|
Microsoft Lync Server 2010: Access Edge Policy
You can configure federation,
remote user access, and public instant messaging (IM) connectivity in the Lync Server
Control Panel for a Lync user. These settings control the following types of Lync
Server 2010 communications:
The
Enable communications with federated users setting controls whether a user can
communicate with users in another organization over a federated partner connection.
The
Enable communications with remote users setting controls whether a user in your
organization can connect through an Edge Server to Lync Server 2010 when the user
is outside of the internal network.
The
Enable communications with public users setting controls whether a user can
communicate with users of public IM service providers. Public IM connectivity requires
additional licenses. A user does not need to be enabled for federation to be enabled
for public IM connectivity.
You must first create
user policies, and then apply those policies to individual users. To use federation,
remote user access features, and public IM connectivity, you must first deploy the
appropriate Lync Server 2010 topology. To use federation and public IM connectivity,
you must enable federation and public IM connectivity at the global level.
Run the following command to see the list of available
external access policies.
PS C:\Users\user> Get-CsExternalAccessPolicy
Identity
: Global
Description
:
EnableFederationAccess
: False
EnablePublicCloudAccess
: False
EnablePublicCloudAudioVideoAccess : False
EnableOutsideAccess
: False
Identity
: Tag:Allow Federation+Public+Outside Access
Description
: Migrated
EnableFederationAccess
: True
EnablePublicCloudAccess
: True
EnablePublicCloudAudioVideoAccess : False
EnableOutsideAccess
: True
Identity
: Tag:Allow Federation+Public Access
Description
: Migrated
EnableFederationAccess
: True
EnablePublicCloudAccess
: True
EnablePublicCloudAudioVideoAccess : False
EnableOutsideAccess
: False
Identity
: Tag:Allow
Federation+Outside Access
Description
: Migrated
EnableFederationAccess
: True
EnablePublicCloudAccess
: False
EnablePublicCloudAudioVideoAccess : False
EnableOutsideAccess
: True
Identity
: Tag:Allow Federation Access
Description
: Migrated
EnableFederationAccess
: True
EnablePublicCloudAccess
: False
EnablePublicCloudAudioVideoAccess : False
EnableOutsideAccess
: False
Identity
: Tag:Allow Public+Outside Access
Description
: Migrated
EnableFederationAccess
: False
EnablePublicCloudAccess
: True
EnablePublicCloudAudioVideoAccess : False
EnableOutsideAccess
: True
Identity
: Tag:Allow Outside Access
Description
: Migrated
EnableFederationAccess
: False
EnablePublicCloudAccess
: False
EnablePublicCloudAudioVideoAccess : False
EnableOutsideAccess
: True
Identity
: Tag:Allow Public Access
Description
: Migrated
EnableFederationAccess
: False
EnablePublicCloudAccess
: True
EnablePublicCloudAudioVideoAccess : False
EnableOutsideAccess
: False
Identity
: Tag:Allow No Access
Description
: Migrated
EnableFederationAccess
: False
EnablePublicCloudAccess
: False
EnablePublicCloudAudioVideoAccess : False
EnableOutsideAccess
: False
Step by step: To create a user policy
Open Lync Server 2010 Control Panel.
Click External User Access, click Access Edge Policy, and then do one
of the following:
·
Click New,
and then click User policy. In
Create Access Edge Policy, in the Name
field, create a unique name that indicates what the user policy covers (for example,
NoFederation for a user policy that does not enable communications with federated
users).
·
Click the appropriate policy listed in the table,
click Edit, and then click
Modify.
Do the following:
·
To enable federation, select the
Enable communications with federated users check box.
·
To enable remote user access, select the
Enable communications with remote users check box.
·
To enable public IM connectivity, select
the Enable communications with public users check box.
Click Commit.
To configure a user policy for a specific user account
Open Lync Server 2010 Control Panel.
Click Users, and then search on the
user account that you want to configure.
In the table that lists the search results, click the user account, click
Edit, and then click Modify.
In Edit Lync Server User under
Access Edge policy, select the user policy that you want to apply.
To see the policy applied
to a user
Run the following command to see the access edge policy assigned to a user.
PS C:\Users\user>
Get-CsUser -Identity lynca
ExternalAccessPolicy : Allow Federation+Public+Outside Access
By
Ram K Ojha
|