Skip to main content

Enable or Disable open federation In Lync Server or Skype for Business Server.


Enable or Disable open federation In Lync Server or Skype for Business Server.

Federation is a trust relationship between your organization and Partner Company in Lync or Skype for Business server and it is not related to, or dependent upon, an Active Directory trust relationship.
You can easily enable or disable partner domain discovery.
 If you Enable partner domain discovery option, then Lync Server uses Domain Name System (DNS) records to try to discover domains not listed in the allowed domains list, automatically evaluating incoming traffic from discovered federated partners and limiting or blocking that traffic based on trust level, amount of traffic, and administrator settings.
 If you do not select this option, federated user access is enabled only for users in the domains that you include on the allowed domains list.
How to enable open federation / partner domain discovery?
Using Lync Control Panel:
1.    Open Lync Server Control panel.
a.     Once Lync control panel open, click on “External User Access”
b.    Under external user access > click on “Access Edge Configuration”.
c.     On the Access Edge Configuration page, click Global, click Edit, and then click Show details.
 
d.    In Edit Access Edge Configuration, under Enable communications with federated users, select the Enable partner domain discovery check box to enable automatic discovery of partner domains.

e.     Click Commit.

 


Using Lync Server Management Shell:
Run below PowerShell command in order to open federation.
Set-CsAccessEdgeConfiguration -UseDnsSrvRouting -EnablePartnerDiscovery $True 

How to disable open federation?
Using Lync Server Control Panel:
1.    Open Lync Server Control panel > under “External User Access” > Click “Access Edge Configuration”.
2.    Uncheck the Enable partner domain discovery check box to disable automatic discovery of partner domains.

3.    Then Click Commit. 
Using Lync Server Management Shell:
 Set-CsAccessEdgeConfiguration -UseDnsSrvRouting -EnablePartnerDiscovery $False 

Applicable to: Lync Server 2013, Skype for Business 2015.
Reference:
https://technet.microsoft.com/en-us/library/gg182550%28v=ocs.15%29.aspx

Thank you.

Comments

Popular posts from this blog

Outlook Add-in for Skype meeting getting disable after restarting Outlook.

Issue: Outlook Add-in for Lync meeting getting disable after restarting Outlook.
Problem Statement: Outlook Add-ins gets install automatically when Office 2013 installs (Lync and Skype for Business clients are part of Office package). Add-ins name is Lync Meeting Scheduling Outlook Addin or Skype meeting Add-in for Microsoft Office 2013. Sometime if other add-ins conflict with Outlook add-ins then outlook add-in keep getting disabled. And user has to enable it manually after Outlook restarts. 
Resolution: By default Lync Meeting Scheduling Outlook Addin or Skype Meeting Add-in for Microsoft Office 2013 installs wit load behavior "Load at Startup". However due to some conflict users Lync or Skype add-ins load behavior get changed to loaded instead of "Load at Startup" had to re-enable Lync Meeting Add-In in each time Outlook 2013 was started as it was not set to "Load at Startup". Look at the below screenshot. Now question is how we can change load behavior …

Unable to share desktop in Skype for Business?

Unable to share desktop in Skype for Business?
You can show your entire desktop or just a program to everyone in a Skype for Business Meeting, call, or instant messaging (IM) conversation. However sometime this feature does not work and give different errors.  Error message: ·Cannot start Desktop/Application Sharing due to network issues. ·An error occurred during the screen presentation. Resolution: There are multiple thing which may affect application/desktop sharing. 1.Make sure application / desktop sharing enabled on Skype for Business / Lync Server. SfB /Lync Control Panel > Conferencing > Conferencing policy > select Global or create new policy and set enable ‘Enable application and desktop sharing’. Refer below image. 2.Make sure your Skype for Business (Lync) client is updated with latest cumulative updates. Download latest update Skype (Lync) client. 3.Update your Video and Display drivers. a.Go to Start > Control panel. b.Search for Device Manager, and then open it. c.Find V…

Unable to login to Skype for Business client?

Unable to login to Skype for Business client? In order to sign-in on Skype (Lync) you must have login credential provided to you from your organization. ·Sign-in address: bilag@orgname.com ·User name: orgname\bilag ·Password: ************
Note: Orgname.com is my SIP domain name. Here are the most common mistake people make while sign-in on Skype for Business (Lync).
1.If you have login credential however still unable to sign-in then make sure you are putting proper login credential. Below error shows when you are wrong entering your sign-in address:
2.If you are writing correct Sign-in address however getting DNS error then contact administrator/ Support team there may be a DNS resolution or configuration issue. Administrator need to verify the SfB (Lync) AutoDiscover DNS records. 3.Sometime users password may expired/ lockout: Make sure that you password is not expire and lockout. If yes then call to helpdesk and reset your password / unlock. 4.Make user to have updated Skype for Business cli…