When you use the Get-LogonStatistics command in either Microsoft Exchange Server 2007 or Microsoft Exchange Server 2010, or you use Exchange System Manager (ESM) in Microsoft Exchange Server 2003, you may not see the IP address of clients who are running Microsoft Outlook 2010.
For example, the Get-LogonStatistics cmdlet may return data that resembles the following:
Note In this figure, entries for the ClientIPAddress are blank. Other entry attributes that are not shown may also be blank, such as for ClientName.
In ESM, you may see data that resembles the following:
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows
Note The following section contains steps that change how Outlook treats personally identifiable information (PII). After you follow these steps, Outlook will send information that some individuals or companies may consider PII. Users and administrators must consider who will have access to the Outlook-generated information that will be stored on the Exchange servers. It is your responsibility to follow all your company's or organization's policies for the correct handling of PII.
To configure an Outlook 2010 client to send additional logon statistics data to the Exchange 2003 or Exchange 2007 servers it connects to, follow these steps:
The above steps do not work for Exchange 2010. However, you can obtain client IP information from the log files in the following folder on your Client Access Server (CAS).
\Program Files\Microsoft\Exchange Server\v14\Logging\RPC Client Access
The log files are named RCA_date-#.log (where date is the date the log was collected and # is an index number starting at 1). This logging is enabled by default, so you should not have to make any configuration changes to collect this information.
The following figure is an example of the information you will find in this log file.
Article ID: 2292750 - Last Review: 09/03/2013 03:57:00 - Revision: 9.0