When you use the Get-LogonStatistics command in either Microsoft Exchange Server 2007 or Microsoft Exchange Server 2010, or you use Exchange System Manager (ESM) in Microsoft Exchange Server 2003, you may not see the IP address of clients who are running Microsoft Outlook 2010.
For example, the Get-LogonStatistics cmdlet may return data that resembles the following:
Note In this figure, entries for the ClientIPAddress are blank. Other entry attributes that are not shown may also be blank, such as for ClientName.
In ESM, you may see data that resembles the following:
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows
Note The following section contains steps that change how Outlook treats personally identifiable information (PII). After you follow these steps, Outlook will send information that some individuals or companies may consider PII. Users and administrators must consider who will have access to the Outlook-generated information that will be stored on the Exchange servers. It is your responsibility to follow all your company's or organization's policies for the correct handling of PII.
- Exchange 2003 or Exchange 2007
To configure an Outlook 2010 client to send additional logon statistics data to the Exchange 2003 or Exchange 2007 servers it connects to, follow these steps:
- Exit Outlook 2010.
- Start Registry Editor:
For Windows Vista and for Windows 7:
- Click Start , type regedit in the Start Search box, and then press ENTER.If you are prompted for an administrator password or for confirmation, type the password, or click Allow.
- Click Start, click Run, type regedit, and then click OK.
- Click Start , type regedit in the Start Search box, and then press ENTER.
- Locate and then click the following registry subkey: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\CancelRPCNote If the CancelRPC key does not exist, create this key. To do this, follow these steps:
- Click to select the Outlook subkey.
- On the Edit menu, point to New, and then click Key.
- Type CancelRPC, and then press ENTER.
- Select the CancelRPC subkey, and then go to step 4.
- On the Edit menu, point to New, and then click DWORD Value.
- Type EnablePerfTracking, and then press ENTER.
- On the Edit menu, click Modify.
- Type 28, and then click OK.
Note This is a hexadecimal value.
- Exit Registry Editor.
- Start Outlook 2010.
- Exchange 2010
The above steps do not work for Exchange 2010. However, you can obtain client IP information from the log files in the following folder on your Client Access Server (CAS).
\Program Files\Microsoft\Exchange Server\v14\Logging\RPC Client Access
The log files are named RCA_date-#.log (where date is the date the log was collected and # is an index number starting at 1). This logging is enabled by default, so you should not have to make any configuration changes to collect this information.
The following figure is an example of the information you will find in this log file.