Come across an issue where the customer was complaining their CUCI-lync software agent was displaying calls made to another phone user, effectively another user extension. This gave the CUCI-Lync user the ability to operate the call control fetures for the other extension, like placing the caller on hold, transfer, disconnect the call etc.

The local support team check associated User Device Profiles (UDP) for the CUCI-Lync user, this is done on the End User page on CUCM. This only showed a singel UDP being associated. So how can this be?

Also, in CUCI-Lync settings, the user had selcted only their UDP for CUCI-Lync to control.

Ok, two significant items here. One, I found the user was also associated to a Device. Even though this Device has no line extension enabled, and is solely for Users to log into via EM, CUCI-Lync can still see the Device and also can see the Logged in User. Thats correct, if an EM user logs onto that Device, CUCI-Lync can indeed see that UDP. if CUCI-Lync can see the UDP then it can also see incoming calls to that UDP. Two, by selecting what device to control in the CUCI-Lync settings page, this only sets the Primary Devcie, hence it will use the selected Device or UDP for Outbound calling. However it will see all incomming calls on all devices/UDPs including UDPs that are not directly associated to the User but have logged onto a Device that is associated to a User.

So by removing the Device association from the User, this in effect removed the ability for CUCI-Lync to see incomming calls to the UDP logged onto the Device is question. I hope this makes sense.