Too many event id 4624 and 4634 why?

Copper Contributor

Hi,

i've on prem 2016 cu19 2 node exchange with mapi over http connection enable protocol for client connection.

in front of exchange an arraynetworks load balancer.

Since about 3/4 days splunk show me that many event id 4624 and event id 4634 are logged on both server exhange.

By the way, the 2 server are already restarted 4/5 days ago.

I've check for http time reconnection option or something like this, some user are about 3000 connect and reconnect during 24 hours, some other user are about 19000/20000 connection/reconnection.

all the client are win10 21h2 and office2016 both last patch.

User with many connection/reconnection working only with pc with outlook.

all works fine but my question is if is normal so many connection/reconnection

tks, livio

0 Replies