Beruflich Dokumente
Kultur Dokumente
This document is provided as-is. Information and views expressed in this document, including URL and other Internet Web site references, may change without notice. Some examples depicted herein are provided for illustration only and are fictitious. No real association or connection is intended or should be inferred. This document does not provide you with any legal rights to any intellectual property in any Microsoft product. You may copy and use this document for your internal, reference purposes. Copyright 2011 Microsoft Corporation. All rights reserved.
Contents
Introduction.................................................................................................................................................1 Managing Archiving....................................................................................................................................2 Configuring Support for Archiving of Internal and External Communications..........................................2 Change the Global Policy for Archiving of Internal and External Communications...............................2 Create a Site Policy for Archiving.........................................................................................................2 Enable or Disable Archiving for a Site..................................................................................................2 Create a User Policy for Archiving........................................................................................................2 Enable or Disable Archiving for Users..................................................................................................2 Delete an Archiving Policy....................................................................................................................2 Apply an Archiving Policy to a User or User Group..............................................................................3 Enable or Disable Archiving.....................................................................................................................3 Specify the Types of Communications to Be Archived.............................................................................3 Enable or Disable Purging for Archiving..................................................................................................4 Block or Allow IM and Web Conferencing Sessions If Archiving Fails.....................................................4 Enable or Disable Sending an Archiving Disclaimer to Federated Partners............................................4 Configuring Support for Clients and Devices..............................................................................................5 Specify the Client Versions Supported in Your Organization...................................................................5 View the Status of Services Running on a Computer..............................................................................5 Modify the Default Action for Clients Not Explicitly Supported or Restricted............................................6 View Software Updates for Devices in Your Organization.......................................................................6 Add a Device to Test Update Functionality..............................................................................................7 Modify Settings for Log Files of Device Update Activity...........................................................................7 Configure Security Settings for Lync 2010 Phone Edition.......................................................................7 Configure Voice Quality of Service for Lync 2010 Phone Edition............................................................7 Configure Phone Lock for Lync 2010 Phone Edition...............................................................................8 Configuring Incoming Call Handling Features.............................................................................................8 Configure Phone Number Extensions for Parking Calls..........................................................................8 Create a Call Park Orbit Range............................................................................................................8 Change a Call Park Orbit Range..........................................................................................................8 Delete a Call Park Orbit Range............................................................................................................8 Configure Routing of Unassigned Phone Numbers.................................................................................8 Change an Unassigned Number Range..............................................................................................9 Delete an Unassigned Number Range.................................................................................................9 Configuring Voice Routing..........................................................................................................................9 Configuring Dial Plans and Normalization Rules.....................................................................................9 Create a Dial Plan................................................................................................................................9 Modify a Dial Plan................................................................................................................................9 Create or Modify a Normalization Rule Manually...................................................................................10 Configuring Voice Policies, PSTN Usage Records, and Voice Routes..................................................10 Configuring Voice Policies and PSTN Usage Records to Authorize Calling Features and Privileges 10 Configuring Voice Routes for Outbound Calls....................................................................................10 Configuring Trunks and Translation Rules.............................................................................................11 Configure Media Bypass on a Trunk...................................................................................................11
Configure a Trunk Without Media Bypass..........................................................................................11 Defining Translation Rules..................................................................................................................11 Exporting and Importing Voice Routing Configuration...........................................................................12 Export a Voice Route Configuration File.............................................................................................12 Import a Voice Route Configuration File.............................................................................................12 Test Voice Routing.................................................................................................................................12 Create a Voice Routing Test Case.....................................................................................................12 Run Voice Routing Test Cases...........................................................................................................12 Managing External Connectivity...............................................................................................................13 Enable or Disable External User Access for Your Organization.............................................................13 Enable or Disable Remote User Access for Your Organization..........................................................13 Enable or Disable Federation for Your Organization..........................................................................13 Enable or Disable Anonymous User Access for Your Organization....................................................13 Manage Communications with External Users......................................................................................13 Manage Remote User Access............................................................................................................13 Manage Federated Partner Access....................................................................................................14 Manage IM Provider Support.................................................................................................................15 Configure Policies to Control Access by Users of IM Service Providers............................................15 Specify Supported IM Service Providers............................................................................................15 Configure Conferencing Policies to Support Anonymous Users.........................................................15 Apply Policies for External User Access to Users..................................................................................16 Apply External User Access Policies to Users....................................................................................16 Apply Conferencing Policies to Support Anonymous Users...............................................................16 Reset or Delete External User Access Policies..................................................................................16 Filtering Instant Messages and Client Versions........................................................................................17 Configuring Filtering for Instant Messaging (IM)....................................................................................17 Modify the Default File Transfer Filter................................................................................................17 Create a New File Transfer Filter for a Specific Site...........................................................................17 Modify the Default URL Filter.............................................................................................................17 Create a New URL Filter to Handle Hyperlinks in IM Conversations..................................................18 Specify Client Versions Supported for Sign-in by a User.......................................................................18 Managing Computers in Your Topology....................................................................................................18 View a List of Computers Running Lync Server 2010............................................................................18 View the Status of Services Running on a Computer............................................................................19 View Details About a Service.................................................................................................................20 Start or Stop Lync Server 2010 Services...............................................................................................20 Prevent Sessions for Services...............................................................................................................20 View Microsoft SIP Processing Language (MSPL) Server Applications................................................21 Enable or Disable a Microsoft SIP Processing Language (MSPL) Server Application...........................21 Mark a Microsoft SIP Processing Language (MSPL) Application as Critical or Not Critical...................21 View a List of Trusted Applications........................................................................................................22 View the Simple URL Details.................................................................................................................22 Managing Users........................................................................................................................................22 Search for Lync Server 2010 Users.......................................................................................................22 Add a New User to Lync Server 2010....................................................................................................23
Enable or Disable Users for Lync Server 2010......................................................................................23 Set, View, and Send a User's Dial-in Conferencing PIN........................................................................24 Move Users to Another Pool..................................................................................................................24 Assign Policies to Users........................................................................................................................25 Assign a Conferencing Policy to Modify a User's Default Meeting Experience..................................25 Specify Client Versions Supported for Sign-in by a User...................................................................25 Assign Specific Dial-in Conferencing PIN Security Settings to a User...............................................25 Apply External User Access Policies to Users....................................................................................26 Configure Archiving of a User's Communications...............................................................................26 Assign a Location Policy to a User.....................................................................................................26 Enable a User for Enterprise Voice........................................................................................................26 Configure Telephony for Users..............................................................................................................27 Managing On-Premises Meetings.............................................................................................................27 Configuring Conferencing Settings........................................................................................................27 Modify the Default Conferencing User Experience.............................................................................27 Create or Modify Conferencing User Experience for a Site or Group of Users..................................27 Delete a Conferencing Policy for a Site or Group of Users................................................................28 Configuring the Meeting Join Experience..............................................................................................28 Modify the Default Meeting Join Experience......................................................................................28 Create or Modify Meeting Join Settings for a Site or Pool..................................................................29 Delete Meeting Join Settings for a Site or Pool..................................................................................29 Configure Settings for a Dial-in Conferencing Access Number..............................................................29 Delete a Dial-in Conferencing Access Number..................................................................................30 Configure Dial-in Conferencing Personal Identification Number (PIN) Rules........................................30 Modify the Default Dial-in Conferencing PIN Settings........................................................................30 Create or Modify Dial-in Conferencing PIN Settings for a Site or Group of Users..............................30 Delete Dial-in Conferencing PIN Settings for a Site or Group of Users..............................................30 Managing Monitoring................................................................................................................................31 Create a Site Policy for Call Detail Recording.......................................................................................31 Create a Site Policy for Quality of Experience.......................................................................................31 Enable Call Detail Recording.................................................................................................................31 Enable Quality of Experience................................................................................................................32 Configure Call Detail Recording............................................................................................................32 Configure Quality of Experience............................................................................................................32 Delete a Site Policy for Call Detail Recording........................................................................................32 Delete a Site Policy for Quality of Experience.......................................................................................33 Configuring Your Network.........................................................................................................................33 Enabling Call Admission Control............................................................................................................33 Enabling Media Bypass.........................................................................................................................33 Configuring Location Policy...................................................................................................................34 Configuring Bandwidth Policy Profile.....................................................................................................35 Configuring Network Regions................................................................................................................35 Configuring Network Sites.....................................................................................................................36 Configuring Network Subnets................................................................................................................36 Configuring Network Region Links........................................................................................................37
Configuring Network Region Routes.....................................................................................................37 Prevent New Connections to Lync Server 2010 for Server Maintenance.................................................38 Prevent New Connections to Lync Server.............................................................................................38 Delegating Control of Lync Server 2010...................................................................................................38 Assigning an RBAC Role to a User.......................................................................................................38 Assigning a User to a Security Group................................................................................................38 Managing Response Groups....................................................................................................................39 Managing Agent Groups........................................................................................................................39 Create an Agent Group......................................................................................................................39 Change Agent Group Settings or Members........................................................................................39 Delete an Agent Group.......................................................................................................................40 Managing Response Group Queues.....................................................................................................40 Create a Response Group Queue......................................................................................................40 Change a Response Group Queue....................................................................................................41 Delete a Response Group Queue......................................................................................................41 Managing Response Group Workflows.................................................................................................41 Create a Response Group Workflow..................................................................................................41 Change a Response Group Workflow................................................................................................43 Delete a Response Group Workflow..................................................................................................43 Configuring Security..................................................................................................................................44 Create a New Registrar.........................................................................................................................44 Modify an Existing Registrar..................................................................................................................44 Delete a Registrar..................................................................................................................................44 Create a New Web Service...................................................................................................................44 Modify an Existing Web Service............................................................................................................45 Delete a Web Service............................................................................................................................45 Create a New PIN Policy.......................................................................................................................45 Modify an Existing PIN Policy................................................................................................................45 Delete a PIN Policy................................................................................................................................46 Edit or Configure Simple URLs.................................................................................................................46 Configure Simple URLs.........................................................................................................................46 Configure a New Trusted Application Server............................................................................................46 Configure a Trusted Application Pool.....................................................................................................46 Change the Web Services URL................................................................................................................47 Change the Web Services URL.............................................................................................................47
Introduction
This document is provided as a supplement to the Microsoft Lync Server 2010 Administration Guide, available from the Microsoft Download Center at http://go.microsoft.com/fwlink/?LinkId=207913. The Microsoft Lync Server 2010 Administration Guide contains useful information about Lync Server management. However, there is one thing that's missing from the Administration Guide: Lync Server Windows PowerShell commands. Granted, there are a handful of commands scattered throughout the Guide, but those are primarily commands used for tasks (such as configuring an Address Book server) that can't be done using the Lync Server Control Panel. For most management activities (creating an archiving policy, removing a dial-in conferencing access number, putting a domain on the list of blocked domains) the Guide provides step-by-step instructions for performing the task using the Control Panel, but doesn't let you know how (or even if) you can do the same thing using Lync Server Windows PowerShell. Which is exactly why we've put together this supplement to the Administration Guide. What we've done is gone through the Administration Guide, identified all the tasks that don't include a Windows PowerShell option, and provided the Windows PowerShell option. For example, the Administration Guide offers these steps for locking a Lync Phone Edition phone: 1. Open a browser window, and then enter the Admin URL to open the Lync Server Control Panel. For details about the different methods you can use to start Lync Server Control Panel, see Open Lync Server Administration Tools. 2. Click Clients, and then click Device Configuration. 3. On the Device Configuration tab, in the list of device configurations, double-click the configuration for which you want to change the phone lock settings. 4. In the Edit Device Configuration dialog box, verify that the Enforce device locking check box is selected. 5. In Minimum PIN length, accept the default value or specify a new value. 6. In Phone lock time-out, accept the default value or specify a new value. 7. Click Commit. To supplement those instructions, we've offered a Lync Server Windows PowerShell equivalent: Set-CsUCPhoneConfiguration -Identity global EnforcePhoneLock $True PhoneLockTimeout 00:30:00 Like we said, we consider this to be a supplement to the Administration Guide; it's definitely not a replacement for the Guide. The Administration Guide includes a lot of useful information that explains what phone locking is and why you might want to use it. We don't offer any of that kind of information; we just provide you with a one-sentence introduction and then a Windows PowerShell command that shows you how to do something along the lines of enabling phone locking. The ideal way to do things here would be to download the Administration Guide, then copy our Windows PowerShell commands and paste them into the appropriate sections in that Guide. That way you'd have the best of both worlds: all the explanatory information and Control Panel steps found in the Guide, and all the Windows PowerShell commands found here. What could be better than that? In the meantime, this document provides the management tasks discussed in the Administration Guide. It also includes links to supplemental information available online. If youd like to view this guide online, its available on the Lync Server 2010 Windows PowerShell blog at http://go.microsoft.com/fwlink/?LinkId=230860. For details about Windows PowerShell in Lync Server, see the Lync Server Windows PowerShell blog at http://go.microsoft.com/fwlink/?LinkId=203150.
Managing Archiving
Configuring Support for Archiving of Internal and External Communications
Change the Global Policy for Archiving of Internal and External Communications
To change the global policy for archiving To modify the global archiving policy, use the Set-CsArchivingPolicy cmdlet and set the Identity to global: Set-CsArchivingPolicy -Identity global -ArchiveInternal $True ArchiveExternal $True Alternatively, you can leave off the Identity parameter. If you do not specify an Identity, SetCsArchivingPolicy will automatically modify the global policy: Set-CsArchivingPolicy -ArchiveInternal $True ArchiveExternal $True
Remove-CsArchivingPolicy -Identity "RedmondArchivingPolicy" This command removes all the archiving policies configured at the site scope: Get-CsArchivingPolicy Filter "site:*" | Remove-CsArchivingPolicy And this one removes all the archiving policies configured at the per-user scope: Get-CsArchivingPolicy Filter "tag:*" | Remove-CsArchivingPolicy
To prevent the display of the archiving disclaimer, set the EnableArchivingDisclaimer property to False: Set-CsAccessEdgeConfiguration Identity global -EnableArchivingDisclaimer $False
Modify the Default Action for Clients Not Explicitly Supported or Restricted
To modify the default action for clients not explicitly supported or restricted To modify the default action for client applications that do not appear in a client version policy, use the Set-CsClientVersionConfiguration cmdlet and set the value of the DefaultAction property. Set-CsClientVersionConfiguration Identity global -DefaultAction "BlockWithUrl" -DefaultURL "https://litwareinc.com/csclients" To disable client version control To disable client version control, use the Set-CsClientVersionConfiguration cmdlet and set the Enabled property to False: Set-CsClientVersionConfiguration Identity global Enabled $False To enable client version control, set the Enabled property to True: Set-CsClientVersionConfiguration Identity global Enabled $True
10
11
Haiku #45: The CsSipResponseCodeTranslationRule Cmdlets at http://go.microsoft.com/fwlink/?LinkId=230995 The Edit Trunk Configuration Dialog at http://go.microsoft.com/fwlink/?LinkId=230996
12
13
14
Haiku # 83: The CsAccessEdgeConfiguration Cmdlets at http://go.microsoft.com/fwlink/? LinkId=230866 Haiku #3: The CsBlockedDomain Cmdlets at http://go.microsoft.com/fwlink/?LinkId=231002 The Edit External Access Policy Dialog at http://go.microsoft.com/fwlink/?LinkId=231003 The Access Edge Configuration Dialog at http://go.microsoft.com/fwlink/?LinkId=230867 The New Federated Domains Dialog (Allowed Domains) at http://go.microsoft.com/fwlink/? LinkId=231004 The New Federated Domains Dialog (Blocked Domains) at http://go.microsoft.com/fwlink/? LinkId=231005
15
16
Remove-CsExternalAccessPolicy Identity global Note that this command will not remove the global policy. However, all the properties in that policy will be reset to their default values.
17
18
$objReplication = Get-CsManagementStoreReplicationStatus -ReplicaFqdn $objComputer.Identity | Select-Object UpToDate $strReplication = $objSite.site -replace("Site:","") $objDisplayObject = New-Object PSObject Add-Member -InputObject $objDisplayObject -memberType -Name Identity -Value $objComputer.Identity Add-Member -InputObject $objDisplayObject -memberType -Name Pool -Value $objComputer.Pool Add-Member -InputObject $objDisplayObject -memberType -Name Site -Value $strReplication Add-Member -InputObject $objDisplayObject -memberType -Name UpToDate -Value $objReplication.UpToDate $arrObjects += $objDisplayObject
} $labels = @{Expression={$_.Identity};Label="Computer"}, ` @{Expression={$_.Pool};Label="Pool"}, ` @{Expression={$_.Site};Label="Site"}, ` @{Expression={$_.UpToDate};Label="Replication"} $arrObjects | Format-Table $labels $errorActionPreference = $errorPref To use this script, copy the code, paste it into a text editor, and then save the file using a .ps1 file extension (for example, C:\Scripts\Status.ps1). From there all you have to do is run the script from within the Lync Server Management Shell. For example: C:\Scripts\Status.ps1
19
20
Mark a Microsoft SIP Processing Language (MSPL) Application as Critical or Not Critical
To mark or unmark an MSPL server application as critical To mark an MPSL server application as critical, use the Set-CsServerApplication cmdlet and set the Critical property to True: Set-CsServerApplication -Identity "Registrar:atl-cs001.litwareinc.com/QoEAgent" -Critical $True To mark an MPSL server application as not being critical, set the Critical property to False: Set-CsServerApplication -Identity "Registrar:atl-cs001.litwareinc.com/QoEAgent" -Critical $False
21
Managing Users
Search for Lync Server 2010 Users
To search for one or more users To search for a user based on the value of a Lync Server-specific attribute, use the Get-CsUser cmdlet and the Filter parameter. For example, this command searches for all users who have not been assigned a per-user voice policy: Get-CsUser -Filter {VoicePolicy -eq $Null} To search for a user based on the value of a generic Active Directory attribute, use the Get-CsUser cmdlet and the LdapFilter parameter. For example, this command searches for all users who are members of the Finance department: Get-CsUser -LDAPFilter "Department=Finance"
22
23
Note. It will be up to you to notify the user of his or her new PIN number; Lync Server will not automatically send these notifications for you.
Alternatively, you can include the Pin parameter and assign a specific PIN number to a user: Set-CsClientPin -Identity "Ken Myer" -Pin 18723834 You can also pipe multiple user accounts to Set-CsClientPin and Lync Server will automatically assign a new PIN number to each of those accounts. For example: Get-CsUser LdapFilter "Department=IT" | Set-CsClientPin
24
To move users from one pool to a different pool by using a filter To move a selected group of users (based on an Active Directory attribute) first use the Get-CsUser cmdlet and the LdapFilter parameter to retrieve the desired set of users. After retrieving the appropriate user accounts you can then pipe all those accounts to the Move-CsUser cmdlet: Get-CsUser -LdapFilter "Department=Finance" | Move-CsUser -Target "atl-cs001.litwareinc.com"
25
26
27
Set-CsConferencingPolicy Identity site:Redmond -AllowAnonymousParticipantsInMeetings $True -EnableDialInConferencing $True Be sure to specify a policy Identity. If you leave off the Identity Set-CsConferencingPolicy will modify the global policy instead. To make the same modification to all your conferencing policies (including the global policy), use a command similar to this one: Get-CsConferencingPolicy | Set-CsConferencingPolicy -AllowAnonymousParticipantsInMeetings $True This command modifies only your per-user conferencing policies: Get-CsConferencingPolicy Filter "tag:*" | Set-CsConferencingPolicy -AllowAnonymousParticipantsInMeetings $True
28
29
Create or Modify Dial-in Conferencing PIN Settings for a Site or Group of Users
To create a user or site PIN policy To create a per-site policy, set the Identity to the prefix site: followed by the name of the site: New-CsPinPolicy -Identity "site:Redmond" -MinPasswordLength 10 To create a per-user policy, simply use a unique policy name as the Identity: New-CsPinPolicy -Identity "RedmondPinPolicy" -MinPasswordLength 10 To change a user or site PIN policy To modify a per-user or per-site PIN policy, use the Set-CsPinPolicy cmdlet: Set-CsPinPolicy -Identity "site:Redmond" -MinPasswordLength 6
30
This command removes all the per-site PIN policies: Get-CsPinPolicy Filter "site:*" | Remove-CsPinPolicy And this one removes all the per-user PIN policies: Get-CsPinPolicy Filter "tag:*" | Remove-CsPinPolicy
Managing Monitoring
Create a Site Policy for Call Detail Recording
To create a CDR policy for a site To enable call detail recording (CDR) for a site, use the New-CsCdrConfiguration cmdlet: New-CsCdrConfiguration -Identity site:Redmond -EnableCDR $True EnablePurging $True KeepCallDetailForDays 30 KeepErrorReportForDays 30
31
32
33
34
35
36
Get-CsNetworkSubnet | Remove-CsNetworkSubnet Or use this command to delete all the subnets on the network segment 192.168.*.*: Get-CsNetworkSubnet Filter "192.168.*" | Remove-CsNetworkSubnet
37
To delete a network region route To remove a network region route, use the Remove-CsNetworkInterRegionRoute cmdlet: Remove-CsNetworkInterRegionRoute -Identity NA_APAC_Route This command removes all the network region routes configured for use in your organization: Get-CsNetworkInterRegionRoute | Remove-CsNetworkInterRegionRoute And this one removes all the region routes associated with the NorthAmerica region: Get-CsNetworkInterRegionRoute | Where-Object {$_.NetworkRegionID1 -eq "NorthAmerica" -or $_.NetworkRegionID2 -eq "NorthAmerica"} | RemoveCsNetworkInterRegionRoute
38
$objSearcher.SearchScope = "Subtree" $colProplist = "distinguishedName" foreach ($i in $colPropList) {[void] $objSearcher.PropertiesToLoad.Add($i)} $colResults = $objSearcher.FindAll() foreach ($objResult in $colResults) {$groupDN = $objResult.Path} $userDN = (Get-CsUser -Identity $args[1]).DistinguishedName $user = [ADSI] "LDAP://$userDN" $group = [ADSI] $groupDN $group.Add($user.PsBase.Path) To use this script, copy the code, paste it into a text editor, and then save the file using a .ps1 file extension (for example, C:\Scripts\Assign-RBACRole.ps1). From there all you have to do is run the script, taking care to supply the RBAC role name (e.g., CsHelpDesk) and the Identity of the user being assigned the role (e.g., Ken Myer): C:\Scripts\Assign-RBACRole.ps1 "CsHelpDesk" "Ken Myer"
39
These commands change the routing method for an agent group: $x = Get-CsRgsAgentGroup -Identity service:ApplicationServer:atl-cs001.litwareinc.com -Name "Help Desk" $x.RoutingMethod = "RoundRobin" Set-CsRgsAgentGroup -Instance $x This set of commands changes the distribution address for an agent group: $x = Get-CsRgsAgentGroup -Identity service:ApplicationServer:atl-cs001.litwareinc.com -Name "Help Desk" $x.DistributionGroupAddress = "helpdesk@litwareinc.com" Set-CsRgsAgentGroup -Instance $x The following commands add a new agent to an agent group: $x = Get-CsRgsAgentGroup -Identity service:ApplicationServer:atl-cs001.litwareinc.com -Name "Help Desk" $x.AgentsByUri.Add("sip:kenmyer@litwareinc.com") Set-CsRgsAgentGroup -Instance $x And these commands remove an agent from an agent group: $x = Get-CsRgsAgentGroup -Identity service:ApplicationServer:atl-cs001.litwareinc.com -Name "Help Desk" $x.AgentsByUri.Remove("sip:kenmyer@litwareinc.com") Set-CsRgsAgentGroup -Instance $x
40
New-CsRgsQueue -Parent service:ApplicationServer:atl-cs-001.litwareinc.com -Name "Help Desk" -OverflowCandidate "OldestCall" -OverflowAction $x -OverflowThreshold 2
41
42
43
Configuring Security
Create a New Registrar
To create a Registrar To create a new collection of proxy configuration settings, use the New-CsProxyConfiguration cmdlet: New-CsProxyConfiguration -Identity "service:Registrar:atl-cs001.litwareinc.com" -UseCertificateForClientToProxyAuth $True UseKerberosForClientToProxyAuth $True UseNtlmForClientToProxyAuth $True
Delete a Registrar
To delete a Registrar To delete a collection of proxy configuration settings, use the Remove-CsProxyConfiguration cmdlet: Remove-CsProxyConfiguration -Identity "service:Registrar:atl-cs001.litwareinc.com" This command removes all the proxy configuration settings assigned to the service scope: Get-CsProxyConfiguration Filter "service:*" | Remove-CsProxyConfiguration And this command removes all the proxy configuration settings assigned to your Registrars: Get-CsProxyConfiguration Filter "service:Registrar:*" | RemoveCsProxyConfiguration
44
45
46
47