Powershell – Lync Map a SIP User to the IP Address it came from

i need testers on this one.... please try it if you want and let me know the results....

basically it will discover what sip users are registered against the particular FE server and report on its client version / sip address and the originating IP address..

can be helpful if you want to identify multiple  clients and where they are logging in from...


$computername = $env:COMPUTERNAME
$domain = [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()
$strdomain = $domain.name
$lyncserver = $computername + "." + $strdomain
Import-Module lync

$SqlServer = $lyncserver + "\RTCLOCAL"
$SqlCatalog = "RTCDYN"
$SqlQuery = "select * from RegistrarEndpoint"
#*************** Query Above *******************************************************************************
$SqlConnection = New-Object System.Data.SqlClient.SqlConnection
$SqlConnection.ConnectionString = "Server = $SqlServer; Database = $SqlCatalog; Integrated Security = True"
$SqlCmd = New-Object System.Data.SqlClient.SqlCommand
$SqlCmd.CommandText = $SqlQuery
$SqlCmd.Connection = $SqlConnection
$SqlAdapter = New-Object System.Data.SqlClient.SqlDataAdapter
$SqlAdapter.SelectCommand = $SqlCmd
$DataSet = New-Object System.Data.DataSet


$tempstore = $dataset.tables[0].rows

foreach ($t in $tempstore)
 if ($t.isserversource -ne "False")
        $bytearray0 = $t.clientapp
        $bytearray1 = $t.contactinfo
 $bytearray2 = $t.sipheaderfrom
 $EncodingType = "System.Text.ASCIIEncoding"
 $Encode = new-object $EncodingType
 $clientapp = $Encode.GetString($ByteArray0)
        $contactinfo = $encode.getstring($bytearray1)
 $sipheaderfrom = $encode.getstring($bytearray2)
 $c = $contactinfo.split(';')
 $t = $c[0].split(':')
 $clientip = $t[1]
 write-host "SIP USER   : `t`t" $sipheaderfrom
   write-host "Client IP  : `t`t" $clientip    
 write-host "Client App : `t`t" $clientapp 


Comments (10)

  1. David Tucker says:

    rtcdyn.dbo.RegistrarEndpoint.SipHeaderFrom is the users SIP address not an IP address.

  2. Anup Swain says:

    IP address comes from contactinfo table.

     $contactinfo = $encode.getstring($bytearray1)

  3. Alex Parten says:

    this is very useful…but is there any way to export the results in a file?

  4. Boštjan says:

    I don't get IP's as an output of running this script on Lync FE.

  5. Lisa.zheng says:

    I didn't get the IP addresss. And i can get the same information for the contactinfo for the same user signed in differenent places. i don't think this colume stores the IP address.

  6. D Bacon says:

    I’m not getting IP information either. The ContactInfo variable in the rtcdyn.dbo.RegistrarEndpoint table only stores in the SipAddress. I’m running 2013, could this be a 2010 vs 2013 thing?

  7. GdL says:

    As stated above by Anup Swain

    IP address comes from contactinfo table.

    $contactinfo = $encode.getstring($bytearray1)

  8. Marc says:

    It would be good though to understand how to compile this code in something usable 🙂

  9. Leo says:

    Thank you for the Script.
    I also don’t see the IP listed. Yes, I know it comes from $contactinfo = $encode.getstring($bytearray1) but it is not listed after running the script. Is there a way to see the IP of the user session?


  10. kjp says:

    I’m not seeing any internal IP addresses, but I do see the external addresses. What are the criteria that Lync uses to populate this field? Is there possibly a different field for internal IP’s? I like being able to pull the external IP addresses, but
    I am also looking for the internal IP’s. Nice work John. I’ll talk to someone who knows SQL and see if they can point me to the correct field for the internal IP’s.

Skip to main content