Event ID - 1137

Event Id1137
SourceMSExchangeDS ExDS Interface
DescriptionInternal event: Function ds_read completed with an elapsed time of 0.
Event InformationAccording TO Microsoft:
To monitor OWA client connections to the directory service and the information store on the Exchange Server computer:

1. Start the Microsoft Exchange Server Administrator progam.
2. Click the server you want to monitor, and on the File menu, click Properties.
3. Click the Diagnostics Logging tab.
4. Click MSExchangeDS in the left pane, and in the right pane, set Security, ExDS Interface, MAPI Interface, Directory Access, LDAP Interface, and Name Resolution to Maximum.
5. Click the plus sign (+) by MSExchangeIS in the left pane, click System, and then in right pane, set Connections and General to Maximum.
6. Under MSExchangeIS, click Private, and set General and Logons to Maximum.

If you have more than one OWA server, you can modify the RPC Binding order in the registry to allow logging to show the binding of the OWA servers IP address to the directory service port:

If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

1. Click Start, click Run, type Regedit in the Open box, and then click OK.
2. Locate the following registry key.
HKEY_Local_Machine\Software\Microsoft\Exchange\Exchange Provider
3. Click RPC_Binding_Order, and then remove NCALRPC from the binding order value in the right pane.
Reference LinksXWEB: Diagnostic Logging Levels for OWA Defined in the Exchange Administrator Program

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.