Yesterday, we covered how to dump an OCS Edge Server's list of trusted servers, including using PSExec.exe as a workaround to it not exposing the list over remote WMI calls.

It turns out the OCS Proxy Server uses a different WMI path, but it can be called remotely.

    $internal = Get-WmiObject -Query 'SELECT * from MSFT_SIPRemoteAddressData' -ComputerName $computer | % { $_.Server.ToLower(); }

Why they decided it needed a different query I will never know. 

As before, save yourself some brain cells and canonicalize ToLower() (or ToUpper() for all I care) so [Array]::IndexOf() will work.