The client IP address for an Outlook 2010 client is not logged in Exchange when you use the Get-LogonStatistics command

Article ID: 2292750 - View products that this article applies to.
Expand all | Collapse all

Symptoms

When you use the Get-LogonStatistics command in either Microsoft Exchange Server 2007 or Microsoft Exchange Server 2010, or you use Exchange System Manager (ESM) in Microsoft Exchange Server 2003, you may not see the IP address of clients who are running Microsoft Outlook 2010.

For example, the Get-LogonStatistics cmdlet may return data that resembles the following:

The screen shot for the return data when you run the Get-LogonStatistics cmdlet.

Note  In this figure, entries for the ClientIPAddress are blank. Other entry attributes that are not shown may also be blank, such as for ClientName.

In ESM, you may see data that resembles the following:

The screen shot for the data in Exchange System Manager.

 

Cause

Because these attributes can be considered as Personally Identifiable Information (PII), Outlook 2010 does not send this information to Exchange.

Resolution

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756  How to back up and restore the registry in Windows

Note The following section contains steps that change how Outlook treats personally identifiable information (PII). After you follow these steps, Outlook will send information that some individuals or companies may consider PII. Users and administrators must consider who will have access to the Outlook-generated information that will be stored on the Exchange servers. It is your responsibility to follow all your company's or organization's policies for the correct handling of PII.

  • Exchange 2003 or Exchange 2007

To configure an Outlook 2010 client to send additional logon statistics data to the Exchange 2003 or Exchange 2007 servers it connects to, follow these steps:

    1. Exit Outlook 2010.
    2. Start Registry Editor:

      For Windows Vista and for Windows 7:
      1. Click Start  Start button , type regedit in the Start Search box, and then press ENTER.
        User Account Control permission  If you are prompted for an administrator password or for confirmation, type the password, or click Allow.
      For Windows XP:
      1. Click Start, click Run, type regedit, and then click OK.
    3. Locate and then click the following registry subkey:
      HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\CancelRPC
      Note If the CancelRPC key does not exist, create this key. To do this, follow these steps:
      1. Click to select the Outlook subkey.
      2. On the Edit menu, point to New, and then click Key.
      3. Type CancelRPC, and then press ENTER.
      4. Select the CancelRPC subkey, and then go to step 4.
    4. On the Edit menu, point to New, and then click DWORD Value.
    5. Type EnablePerfTracking, and then press ENTER.
    6. On the Edit menu, click Modify.
    7. Type 28, and then click OK.
      Note This is a hexadecimal value. 
    8. Exit Registry Editor.
    9. Start Outlook 2010.
  • Exchange 2010

The above steps do not work for Exchange 2010. However, you can obtain client IP information from the log files in the following folder on your Client Access Server (CAS).

\Program Files\Microsoft\Exchange Server\v14\Logging\RPC Client Access

The log files are named RCA_date-#.log (where date is the date the log was collected and # is an index number starting at 1). This logging is enabled by default, so you should not have to make any configuration changes to collect this information.

The following figure is an example of the information you will find in this log file.

The screen shot for the information in an RCA log file.

Properties

Article ID: 2292750 - Last Review: September 3, 2013 - Revision: 9.0
Applies to
  • Microsoft Outlook 2010
  • Microsoft Exchange Server 2010 Enterprise
  • Microsoft Exchange Server 2007 Enterprise Edition
  • Microsoft Exchange Server 2003 Enterprise Edition
Keywords: 
KB2292750

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com