2014 5:23:32 PM [516,60] #############################################################
6/6/2014 5:23:32 PM [516,60] Request processing started
6/6/2014 5:23:32 PM [516,60] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:32 PM [516,60] RawUrl: /owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:32 PM [516,60] Query String parameters:
6/6/2014 5:23:32 PM [516,60]     oeh: 1
6/6/2014 5:23:32 PM [516,60]     ns: MsgListView
6/6/2014 5:23:32 PM [516,60]     ev: PreviousPage
6/6/2014 5:23:32 PM [516,60] Form: 
6/6/2014 5:23:32 PM [516,60] OWA Session details
6/6/2014 5:23:32 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:32 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:32 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:32 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:32 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:32 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:32 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:32 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:32 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:32 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:32 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:32 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:32 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:32 PM [516,60] Request processing finished
6/6/2014 5:23:32 PM [516,60] #############################################################
6/6/2014 5:23:32 PM [516,60] Request processing started
6/6/2014 5:23:32 PM [516,60] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:32 PM [516,60] RawUrl: /owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:32 PM [516,60] Query String parameters:
6/6/2014 5:23:32 PM [516,60]     oeh: 1
6/6/2014 5:23:32 PM [516,60]     ns: MsgListView
6/6/2014 5:23:32 PM [516,60]     ev: PreviousPage
6/6/2014 5:23:32 PM [516,60] Form: 
6/6/2014 5:23:32 PM [516,60] OWA Session details
6/6/2014 5:23:32 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:32 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:32 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:32 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:32 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:32 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:32 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:32 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:32 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:32 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:32 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:32 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:32 PM [516,60] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:32 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:32 PM [516,60] Request processing finished
6/6/2014 5:23:32 PM [516,60] #############################################################
6/6/2014 5:23:32 PM [516,60] Request processing started
6/6/2014 5:23:32 PM [516,60] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:32 PM [516,60] RawUrl: /owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:32 PM [516,60] Query String parameters:
6/6/2014 5:23:32 PM [516,60]     oeh: 1
6/6/2014 5:23:32 PM [516,60]     ns: MsgListView
6/6/2014 5:23:32 PM [516,60]     ev: PreviousPage
6/6/2014 5:23:32 PM [516,60] Form: 
6/6/2014 5:23:32 PM [516,60] OWA Session details
6/6/2014 5:23:32 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:32 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:32 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:32 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:32 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:32 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:32 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:32 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:32 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:32 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:32 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:32 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:32 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:32 PM [516,60] Request processing finished
6/6/2014 5:23:32 PM [516,60] #############################################################
6/6/2014 5:23:32 PM [516,60] Request processing started
6/6/2014 5:23:32 PM [516,60] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:32 PM [516,60] RawUrl: /owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:32 PM [516,60] Query String parameters:
6/6/2014 5:23:32 PM [516,60]     oeh: 1
6/6/2014 5:23:32 PM [516,60]     ns: MsgListView
6/6/2014 5:23:32 PM [516,60]     ev: PreviousPage
6/6/2014 5:23:32 PM [516,60] Form: 
6/6/2014 5:23:32 PM [516,60] OWA Session details
6/6/2014 5:23:32 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:32 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:32 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:32 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:32 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:32 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:32 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:32 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:32 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:32 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:32 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:32 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:32 PM [516,60] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:32 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:32 PM [516,60] Request processing finished
6/6/2014 5:23:32 PM [516,60] #############################################################
6/6/2014 5:23:32 PM [516,60] Request processing started
6/6/2014 5:23:32 PM [516,60] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:32 PM [516,60] RawUrl: /owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:32 PM [516,60] Query String parameters:
6/6/2014 5:23:32 PM [516,60]     oeh: 1
6/6/2014 5:23:32 PM [516,60]     ns: MsgListView
6/6/2014 5:23:32 PM [516,60]     ev: PreviousPage
6/6/2014 5:23:32 PM [516,60] Form: 
6/6/2014 5:23:32 PM [516,60] OWA Session details
6/6/2014 5:23:32 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:32 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:32 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:32 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:32 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:32 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:32 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:32 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:32 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:32 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:32 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:32 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:32 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:32 PM [516,60] Request processing finished
6/6/2014 5:23:32 PM [516,60] #############################################################
6/6/2014 5:23:32 PM [516,60] Request processing started
6/6/2014 5:23:32 PM [516,60] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:32 PM [516,60] RawUrl: /owa/ev.owa?oeh=1&ns=MsgListView&ev=PreviousPage
6/6/2014 5:23:32 PM [516,60] Query String parameters:
6/6/2014 5:23:32 PM [516,60]     oeh: 1
6/6/2014 5:23:32 PM [516,60]     ns: MsgListView
6/6/2014 5:23:32 PM [516,60]     ev: PreviousPage
6/6/2014 5:23:32 PM [516,60] Form: 
6/6/2014 5:23:32 PM [516,60] OWA Session details
6/6/2014 5:23:32 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:32 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:32 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:32 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:32 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:32 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:32 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:32 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:32 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:32 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:32 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:32 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:32 PM [516,60] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:32 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:32 PM [516,60] Request processing finished
6/6/2014 5:23:32 PM [516,43] #############################################################
6/6/2014 5:23:32 PM [516,43] Request processing started
6/6/2014 5:23:32 PM [516,43] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9wzAAAJ
6/6/2014 5:23:32 PM [516,43] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAD4nFvXd1BqS4ewWt%2b34QMrAAAEN9wzAAAJ
6/6/2014 5:23:32 PM [516,43] Query String parameters:
6/6/2014 5:23:32 PM [516,43]     ae: Item
6/6/2014 5:23:32 PM [516,43]     a: Preview
6/6/2014 5:23:32 PM [516,43]     t: IPM.Note
6/6/2014 5:23:32 PM [516,43]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9wzAAAJ
6/6/2014 5:23:32 PM [516,43] Form: 
6/6/2014 5:23:32 PM [516,43] OWA Session details
6/6/2014 5:23:32 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:32 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:32 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:32 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:32 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:32 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:32 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:32 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:32 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:32 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:32 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:32 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:32 PM [516,43] [RequestProcessor::ProcessItem] started
6/6/2014 5:23:32 PM [516,43] [RequestProcessor::ProcessItem] Finished
6/6/2014 5:23:32 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:32 PM [516,43] Request processing finished
6/6/2014 5:23:32 PM [516,43] #############################################################
6/6/2014 5:23:32 PM [516,43] Request processing started
6/6/2014 5:23:32 PM [516,43] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9wzAAAJ
6/6/2014 5:23:32 PM [516,43] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAD4nFvXd1BqS4ewWt%2b34QMrAAAEN9wzAAAJ
6/6/2014 5:23:32 PM [516,43] Query String parameters:
6/6/2014 5:23:32 PM [516,43]     ae: Item
6/6/2014 5:23:32 PM [516,43]     a: Preview
6/6/2014 5:23:32 PM [516,43]     t: IPM.Note
6/6/2014 5:23:32 PM [516,43]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9wzAAAJ
6/6/2014 5:23:32 PM [516,43] Form: 
6/6/2014 5:23:32 PM [516,43] OWA Session details
6/6/2014 5:23:32 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:32 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:32 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:32 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:32 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:32 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:32 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:32 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:32 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:32 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:32 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:32 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:32 PM [516,43] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:32 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:32 PM [516,43] Request processing finished
6/6/2014 5:23:37 PM [516,43] #############################################################
6/6/2014 5:23:37 PM [516,43] Request processing started
6/6/2014 5:23:37 PM [516,43] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAAJ
6/6/2014 5:23:37 PM [516,43] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAD4nFvXd1BqS4ewWt%2b34QMrAAAEN9xGAAAJ
6/6/2014 5:23:37 PM [516,43] Query String parameters:
6/6/2014 5:23:37 PM [516,43]     ae: Item
6/6/2014 5:23:37 PM [516,43]     a: Preview
6/6/2014 5:23:37 PM [516,43]     t: IPM.Note.EnterpriseVault.Shortcut
6/6/2014 5:23:37 PM [516,43]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAAJ
6/6/2014 5:23:37 PM [516,43] Form: 
6/6/2014 5:23:37 PM [516,43] OWA Session details
6/6/2014 5:23:37 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:37 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:37 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:37 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:37 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:37 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:37 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:37 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:37 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:37 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:37 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:37 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:37 PM [516,43] [RequestProcessor::ProcessItem] started
6/6/2014 5:23:37 PM [516,43] [RequestProcessor::ProcessItem] Processing EV item
6/6/2014 5:23:37 PM [516,43] [RequestProcessor::ProcessOWAItemAction] started
6/6/2014 5:23:37 PM [516,43] [RequestProcessor::ProcessOWAItemAction] Previewing EV item
6/6/2014 5:23:37 PM [516,43] [Id::EwsId] Converting OwaId to EwsId
6/6/2014 5:23:37 PM [516,43] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
6/6/2014 5:23:37 PM [516,43] [ConvertId::DoConvertId] Converting ID using web services
6/6/2014 5:23:37 PM [516,43] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADQ4NjYzYjc3LWIwY2ItNDg3ZC1iMjczLTA4ZTVkYjQ2NzYzMQBGAAAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAA=
6/6/2014 5:23:37 PM [516,43] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties] Loading properties for: AAMkADQ4NjYzYjc3LWIwY2ItNDg3ZC1iMjczLTA4ZTVkYjQ2NzYzMQBGAAAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAA=
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties] Loaded item properties: 
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   Id: AAMkADQ4NjYzYjc3LWIwY2ItNDg3ZC1iMjczLTA4ZTVkYjQ2NzYzMQBGAAAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAA=
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAB9Up+iiqbWT6PR/JQQ3fLgAEalHCFw
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   Size: 2760
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADQ4NjYzYjc3LWIwY2ItNDg3ZC1iMjczLTA4ZTVkYjQ2NzYzMQAuAAAAAADqKS/EI7X7T4W1P57r8KgzAQD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAA=
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   Archive Id: 1CCDE9C4B54DADE4EB35C9C8D5D3A685A1110000EVSYS
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   Saveset Id: 201003299834396~200506300918390000~Z~20AD36248E6EB6E88FFB3B406B226FA1
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   Original Content Class: urn:content-classes:message
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   Original Size: 21153
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   View Item Ref Count: 
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   Archived Date: 3/29/2010 11:46:41 AM
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   Restored Date: 
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   Post Processed Date: 
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   Last modified time: 5/29/2012 3:43:23 AM
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   PR_URL_NAME: /收件匣/Exclaimer license.EML
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
6/6/2014 5:23:37 PM [516,43] [MailboxItem::LoadProperties]   Original Icon Index: -1
6/6/2014 5:23:37 PM [516,43] [RequestProcessor::ProcessOWAItemAction] Setting response filter: Premium.ArchivedItem
6/6/2014 5:23:37 PM [516,43] [RequestProcessor::ProcessOWAItemAction] Finished
6/6/2014 5:23:37 PM [516,43] [RequestProcessor::ProcessItem] Finished
6/6/2014 5:23:37 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:37 PM [516,43] Request processing finished
6/6/2014 5:23:37 PM [516,43] #############################################################
6/6/2014 5:23:37 PM [516,43] Request processing started
6/6/2014 5:23:37 PM [516,43] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAAJ
6/6/2014 5:23:37 PM [516,43] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAD4nFvXd1BqS4ewWt%2b34QMrAAAEN9xGAAAJ
6/6/2014 5:23:37 PM [516,43] Query String parameters:
6/6/2014 5:23:37 PM [516,43]     ae: Item
6/6/2014 5:23:37 PM [516,43]     a: Preview
6/6/2014 5:23:37 PM [516,43]     t: IPM.Note.EnterpriseVault.Shortcut
6/6/2014 5:23:37 PM [516,43]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAAJ
6/6/2014 5:23:37 PM [516,43] Form: 
6/6/2014 5:23:37 PM [516,43] OWA Session details
6/6/2014 5:23:37 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:37 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:37 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:37 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:37 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:37 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:37 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:37 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:37 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:37 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:37 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:37 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:37 PM [516,43] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:37 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:37 PM [516,43] Request processing finished
6/6/2014 5:23:37 PM [516,43] #############################################################
6/6/2014 5:23:37 PM [516,43] Response filter started
6/6/2014 5:23:37 PM [516,43] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAAJ
6/6/2014 5:23:37 PM [516,43] RawUrl: /owa/Default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAD4nFvXd1BqS4ewWt%2b34QMrAAAEN9xGAAAJ
6/6/2014 5:23:37 PM [516,43] Query String parameters:
6/6/2014 5:23:37 PM [516,43]     ae: Item
6/6/2014 5:23:37 PM [516,43]     a: Preview
6/6/2014 5:23:37 PM [516,43]     t: IPM.Note.EnterpriseVault.Shortcut
6/6/2014 5:23:37 PM [516,43]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAAJ
6/6/2014 5:23:37 PM [516,43] Form: 
6/6/2014 5:23:37 PM [516,43] EV Extensions Resource version: v8.0.3.1845
6/6/2014 5:23:37 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:37 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:37 PM [516,43] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.ArchivedItem
6/6/2014 5:23:37 PM [516,43] Response filter finished
6/6/2014 5:23:38 PM [516,43] #############################################################
6/6/2014 5:23:38 PM [516,43] Request processing started
6/6/2014 5:23:38 PM [516,43] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAAJ
6/6/2014 5:23:38 PM [516,43] RawUrl: /owa/Default.aspx?ae=Item&a=Open&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAD4nFvXd1BqS4ewWt%2b34QMrAAAEN9xGAAAJ
6/6/2014 5:23:38 PM [516,43] Query String parameters:
6/6/2014 5:23:38 PM [516,43]     ae: Item
6/6/2014 5:23:38 PM [516,43]     a: Open
6/6/2014 5:23:38 PM [516,43]     t: IPM.Note.EnterpriseVault.Shortcut
6/6/2014 5:23:38 PM [516,43]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAAJ
6/6/2014 5:23:38 PM [516,43] Form: 
6/6/2014 5:23:38 PM [516,43] OWA Session details
6/6/2014 5:23:38 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:38 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:38 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:38 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:38 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:38 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:38 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:38 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:38 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:38 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:38 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::ProcessItem] started
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::ProcessItem] Processing EV item
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::ProcessOWAItemAction] started
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::ProcessOWAItemAction] Opening archived item
6/6/2014 5:23:38 PM [516,43] [Id::EwsId] Converting OwaId to EwsId
6/6/2014 5:23:38 PM [516,43] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
6/6/2014 5:23:38 PM [516,43] [ConvertId::DoConvertId] Converting ID using web services
6/6/2014 5:23:38 PM [516,43] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADQ4NjYzYjc3LWIwY2ItNDg3ZC1iMjczLTA4ZTVkYjQ2NzYzMQBGAAAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAA=
6/6/2014 5:23:38 PM [516,43] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties] Loading properties for: AAMkADQ4NjYzYjc3LWIwY2ItNDg3ZC1iMjczLTA4ZTVkYjQ2NzYzMQBGAAAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAA=
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties] Loaded item properties: 
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Id: AAMkADQ4NjYzYjc3LWIwY2ItNDg3ZC1iMjczLTA4ZTVkYjQ2NzYzMQBGAAAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAA=
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAB9Up+iiqbWT6PR/JQQ3fLgAEalHCFw
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Size: 2760
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADQ4NjYzYjc3LWIwY2ItNDg3ZC1iMjczLTA4ZTVkYjQ2NzYzMQAuAAAAAADqKS/EI7X7T4W1P57r8KgzAQD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAA=
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Archive Id: 1CCDE9C4B54DADE4EB35C9C8D5D3A685A1110000EVSYS
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Saveset Id: 201003299834396~200506300918390000~Z~20AD36248E6EB6E88FFB3B406B226FA1
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Original Content Class: urn:content-classes:message
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Original Size: 21153
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   View Item Ref Count: 
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Archived Date: 3/29/2010 11:46:41 AM
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Restored Date: 
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Post Processed Date: 
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Last modified time: 5/29/2012 3:43:23 AM
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   PR_URL_NAME: /收件匣/Exclaimer license.EML
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Original Icon Index: -1
6/6/2014 5:23:38 PM [516,43] [Id::OwaId] Returning cached OwaId: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAAJ
6/6/2014 5:23:38 PM [516,43] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
6/6/2014 5:23:38 PM [516,43] [MailboxFolder::LoadProperties] Folder name: 刪除的郵件
6/6/2014 5:23:38 PM [516,43] [MailboxFolder::LoadProperties] Folder path: /刪除的郵件
6/6/2014 5:23:38 PM [516,43] [MailboxFolder::LoadProperties] Non-Deletable: False
6/6/2014 5:23:38 PM [516,43] [WebDAVRequest::Send] Request url: https://localhost/exchange/alex@abc.com/刪除的郵件/1CCDE9C4B54DADE4EB35C9C8D5D3A685A1110000EVSYS!201003299834396.200506300918390000.Z.20AD36248E6EB6E88FFB3B406B226FA1.EML
6/6/2014 5:23:38 PM [516,43] [WebDAVRequest::Send] Request method: PROPFIND
6/6/2014 5:23:38 PM [516,43] [WebDAVRequest::Send] Request timeout (milliseconds): 30000
6/6/2014 5:23:38 PM [516,43] [WebDAVRequest::Send] Adding FBA cookies
6/6/2014 5:23:38 PM [516,43] [WebDAVRequest::Send] Adding Depth header: 0
6/6/2014 5:23:38 PM [516,43] [WebDAVRequest::Send] Request body: <?xml version="1.0"?><d:propfind xmlns:d="DAV:" ><d:prop><mapi:x0FFF0102 xmlns:mapi="http://schemas.microsoft.com/mapi/proptag/" /><exch:outlookmessageclass xmlns:exch="http://schemas.microsoft.com/exchange/" /></d:prop></d:propfind>
6/6/2014 5:23:38 PM [516,43] [WebDAVRequest::Send] Exception sending WebDAV request: System.Net.WebException: The remote server returned an error: (501) Not Implemented.
   at System.Net.HttpWebRequest.GetResponse()
   at Symantec.EnterpriseVault.Owa.ExchangeStoreAccess.WebDAVRequest.Send()
6/6/2014 5:23:38 PM [516,43] [EVServerRequest::CreateRequest] Sending request to: /restoreo2k.asp?vaultid=1CCDE9C4B54DADE4EB35C9C8D5D3A685A1110000EVSYS&savesetid=201003299834396~200506300918390000~Z~20AD36248E6EB6E88FFB3B406B226FA1&mbx=alex@abc.com&server=abc07BE&restorelocation=3&foldername=刪除的郵件
6/6/2014 5:23:38 PM [516,43] [RestoreRequest::Send] Exception sending request to restore item: System.UriFormatException: Invalid URI: The format of the URI could not be determined.
   at System.Uri.CreateThis(String uri, Boolean dontEscape, UriKind uriKind)
   at System.Net.WebRequest.Create(String requestUriString)
   at Symantec.EnterpriseVault.Owa.EVServerRequests.EVServerRequest.CreateRequest(String sUrl)
   at Symantec.EnterpriseVault.Owa.EVServerRequests.RestoreRequest.Send()
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::RestoreAndActOnItem] Item not restored
6/6/2014 5:23:38 PM [516,43] [Id::OwaId] Returning cached OwaId: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAAJ
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::RestoreAndActOnMailboxItem] Redirecting client to: /owa/?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAD4nFvXd1BqS4ewWt%2b34QMrAAAEN9xGAAAJ&EVItemUnavailable=1
6/6/2014 5:23:38 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:38 PM [516,43] Request processing finished
6/6/2014 5:23:38 PM [516,43] #############################################################
6/6/2014 5:23:38 PM [516,43] Request processing started
6/6/2014 5:23:38 PM [516,43] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAAJ&EVItemUnavailable=1
6/6/2014 5:23:38 PM [516,43] RawUrl: /owa/Default.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAD4nFvXd1BqS4ewWt%2b34QMrAAAEN9xGAAAJ&EVItemUnavailable=1
6/6/2014 5:23:38 PM [516,43] Query String parameters:
6/6/2014 5:23:38 PM [516,43]     ae: Item
6/6/2014 5:23:38 PM [516,43]     a: Open
6/6/2014 5:23:38 PM [516,43]     t: ipm.note.enterprisevault.shortcut
6/6/2014 5:23:38 PM [516,43]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAAJ
6/6/2014 5:23:38 PM [516,43]     EVItemUnavailable: 1
6/6/2014 5:23:38 PM [516,43] Form: 
6/6/2014 5:23:38 PM [516,43] OWA Session details
6/6/2014 5:23:38 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:38 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:38 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:38 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:38 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:38 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:38 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:38 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:38 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:38 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:38 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::ProcessItem] started
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::ProcessItem] Processing EV item
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::ProcessOWAItemAction] started
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::ProcessOWAItemAction] Opening shortcut due to unavailable item
6/6/2014 5:23:38 PM [516,43] [Id::EwsId] Converting OwaId to EwsId
6/6/2014 5:23:38 PM [516,43] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
6/6/2014 5:23:38 PM [516,43] [ConvertId::DoConvertId] Converting ID using web services
6/6/2014 5:23:38 PM [516,43] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADQ4NjYzYjc3LWIwY2ItNDg3ZC1iMjczLTA4ZTVkYjQ2NzYzMQBGAAAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAA=
6/6/2014 5:23:38 PM [516,43] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties] Loading properties for: AAMkADQ4NjYzYjc3LWIwY2ItNDg3ZC1iMjczLTA4ZTVkYjQ2NzYzMQBGAAAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAA=
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties] Loaded item properties: 
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Id: AAMkADQ4NjYzYjc3LWIwY2ItNDg3ZC1iMjczLTA4ZTVkYjQ2NzYzMQBGAAAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAA=
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAB9Up+iiqbWT6PR/JQQ3fLgAEalHCFw
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Size: 2760
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADQ4NjYzYjc3LWIwY2ItNDg3ZC1iMjczLTA4ZTVkYjQ2NzYzMQAuAAAAAADqKS/EI7X7T4W1P57r8KgzAQD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAA=
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Archive Id: 1CCDE9C4B54DADE4EB35C9C8D5D3A685A1110000EVSYS
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Saveset Id: 201003299834396~200506300918390000~Z~20AD36248E6EB6E88FFB3B406B226FA1
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Original Content Class: urn:content-classes:message
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Original Size: 21153
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   View Item Ref Count: 
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Archived Date: 3/29/2010 11:46:41 AM
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Restored Date: 
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Post Processed Date: 
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Last modified time: 5/29/2012 3:43:23 AM
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   PR_URL_NAME: /收件匣/Exclaimer license.EML
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
6/6/2014 5:23:38 PM [516,43] [MailboxItem::LoadProperties]   Original Icon Index: -1
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::ProcessOWAItemAction] Setting response filter: Premium.ArchivedItemUnavailable
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::ProcessOWAItemAction] Finished
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::ProcessItem] Finished
6/6/2014 5:23:38 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:38 PM [516,43] Request processing finished
6/6/2014 5:23:38 PM [516,43] #############################################################
6/6/2014 5:23:38 PM [516,43] Request processing started
6/6/2014 5:23:38 PM [516,43] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAAJ&EVItemUnavailable=1
6/6/2014 5:23:38 PM [516,43] RawUrl: /owa/Default.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAD4nFvXd1BqS4ewWt%2b34QMrAAAEN9xGAAAJ&EVItemUnavailable=1
6/6/2014 5:23:38 PM [516,43] Query String parameters:
6/6/2014 5:23:38 PM [516,43]     ae: Item
6/6/2014 5:23:38 PM [516,43]     a: Open
6/6/2014 5:23:38 PM [516,43]     t: ipm.note.enterprisevault.shortcut
6/6/2014 5:23:38 PM [516,43]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAAJ
6/6/2014 5:23:38 PM [516,43]     EVItemUnavailable: 1
6/6/2014 5:23:38 PM [516,43] Form: 
6/6/2014 5:23:38 PM [516,43] OWA Session details
6/6/2014 5:23:38 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:38 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:38 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:38 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:38 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:38 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:38 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:38 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:38 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:38 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:38 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:38 PM [516,43] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:38 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:38 PM [516,43] Request processing finished
6/6/2014 5:23:38 PM [516,43] #############################################################
6/6/2014 5:23:38 PM [516,43] Response filter started
6/6/2014 5:23:38 PM [516,43] Url: http://webmail.abc.com/owa/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAAJ&EVItemUnavailable=1
6/6/2014 5:23:38 PM [516,43] RawUrl: /owa/Default.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAADqKS%2fEI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt%2b34QMrAAAEN19iAAD4nFvXd1BqS4ewWt%2b34QMrAAAEN9xGAAAJ&EVItemUnavailable=1
6/6/2014 5:23:38 PM [516,43] Query String parameters:
6/6/2014 5:23:38 PM [516,43]     ae: Item
6/6/2014 5:23:38 PM [516,43]     a: Open
6/6/2014 5:23:38 PM [516,43]     t: ipm.note.enterprisevault.shortcut
6/6/2014 5:23:38 PM [516,43]     id: RgAAAADqKS/EI7X7T4W1P57r8KgzBwD4nFvXd1BqS4ewWt+34QMrAAAEN19iAAD4nFvXd1BqS4ewWt+34QMrAAAEN9xGAAAJ
6/6/2014 5:23:38 PM [516,43]     EVItemUnavailable: 1
6/6/2014 5:23:38 PM [516,43] Form: 
6/6/2014 5:23:38 PM [516,43] EV Extensions Resource version: v8.0.3.1845
6/6/2014 5:23:38 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:38 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:38 PM [516,43] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.ArchivedItemUnavailable
6/6/2014 5:23:38 PM [516,43] Response filter finished
6/6/2014 5:23:41 PM [516,43] #############################################################
6/6/2014 5:23:41 PM [516,43] Request processing started
6/6/2014 5:23:41 PM [516,43] Url: http://webmail.abc.com/owa/redir.aspx?URL=/Viewmessage.asp?vaultid=1CCDE9C4B54DADE4EB35C9C8D5D3A685A1110000EVSYS&savesetid=201003299834396~200506300918390000~Z~20AD36248E6EB6E88FFB3B406B226FA1&OWA2007=1&OWA2007Url=http%253a%252f%252fwebmail.abc.com%252fowa%252f
6/6/2014 5:23:41 PM [516,43] RawUrl: /owa/redir.aspx?URL=%2fViewmessage.asp%3fvaultid%3d1CCDE9C4B54DADE4EB35C9C8D5D3A685A1110000EVSYS%26savesetid%3d201003299834396~200506300918390000~Z~20AD36248E6EB6E88FFB3B406B226FA1%26OWA2007%3d1%26OWA2007Url%3dhttp%253a%252f%252fwebmail.abc.com%252fowa%252f
6/6/2014 5:23:41 PM [516,43] Query String parameters:
6/6/2014 5:23:41 PM [516,43]     URL: /Viewmessage.asp?vaultid=1CCDE9C4B54DADE4EB35C9C8D5D3A685A1110000EVSYS&savesetid=201003299834396~200506300918390000~Z~20AD36248E6EB6E88FFB3B406B226FA1&OWA2007=1&OWA2007Url=http%3a%2f%2fwebmail.abc.com%2fowa%2f
6/6/2014 5:23:41 PM [516,43] Form: 
6/6/2014 5:23:41 PM [516,43] OWA Session details
6/6/2014 5:23:41 PM [516,43]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:41 PM [516,43]     Authentication type: Basic
6/6/2014 5:23:41 PM [516,43]     Authenticated user: abc\user2
6/6/2014 5:23:41 PM [516,43]     Client IP Address: 192.168.113.228
6/6/2014 5:23:41 PM [516,43]     Server IP Address: 10.1.60.87
6/6/2014 5:23:41 PM [516,43]     Host: webmail.abc.com
6/6/2014 5:23:41 PM [516,43] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:41 PM [516,43] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:41 PM [516,43] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:41 PM [516,43] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:41 PM [516,43] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:41 PM [516,43] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:41 PM [516,43] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:41 PM [516,43] Request processing finished
6/6/2014 5:23:52 PM [516,60] #############################################################
6/6/2014 5:23:52 PM [516,60] Request processing started
6/6/2014 5:23:52 PM [516,60] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
6/6/2014 5:23:52 PM [516,60] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
6/6/2014 5:23:52 PM [516,60] Query String parameters:
6/6/2014 5:23:52 PM [516,60]     oeh: 1
6/6/2014 5:23:52 PM [516,60]     ns: Notify
6/6/2014 5:23:52 PM [516,60]     ev: Poll
6/6/2014 5:23:52 PM [516,60] Form: 
6/6/2014 5:23:52 PM [516,60] OWA Session details
6/6/2014 5:23:52 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:52 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:52 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:52 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:52 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:52 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:52 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:52 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:52 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:52 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:52 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:52 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:52 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:52 PM [516,60] Request processing finished
6/6/2014 5:23:52 PM [516,60] #############################################################
6/6/2014 5:23:52 PM [516,60] Request processing started
6/6/2014 5:23:52 PM [516,60] Url: http://webmail.abc.com/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
6/6/2014 5:23:52 PM [516,60] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
6/6/2014 5:23:52 PM [516,60] Query String parameters:
6/6/2014 5:23:52 PM [516,60]     oeh: 1
6/6/2014 5:23:52 PM [516,60]     ns: Notify
6/6/2014 5:23:52 PM [516,60]     ev: Poll
6/6/2014 5:23:52 PM [516,60] Form: 
6/6/2014 5:23:52 PM [516,60] OWA Session details
6/6/2014 5:23:52 PM [516,60]     User agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
6/6/2014 5:23:52 PM [516,60]     Authentication type: Basic
6/6/2014 5:23:52 PM [516,60]     Authenticated user: abc\user2
6/6/2014 5:23:52 PM [516,60]     Client IP Address: 192.168.113.228
6/6/2014 5:23:52 PM [516,60]     Server IP Address: 10.1.60.87
6/6/2014 5:23:52 PM [516,60]     Host: webmail.abc.com
6/6/2014 5:23:52 PM [516,60] Primary SMTP Address: alex@abc.com
6/6/2014 5:23:52 PM [516,60] EV Extensions DLL version: 8.0.3.0
6/6/2014 5:23:52 PM [516,60] [RequestProcessor::StartImpersonation] Impersonating logged on user
6/6/2014 5:23:52 PM [516,60] [EVContext::Initialise] EVContext intialised at 6/6/2014 5:23:20 PM
6/6/2014 5:23:52 PM [516,60] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
6/6/2014 5:23:52 PM [516,60] [EVContext::IsValidBrowser] Returning: True
6/6/2014 5:23:52 PM [516,60] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
6/6/2014 5:23:52 PM [516,60] [RequestProcessor:StopImpersonation] Stopped impersonation
6/6/2014 5:23:52 PM [516,60] Request processing finished