Beruflich Dokumente
Kultur Dokumente
Guide
Microsoft Lync Server 2010
Published: March 2012
This document is provided as-is. Information and views expressed in this document, including
URL and other Internet Web site references, may change without notice.
Some examples depicted herein are provided for illustration only and are fictitious. No real
association or connection is intended or should be inferred.
This document does not provide you with any legal rights to any intellectual property in any
Microsoft product. You may copy and use this document for your internal, reference purposes.
Copyright 2012 Microsoft Corporation. All rights reserved.
Contents
Lync Server Administrative Tools................................................................................................. 1
Administrative Tools Infrastructure Requirements....................................................................3
Requirements to Publish a Topology.....................................................................................3
Planning for Simple URLs..................................................................................................... 4
DNS Requirements for Simple URLs....................................................................................7
Edit or Configure Simple URLs............................................................................................. 9
Server and Tools Operating System Support.........................................................................15
Administrative Tools Software Requirements.........................................................................17
Administrator Rights and Permissions Required for Setup and Administration......................18
Requirements to Publish a Topology......................................................................................21
Install Lync Server Administrative Tools.................................................................................22
Open Lync Server Administrative Tools..................................................................................23
Lync Server Control Panel......................................................................................................... 26
Managing Users..................................................................................................................... 27
Search for Lync Server 2010 Users....................................................................................28
Add a New User to Lync Server 2010.................................................................................29
Enable or Disable Users for Lync Server 2010...................................................................30
Set, View, and Send a User's Dial-in Conferencing PIN.....................................................31
Move Users to Another Pool...............................................................................................32
Assign Policies to Users..................................................................................................... 35
Assign a Conferencing Policy to Modify a User's Default Meeting Experience................35
Specify Client Versions Supported for Sign-in by a User.................................................37
Assign Specific Dial-in Conferencing PIN Security Settings to a User.............................39
Apply External User Access Policies to Users.................................................................40
Configure Archiving of a User's Communications............................................................41
Assign a Location Policy to a User..................................................................................42
Presence Policy Settings.................................................................................................44
Enable Users for Enterprise Voice......................................................................................46
Configure Telephony for Users...........................................................................................48
Managing Computers in Your Topology..................................................................................49
View a List of Computers Running Lync Server 2010.........................................................50
View the Status of Services Running on a Computer.........................................................50
View Details About a Service.............................................................................................. 51
Start or Stop Lync Server 2010 Services............................................................................52
Prevent Sessions for Services............................................................................................53
View Microsoft SIP Processing Language (MSPL) Server Applications..............................54
Enable or Disable a Microsoft SIP Processing Language (MSPL) Server Application........56
Mark a Microsoft SIP Processing Language (MSPL) Application as Critical or Not Critical 56
View a List of Trusted Applications......................................................................................57
View the Simple URL Details..............................................................................................58
Filtering Instant Messages and Client Versions......................................................................58
Configuring Filtering for Instant Messaging (IM).................................................................59
Lync Server Deployment Wizard Use to deploy Lync Server 2010 and to install all
administrative tools.
Lync Server Control Panel Use for ongoing management of your deployment by using a
web-based interface.
Lync Server Management Shell Use for ongoing management of your deployment by
using the command line.
You can manage your deployment by primarily using Topology Builder and Lync Server Control
Panel.
Deployment Wizard
You must use the Lync Server Deployment Wizard included on the installation media to install all
administrative tools onto a computer on which you have not already installed Lync Server. During
the administrative tools installation process, the Lync Server Deployment Wizard is installed
locally along with the other tools so that you can later use it to install files for additional
components or remove files for components that you do not want on the computer.
For details about how to run the Lync Server Deployment Wizard for the first time from the Lync
Server 2010 installation media, see Install Lync Server Administrative Tools.
Topology Builder
For details about deployment tasks that you can you perform by using Topology Builder, see the
Deployment documentation for each server role.
Logging Tool
The Lync Server Logging Tool facilitates troubleshooting by capturing logging and tracing
information from the product while the product is running. You can use the tool to run debug
sessions on any Lync Server server role. For details about the Logging Tool, see the Lync Server
2010 Logging Tool documentation on the TechNet Library at http://go.microsoft.com/fwlink/?
LinkId=199265.
In This Section
See Also
Lync Server Control Panel
Lync Server Management Shell
In This Section
Related Sections
See Also
Administrative Tools Software Requirements
Administrator Rights and Permissions Required for Setup and Administration
Install Lync Server Administrative Tools
You must run Topology Builder on a computer that is joined to the same domain or forest of
the Lync Server 2010 deployment you are creating so that Active Directory Domain Services
(AD DS) preparation steps are already completed, enabling you to use the administrative
tools on that computer to successfully publish your topology.
Note:
For details about preparing AD DS, see Preparing Active Directory Domain Services
for Lync Server 2010 in the Deployment documentation.
The computers defined in the topology must be joined to the domain, except for Edge
Servers, and in AD DS. However, the computers do not need to be online when you publish
the topology.
The file share for the pool must be created and available to remote users.
In order to publish an Enterprise Edition Front End pool, the SQL Server-based Back End
Server must be joined to the domain in which you are deploying the servers, online, and
configured with the appropriate firewall rules to make it available to remote users. For details
about specifying firewall exceptions, see Understanding Firewall Requirements for SQL
Server. For other details about configuring SQL Server, see Configure SQL Server for Lync
Server 2010.
Note:
Standard Edition server has a collocated database that will accept the published
configuration. You must first run the Prepare first Standard Edition server setup
task in the Lync Server Deployment Wizard.
If you run Topology Builder on a computer where you plan to later install Lync Server, then
you must install the Microsoft SQL Server 2005 backward compatibility components by
running the first setup task in the Lync Server Deployment Wizard before you publish the
topology. For details, see Install the Local Configuration Store or Install the Standard Edition
Local Configuration Store.
Note:
You do not need the Microsoft SQL Server 2005 backward compatibility components
to publish the topology if you run Topology Builder on a dedicated administrative
console or if you run Topology Builder on a computer where Lync Server is already
installed. (Lync Server setup automatically installs the backward compatibility
components along with other component files required by Lync Server.)
See Also
Publish the Topology
Administrative Tools Software Requirements
Server and Tools Operating System Support
Administrator Rights and Permissions Required for Setup and Administration
Delegate Setup Permissions
Meet is used as the base URL for all conferences in the site or organization. An example of a
Meet simple URL is https://meet.contoso.com. A particular meeting URL might be
https://meet.contoso.com/username/7322994.
With the Meet simple URL, links to join meetings are easy to comprehend, and easy to
communicate and distribute.
Dial-in enables access to the Dial-in Conferencing Settings webpage. This page displays
conference dial-in numbers with their available languages, assigned conference information
(that is, for meetings that do not need to be scheduled), and in-conference DTMF controls,
and supports management of personal identification number (PIN) and assigned
conferencing information. The Dial-in simple URL is included in all meeting invitations so that
users who want to dial in to the meeting can access the necessary phone number and PIN
information. An example of the Dial-in simple URL is https://dialin.contoso.com.
Admin enables quick access to the Microsoft Lync Server 2010 Control Panel. From any
computer within your organizations firewalls, an admin can open the Lync Server 2010
Control Panel by typing the Admin simple URL into a browser. The Admin simple URL is
Example
Meet
https://meet.contoso.com,
https://meet.fabrikam.com, and so on (one for
each SIP domain in your organization)
Dial-in
https://dialin.contoso.com
Admin
https://admin.contoso.com
With Option 2, simple URLs are based on the domain name lync.contoso.com. Therefore, you
need only one DNS A record which enables all three types of simple URLs. This DNS A record
references lync.contoso.com. Additionally, you still need separate DNS A records for other SIP
domains in your organization.
Simple URL Naming Option 2
Simple URL
Example
Meet
https://lync.contoso.com/Meet,
https://lync.fabrikam.com/Meet, and so on (one
for each SIP domain in your organization)
Dial-in
https://lync.contoso.com/Dialin
Admin
https://lync.contoso.com/Admin
Option 3 is most useful if you have many SIP domains, and you want them to have separate Meet
simple URLs but want to minimize the DNS record and certificate requirements for these simple
URLs.
Simple URL Naming Option 3
Simple URL
Example
Meet
https://lync.contoso.com/contosoSIPdomain/Meet
https://lync.contoso.com/fabrikamSIPdomain/Meet
Dial-in
https://lync.contoso.com/Dialin
Admin
https://lync.contoso.com/Admin
See Also
DNS Requirements for Simple URLs
Example
Meet
https://meet.contoso.com,
https://meet.fabrikam.com, and so on (one for
each SIP domain in your organization)
Dial-in
https://dialin.contoso.com
Admin
https://admin.contoso.com
For each Meet simple URL, you need a DNS A record that resolves the URL to the IP address
of the Director, if you have one deployed. Otherwise, it should resolve to the IP address of the
load balancer of a Front End pool. If you have not deployed a pool and are using a Standard
Edition server deployment, the DNS A record must resolve to the IP address of one Standard
Edition server in your organization.
If you have more than one SIP domain in your organization and you use this option, you must
create Meet simple URLs for each SIP domain and you need a DNS A record for each Meet
simple URL. For example, if you have both contoso.com and fabrikam.com, you will create
DNS A records for both https://meet.contoso.com and https://meet.fabrikam.com.
Alternatively, if you have multiple SIP domains and you want to minimize the DNS record and
certificate requirements for these simple URLs, use Option 3 as described later in this topic.
For the Dial-in simple URL, you need a DNS A record that resolves the URL to the IP address
of the Director, if you have one deployed. Otherwise, it should resolve to the IP address of the
load balancer of a Front End pool. If you have not deployed a pool and are using a Standard
Edition server deployment, the DNS A record must resolve to the IP address of one Standard
Edition server in your organization.
The Admin simple URL is internal only. It requires a DNS A record that resolves the URL to
the IP address of the Director, if you have one deployed. Otherwise, it should resolve to the
IP address of the load balancer of a Front End pool. If you have not deployed a pool and are
using a Standard Edition server deployment, the DNS A record must resolve to the IP
address of one Standard Edition server in your organization.
Example
Meet
https://lync.contoso.com/Meet,
https://lync.fabrikam.com/Meet, and so on (one
for each SIP domain in your organization)
Dial-in
https://lync.contoso.com/Dialin
Admin
https://lync.contoso.com/Admin
Example
Meet
https://lync.contoso.com/contosoSIPdomain/Meet
https://lync.contoso.com/fabrikamSIPdomain/Meet
Dial-in
https://lync.contoso.com/contosoSIPdomain/Dialin
https://lync.contoso.com/fabrikamSIPdomain/Dialin
Admin
https://lync.contoso.com/contosoSIPdomain/Admin
https://lync.contoso.com/fabrikamSIPdomain/Admin
Admin Optional URL that connects a user, typically an administrator for the Lync Server
2010 system, to Microsoft Lync Server 2010 Control Panel.
There are options to the format that you can define simple URLs. For details about these options,
see DNS Requirements for Simple URLs in the Planning documentation. A brief summary of the
three simple URL formats discussed are shown for reference here:
Simple URL
Examples
Meet
https://meet.contoso.com
Meet
https://lync.contoso.com/Meet
Meet
https://lync.contoso.com/contosoSIPdomain/Meet
Dial-in
https://dialin.contoso.com
Dial-in
https://lync.contoso.com/Dialin
Dial-in
https://lync.contoso.com/contosoSIPdomain/Dialin
Admin
https://admin
Admin
https://admin.contoso.com
Admin
https://lync.contoso.com/Admin
Admin
https://lync.contoso.com/contosoSIPdomain/Admin
By default, simple URLs will be configured in the form of (for example, the dial-in simple URL):
https://dialin.<SIP Domain>
Warning:
Simple URLs can contain only English alphanumeric characters (including AZ, az, 09,
and hyphens (-)). Do not use Unicode characters or underscores. Nonstandard
characters in an FQDN are often not supported by external DNS and public certification
authorities (CAs).
To configure simple URLs
1. In Topology Builder, right-click the Lync Server 2010 node, and then click Edit
Properties.
2. In the Simple URLs pane, select either Phone access URLs: (Dial-in) or Meeting
URLs: (Meet) to edit. And then click Edit URL.
10
3. Update the URL to the value you want, and then click OK to save the edited URL. The
example shown here has modified the Dial-in URL to https://pool01.contoso.net/dialin.
11
12
2. In the Administrative access URL box, enter the simple URL you want for
administrative access to Lync Server 2010 Control Panel, and then click OK.
Tip:
We recommend using the simplest possible URL for the Admin URL. The
simplest option is https://admin.
13
Important:
If you change a simple URL after initial deployment, you must be aware of what
changes impact your Domain Name System (DNS) records and certificates for
simple URLs. If the change impacts the base of a simple URL, then you must
change the DNS records and certificates as well. For example, changing from
https://lync.contoso.com/Meet to https://meet.contoso.com changes the base
URL from lync.contoso.com to meet.contoso.com, so you would need to change
the DNS records and certificates to refer to meet.contoso.com. If you changed
the simple URL from https://lync.contoso.com/Meet to
https://lync.contoso.com/Meetings, the base URL of lync.contoso.com stays the
same, so no DNS or certificate changes are needed. Whenever you change a
simple URL name, however, you must run the Enable-CsComputer on each
Director and Front End Server to register the change.
See Also
Planning for Simple URLs
14
The Windows Server 2008 R2 Standard operating system (required) or latest service pack
(recommended)
The Windows Server 2008 R2 Enterprise operating system (required) or latest service pack
(recommended)
The Windows Server 2008 R2 Datacenter operating system (required) or latest service pack
(recommended)
The Windows Server 2008 Standard operating system with Service Pack 2 (SP2) (required)
or latest service pack (recommended)
The Windows Server 2008 Enterprise operating system with SP2 (required) or latest service
pack (recommended)
The Windows Server 2008 Datacenter operating system with SP2 (required) or latest service
pack (recommended)
Notes:
If you have an existing server running Windows Server 2008 with Service Pack 1 (SP1), you must
upgrade it to either Windows Server 2008 SP2 (or latest service pack), or Windows
Server 2008 R2 (or latest service pack) before deploying Lync Server 2010.
To deploy Lync Server 2010 on a computer that is running either the Windows Server 2008 R2
Datacenter operating system or the Windows Server 2008 Datacenter operating system with
Service Pack 2 (SP2) and that is configured for multiple processor groups (dynamic hardware
partitioning), you must upgrade Microsoft SQL Server 2008 Express database software, which is
installed by default when you install Lync Server 2010, to Microsoft SQL Server 2008 R2 Express.
The SQL instance name is RTC for a Standard Edition server back-end database and RTCLocal
for the local configuration store (on each server role). A server running Lync Server 2010
Standard Edition has both SQL instances, and each needs to be upgraded separately.
Lync Server 2010 is not supported on the following operating systems:
15
The Server Core installation option of Windows Server 2008 R2 or Windows Server 2008
The Windows Web Server 2008 R2 operating system or the Windows Web Server 2008
operating system
Windows Server 2008 R2 HPC Edition or Windows Server 2008 HPC Edition
The Windows Vista operating system with SP2 (required) or latest service pack
(recommended)
The 32-bit version of Windows 7 operating system (required) or latest service pack
(recommended)
The 64-bit version of Windows 7 operating system (required) or latest service pack
(recommended) using the WOW64 x86 emulator
The 32-bit edition of Windows Vista with SP2 operating system (required) or latest service
pack (recommended)
The 64-bit edition of Windows Vista with SP2 operating system (required) or latest service
pack (recommended) using the WOW64 x86 emulator
The 32-bit edition of Windows XP with SP3 operating system (required) or latest service pack
(recommended)
The 64-bit edition of Windows XP with SP3 operating system (required) or latest service pack
(recommended) using WOW64 x86
The 32-bit edition of Windows Server 2008 operating system (required) or latest service pack
(recommended)
16
The 64-bit edition of Windows Server 2008 operating system (required) or latest service pack
(recommended) using WOW64 x86
The 64-bit edition of Windows Server 2008 R2 operating system (required) or latest service
pack (recommended) using WOW64 x86
Microsoft Knowledge Base article 959209, An update for the .NET Framework Service Pack
1 is available, at http://go.microsoft.com/fwlink/?linkid=197396, which addresses a set of
known application compatibility issues.
Microsoft Knowledge Base article 967190, Update for .NET Framework 3.5 SP1
(KB967190), at http://go.microsoft.com/fwlink/?linkid=197397, which addresses a file
association issue for XPS document types.
Microsoft Knowledge Base article 981575, A memory leak occurs in a .NET Framework 2.0based application that uses the AesCryptoServiceProvider class, at
http://go.microsoft.com/fwlink/?linkid=202909.
Microsoft Knowledge Base article 974954, FIX: When you run a .NET Framework 2.0-based
application, a System.AccessViolationException occurs, or a dead-lock occurs on two threads
in an application domain, at http://go.microsoft.com/fwlink/?linkid=205337.
17
Pack 2 (SP2), you must install Windows PowerShell 2.0 manually. Before doing so, you must
remove any previous versions of Windows PowerShell from the computer.
To install Windows PowerShell 2.0, see the Microsoft Knowledge Base article 968929, Windows
Management Framework (Windows PowerShell 2.0, WinRM 2.0, and BITS 4.0), at
http://go.microsoft.com/fwlink/?linkid=197390.
18
19
OCSLogger.exe Administrative
troubleshooting tool for capturing messages on
server roles.
RTCUniversalServerAdmins
RTCUniversalUserAdmins
RTCUniversalReadOnlyAdmins
20
The group memberships in the preceding table represent the minimum memberships. Other
memberships which will grant the permissions necessary to initiate the setup and deployment are
possible, including membership in the Domain Admins group or Enterprise Admins group.
See Also
Install Lync Server Administrative Tools
You must run Topology Builder on a computer that is joined to the same domain or forest of
the Lync Server 2010 deployment you are creating so that Active Directory Domain Services
(AD DS) preparation steps are already completed, enabling you to use the administrative
tools on that computer to successfully publish your topology.
Note:
For details about preparing AD DS, see Preparing Active Directory Domain Services
for Lync Server 2010 in the Deployment documentation.
The computers defined in the topology must be joined to the domain, except for Edge
Servers, and in AD DS. However, the computers do not need to be online when you publish
the topology.
The file share for the pool must be created and available to remote users.
In order to publish an Enterprise Edition Front End pool, the SQL Server-based Back End
Server must be joined to the domain in which you are deploying the servers, online, and
configured with the appropriate firewall rules to make it available to remote users. For details
about specifying firewall exceptions, see Understanding Firewall Requirements for SQL
Server. For other details about configuring SQL Server, see Configure SQL Server for Lync
Server 2010.
Note:
Standard Edition server has a collocated database that will accept the published
configuration. You must first run the Prepare first Standard Edition server setup
task in the Lync Server Deployment Wizard.
If you run Topology Builder on a computer where you plan to later install Lync Server, then
you must install the Microsoft SQL Server 2005 backward compatibility components by
running the first setup task in the Lync Server Deployment Wizard before you publish the
topology. For details, see Install the Local Configuration Store or Install the Standard Edition
Local Configuration Store.
21
Note:
You do not need the Microsoft SQL Server 2005 backward compatibility components
to publish the topology if you run Topology Builder on a dedicated administrative
console or if you run Topology Builder on a computer where Lync Server is already
installed. (Lync Server setup automatically installs the backward compatibility
components along with other component files required by Lync Server.)
See Also
Publish the Topology
Administrative Tools Software Requirements
Server and Tools Operating System Support
Administrator Rights and Permissions Required for Setup and Administration
Delegate Setup Permissions
22
enabled, you will be prompted for the local administrator or a domain equivalent user
name and password.
2. Locate the installation media on your computer, and then double-click
\Setup\amd64\Setup.exe.
3. If you are prompted to install the Microsoft Visual C++ 2008 distributable, click Yes.
4. On the Microsoft Lync Server 2010 Installation Location page, click OK. Change this
path to another location or drive if you need to have the files installed to another location.
Important:
If your organization requires that you locate Internet Information Services (IIS)
and all Web Services on a drive other than the system drive, you can change the
installation location path for the Lync Server files in the Setup dialog box. If you
install the Setup files to this path, including OCSCore.msi, the rest of the Lync
Server 2010 files will be deployed to this drive too.
5. On the End User License Agreement page, review the license terms, click I accept,
and then click OK. This step is required before you can continue.
6. On the Microsoft Lync Server 2010 Deployment Wizard page, click Install Topology
Builder.
7. When the installation successfully completes, click Exit.
See Also
Lync Server Administrative Tools
Open Lync Server Administrative Tools
Deployment Wizard
Topology Builder
Logging Tool
Deployment Wizard
Use the following procedure to start the Deployment Wizard locally to add or remove Lync Server
component files.
To start Lync Server Deployment Wizard
1. Log on to the computer where the Lync Server Deployment Wizard is installed as a
member of the Domain Admins group and the RTCUniversalServerAdmins group.
2. Click Start, click All Programs, click Microsoft Lync Server 2010, and then click Lync
23
Topology Builder
Use the following procedure to open the Topology Builder to define the servers that you want to
deploy in your Lync Server topology.
To open Lync Server Topology Builder to design the topology
1. Log on to the computer where Topology Builder is installed as a member of the Domain
Admins group and the RTCUniversalServerAdmins group.
Note:
You can define a topology by using an account that is a member of the local
Users group, but to read, publish, or enable a topology, which is required to
install a Lync Server 2010 server, you must use an account that is a member of
the Domain Admins group and the RTCUniversalServerAdmins group, and that
has full control permissions (that is, read, write, and modify) on the file share that
you are going to use for the archiving file store so that Topology Builder can
configure the required discretionary access control list (DACLs), or an account
with equivalent user rights.
2. Start Topology Builder: Click Start, click All Programs, click Microsoft Lync Server
2010, and then click Lync Server Topology Builder.
24
you can access Lync Server Control Panel from an Internet browser that is
running on any computer within your organizations firewall. For details about
configuring the administration simple URL, see Planning for Simple URLs and
Edit Administration Simple URL.
2. Open a browser window, and then enter the Admin URL configured for your organization.
To open Lync Server Control Panel on a computer running Lync Server 2010
1. From a user account that is a member of the CsAdministrator role or other role that has
appropriate user rights and permissions for the task to be performed, log on to a
computer on which you have installed Lync Server 2010 or, at a minimum, the Lync
Server administrative tools.
2. Start Lync Server Control Panel: Click Start, click All Programs, point to Administrative
Tools, point to Microsoft Lync Server 2010, and then click Lync Server 2010 Control
Panel.
If you open a Windows PowerShell window rather than the Lync Server Management
Shell, by default you cannot run the Lync Server cmdlets. To run the Lync Server cmdlets
from within Windows PowerShell, type the following at the Windows PowerShell
command prompt:
Import-Module Lync
Start the Lync Server Management Shell: Click Start, click All Programs, click Microsoft
Lync Server 2010, and then click Lync Server Management Shell.
Logging Tool
Use the following procedure to open the Lync Server 2010 Logging Tool to capture log and trace
files to troubleshoot your deployment while it is running. For details about the Logging Tool, see
25
the Lync Server 2010 Logging Tool documentation on the TechNet Library at
http://go.microsoft.com/fwlink/?LinkId=199265.
To open the Logging Tool
1. Click Start, click Run, type cmd.exe, and then click OK.
2. At the command prompt, type the path to the folder where OCSLogger.exe is installed,
and then press ENTER. By default, the Logging Tool is installed in the following location:
%ProgramFiles%\Common Files\Microsoft Lync Server 2010\Tracing.
3. Type OCSLogger.exe, and then press Enter.
See Also
Install Lync Server Administrative Tools
Lync Server Administrative Tools
In This Section
Managing Users
26
Managing Monitoring
Managing Archiving
Configuring Security
See Also
Install Lync Server Administrative Tools
Lync Server Management Shell
Managing Users
Topics in this section provide step-by-step procedures for tasks you can perform using the Users
page in Lync Server Control Panel.
Important:
You cannot use Lync Server Control Panel to manage users who are members of the
Active Directory Domain Admins group. For Domain Admins users, you can use Lync
Server Control Panel only to perform read-only search operations. To perform write
operations on Domain Admins users (for example, enable or disable for Lync Server,
change pool or policy assignments, telephony settings, SIP address), you must use
Windows PowerShell cmdlets while logged on as a Domain Admins user. For details
about using Windows PowerShell cmdlets to manage users, see Lync Server
Management Shell.
When you perform any Lync Server administrative task that involves searching for a user or
filtering user search results, there are some user properties that exist as attributes in Active
Directory Domain Services (AD DS) but are not replicated to the global catalog until Microsoft
Exchange Server is deployed. Microsoft Exchange, not Lync Server, marks the following
attributes for replication to the global catalog when it is installed:
User Information:
Initials
Street address
Country/region
Pager
Fax
Mobile
27
Organization:
Title
Company
Department
Office
In This Section
28
d. In the text box, type the search criteria you want to use to filter search results, and
then click Find.
6. The search results appear under Search Results. You can select any or all of the users
in the list and perform configuration tasks on the users you select.
29
To temporarily disable the user account for Lync Server 2010, click Temporarily
disable for Lync Server.
To enable the user account for Lync Server 2010, click Re-enable for Lync Server.
30
Note:
Specific characteristics of the PIN, such as its minimum length, can be configured as a
policy. In addition to the global policy, you can configure a PIN policy for individual sites or
users. For details about configuring a PIN policy, see Configure Dial-in Conferencing
Personal Identification Number (PIN) Rules.
To set a users PIN
1. From a user account that is assigned to the CsUserAdministrator role or the
CsAdministrator role, log on to any computer in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Users.
4. Use one of the following methods to locate a user:
In the Search users box, type all or the first portion of the display name, first name,
last name, Security Accounts Manager (SAM) account name, SIP address, or line
Uniform Resource Identifier (URI) of the user account, and then click Find.
If you have a saved query, click the Open query icon, use the Open dialog box to
retrieve the query (a .usf file), and then click Find.
In the Equal to drop-down list, click the operator (for example, Equal to or Not equal
to).
d. Depending on the user property you selected, enter the criteria that you want to use
to filter the search results by typing it or by clicking the arrow in the drop-down list.
Tip:
To add additional search clauses to your query, click Add Filter.
e. Click Find.
Note:
If the PIN is locked, you must unlock the PIN before you can set it. To unlock the
PIN, click the user, click Action, and then click Unlock PIN.
6. Click a user in the search results, click Action, and then click Set PIN.
7. In the Set PIN dialog box, do one of the following:
To allow Lync Server 2010 to generate the users PIN, select Automatically
generate a valid PIN (the default).
To create your own PIN, click Manually enter a specific PIN, click the text box, and
then type a PIN that meets the PIN requirements specified in your PIN policy
settings.
31
8. Click OK.
9. In Set PIN, do one of the following:
Select the Show PIN check box to see the PIN, and then copy the PIN and
communicate it to the user using your organization's preferred method.
Click Open my email application to send the new PIN to the user to send the PIN
by email. If Microsoft Office Outlook is your email client, the PIN is automatically
copied into a new email message. If you use a different email client, select the Show
PIN check box to see the PIN and then copy it into your email message.
32
If you select Force, the user account is moved, but any associated user data is
deleted (for example, conferences that the user has scheduled). If you do not
select it, both the account and the associated data are moved.
To move all users from one server or pool to a different server or pool
1. From a user account that is assigned to the CsUserAdministrator role or the
CsAdministrator role, log on to any computer in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Users.
4. On the Action menu, click Move all users to pool.
5. In Move Users, select the pool that contains the user accounts that you want to move in
Source registrar pool.
6. In Destination registrar pool, select the pool that you want to move the users to.
7. (Optional) If the destination server or pool is unavailable, select the Force check box.
Warning:
If you select Force, the user account is moved, but any associated user data is
deleted (for example, conferences that the user has scheduled). If you do not
select it, both the account and the associated data are moved.
To move users from one pool to a different pool by using a filter
1. From a user account that is assigned to the CsUserAdministrator role or the
CsAdministrator role, log on to any computer in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Users.
4. In User Search, click Search, click Add Filter.
5. In the Search criteria, select Registrar Pool, select Equal to, select Current Pool
FQDN, and then click Find.
6. On the Action menu, click Move all users to pool.
Note:
When a filter is applied to an existing set of users, the option Move all users to
pool is in the context of the filtered subset of users, not all possible users.
7. In Move Users, select the pool that contains the user accounts that you want to move in
Source registrar pool.
8. In Destination registrar pool, select the pool where you want to move the users.
9. (Optional) If the destination server or pool is unavailable, select the Force check box.
33
Warning:
If you select Force, the user account is moved, but any associated user data is
deleted (for example, conferences that the user has scheduled and contacts). If
you do not select it, both the account and the associated data are moved.
To move users from one pool to another using the Lync Management shell
1. Depending on how you run Windows PowerShell commands (that is, locally or remotely),
you need to log on as a member of the correct Lync Server administrative roles as
follows:
a. If you are running the commands on the local machine (for example, you log on
directly to a Front End Server): Log on to the computer where Lync Server
Management Shell is installed as a member of the RTCUniversalServerAdmins group
or with the necessary user rights as described in Delegate Setup Permissions.
b. If you are running the commands remotely on another machine (for example, you log
on to your computer and run the commands remotely on a Standard Edition Front
End Server): From a user account that is assigned to the CsUserAdministrator role or
the CsAdministrator role, log on to any computer in your internal deployment.
2. Start the Lync Server Management Shell: Click Start, click All Programs, click Microsoft
Lync Server 2010, and then click Lync Server Management Shell.
3. To move single users, use the Move-CsUser cmdlet as follows:
Move-CsUser -Identity "Pilar Ackerman" -Target
"pool01.contoso.net"
Where the user to move is the user Pilar Ackerman, and the user will be moved from their
currently assigned home pool to the pool pool01.contoso.net
4. To move a large number of users, use filters with the Get-CsUser cmdlet and pass the
resulting set of users to Move-CsUser:
Get-CsUser Filter {RegistrarPool eq CurrentPoolFqdn} | MoveCsUser Target TargetPoolFQDN
The combined commands of the Get-CsUser and Move-CsUser might result in this:
Get-CsUser Filter {RegistrarPool eq pool02.contoso.net} |
Move-CsUser Target pool01.contoso.net
34
In the Search users box, type all or the first portion of the display name, first name,
last name, Security Accounts Manager (SAM) account name, SIP address, or line
Uniform Resource Identifier (URI) of the user account, and then click Find.
35
If you have a saved query, click the Open query icon, use the Open dialog box to
retrieve the query (a .usf file), and then click Find.
In the Equal to drop-down list, click the operator (for example, Equal to or Not equal
to).
d. Depending on the user property you selected, enter the criteria you want to use to
filter the search results by typing it or by clicking the arrow in the drop-down list.
Tip:
To add additional search clauses to your query, click Add Filter.
e. Click Find.
6. Click a user in the search results, click Action, and then click Assign policies.
Tip:
If you want the same per-user conferencing policy to apply to multiple users,
select multiple users in the search results, then click Actions, and then click
Assign policies.
7. In Assign Policies, under Conferencing policy, do one of the following:
Note:
Because there are multiple policies that you can configure in Assign Policies,
<Keep as is> is selected by default for every policy in the dialog box. Continue
using the policy previously assigned to the user by making no changes to this
setting.
Select <Automatic> to allow Lync Server 2010 to automatically choose either the
global-level policy or, if defined, the site-level policy.
Click the name of a per-user conferencing policy you previously defined on the
Conferencing Policy page.
Tip:
To help you decide the policy you want to assign, after you click a policy
name, click View to view the user rights and permissions defined in the
policy.
36
Deploying one or more per-user client version policies is optional. You can also deploy only a
global-level client version policy, or site-level or pool-level client version policies. If you do deploy
per-user policies, you must explicitly assign them to users, groups, or contact object. When no
specific site-level, pool-level, or per-user policy is assigned, the default clients that are allowed to
register with Lync Server 2010 are those defined in the global-level client version policy.
After creating at least one per-user client version policy, use the procedures in this topic to assign
the policy that specifies the client versions that you want to allow to register with Lync Server
2010.
For details about creating per-user client version policies, see Specify the Client Versions
Supported in Your Organization.
To assign a per-user client version policy
1. From a user account that is assigned to the CsUserAdministrator role or the
CsAdministrator role, log on to any computer in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Users.
4. Use one of the following methods to locate a user:
In the Search users box, type all or the first portion of the display name, first name,
last name, Security Accounts Manager (SAM) account name, SIP address, or line
Uniform Resource Identifier (URI) of the user account, and then click Find.
If you have a saved query, click the Open query icon, use the Open dialog box to
retrieve the query (a .usf file), and then click Find.
In the Equal to drop-down list, click the operator (for example, Equal to or Not equal
to).
d. Depending on the user property you selected, enter the criteria you want to use to
filter the search results by typing it or by clicking the arrow in the drop-down list.
Tip:
To add additional search clauses to your query, click Add Filter.
e. Click Find.
6. Click a user in the search results, click Action, and then click Assign policies.
Tip:
If you want the same per-user client version policy to apply to multiple users,
select multiple users in the search results, then click Actions, and then click
Assign policies.
37
Allow Lync Server 2010 to automatically choose either the global-level policy or, if
defined, the site-level policy or pool-level policy.
Click the name of a per-user client version policy you previously defined on the
Client Version Policy page.
Tip:
To help you decide the policy you want to assign, after you click a policy
name, click View to view the user rights and permissions defined in the
policy.
In the Search users box, type all or the first portion of the display name, first name,
last name, Security Accounts Manager (SAM) account name, SIP address, or line
38
Uniform Resource Identifier (URI) of the user account, and then click Find.
If you have a saved query, click the Open query icon, use the Open dialog box to
retrieve the query (a .usf file), and then click Find.
In the Equal to drop-down list, click the operator (for example, Equal to or Not equal
to).
d. Depending on the user property you selected, enter the criteria you want to use to
filter the search results by typing it or by clicking the arrow in the drop-down list.
Tip:
To add additional search clauses to your query, click Add Filter.
e. Click Find.
6. Click a user in the search results, click Action, and then click Assign policies.
Tip:
If you want the same per-user PIN policy to apply to multiple users, select
multiple users in the search results, then click Actions, and then click Assign
policies.
7. In Assign Policies, under PIN policy, do one of the following:
Note:
Because there are multiple policies that you can configure by using the Assign
Policies dialog box, <Keep as is> is selected by default for every policy in the
dialog box. Continue using the policy previously assigned to the user by making
no changes to this setting.
Allow Lync Server 2010 to automatically choose either the global-level policy or, if
defined, the site-level policy.
Click the name of a per-user PIN policy you previously defined on the PIN Policy
page.
Tip:
To help you decide the policy you want to assign, after you click a policy
name, click View to view the user rights and permissions defined in the
policy.
39
applying the appropriate policies to specific users or user groups. For example, if you created a
policy to support remote user access, you must apply it to at least one user or user group before
the user or user group can connect to Lync Server 2010 from a remote location and collaborate
with internal users from the remote location.
Note:
To support for external user access, you must enable support for each type of external
user access you want to support, and configure the appropriate policies and other options
to control use. For details, see Configuring Support for External User Access in the
Deployment documentation or Managing External Connectivity in the Operations
documentation.
Use the procedure in this topic to apply a previously created external user access policy to one or
more user accounts or user groups.
To apply an external user policy to a user account
1.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Users, and then search on the user account that you want
to configure.
4. In the table that lists the search results, click the user account, click Edit, and then click
Show details.
5. In Edit Lync Server User under External access policy, select the user policy that you
want to apply.
Note:
The <Automatic> settings apply the default server installation settings. These
settings are applied automatically by the server.
40
For details about creating per-user archiving policies, see Create a User Policy for Archiving.
To assign a per-user archiving policy
1. From a user account that is assigned to the CsUserAdministrator role or the
CsAdministrator role, log on to any computer in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Users.
4. Use one of the following methods to locate a user:
In the Search users box, type all or the first portion of the display name, first name,
last name, Security Accounts Manager (SAM) account name, SIP address, or line
Uniform Resource Identifier (URI) of the user account, and then click Find.
If you have a saved query, click the Open query icon, use the Open dialog box to
retrieve the query (a .usf file), and then click Find.
In the Equal to drop-down list, click the operator (for example, Equal to or Not equal
to).
d. Depending on the user property you selected, enter the criteria you want to use to
filter the search results by typing it or by clicking the arrow in the drop-down list.
Tip:
To add additional search clauses to your query, click Add Filter.
e. Click Find.
6. Click a user in the search results, click Action, and then click Assign policies.
Tip:
If you want the same per-user archiving policy to apply to multiple users, select
multiple users in the search results, then click Actions, and then click Assign
policies.
7. In Assign Policies, under Archiving policy, do one of the following:
Note:
Because there are multiple policies that you can configure by using the Assign
Policies dialog box, <Keep as is> is selected by default for every policy in the
dialog box. Continue using the policy previously assigned to the user by making
no changes to this setting.
Allow Lync Server 2010 to automatically choose either the global-level policy or, if
defined, the site-level policy.
41
Click the name of a per-user archiving policy you previously defined on the
Archiving Policy page.
Tip:
To help you decide the policy that you want to assign, after you click a policy
name, click View to view the user rights and permissions defined in the
policy.
In the Search users box, type all or the first portion of the display name, first name,
last name, Security Accounts Manager (SAM) account name, SIP address, or line
Uniform Resource Identifier (URI) of the user account, and then click Find.
If you have a saved query, click the Open query icon, use the Open dialog box to
retrieve the query (a .usf file), and then click Find.
42
c.
In the Equal to drop-down list, click the operator (for example, Equal to or Not equal
to).
d. Depending on the user property you selected, enter the criteria you want to use to
filter the search results by typing it or by clicking the arrow in the drop-down list.
Tip:
To add additional search clauses to your query, click Add Filter.
e. Click Find.
6. Click a user in the search results, click Action, and then click Assign policies.
Tip:
If you want the same per-user location policy to apply to multiple users, select
multiple users in the search results, then click Actions, and then click Assign
policies.
7. In Assign Policies, under Location policy, do one of the following:
Note:
Because there are multiple policies that you can configure by using the Assign
Policies dialog box, <Keep as is> is selected by default for every policy in the
dialog box. Continue using the policy previously assigned to the user by making
no changes to this setting.
Allow Lync Server 2010 to automatically choose either the global-level policy or, if
defined, the subnet-level policy.
Click the name of a per-user location policy you previously defined by running the
New-CsLocationPolicy cmdlet.
Tip:
To help you decide the policy that you want to assign, after you click a policy
name, click View to view the user rights and permissions defined in the
policy.
Display name
Description
Type
Value
CategorySubscriptions
Maximum
Number of
Subscriber
Category
Integer
0-3000
43
Display name
Description
Subscriptions
Communicator
subscribes to a users
presence, it obtains a
category subscription
for each of the contact
card, calendar data,
notes, services, and
state categories.
Type
Value
Integer or
Token
0-500
A setting of 0 means
that the user or contact
object cannot be
subscribed to by others.
Note:
This setting can
have a
significant
impact on
performance if
it is set to a
high number,
and the
average user
has a large
number of
users
subscribing to
his or her
presence.
PromptedSubscribers
Maximum
Number of
Queued
Presence
Subscription
Alerts
44
Display name
Description
Type
Value
acknowledgement
prompt is created in
user Bs prompted
subscribers table. After
user B accepts, or
acknowledges, the
subscription, the
acknowledgement
prompt is removed from
user Bs prompted
subscribers table.
A setting of 0 means
that the user is not
prompted when
someone subscribes to
his or her presence.
By default, the Default Policy and Service: Medium presence policies are installed when you
deploy Microsoft Lync Server 2010. The following table describes the specific settings of the two
presence policies.
Presence Policies
Policy name
Description
CategorySubscriptions
PromptedSubscribers
Default Policy
1000
200
1000
45
Note:
Of the following procedures, only the first can be performed using Lync Server Control
Panel. For the remaining procedures, you can only use Lync Server Management Shell.
46
47
Audio/video disabled The user cannot make calls with audio and video.
PC-to-PC only The user can make only PC-to-PC audio or video calls.
Enterprise Voice The user can use the Lync Server 2010 infrastructure to route all
incoming and outgoing calls. The user can also make PC-to-PC calls.
Remote call control The user can use Lync Server 2010 to control the desktop phone, and
can also make PC-to-PC calls.
For details about configuring telephony for an organization, see Configure Telephony for Users
and Deploying Enterprise Voice in the Deployment documentation.
To configure telephony for a specific user account
1. From a user account that is assigned to the CsUserAdministrator role or the
CsAdministrator role, log on to any computer in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Users.
4. In the Search users box, type all or the first portion of the display name, first name, last
name, Security Accounts Manager (SAM) account name, SIP address, or line Uniform
Resource Identifier (URI) of the user account that you want, and then click Find.
5. In the table, click the user account that you want to modify.
6. On the Edit menu, click Modify.
7. In Telephony, do the following:
To disable audio and video calls for the user, click Audio/video disabled.
To enable PC-to-PC audio communications for the user, but not remote call control or
Enterprise Voice, click PC-to-PC only. Specify a value for Line URI for the telephone
that the user uses for PC-to-PC audio communications.
To route the user's phone calls by using the Lync Server 2010 infrastructure in
accordance with the class of service policy, including PC-to-PC audio
communication, click Enterprise Voice. In Line URI, specify the telephone number
for Enterprise Voice. In Dial plan policy and Voice policy, specify the appropriate
policies for the user. To specify the normalization rules for translating phone numbers
dialed by the user to the E.164 format, select the appropriate location profile in
Location policy.
To enable remote call control, which enables users to control their desktop phone line
from Lync Server 2010 to make PC-to-PC calls and PC-to-phone calls, click Remote
call control. In Line URI, specify the telephone number for remote call control. The
48
user must have a desktop phone and private branch exchange (PBX) connection for
call routing.
In This Section
Mark a Microsoft SIP Processing Language (MSPL) Application as Critical or Not Critical
Sort the list by clicking the Computer, Pool, or Site column heading, and then
clicking the up arrow or the down arrow.
Search for a specific computer by typing the computer name in the search field.
49
Note:
If you have Edge Servers or Edge Server pools deployed, the Edge Server
will be listed, but will always display a status of N/A. This indicates that the
Lync Server 2010 Control Panel knows that you have an Edge Server or
Edge Server pool, but due to credentials that the Lync Server 2010 Control
Panel runs under, the status cannot be retrieved. For security purposes, this
is by design.
To see the latest status of services running on the computer, click Get service
status.
To see a list of specific services running on the computer and the status of each
service, click Properties and then click Close to return to the list.
50
3. In the left navigation bar, click Topology and then click Status.
4. In the Status page, sort or search through the list and then click the computer that you
want to view.
5. Click Properties.
6. In the View Computer Detail window, sort the list of services, if necessary, and click the
service you want to view.
7. Do any of the following as needed:
To see the latest status of that specific service, click Get service status.
To see the details for that specific service, click Properties and then click Close.
51
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Topology and then click Status.
4. On the Status page, sort or search through the list as needed to find the computer that is
running the services you want to start or stop, and then click it.
5. Click Action.
6. Click Start All services or Stop All services.
To start or stop a specific service
1. From a user account that is assigned to the CsUserAdministrator role or the
CsAdministrator role, log on to any computer in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Topology and then click Status.
4. On the Status page, sort or search through the list as needed to find the computer that is
running the service you want to start or stop, and then click it.
5. Click Properties.
6. Sort the list of services, if necessary, and click the service you want to start or stop.
7. Click Action.
8. Click Start service or Stop service.
9. Click Close.
52
53
routing SIP messages. MSPL applications run in the same process as the UserServices module,
while a program that is based on the Lync 2010 API runs in a separate process.
You can use the Server Application page in the Topology group of Lync Server Control Panel to
see a list of MSPL server applications that run on Front End Servers in your Lync Server 2010
environment. The list shows the scripts that are available for each pool, as well as whether they
are enabled or critical. The scripts run in the order they are listed.
These scripts include the following:
ClientVersionFilter provides the administrator with a way to specify the version of clients that
are supported by a pool. The client version filter checks the client version and can either
prevent the client from logging on or present the user with a message that indicates he or she
is using a client that is not supported. The client version filter can also be configured to
display a message to the user that contains the URL of the latest downloadable version of the
client.
TranslationService translates a number that a user dials to an E.164 number according to the
normalization rules defined by the administrator. For details, see Translation Rules.
UserServices is the SIP Registrar, presence, and conferencing component of a Front End
Server. It provides closely integrated IM, presence, and conferencing features built on top of
the SIP Proxy.
InterClusterRouting is responsible for routing calls to the callees primary Registrar pool. For
details, see Front End Server VoIP Components.
IIMFilter (Intelligent IM Filter) blocks messages that contain clickable URLs or that attempt to
initiate file transfers. IIMFilter also checks the client version on behalf of the server. IIMFilter
affects file transfers that are initiated by using either Microsoft Lync 2010, Communicator, or
the Live Meeting 2007 client. By default, clickable links are disabled by adding an underscore
character before the first character of the link. An administrator can change this behavior so
that the link is blocked, in which case messages that contain clickable URLs or that attempt to
initiate a file transfer are blocked by the server from reaching their intended destinations.
IIMFilter is installed on all Lync Server except Proxy Servers and Archiving Servers.
UserPinService is used to verify user personal identification numbers (PINs) for dial-in
conferencing.
DefaultRouting is the default routing application for servers running Lync Server. It is enabled
by default. The routing application is installed on all Standard Edition and Enterprise Edition
servers.
OutboundRouting determines the gateway that routes a call to a phone number according to
the dialed number and the users dialing authorization. OutboundRouting also handles
rerouting of calls if a gateway cannot process a call.
54
QoEAgent receives Quality of Experience (QoE) data reports from endpoints through SIP
SERVICE requests, and sends the data to the destination queue on the Monitoring Server or
to third-party consumers using HTTP POST. For details, see Planning for Monitoring.
AcpRouting proxies INVITE requests destined for the audio conferencing provider to the
audio conferencing provider gateway.
IIMFilter
See Also
Enable or Disable a Microsoft SIP Processing Language (MSPL) Server Application
Mark a Microsoft SIP Processing Language (MSPL) Application as Critical or Not Critical
55
Trusted applications are not challenged for authentication by Lync Server 2010.
Trusted applications are not throttled by Lync Server 2010 for SIP transactions, connections
or outgoing Voice over Internet Protocol (VoIP) calls.
Trusted applications can impersonate any user and can join conferences without appearing in
rosters.
56
In Lync Server Control Panel, you can see the name of the applications, the pool where they run,
and the port they use.
To view a list of trusted applications
1. From a user account that is assigned to the CsServerAdministrator, CsAdministrator,
CsHelpDesk, or CsViewOnlyAdministrator role, log on to any computer in your internal
deployment. For details about the predefined administrative roles available in Lync Server
2010, see Role-Based Access Control.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Topology and the click Trusted Application.
4. On the Trusted Application page, click a column heading to sort the applications, if
needed.
57
In This Section
If a server blocks an instant message (because you selected the Block URLs with file
extension check box on the URL Filter page or because you chose the Hyperlink prefix
option Block hyperlinks), an error message is returned to the client. Subsequent servers do
not receive this instant message.
If a server (Server1) adds a warning to an instant message that contains an active hyperlink,
a subsequent server (Server2) that receives this instant message can still take a different
action based on this active hyperlink present in the instant message and block the instant
58
message or add a warning. If Server2 is configured only to add a warning for this URL, the
earlier warning added by Server1 is removed, and the warning configured on Server2 is
added to the beginning of the instant message.
Note:
If you are running Lync Server 2010 in a mixed environment, Live Communications
Server 2005 with SP1 is the minimum version required to use the Intelligent IM Filter
application. The Intelligent IM Filter is not supported on Live Communications Server
2005 without SP1.
URL Filtering
URLs are filtered according to their hyperlink prefix. The following examples are valid prefixes:
www*.
ftp.
http:
If you do not configure the instant message filter to perform any URL filtering, all URLs contained
in instant messages are passed unmodified through the server. If you configure the instant
message filter to perform URL filtering, URLs in instant messages are filtered according to the
options that you select in the Edit URL Filter or New URL Filter dialog box.
Enable URL filter This option enables URL filtering for the global deployment or for the site
that you select.
Block URLs with file extension The instant message filter blocks any active intranet or
Internet URL that contains a file with an extension listed under File type extensions to block
in the Edit File Filter dialog box. When a URL is blocked, an error message is displayed to
the sender. When selected, this option takes precedence over all other filtering options for
any file extensions defined under File type extensions to block.
Important:
Filtering of file extensions is limited to standard file names. Filtering may not work
with file extensions embedded in other names.
To configure how hyperlinks are handled in instant message conversations, you select one of the
following options under Hyperlink prefix:
Do not filter URLs in messages are sent through the server. When you choose this option,
the Allow message box appears. In the Allow message box, specify the notice that you
want to insert at the beginning of each instant message containing hyperlinks. This notice can
consist of no more than 65535 characters.
Send warning message Lync Server 2010 permits active hyperlinks in instant messages,
but it includes a warning. When you choose this option, the Warning message box appears.
In the Warning message box, you must type the warning that you want to include with
instant messages containing valid hyperlinks. For example, this warning might state the
potential dangers of clicking an unknown link, or it might refer to your organizations relevant
policies and requirements. The warning can be no more than 65535 characters.
59
If you select Block hyperlinks or Send warning message, the following options are available:
Exclude local intranet hyperlinks The instant message filter blocks only Internet URLs.
URLs for locations within your intranet are passed unmodified through the server. However,
the intranet URLs that individual servers running Lync Server 2010 pass depend on which
types of local websites are considered part of their intranet zone. To check a servers intranet
zone settings, see the To configure your intranet settings in Internet Explorer procedure in
Modify the Default URL Filter.
Filter these hyperlink prefixes To choose which prefixes you want to block, click Select,
and then, in Select Hyperlink Prefix, add the prefixes to the Hyperlink prefixes list.
All prefixes except href must end with a period or a colon, or an asterisk followed by a period.
Valid prefixes can contain any characters in the set of valid URL characters except the
asterisk (*). The set of valid URL characters is:
#*+/0123456789=@ABCDEFGHIJKLMNOPQRSTUVWXYZ^_` abcdefghijklmnopqrstuvwxyz|
~
Enable file filter This option enables file filtering for the global deployment or for the site
that you select.
When you enable the file filter, you can choose one of the following options in File transfer:
Block specific file types You specify which file transfer requests are filtered by the
server by specifying a list of file extensions to block. Entries in the list can contain all
standard characters, but not the wildcard character (*). In the Office Live Meeting 2007
client the handout feature is enabled, but any file with this extension cannot be uploaded
or downloaded. If you select the Block URLs with file extension check box on the
settings for a URL filter listed on the URL Filter tab, the URL filter uses this same list to
block active hyperlinks that contain any of these file extensions. To choose which file
types you want to block, click Select, and then, in Select File Type, add the file type
extensions to the Selected file type extensions list.
Block All The server drops all instant messages that contain file transfer requests and
returns an error message to the sender of the request. The handout feature in the Office
Live Meeting 2007 client is disabled.
60
Important:
Filtering of file extensions is limited to standard file names. Filtering may not work with file
extensions embedded in other names.
In This Section
File uploads and downloads while using the handout feature in the Office Live Meeting 2007
client
Depending on the types of files you want to block or allow, you can use Lync Server Control
Panel to modify the global filter. For details about file transfer filtering, see Configuring Filtering for
Instant Messaging (IM).
To modify the default file transfer filter
1. From a user account that is assigned to the CsUserAdministrator role or the
CsAdministrator role, log on to any computer in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click IM and Presence and then click File Filter.
4. On the File Filter page, double-click the Global filter.
5. In Edit File Filter, select the Enable file filter check box.
6. In the File transfer drop-down list box, click Block All or Block specific file types.
7. If you clicked Block All, skip to step 9.
8. If you clicked Block specific file types, do the following:
a. Click Select to modify the default list of file type extensions that you want to block.
b. In Select File Type, select the file types that you want to block or allow by adding or
removing their extensions from the categories under File type extensions.
c.
If you do not see the extension for a file type that you want to block, type the
extension in the text box under Add file type extensions to the list, and then click
Add.
d. Click OK.
61
9. Click Commit.
See Also
Configuring Filtering for Instant Messaging (IM)
Create a New File Transfer Filter for a Specific Site
Create a New URL Filter to Handle Hyperlinks in IM Conversations
Modify the Default URL Filter
Create a New File Transfer Filter for a Specific Site
In addition to modifying the global file transfer filter, you can configure custom file transfer filters
for specific sites within your Microsoft Lync Server 2010 deployment. For details about file
transfer filtering, see Configuring Filtering for Instant Messaging (IM).
To create a file transfer filter for a specific site
1. From a user account that is assigned to the CsUserAdministrator role or the
CsAdministrator role, log on to any computer in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click IM and Presence and then click File Filter.
4. On the File Filter page, click New.
5. In the Select a Site dialog box, click the site for which you want to create the file transfer
filter, and then click OK.
6. In New File Filter, click the Enable file filter check box.
7. In File transfer drop-down list box, click Block All or Block specific file types.
8. If you clicked Block All, skip to step 9.
9. If you clicked Block specific file types, do the following:
a. Click Select to modify the default list of file type extensions that you want to block.
b. In the Select File Type dialog box, select the file types that you want to block or
allow by adding or removing their extensions from the categories under File type
extensions.
c.
If you do not see the extension for a file type that you want to block, type the
extension in the text box under Add file type extensions to the list, and then click
Add.
d. Click OK.
10. Click Commit.
See Also
Configuring Filtering for Instant Messaging (IM)
Create a New URL Filter to Handle Hyperlinks in IM Conversations
Modify the Default File Transfer Filter
62
Allow all URLs. As an option, you can create a notice that is inserted at the beginning of each
instant message that contains a URL.
Allow specific URLs and include a warning with each instant message that contains a URL.
In addition, you can choose to block URLs that contain specific file types, or block only Internet
URLs by allowing URLs that are within the servers local intranet zone intranet URLs to
pass through the server. For details about URL filtering, see Configuring Filtering for Instant
Messaging (IM).
See Also
Configuring Filtering for Instant Messaging (IM)
Create a New File Transfer Filter for a Specific Site
Create a New URL Filter to Handle Hyperlinks in IM Conversations
Modify the Default File Transfer Filter
Create a New URL Filter to Handle Hyperlinks in IM Conversations
In addition to modifying the global URL filter, you can configure custom URL filters for individual
sites within your Microsoft Lync Server 2010 deployment. For details about URL filtering, see
Configuring Filtering for Instant Messaging (IM).
To create a new URL filter
1. From a user account that is assigned to the CsUserAdministrator role or the
CsAdministrator role, log on to any computer in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click IM and Presence, and then click URL Filter.
4. On the URL Filter page, click New.
5. In Select a Site, click the site for which you want to create the URL filter, and then click
OK.
6. In the New URL Filter dialog box, select the Enable URL Filter check box to enable URL
filtering for the site.
7. To block any active URL that contains a file with an extension listed under File type
extensions to block in Edit File Filter, select the Block URLs with file extension
check box.
8. In the Hyperlink prefix drop-down list box, click the option that corresponds to how you
63
In the Search users box, type all or the first portion of the display name, first name,
last name, Security Accounts Manager (SAM) account name, SIP address, or line
Uniform Resource Identifier (URI) of the user account, and then click Find.
If you have a saved query, click the Open query icon, use the Open dialog box to
retrieve the query (a .usf file), and then click Find.
64
In the Equal to drop-down list, click the operator (for example, Equal to or Not equal
to).
d. Depending on the user property you selected, enter the criteria you want to use to
filter the search results by typing it or by clicking the arrow in the drop-down list.
Tip:
To add additional search clauses to your query, click Add Filter.
e. Click Find.
6. Click a user in the search results, click Action, and then click Assign policies.
Tip:
If you want the same per-user client version policy to apply to multiple users,
select multiple users in the search results, then click Actions, and then click
Assign policies.
7. In Assign Policies, under Client version policy, do one of the following:
Note:
Because there are multiple policies that you can configure by using the Assign
Policies dialog box, <Keep as is> is selected by default for every policy in the
dialog box. Continue using the policy previously assigned to the user by making
no changes to this setting.
Allow Lync Server 2010 to automatically choose either the global-level policy or, if
defined, the site-level policy or pool-level policy.
Click the name of a per-user client version policy you previously defined on the
Client Version Policy page.
Tip:
To help you decide the policy you want to assign, after you click a policy
name, click View to view the user rights and permissions defined in the
policy.
In This Section
65
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Voice Routing and then click Dial Plan.
4. On the Dial Plan page, click New and select a scope for the dial plan:
Site dial plan applies to an entire site, except any users or groups that are assigned
to a user dial plan. If you select Site for a dial plans scope, you must choose the site
from the Select a Site dialog box. If a dial plan has already been created for a site,
the site does not appear in the Select a Site dialog box.
Pool dial plan can apply to a public switched telephone network (PSTN) gateway or
a Registrar. If you select Pool for a dial plans scope, choose the PSTN gateway or
Registrar from the Select a Service dialog box. If a dial plan has already been
created for a service (PSTN gateway or Registrar), the service does not appear in the
list.
66
5. If you are creating a user dial plan, enter a descriptive name in the Name field on the
New Dial Plan dialog box. After this name is saved, it cannot be changed.
Notes:
For site dial plans, the Name field is prepopulated with the site name and cannot be changed.
For pool dial plans, the Name field is prepopulated with the PSTN gateway or Registrar name
and cannot be changed.
6. The Simple name field is prepopulated with the same name that appears in the Name
field. You can optionally edit this field to specify a more descriptive name that reflects the
site, service, or user to which the dial plan applies.
Important
The Simple name must be unique among all dial plans within the Lync Server deployment. It
cannot exceed 256 Unicode characters, each of which can be an alphabetic or numeric
character, a hyphen (-), a period (.), a plus sign (+), or an underscore (_).
Spaces are not allowed in the Simple name.
7. (Optional) In the Description field, you can type additional descriptive information about
the dial plan.
8. (Optional) If you want to use this dial plan as a region for dial-in access numbers, specify
a Dial-in conferencing region. If you do not want to use this dial plan for dial-in access
numbers, leave this field empty.
Note:
Dial-in conferencing regions are required to associate dial-in conferencing
access numbers with one or more dial plans.
9. (Optional) In the External access prefix field, specify a value only if users need to dial
one or more additional leading digits (for example, 9) to get an external line. You can type
in a prefix value of up to four characters (#, *, and 0-9).
Note:
If you specify an external access prefix, you do not need to create a new
normalization rule to accommodate the prefix.
10. Associate and configure normalization rules for the dial plan as follows:
To choose one or more rules from a list of all normalization rules available in your
Enterprise Voice deployment, click Select. In Select Normalization Rules, highlight
the rules you want to associate with the dial plan and then click OK.
To define a new normalization rule and associate it with the dial plan, click New. For
details about defining a new rule, see Defining Normalization Rules.
To edit a normalization rule that is already associated with the dial plan, highlight the
rule name and click Show details. For details about editing the rule, see Defining
Normalization Rules.
To copy an existing normalization rule to use as a starting point for defining a new
rule, highlight the rule name and click Copy, and then click Paste. For details about
67
To remove a normalization rule from the dial plan, highlight the rule name and click
Remove.
Note:
Each dial plan must have at least one associated normalization rule. For
information about how to determine all of the normalization rules a dial plan
requires, see Dial Plans and Normalization Rules in the Planning documentation.
11. Verify that the dial plans normalization rules are arranged in the correct order. To change
a rules position in the list, highlight the rule name and then click the up or down arrow.
Important
Lync Server traverses the normalization rule list from the top down and uses the first rule that
matches the dialed number. If you configure a dial plan so that a dialed number can match
more than one normalization rule, make sure the more restrictive rules are sorted above the
less restrictive ones.
The default Prefix All normalization rule ^(\d{11})$ matches any 11-digit number. For
example, if you add a normalization rule that matches 11-digit numbers that start with 1425,
make sure that Prefix All is sorted below the more restrictive ^(1425\d{7})$ rule.
12. (Optional) Enter a number to test the dial plan and then click Go. The test results are
displayed under Enter a number to test.
Note:
You can save a dial plan that does not yet pass the test and then reconfigure it
later. For details, see Test Voice Routing.
13. Click OK.
14. On the Dial Plan page, click Commit, and then click Commit all.
Note:
Any time you create a dial plan, you must run the Commit all command to
publish the configuration change. For details, see Publish Pending Changes to
the Voice Routing Configuration in the Operations documentation.
See Also
Modify a Dial Plan
Defining Normalization Rules
Publish Pending Changes to the Voice Routing Configuration
Modify a Dial Plan
To modify an existing dial plan, perform the steps in the following procedure. If you want to create
a new dial plan, see Create a Dial Plan.
To modify a dial plan
1.
68
To choose one or more rules from a list of all normalization rules available in your
Enterprise Voice deployment, click Select. In the Select Normalization Rules dialog
box, highlight the rules that you want to associate with the dial plan and then click
OK.
To define a new normalization rule and associate it with the dial plan, click New. For
details about defining a new rule, see Defining Normalization Rules.
To edit a normalization rule that is already associated with the dial plan, highlight the
69
rule name and click Show details. For details about editing the rule, see Defining
Normalization Rules.
To copy an existing normalization rule to use as a starting point for defining a new
rule, highlight the rule name and click Copy, and then click Paste. For details about
editing the copy, see Defining Normalization Rules.
To remove a normalization rule from the dial plan, highlight the rule name and click
Remove.
Note:
Each dial plan must have at least one associated normalization rule. For details
about how to determine all of the normalization rules a dial plan requires, see
Dial Plans and Normalization Rules in the Planning documentation.
10. Verify that the dial plans normalization rules are arranged in the correct order. To change
a rules position in the list, highlight the rule name and then click the up or down arrow.
Important
Lync Server traverses the normalization rule list from the top down and uses the first rule that
matches the dialed number. If you configure a dial plan so that a dialed number can match
more than one normalization rule, make sure the more restrictive rules are sorted above the
less restrictive ones.
The default Prefix All normalization rule ^(\d{11})$ matches any 11-digit number. If, for
example, you add a normalization rule that matches 11-digit numbers that start with 1425,
make sure that Prefix All is sorted below the more restrictive ^(1425\d{7})$ rule.
11. (Optional) Enter a number to test the dial plan and then click Go. The test results are
displayed under Enter a number to test.
Note:
You can save a dial plan that does not yet pass the test and then reconfigure it
later. For details, see Test Voice Routing.
12. Click OK.
13. On the Dial Plan page, click Commit, and then click Commit all.
Note:
Any time you create or modify a dial plan, you must run the Commit all
command to publish the configuration change. For details, see Publish Pending
Changes to the Voice Routing Configuration in the Operations documentation.
See Also
Create a Dial Plan
Defining Normalization Rules
Publish Pending Changes to the Voice Routing Configuration
70
Use the Build a Normalization Rule tool to specify values for the starting digits, length, digits
to remove and digits to add, and then let Lync Server Control Panel generate the
corresponding matching pattern and translation rule for you.
Write regular expressions manually to define the matching pattern and translation rule.
In This Section
See Also
Create a Dial Plan
Modify a Dial Plan
Create or Modify a Normalization Rule by Using Build a Normalization Rule
Complete the following steps if you want to create or modify a normalization rule by using Build a
Normalization Rule in Microsoft Lync Server 2010 Control Panel. Alternatively, if you want to
create or modify a normalization rule manually, see Create or Modify a Normalization Rule
Manually.
To define a rule by using Build a Normalization Rule
1. Log on to the computer as a member of the RTCUniversalServerAdmins group, or as a
member of the CsVoiceAdministrator, CsServerAdministrator, or CsAdministrator role.
For details, see Delegate Setup Permissions.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. (Optional) Follow the steps in Create a Dial Plan through step 11 or Modify a Dial Plan
through step 10.
4. In New Normalization Rule or Edit Normalization Rule, type a name that describes the
number pattern being normalized in Name (for example, 5DigitExtension).
5. (Optional) In Description, type a description of the normalization rule (for example,
"Translates 5-digit extensions").
6. In Build a Normalization Rule, enter values in the following fields:
Starting digits (Optional) Specify the leading digits of dialed numbers you want the
71
pattern to match. For example, type 425 if you want the pattern to match dialed
numbers beginning with 425.
Length Specify the number of digits in the matching pattern and select whether you
want the pattern to match this length exactly, match dialed numbers that are at least
this length, or match dialed numbers of any length.
Digits to add (Optional) Specify digits to be added to dialed numbers you want the
pattern to match.
The values you enter in these fields are reflected in Pattern to match and Translation
rule. For example, if you leave Starting digits empty, type 7 into the Length field and
select Exactly, and specify 0 in Digits to remove, the resulting regular expression in the
Pattern to match is:
^(\d{7})$
7. In Translation rule, specify a pattern for the format of translated E.164 phone numbers
as follows:
A value that represents the number of digits specified in the matching pattern. For
example, if the matching pattern is ^(\d{7})$ then $1 in the translation rule represents
7-digit dialed numbers.
(Optional) Type a value into the Digits to add field to specify digits to be prepended
to the translated number, for example +1425.
For example, if Pattern to match contains ^(\d{7})$ as the pattern for dialed numbers
and Translation rule contains +1425$1 as the pattern for E.164 phone numbers, the rule
normalizes 5550100 to +14255550100.
8. (Optional) If the normalization rule results in a phone number that is internal to your
organization, select Internal extension.
9. (Optional) Enter a number to test the normalization rule and then click Go. The test
results are displayed under Enter a number to test.
Note:
You can save a normalization rule that does not yet pass the test and then
reconfigure it later. For details, see Test Voice Routing.
10. Click OK to save the normalization rule.
11. Click OK to save the dial plan.
12. On the Dial Plan page, click Commit, and then click Commit all.
Note:
Any time you create or change a normalization rule, you must run the Commit all
command to publish the configuration change. For details, see Publish Pending
Changes to the Voice Routing Configuration in the Operations documentation.
See Also
Create or Modify a Normalization Rule Manually
72
In Match this pattern, specify the pattern that you want to use to match the dialed
phone number.
In Translation rule, specify a pattern for the format of translated E.164 phone
numbers.
For example, if you enter ^(\d{7})$ in Match this pattern and +1425$1 in Translation
rule, the rule normalizes 5550100 to +14255550100.
8. (Optional) If the normalization rule results in a phone number that is internal to your
organization, select Internal extension.
9. (Optional) Enter a number to test the normalization rule and then click Go. The test
results are displayed under Enter a number to test.
Note:
You can save a normalization rule that does not yet pass the test and then
reconfigure it later. For details, see Test Voice Routing.
73
Configuring Voice Policies and PSTN Usage Records to Authorize Calling Features and
Privileges
Configuring Voice Policies and PSTN Usage Records to Authorize Calling Features and
Privileges
A voice policy enables a set of calling features and associates one or more PSTN usage records
to define the calling features and permissions of users who are assigned the policy.
74
Voice policy scope can be either Site (which defines the default features and permissions for a
network site) or User (which defines the features and permissions to be assigned on a per-user or
group basis). Users not assigned to a voice policy will automatically be assigned to the global
policy, which is the default voice policy that is installed with the product.
Note:
For details, see Voice Policies in the Planning documentation.
In This Section
Site policy applies to an entire site, except any users or groups that are assigned to
a user policy. If you select Site for a policy scope, choose the site from the Select a
Site dialog box. If a voice policy has already been created for a site, the site does not
appear in the Select a Site dialog box.
5. If the voice policy scope is User, enter a descriptive name for the policy in the Name field.
Note:
If the voice policy scope is Site, the Name field in New Voice Policy is
prepopulated with the site name and cannot be changed.
6. (Optional) Enter additional descriptive information for the voice policy.
7. Select or clear the following check boxes to enable or disable each of the Calling
features for this voice policy:
Call forwarding enables users to forward calls to other phones and client devices.
75
Enabled by default.
Delegation enables users to specify other users to send and receive calls on their
behalf. Enabled by default.
Call transfer enables users to transfer calls to other users. Enabled by default.
Call park enables users to park calls on hold and then pick up the call from a
different phone or client. Disabled by default.
Team call enables users on a defined team to answer calls for other members of the
team. Enabled by default.
PSTN re-route enables calls made by users who are assigned this policy to other
enterprise users to be re-routed on the public switched telephone network (PSTN) if
the WAN is congested or unavailable. Enabled by default.
Malicious call tracing enables users to report malicious calls (such as bomb
threats) using the client UI, and that in turn flags the calls in the call detail records
(CDRs). Disabled by default.
8. To associate and configure PSTN usage records for this voice policy, do any of the
following:
To choose one or more records from a list of all PSTN usage records available in
your Enterprise Voice deployment, click Select. Highlight the records you want to
associate with this voice policy and then click OK.
To remove a PSTN usage record from this voice policy, highlight the record and click
Remove.
To define a new PSTN usage record and associate it with this voice policy, do the
following:
a. Click New.
b. In the Name field, enter a unique descriptive name for the record. For example, you
may want to create a PSTN usage record named Redmond for full-time employees
located in Redmond, and another named RedmondTemps for temporary employees.
Note:
The PSTN usage record name must be unique within the Enterprise Voice
deployment. After the record is saved, the Name field cannot be edited.
76
c.
Use any of the following methods to associate and configure routes for this PSTN
usage record:
To choose one or more routes from the list of all available routes in your Enterprise
Voice deployment, click Select, highlight the routes you want to associate with this
PSTN usage record, and then click OK.
To remove a route from the PSTN usage record, highlight the route and click
Remove.
To define a new route and associate it with this PSTN usage record, click New. For
details, see Create a Voice Route.
To edit a route that is already associated with this PSTN usage record, highlight the
route and click Show details. For details, see Modify a Voice Route.
d. Click OK.
To edit a PSTN usage record that is already associated with this voice policy, do the
following:
a. Highlight the PSTN usage record you want to edit and click Show details.
b. Use any of the following methods to associate and configure routes for this PSTN
usage record:
To choose one or more routes from the list of all available routes in your Enterprise
Voice deployment, click Select, highlight the routes you want to associate with this
PSTN usage record, and then click OK.
To remove a route from this PSTN usage record, highlight the route and click
Remove.
To define a new route and associate it with this PSTN usage record, click New. For
details, see Create a Voice Route.
To edit a route that is already associated with this PSTN usage record, highlight the
route and click Show details. For details, see Modify a Voice Route.
c.
Click OK.
9. Arrange the PSTN usage records for optimum performance. To change a records
position in the list, highlight the record name and click the up or down arrow.
Important:
The order in which PSTN usage records are listed in the voice policy is
significant. Lync Server traverses the list from the top down. We recommend that
you organize the list by frequency of use, for example: RedmondLocal,
RedmondLongDist, RedmondInternational, RedmondBackup.
10. (Optional) Enter a number to test the voice policy and click Go. The test results are
displayed under Translated number to test.
Note:
You can save a voice policy that does not yet pass the test and then reconfigure
it later. For details, see Test Voice Routing.
11. Click OK.
77
12. On the Voice Policy page, click Commit, and then click Commit all.
Note:
Any time you create or modify a voice policy, you must run the Commit all
command to publish the configuration change. For details, see Publish Pending
Changes to the Voice Routing Configuration in the Operations documentation.
See Also
Modify a Voice Policy and Configure PSTN Usage Records
View PSTN Usage Records
Create a Voice Route
Modify a Voice Route
Test Voice Routing
Publish Pending Changes to the Voice Routing Configuration
Modify a Voice Policy and Configure PSTN Usage Records
Follow these steps if you want to modify a voice policy. If you want to create a new voice policy,
see Create a Voice Policy and Configure PSTN Usage Records for the procedure.
Note:
If a user is assigned to a voice policy has no associated PSTN usage records, the user
cannot place outbound calls. To see a listing of all PSTN usage records available in your
Enterprise Voice deployment and view their properties, see View PSTN Usage Records.
To modify a voice policy
1.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Voice Routing and then click Voice Policy.
4. On the Voice Policy page, double-click a voice policy name.
Note:
The scope and name were set when the voice policy was created. They cannot
be changed.
5. (Optional) In Edit Voice Policy, enter additional descriptive information for the voice
policy.
6. Select or clear the following check boxes to enable or disable each of the Calling
features:
Call forwarding enables users to forward calls to other phones and client devices.
Enabled by default.
78
Delegation enables users to specify other users to send and receive calls on their
behalf. Enabled by default.
Call transfer enables users to transfer calls to other users. Enabled by default.
Call park enables users to park calls on hold and then pick up the call from a
different phone or client. Disabled by default.
Team call enables users on a defined team to answer calls for other members of the
team. Enabled by default.
PSTN re-route enables calls made by users who are assigned this policy to other
enterprise users to be re-routed on the public switched telephone network (PSTN) if
the WAN is congested or unavailable. Enabled by default.
Malicious call tracing enables users to report malicious calls (such as bomb
threats) using the client UI, and that in turn flags the calls in the call detail records
(CDRs). Disabled by default.
7. To associate and configure PSTN usage records for this voice policy, do any of the
following:
To choose one or more records from a list of all PSTN usage records available in
your Enterprise Voice deployment, click Select. Highlight the records you want to
associate with this voice policy and then click OK.
To remove a PSTN usage record from this voice policy, highlight the record and click
Remove.
To define a new PSTN usage record and associate it with this voice policy, do the
following:
a. Click New.
b. In the Name field, enter a unique descriptive name for the record. For example, you
may want to create a PSTN usage record named Redmond for full-time employees
located in Redmond, and another named RedmondTemps for temporary employees.
Note:
The PSTN usage record name must be unique within the Enterprise Voice
deployment. After the record is saved, the Name field cannot be edited.
c.
Use any of the following methods to associate and configure routes for this PSTN
79
usage record:
To choose one or more routes from the list of all available routes in your Enterprise
Voice deployment, click Select, highlight the routes you want to associate with this
PSTN usage record, and then click OK.
To remove a route from the PSTN usage record, highlight the route and click
Remove.
To define a new route and associate it with this PSTN usage record, click New. For
details, see Create a Voice Route.
To edit a route that is already associated with this PSTN usage record, highlight the
route and click Show details. For details, see Modify a Voice Route.
d. Click OK.
To edit a PSTN usage record that is already associated with this voice policy, do the
following:
a. Highlight the PSTN usage record you want to edit and click Show details.
b. Use any of the following methods to associate and configure routes for this PSTN
usage record:
To choose one or more routes from the list of all available routes in your Enterprise
Voice deployment, click Select, highlight the routes you want to associate with this
PSTN usage record, and then click OK.
To remove a route from this PSTN usage record, highlight the route and click
Remove.
To define a new route and associate it with this PSTN usage record, click New. For
details, see Create a Voice Route.
To edit a route that is already associated with this PSTN usage record, highlight the
route and click Show details. For details, see Modify a Voice Route.
c.
Click OK.
8. Arrange the PSTN usage records for optimum performance. To change a records
position in the list, highlight the record name and click the up or down arrow.
Note:
The order in which PSTN usage records are listed in the voice policy is
significant. Lync Server traverses the list from the top down. We recommend that
you organize the list by frequency of use, for example: RedmondLocal,
RedmondLongDist, RedmondInternational, RedmondBackup.
9. (Optional) Enter a number to test the voice policy and click Go. The test results are
displayed below the Translated number to test field.
Note:
You can save a voice policy that does not yet pass the test and then reconfigure
it later. For details, see Test Voice Routing.
10. Click OK.
11. On the Voice Policy page, click Commit, and then click Commit all.
80
Note:
Any time you create or modify a voice policy, you must run the Commit all
command to publish the configuration change. For details, see Publish Pending
Changes to the Voice Routing Configuration in the Operations documentation.
See Also
Create a Voice Policy and Configure PSTN Usage Records
View PSTN Usage Records
Create a Voice Route
Modify a Voice Route
Test Voice Routing
Publish Pending Changes to the Voice Routing Configuration
View PSTN Usage Records
A PSTN usage record specifies a class of call (such as internal, local, or long distance) that can
be made by various users or groups of users in an organization. For details, see PSTN Usage
Records in the Planning documentation.
To view a PSTN usage record
1.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Voice Routing and then click PSTN Usage.
4. On the PSTN Usage page, highlight the PSTN usage record you want to view, click Edit
and then click Show details.
Note:
A read-only page of the selected PSTN usage record shows the associated
routes and associated voice policies.
See Also
Create a Voice Policy and Configure PSTN Usage Records
Modify a Voice Policy and Configure PSTN Usage Records
Configuring Voice Routes for Outbound Calls
A Lync Server 2010 voice route associates destination phone numbers with one or more PSTN
gateways or SIP trunks and one or more PSTN usage records.
Note:
For details, see Voice Routes in the Planning documentation.
81
In This Section
To use the Build a pattern to match tool to generate a regular expression, enter
values as follows. You can specify two types of pattern matching:
Starting digits for numbers that you want to allow: Enter prefix values that this
route must accommodate (including the leading + if needed). For example, type +425
and then click Add. Repeat this for each prefix value that you want to include in the
route.
Exceptions: If you want to specify one or more exceptions for a prefix value,
highlight the prefix and click Exceptions. Type in one or more values for the
matching patterns that you do not want this route to accommodate. For example, to
exclude numbers starting with +425237 from the route, enter a value of +425237 in
the Exceptions field and then click OK.
To define the matching pattern manually, click Edit in the Build a pattern to match
tool and then type in a .NET Framework regular expression to specify the matching
pattern for destination phone numbers to which the route is applied. For information
about how to write regular expressions, see ".NET Framework Regular Expressions"
at http://go.microsoft.com/fwlink/?LinkId=140927.
9. Select Suppress caller ID if you do not want the ID of the phone making the outbound
call to appear to the call recipient. If you select this option, you must specify an Alternate
82
83
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Voice Routing and then click Route.
4. On the Route page, use either of the following methods to modify a voice route:
Click a voice route name, click Edit, and then click Show details.
Click a voice route name, click Edit, click Copy, and then click Paste. Click the new
copy of the voice route that you just created, click Edit, and then click Show details.
5. In the Name field on the Edit Voice Route page, type a descriptive name for the voice
route.
6. (Optional) In the Description field, type in additional descriptive information for the voice
route.
7. To specify the patterns you want this route to accommodate, you can either use the Build
a pattern to match tool to generate a regular expression, or write the regular expression
manually.
To use the Build a pattern to match tool to generate a regular expression, enter
values as follows. You can specify two types of pattern matching:
Starting digits for numbers that you want to allow: Enter prefix values that this
route must accommodate (including the leading + if needed). For example, type +425
and then click Add. Repeat this for each prefix value that you want to include in the
route.
Exceptions: If you want to specify one or more exceptions for a prefix value,
highlight the prefix and click Exceptions. Type in one or more values for the
matching patterns that you do not want this route to accommodate. For example, to
exclude numbers starting with +425237 from the route, enter a value of +425237 in
the Exceptions field and then click OK.
To define the matching pattern manually, click Edit in the Build a pattern to match
tool and then type in a .NET Framework regular expression to specify the matching
pattern for destination phone numbers to which the route is applied. For information
about how to write regular expressions, see ".NET Framework Regular Expressions"
at http://go.microsoft.com/fwlink/?LinkId=140927.
8. Select Suppress caller ID if you do not want the ID of the phone making the outbound
call to appear to the call recipient. If you select this option, you must specify an Alternate
caller ID that will appear on the recipients caller ID display.
9. To associate one or more PSTN gateways or SIP trunks with the voice route, click Add
84
85
PSTN gateway
86
Double-click an existing trunk (for example, the Global trunk) to display the Edit
Trunk Configuration dialog box.
Click New, and then select a scope for the new trunk:
Site trunk: Choose the site for this trunk configuration from the Select a Site dialog
box, and then click OK. Note that if a trunk has already been created for a site, the
site does not appear in the Select a Site dialog box.
Pool trunk: Choose the service for this trunk configuration (for example, a PSTN
gateway at a specified site) from the Select a Service dialog box, and then click OK.
Note that if a trunk has already been created for a service, the service does not
appear in the Select a Service dialog box.
Notes:
7. Select the Enable media bypass check box if you want media to bypass the Mediation
Server for processing by the trunk peer.
87
Important:
For media bypass to work successfully, the PSTN gateway, IP-PBX, or ITSP
Session Border Controller must support certain capabilities. For details, see
Media Bypass in the Planning documentation.
8. Select the Centralized media processing check box if there is a well-known media
termination point (for example, a PSTN gateway where the media termination has the
same IP as the signaling termination). Clear this check box if the trunk does not have a
well-known media termination point.
Note:
Media bypass is only supported if this option is selected.
9. If the trunk peer supports receiving SIP REFER requests from the Mediation Server,
select the Enable refer support check box. Clear the check box if the trunk peer does
not support receiving SIP REFER requests from the Mediation Server.
Note:
If you disable this option while the Enable media bypass option is selected,
additional settings are required. If the trunk peer does not support receiving SIP
REFER requests from the Mediation Server and media bypass is enabled, you
must also run the Set-CsTrunkConfiguration cmdlet to disable RTCP for active
and held calls in order to support proper conditions for media bypass. For details,
see the Lync Server Management Shell documentation.
10. (Optional) Associate and configure translation rules for the trunk:
To choose one or more rules from a list of all translation rules available in your
Enterprise Voice deployment, click Select. In Select Translation Rules, click the
rules that you want to associate with the trunk and then click OK.
To define a new translation rule and associate it with the trunk, click New. See
Defining Translation Rules in the Deployment documentation for information about
defining a new rule.
To edit a translation rule that is already associated with the trunk, click the rule name
and then click Show details. For details, see Defining Translation Rules in the
Deployment documentation.
To copy an existing translation rule to use as a starting point for defining a new rule,
click the rule name and click Copy, and then click Paste. For details, see Defining
Translation Rules.
To remove a translation rule from the trunk, highlight the rule name and click
Remove.
Warning:
Do not associate translation rules with a trunk if you have configured translation
rules on the associated trunk peer because the two rules might conflict.
11. Ensure the trunks translation rules are arranged in the correct order. To change a rules
position in the list, highlight the rule name and then click the up or down arrow.
88
Important:
Lync Server traverses the translation rule list from the top down and uses the first
rule that matches the dialed number. If you configure a trunk so that a dialed
number can match more than one translation rule, ensure the more restrictive
rules are sorted above the less restrictive rules. For example, if you have
included a translation rule that matches any 11-digit number and a translation
rule that matches only 11-digit numbers that start with +1425, ensure the rule that
matches any 11-digit number is sorted below the more restrictive rule.
12. When you are finished configuring the trunk, click OK.
13. On the Trunk Configuration page, click Commit, and then click Commit all.
Note:
Any time you create or modify a trunk configuration, you must run the Commit all
command to publish the configuration change. For details, see Publish Pending
Changes to the Voice Routing Configuration in the Operations documentation.
After you have configured the trunk, continue configuring media bypass by choosing between
global media bypass options, as described in Global Media Bypass Options in the
Deployment documentation.
See Also
Configure a Trunk Without Media Bypass
Defining Translation Rules
Configure Media Bypass
Global Media Bypass Options
Configure a Trunk Without Media Bypass
Follow these steps if you want to configure a trunk with media bypass disabled. If you want to
configure a trunk with media bypass enabled, see Configure Media Bypass on a Trunk.
Double-click an existing trunk (for example, the Global trunk) to display the Edit
89
Click New, and then select a scope for the new trunk:
Site trunk: Choose the site for this trunk configuration from the Select a Site dialog
box, and then click OK. Note that if a trunk has already been created for a site, the
site does not appear in the Select a Site dialog box.
Pool trunk: Choose the service for this trunk configuration (for example, a PSTN
gateway at a specified site) from the Select a Service dialog box, and then click OK.
Note that if a trunk has already been created for a service, the service does not
appear in the Select a Service dialog box.
Notes:
To choose one or more rules from a list of all translation rules available in your
Enterprise Voice deployment, click Select. In Select Translation Rules, click the
rules you want to associate with the trunk and then click OK.
To define a new translation rule and associate it with the trunk, click New. For details,
see Defining Translation Rules in the Deployment documentation.
To edit a translation rule that is already associated with the trunk, click the rule name
and click Show details. For details, see Defining Translation Rules in the
Deployment documentation.
To copy an existing translation rule to use as a starting point for defining a new rule,
click the rule name and click Copy, and then click Paste. For details, see Defining
Translation Rules in the Deployment documentation.
90
To remove a translation rule from the trunk, click the rule name and click Remove.
Warning:
Do not associate translation rules with a trunk if you have configured translation
rules on the associated trunk peer because the two rules might conflict.
10. Ensure the trunks translation rules are arranged in the correct order. To change a rules
position in the list, highlight the rule name and then click the up or down arrow.
Important:
Lync Server traverses the translation rule list from the top down and uses the first
rule that matches the dialed number. If you configure a trunk so that a dialed
number can match more than one translation rule, ensure the more restrictive
rules are sorted above the less restrictive rules. For example, if you have
included a translation rule that matches any 11-digit number and a translation
rule that matches only 11-digit numbers that start with +1425, ensure the rule that
matches any 11-digit number is sorted below the more restrictive rule.
11. When you are finished configuring the trunk, click OK.
12. On the Trunk Configuration page, click Commit, and then click Commit all.
Note:
Any time you create or modify a trunk configuration, you must run the Commit all
command to publish the configuration change. For details, see Publish Pending
Changes to the Voice Routing Configuration in the Operations documentation.
See Also
Configure Media Bypass on a Trunk
Defining Translation Rules
Defining Translation Rules
Microsoft Lync Server 2010 Enterprise Voice requires that all dial strings be normalized to E.164
format for the purpose of performing reverse number lookup (RNL). The trunk peer (that is, the
associated gateway, PBX, or SIP trunk) might require that numbers be in a local dialing format. To
translate numbers from E.164 format to a local dialing format, you can optionally define one or
more translation rules to manipulate the Request URI before routing it to the trunk peer. For
example, you could write a translation rule to remove +44 from the beginning of a dial string and
replace it with 0144.
Important:
The ability to associate one or more translation rules with an Enterprise Voice trunk
configuration is intended to be used as an alternative to configuring translation rules on
the trunk peer. Do not associate translation rules with an Enterprise Voice trunk
configuration if you have configured translation rules on the trunk peer because the two
rules might conflict.
You can use either of the following methods to create or modify a translation rule:
91
Use the Build a Translation Rule tool to specify values for the starting digits, length, digits to
remove and digits to add, and then let Lync Server Control Panel generate the corresponding
matching pattern and translation rule for you.
Write regular expressions manually to define the matching pattern and translation rule.
Note:
For information about how to write regular expressions, see ".NET Framework Regular
Expressions" at http://go.microsoft.com/fwlink/?LinkId=140927.
In This Section
Create or Modify a Translation Rule by Using the Build a Translation Rule Tool
See Also
Configure Media Bypass on a Trunk
Configure a Trunk Without Media Bypass
Create or Modify a Translation Rule by Using the Build a Translation Rule Tool
Follow the steps if you want to define a translation rule by entering a set of values in the Build a
Translation Rule tool and allowing Lync Server Control Panel to generate the corresponding
matching pattern and translation rule for you. Alternatively, you can a write regular expression
manually to define the matching pattern and translation rule. For details, see Create or Modify a
Translation Rule Manually.
To define a rule by using the Build a Translation Rule tool
1. Log on to the computer as a member of the RTCUniversalServerAdmins group, or as a
member of the CsVoiceAdministrator, CsServerAdministrator, or CsAdministrator role.
For details, see Delegate Setup Permissions.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. To begin defining a translation rule, follow the steps in Configure Media Bypass on a
Trunk through step 10 or Configure a Trunk Without Media Bypass through step 9.
4. In the Name field on the New Translation Rule or Edit Translation Rule page, type a
name that describes the number pattern being translated.
5. (Optional) In Description field, type a description of the translation rule, for example US
International long-distance dialing.
6. In the Build a Translation Rule section of the dialog box, enter values in the following
fields:
Starting digits: (Optional) Specify the leading digits of numbers you want the pattern
to match. For example, enter + in this field to match numbers in E.164 format (which
begin with +).
Length: Specify the number of digits in the matching pattern and select whether you
want the pattern to match numbers that are this length exactly, at least this length, or
92
any length. For example, enter 11 and select At least in the drop-down list to match
numbers that are at least 11 digits in length.
Digits to remove: (Optional) Specify the number of starting digits to be removed. For
example, enter 1 to strip out the + from the beginning of the number.
The values you enter in these fields are reflected in the Pattern to match and
Translation rule fields. For example, if you specify the preceding example values, the
resulting regular expression in the Pattern to match field is:
^\+(\d{9}\d+)$
The Translation rule field specifies a pattern for the format of translated numbers. This
pattern has two parts:
A value (for example, $1) that represents the number of digits in the matching pattern
(Optional) A value that you can prepend by entering it in the Digits to add field
Using the preceding example values, 011$1 appears in the Translation rule field.
When this translation rule is applied, +441235551010 becomes 011441235551010.
7. Click OK to save the translation rule.
8. Click OK to save the trunk configuration.
9. On the Trunk Configuration page, click Commit, and then click Commit all.
Note:
Any time you create or modify a translation rule, you must run the Commit all
command to publish the configuration change. For details, see Publish Pending
Changes to the Voice Routing Configuration in the Operations documentation.
See Also
Create or Modify a Translation Rule Manually
Configure Media Bypass on a Trunk
Configure a Trunk Without Media Bypass
Publish Pending Changes to the Voice Routing Configuration
Global Media Bypass Options
Create or Modify a Translation Rule Manually
Follow these steps if you want to define a translation rule by writing a regular expression for the
matching pattern and translation rule. Alternatively, you can enter a set of values in the Build a
Translation Rule tool and allow Lync Server Control Panel to generate the corresponding
matching pattern and translation rule for you. For details, see Create or Modify a Translation Rule
by Using the Build a Translation Rule Tool.
To define a translation rule manually
1. Log on to the computer as a member of the RTCUniversalServerAdmins group, or as a
93
In the Match this pattern field, specify the pattern that will be used to match the
numbers to be translated.
In the Translation rule field, specify a pattern for the format of translated numbers.
For example, if you enter ^\+(\d{9}\d+)$ in the Match this pattern field and 011$1 in the
Translation rule field, the rule will translate +441235551010 to 011441235551010.
8. Click OK to save the translation rule.
9. Click OK to save the trunk configuration.
10. On the Trunk Configuration page, click Commit, and then click Commit all.
Note:
Any time you create or modify a translation rule, you must run the Commit all
command to publish the configuration change. For details, see Publish Pending
Changes to the Voice Routing Configuration in the Operations documentation.
See Also
Create or Modify a Translation Rule by Using the Build a Translation Rule Tool
Configure Media Bypass on a Trunk
Configure a Trunk Without Media Bypass
Publish Pending Changes to the Voice Routing Configuration
Global Media Bypass Options
94
Important:
If you have made any uncommitted changes to the settings on any page within the Voice
Routing group, the changes are saved in the exported voice configuration file (.vcfg).
This allows you to make voice routing configuration changes during multiple Lync Server
Control Panel sessions before you publish the changes.
In This Section
Related Sections
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Voice Routing.
4. On the Actions menu, click Export configuration.
5. Specify a location and file name, and then click Save.
See Also
Import a Voice Route Configuration File
Import a Voice Route Configuration File
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Voice Routing.
4. On the Actions menu, click Import configuration.
5. Find the configuration file you want to import and then click Open.
95
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
96
3. In the left navigation bar, click Voice Routing and then click Test Voice Routing.
4. On the Test Voice Routing page, click New to create a new test case.
5. In the Name field, type in a unique name for the test case.
The name must be unique among all voice routing test cases in your Enterprise Voice
deployment. It can be up to 32 characters in length and may contain any alphanumeric
characters plus the backslash (\), period (.) or underscore (_).
6. In the Dialed number to test field, type in the dialed number you want to use to test the
routing configuration that you specify for this test case. Based on the dial plan, route, and
voice policy, this number will be normalized and displayed as output.
7. In the Dial Plan list, select the dial plan to use when running the test. Default is the
Global dial plan.
8. In the Voice Policy list, select the voice policy to use when running the test. Default is the
Global voice policy.
9. In the Expected translation field, type in the phone number in the format you expect to
see it after translation. This is the value of the phone number you are testing after it has
been translated by the first normalization rule that matches in the selected dial plan.
When you run the test case, if the number you are testing does not result in the value in
the Expected translation field, the test fails.
10. (Optional) In the Expected PSTN usage list, you can select the PSTN usage record that
you expect to be used when you run the test case, based on the specified dial plan and
voice policy. If a different PSTN usage record is used, the test fails.
11. (Optional) In the Expected route list, you can select the voice route that you expect to be
used when you run the test case, based on the specified dial plan and voice policy. If a
different voice route is used, the test fails.
12. (Optional) Click Run to run the test case. The results are shown in the right panel of the
page.
13. Click OK.
14. Click Commit, and then click Commit all.
Note:
Any time you create a voice routing test case, you must run the Commit all
command to publish the configuration change. For details, see Publish Pending
Changes to the Voice Routing Configuration in the Operations documentation.
See Also
Configuring Dial Plans and Normalization Rules
Configuring Voice Policies, PSTN Usage Records, and Voice Routes
Export Voice Routing Test Cases
Import Voice Routing Test Cases
Export Voice Routing Test Cases
97
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Voice Routing.
4. On the Actions menu, click Export test cases.
5. Specify a location and file name (.vtest), and then click Save.
See Also
Import Voice Routing Test Cases
Import Voice Routing Test Cases
98
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Voice Routing and then click Test Voice Routing.
4. On the Test Voice Routing page, click Create voice routing test case information.
5. In the Dialed number field, type in the phone number you want to use for this test. This
number will be normalized and displayed in the Normalized number field of the Results
pane.
6. In the Dial plan list, select the dial plan to use for testing the dialed number. Default is the
Global dial plan.
When you run the test, the first normalization rule in this dial plan that matches the dialed
number will be displayed in the Normalization rule field of the Results pane.
7. In the Voice Policy list, select the voice policy to use for testing the dialed number.
Default is the Global voice policy.
When you run the test, the first matching PSTN usage record in this voice policy will be
displayed in the First PSTN usage field of the Results pane. Also, the first matching
voice route that is associated with this PSTN usage record will be displayed in the First
route field.
8. (Optional) Select the Populate from user check box if you want to test the dialed
number against the voice policy assigned to a particular user.
a. Click Browse to display the Select Enterprise Voice Users dialog box.
b. Click Find to display the list of users who are enabled for Enterprise Voice.
c.
Double-click the user name whose assigned voice policy you want to use for this test.
The Policy field is now populated with the voice policy assigned to the selected user.
When you run the test, the first matching PSTN usage record in this voice policy will be
displayed in the First PSTN usage field of the Results pane. Also, the first matching
voice route that is associated with this PSTN usage record will be displayed in the First
route field.
9. Click Run to run the test case. The results are shown in the right panel of the dialog box.
10. (Optional) Click Save as if you want to save this test configuration as a formal test case.
a. In the Name field of the Save Voice Routing Test Case Information dialog box,
type a unique name for the test case.
99
The name must be unique among all voice routing test cases in your Enterprise Voice
deployment. It can be up to 32 characters in length and may contain any
alphanumeric characters plus the backslash (\), period (.) or underscore (_).
b. Note that the remaining fields on the Save Voice Routing Test Case Information
dialog box are read-only, and are prepopulated from the informal test configuration
and results. Verify that this is the configuration you want to save for the test case.
Notes:
Values from the test results are used to prepopulate fields on the Save Voice Routing Test
Case Information dialog box as follows:
Expected translation is prepopulated with the value in the Normalized number field.
Expected route is prepopulated with the value in the First route field.
Expected PSTN usage record is prepopulated with the value in the First PSTN usage field.
If matches for any of these values were not found during the test run, the corresponding field
is empty on the Save Voice Routing Test Case Information dialog box.
c.
Click Ok to save the test case, or click Cancel to return to return to the View voice
routing test case information dialog box to further develop the test before saving it.
100
Normalized number: The value of the dialed number after the normalization rule has
translated it.
d. First PSTN usage: The first PSTN usage record in the voice policy selected for this
test case that matches the dialed number.
e. First route: The first voice route in the first PSTN usage record that matches the
dialed number.
Note:
The Expected PSTN usage record and Expected route fields are optional
in voice routing test case configuration. If the test case does not specify
these values, the corresponding field in the test results will be empty.
To run one or more selected voice routing test cases
1. Log on to the computer as a member of the RTCUniversalServerAdmins group, or as a
member of the CsVoiceAdministrator, CsServerAdministrator, or CsAdministrator role.
For details, see Delegate Setup Permissions.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Voice Routing and then click Test Voice Routing.
4. On the Test Voice Routing page, click the names of the test cases that you want to run.
5. On the Action menu, click Run selected.
The pass or fail status of each test case is shown in the Pass/fail column. If a test case
has not yet been run, N/A is shown in the Pass/fail column.
6. (Optional) To see detailed results for each test case, double-click the test case name.
Results are shown in the shaded area on the right side of the Edit Test Case page:
a. Test result: Overall pass or fail status of the test case run.
b. Normalization rule: The first normalization rule in the dial plan selected for this test
case that matches the dialed number (the value in the Number to test field).
c.
Normalized number: The value of the dialed number after the normalization rule has
101
translated it.
d. First PSTN usage: The first PSTN usage record in the voice policy selected for this
test case that matches the dialed number.
e. First route: The first voice route in the first PSTN usage record that matches the
dialed number.
Note:
The Expected PSTN usage record and Expected route fields are optional
in voice routing test case configuration. If the test case does not specify
these values, the corresponding field in the test results will be empty.
See Also
Create a Voice Routing Test Case
Run Informal Voice Routing Tests
Configuring Dial Plans and Normalization Rules
Configuring Voice Policies, PSTN Usage Records, and Voice Routes
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Voice Routing.
4. Make the configuration changes you want to the settings on each page of the Voice
Routing group.
5. To review pending changes without publishing them, select Review uncommitted
102
Navigate to the tab of the Voice Routing page that has pending changes you want to
cancel, select the item with the pending changes, click Commit, and then click
Cancel selected changes.
7. After you have reviewed all pending changes and canceled any that you do not want to
publish, click Commit, and then click Commit all.
8. In the Uncommitted Voice Configuration Settings dialog box, which displays a list of
all of the pending changes, click OK.
When Lync Server Control Panel has committed the changes, the Successfully
published voice routing configuration message appears.
In This Section
In This Section
103
104
on as a member of one of these roles, you are prompted for alternate credentials.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Response Groups, and then click Group.
4. On the Group page, click New.
5. In the Select a Service search field, type all or part of the name of the
ApplicationServer service for which you want to add the group, click the service that you
want in the list, and then click OK.
6. On the New Group page, in the Name field, type a descriptive name for the group.
7. In Description, type a description for the group.
8. In the Participation policy, select one of the following to set up the sign-in behavior for
the group:
Select Informal to specify that agents in the group do not need to sign in and out of
the group. Agents are automatically signed in to the group when they sign in to Lync
Server 2010.
Select Formal to specify that agents in the group must sign in and out of the group.
When you select this option, agents click a menu item in Lync 2010 to open Internet
Explorer and display a webpage console for signing in and out of the group.
9. In Alert time (seconds), specify the number of seconds to ring an agent before offering
the call to the next available agent (the default is 20 seconds).
Important:
The Agent alert time setting cannot exceed 180 seconds. If it exceeds 180
seconds, the client application will reject the call due to the SIP transaction timer
reaching its maximum wait time. To avoid this, set the Alert Time value to less
than 180 seconds.
10. In Routing method, select the method for routing calls to agents in the group as follows:
To offer a new call first to the agent who has been idle the longest (has had a
presence of Available or Inactive in Lync Server the longest), click Longest idle.
To offer a new call to all available agents at the same time, click Parallel. The call is
sent to the first agent who accepts it.
To always offer a new call to the agents in the order in which they are listed in the
Agent list, click Serial.
To offer a new call to all agents who are signed into Lync Server 2010 and the
Response Group application at the same time, regardless of their current presence,
click Attendant. Lync 2010 Attendant users who are configured as agents can see all
the calls that are waiting and answer waiting calls in any order. The call is sent to the
first agent who accepts it, and the other Lync 2010 Attendant users no longer see the
call.
105
11. In Agents, specify how you want to create your agents list:
To use a Microsoft Exchange Server distribution list, click Use an existing email
distribution list, and then in Distribution list address, type the email address of
the distribution list (for example, NetworkSupport@contoso.com).
If you use an email distribution list, you are subject to the following constraints:
You cannot select multiple distribution lists for the agent group. Each group supports
only a single distribution list.
If the distribution list contains one or more distribution lists, members of the nested
distribution lists are not added to the agent list.
If serial and round robin routing are selected, the server offers an incoming call to the
appropriate agent according to the routing method and according to the order in
which agents are listed in the distribution list.
Important:
If you use an email distribution list, hidden memberships or hidden lists might
become visible to the Response Group administrator or users.
Hidden memberships or hidden lists can become visible as follows:
If a distribution list was configured so that the membership is hidden and the
Response Group administrator assigns the distribution list to the agent list, users can
call the group to find out who the members are.
To use a custom list of agents, click Define a custom group of agents. Click Select,
and then in the Select Agents search field, type all or part of the name of the user
you want to assign as an agent to this group, and then click Find. In the list of
agents, select the user, and then click OK.
Note:
If the group is using either round robin or serial routing, arrange the agents in
the order that you want them to be offered calls. To change the order of the
agents in the Agent list, click an agent, and then click the up arrow or down
arrow.
106
Select Informal to specify that agents in the group do not need to sign in and out of
the group. Agents are automatically signed in to the group when they sign in to Lync
Server 2010.
Select Formal to specify that agents in the group must sign in and out of the group.
When you select this option, agents click a menu item in Lync 2010 to open Internet
Explorer and display a webpage console for signing in and out of the group.
9. In Alert time (seconds), specify the number of seconds to ring an agent before offering
the call to the next available agent (the default is 20 seconds).
Important:
The Agent alert time setting cannot exceed 180 seconds. If it exceeds 180
seconds, the client application will reject the call due to the SIP transaction timer
reaching its maximum wait time. To avoid this, set the Alert Time value to less
than 180 seconds.
10. In Routing method, select the method for routing calls to agents in the group as follows:
To offer a new call first to the agent who has been idle the longest (has had a
107
presence of Available or Inactive in Lync Server the longest), click Longest idle.
To offer a new call to all available agents at the same time, click Parallel. The call is
sent to the first agent who accepts it.
To always offer a new call to the agents in the order in which they are listed in the
Agent list, click Serial.
To offer a new call to all agents who are signed into Lync Server 2010 and the
Response Group application at the same time, regardless of their current presence,
click Attendant. Lync 2010 Attendant users who are configured as agents can see all
the calls that are waiting and answer waiting calls in any order. The call is sent to the
first agent who accepts it, and the other Lync 2010 Attendant users no longer see the
call.
11. To change the agents in a custom list of agents, in Agents, click Define a custom group
of agents, and do one of the following:
To add a user to the agent group, click Select, and then in the Select Agents search
field, type all or part of the name of the user you want to add to this group, and then
click Find. In the resulting list of agents, click the user you want to add, and then click
OK.
To remove a user from the agent group, in the Edit Group list of agents, click the
user you want to remove, and then click Remove.
To change the order in which agents are offered calls in groups using either round
robin or serial routing, in the Edit Group list of agents, click a user, and then click the
up arrow or down arrow.
12. To use a Microsoft Exchange Server distribution list as your agent group, in Agents, click
Use an existing email distribution list, and then in Distribution list address, type the
email address of the distribution list (for example, NetworkSupport@contoso.com).
If you use an email distribution list, you are subject to the following constraints:
You cannot select multiple distribution lists for the agent group. Each group supports
only a single distribution list.
If the distribution list contains one or more distribution lists, members of the nested
distribution lists are not added to the agent list.
If serial and round robin routing are selected, the server offers an incoming call to the
appropriate agent according to the routing method and according to the order in
which agents are listed in the distribution list.
Important:
If you use an email distribution list, hidden memberships or hidden lists might
become visible to the Response Group administrator or users.
If a distribution list was configured so that the membership is hidden and the
Response Group administrator assigns the distribution list to the agent list, users can
call the group to find out who the members are.
108
109
To forward the call to voice mail, click Forward to voice mail, and then in the SIP
address field, type a voice mail address in the format
sip:<username>@<domainname> (for example, sip:bob@contoso.com).
To forward the call to another user, click Forward to SIP address, and then in the
SIP address field, type the URI for the user in the format
110
sip:<username>@<domainname>.
To forward the call to another queue, click Forward to another queue, and then
browse to the queue that you want to use.
13. To specify a maximum number of calls that the queue can hold, select the Enable queue
overflow check box, and then do the following:
a. In Maximum number of calls, select the maximum number of calls that you want the
queue to hold.
b. In Forward the call, select which call is to be forwarded when the queue is full:
Newest Call or Oldest Call.
c.
Select the action that occurs when the overflow threshold is met as follows:
To forward the call to voice mail, click Forward to voice mail, and then in the SIP
address field, type a voice mail address in the format
sip:<username>@<domainname> (for example, sip:bob@contoso.com).
To forward the call to another user, click Forward to SIP address, and then in the
SIP address field, type the URI for the user in the format
sip:<username>@<domainname>.
To forward the call to another queue, click Forward to another queue, and then
browse to the queue that you want to use.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Response Groups, and then click Queue.
111
4. In the search field, type part or all of the name of the queue you want to change.
5. In the list of queues, click the queue that you want, click Edit, and then click Show
details.
6. In Name, type a descriptive name for the queue.
7. In Description, type a description for the queue.
8. To assign another agent group to the queue, under Groups, click Select, and then in the
Select Groups search field, type part or all of the name of the agent group that you want
to assign to the queue. In the resulting list of agent groups, select the group you want,
and then click OK.
9. To remove an assigned agent group from the queue, click the group you want in the
Groups list, and then click Remove.
10. When the server searches for an available agent in the queue, it uses group order. That
is, the first group in the list is searched first, followed by the second group in the list, and
so on. To change the order of the groups in the Groups list, click a group, and then click
the up arrow or down arrow.
11. To specify a maximum period of time for a caller to wait on hold before an agent answers
the call, select the Enable queue time-out check box, and then do the following:
a. In Time-out period (seconds), specify the maximum number of seconds a caller
waits for an agent to answer the call.
b. In Call Action, select the action that occurs when a call times out as follows:
To forward the call to voice mail, click Forward to voice mail, and then in the SIP
address field, type a voice mail address in the format
sip:<username>@<domainname> (for example, sip:bob@contoso.com).
To forward the call to another user, click Forward to SIP address, and then in the
SIP address field, type the URI for the user in the format
sip:<username>@<domainname>.
To forward the call to another queue, click Forward to another queue, and then
browse to the queue that you want to use.
12. To specify a maximum number of calls that the queue can hold, select the Enable queue
overflow check box, and then do the following:
a. In Maximum number of calls, select the maximum number of calls that you want the
queue to hold.
b. In Forward the call, select which call is to be forwarded when the queue is full:
Newest Call or Oldest Call.
c.
Select the action that occurs when the overflow threshold is met as follows:
To forward the call to voice mail, click Forward to voice mail, and then in the SIP
112
To forward the call to another user, click Forward to SIP address, and then in the
SIP address field, type the URI for the user in the format
sip:<username>@<domainname>.
To forward the call to another queue, click Forward to another queue, and then
browse to the queue that you want to use.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Response Groups, and then click Queue.
4. In the search field, type part or all of the name of the queue you want to delete.
5. In the list of queues, click the queue that you want, click Edit, and then click Delete.
6. Click OK.
113
Web browser
Internet Explorer 7
Internet Explorer 8 (native mode)
Windows 7
Internet Explorer 7
Internet Explorer 8 (native mode)
Mono or stereo
4MB or less
For the best performance of wave files, a 16 kHz, mono, 16-bit Wave file is recommended.
Supported Windows Media Audio File Formats
If you use a Windows Media audio file, consider using low bitrates, and verify the performance of
your system under load.
You can use the Microsoft Expression Encoder 4 to convert a file to the Windows Media Audio
format. To download Expression Encoder 4, see http://go.microsoft.com/fwlink/?LinkId=202843.
114
The speech engine gives the caller five attempts to answer the question. If the caller answers
the question incorrectly (that is, the answer is not one of the specified responses) or does not
provide an answer at all, he or she gets another chance to answer the question. The caller
has five attempts to answer the question before being disconnected. You can configure the
IVR to play a customized message after each caller error. The question is repeated each
time.
To minimize the potential for ambient noise to be interpreted by the speech engine as a
response, use longer responses. For example, responses should have more than one
syllable and should sound significantly different from each other.
115
If your questions have both speech and DTMF responses, configure the speech responses
with words that represent the concept rather than the DTMF response. For example, instead
of using "Press or say one" use "Press 1 or say billing."
After you design your IVR, call the workflow, listen to the prompts, respond to each of the
prompts using voice, and verify that the IVR sounds and behaves as expected. You can then
modify the IVR to fix any interpretation issues. Following the previous example, if you need to
refer to the # key, you can rewrite your IVR prompt to use the key name, rather than the #
symbol. For example, "To talk to sales, press the pound key."
116
Option 1 is selected: The caller is routed to the operating systems support team.
Option 2 is selected: The caller is routed to the internal applications support team.
Best Practices
The following list describes some best practices for designing your IVR:
Let the caller get to the task quickly. Avoid providing too much information or lengthy
marketing messages in your IVR.
If you want to include a lengthy message, consider appending it to the first question instead
of to the welcome message. Callers can bypass the message if it is part of the first question
by answering the question, but they cannot bypass the welcome message.
Write efficient and effective prompts. Remove any unnecessary options. Structure the
information so that the callers expected response is at the end of the sentence. For example,
To speak to the sales team, press 1."
Make voice responses user friendly. For example, if you specify both DTMF and voice
responses, use something like: "To speak to the sales team, press 1 or say sales."
Test the IVR on a group of users before you deploy it across your organization.
See Also
Create an Interactive Workflow
(Optional) Define Response Group Business Hours and Holidays
Workflows identify when the response group is available to take calls and how to handle calls that
are made when the response group is not available. Before you configure your workflows, you
117
can define your business hours and holidays. Then when you configure a workflow, you just apply
the business hours and holidays that you defined in advance to the workflow.
Note:
To apply holidays to a workflow, you must predefine at least one set of holidays. To apply
business hours to a workflow, you can either predefine the business hours, or you can
create custom business hours. Custom business hours, however, apply only to a specific
workflow and cannot be reused for other workflows. You create custom business hours at
the time you configure the workflow.
Note:
You do not need to predefine business hours if your response group is always open or if
you use only custom business hours.
Defining Business Hours
Business hours define the days of the week and the hours of a day that the response group is
normally available to take calls. A business hours collection consists of the ranges of times for
each day of the week that a response group is available. For example, a response group might
be available from 8:00 A.M. to 4:00 P.M. on weekdays and from 9:00 A.M. to 12:00 P.M. and
again from 1:00 P.M. to 5:00 P.M. on weekends.
To define business hour collections, you must use the New-CsRgsTimeRange and NewCsRgsHoursOfBusiness cmdlets. The New-CsRgsTimeRange cmdlet defines opening and
closing hours, and the New-CsRgsHoursOfBusiness cmdlet identifies which opening and
closing hours apply to each day of the week (the business hours collection). For details about
using these cmdlets, see the Lync Server Management Shell documentation or Lync Server
Management Shell command-line Help.
Important:
Express time for parameters in these cmdlets as 24-hour time notation (for example,
20:00=8:00 P.M.).
To create a business hours collection
1. Log on as a member of the RTCUniversalServerAdmins group, or as a member of one of
the predefined administrative roles that support Response Group. If you are not logged
on as a member of one of these roles, you are prompted for alternate credentials.
2. Start the Lync Server Management Shell: Click Start, click All Programs, click Microsoft
Lync Server 2010, and then click Lync Server Management Shell.
3. For each unique range of hours you want to define, run:
$x = New-CsRgsTimeRange [Name <name of time range>] `
OpenTime <time when business hours begin> `
-CloseTime <time when business hours end>
To create the business hours collection that uses the ranges you defined, run:
New-CsRgsHoursOfBusiness Parent <service where the workflow is
hosted> `
118
119
-TuesdayHours1 $a `
-WednesdayHours1 $a `
-ThursdayHours1 $a `
-FridayHours1 $a `
-SaturdayHours1 $b `
-SaturdayHours2 $c
Defining Holidays
Holidays define the days that agents will not be working and, therefore, are not available to take
calls. Holiday sets are collections of holidays. For example, the national/regional holidays for year
2011 might be a holiday set. Multiple holiday sets can apply to a workflow. For example, you
might define a set of national/regional holidays for the calendar year, another set of holidays for
company days off, and another set of holidays for team events. Any combination of the holiday
sets can apply to a workflow.
To define holidays and holiday sets, you must use the New-CsRgsHoliday and NewCsRgsHolidaySet cmdlets. The New-CsRgsHoliday cmdlet defines individual holidays, and the
New-CsRgsHolidaySet cmdlet identifies which holidays are in a holiday set. For details about
these cmdlets, see the Lync Server Management Shell documentation.
To create a holiday set
1. Log on as a member of the RTCUniversalServerAdmins group, or as a member of one of
the predefined administrative roles that support Response Group. If you are not logged
on as a member of one of these roles, you are prompted for alternate credentials.
2. Start the Lync Server Management Shell: Click Start, click All Programs, click Microsoft
Lync Server 2010, and then click Lync Server Management Shell.
3. For each holiday you want to define, run:
$x = New-CsRgsHoliday [-Name <holiday name>] `
-StartDate <starting date of holiday> -EndDate <ending date of
holiday>
To create the holiday set that contains the holidays you defined, run:
New-CsRgsHolidaySet Parent <service where the workflow is hosted>
`
-Name <unique name for holiday set> `
-HolidayList <one or more holidays to be included in the holiday
set>
The following example shows a holiday set that includes two holidays:
$a = New-CsRgsHoliday Name "New Year's Day" StartDate "1/1/2011"
EndDate "1/2/2011"
$b = New-CsRgsHoliday Name "Independence Day" StartDate
"7/4/2011" EndDate "7/4/2011"
New-CsRgsHolidaySet Parent "ApplicationServer:Redmond.contoso.com
`
120
Related Sections
121
122
Announcement Service.
13. Under Telephone number, type the line URI for the response group (for example,
+14255550165).
14. In Display number, type the number as you want it to appear for the response group (for
example, +1 (425) 555-0165).
15. (Optional) In Description, type a description for the workflow as you want it to appear on
the contact card in Lync 2010.
16. Under Step 2 Select a Language, click the language that you want to use for speech
recognition and text-to-speech.
17. If you want to configure a welcome message, under Step 3 Configure a Welcome
Message, select the Play a welcome message check box, and then do one of the
following:
To enter the welcome message as text that is converted to speech for callers, click
Use text-to-speech, and then type the welcome message in the text box.
Note:
Do not include HTML tags in the text you enter. If you include HTML tags,
you will receive an error message.
To use a wave (.wav) or Windows Media audio (.wma) file recording for the welcome
message, click Select a recording. If you want to upload a new audio file, click the a
recording link. In the new browser window, click Browse, select the audio file that
you want to use, and then click Open. Click Upload to load the audio file.
Note:
All user-provided audio files must meet certain requirements. For details
about supported file formats, see Response Group Audio File Requirements.
18. Under Step 4 Specify Your Business Hours, in Your time zone, click the time zone for
the workflow.
Note:
The time zone is the time zone where the callers and agents of the workflow
reside. It is used to calculate the open and close hours. For example, if the
workflow is configured to use the North American Eastern Time zone and the
workflow is scheduled to open at 7:00 A.M. and close at 11:00 P.M., the open and
close times are assumed to be 7:00 Eastern Time and 23:00 Eastern Time
respectively. (You must enter the times in 24-hour time notation.)
19. Select the type of business hours schedule you want to use by doing one of the following:
To use a predefined schedule of business hours, click Use a preset schedule, and
then select the schedule you want to use from the drop-down list.
Note:
You must have defined at least one preset schedule previously to be able to
select this option. You define preset schedules by using the NewCSRgsHoursOfBusiness cmdlet. For details, see (Optional) Define
123
To use a custom schedule that applies only to this workflow, click Use a custom
schedule.
20. If you are creating a custom schedule for this workflow, click the check boxes for the days
of the week that the response group is available.
21. If you are creating a custom schedule, type the Open and Close hours for each day of
the week that the response group available.
Note:
The Open and Close hours must be in 24-hour time notation. For example, if
your office works a 9-to-5 work day and closes at noon for lunch, the business
hours are specified as Open 9:00, Close 12:00, Open 13:00, and Close 17:00.
22. If you want to play a message when the office is not open, select the Play a message
when the response group is outside of business hours check box, and then specify
the message to play by doing one of the following:
To enter the message as text that is converted to speech for the caller, click Use textto-speech, and then type the message in the text box.
Note:
Do not include HTML tags in the text you enter. If you include HTML tags,
you will receive an error message.
To use an audio file recording for the message, click Select a recording. If you want
to upload a new audio file, click the a recording link. In the new browser window,
click Browse, select the file that you want to use, and then click Open. Click Upload
to load the audio file.
Note:
All user-provided audio files must meet certain requirements. For details
about supported audio file formats, see Response Group Audio File
Requirements.
23. Specify how to handle calls after the message is played (if a message is configured):
To forward the call to voice mail, click Forward to voice mail, and then type the
voice mail address. The format for the voice mail address is
<username>@<domainname> (for example, bob@contoso.com).
To forward the call to another user, click Forward to SIP URI, and then type a user
address. The format for the user address is <username>@<domainname>.
124
To enter the message as text that is converted to speech for the caller, click Use textto-speech, and then type the message in the text box.
Note:
Do not include HTML tags in the text you enter. If you include HTML tags,
you will receive an error message.
To use an audio file recording for the message, click Select a recording. If you want
to upload a new audio file, click the a recording link. In the new browser window,
click Browse, select the file that you want to use, and then click Open. Click Upload
to load the audio file.
Note:
All user-provided audio files must meet certain requirements. For details
about supported audio file formats, see Response Group Audio File
Requirements.
26. Specify how to handle calls after the message is played (if a message is configured):
To forward the call to voice mail, click Forward to voice mail, and then type the
voice mail address. The format for the voice mail address is
<username>@<domainname> (for example, bob@contoso.com).
To forward the call to another user, click Forward to SIP URI, and then type a user
address. The format for the user address is <username>@<domainname>.
27. Under Step 6 Configure a Queue, in Select the queue that will receive the calls,
select the queue that you want to hold callers until an agent becomes available.
28. Under Step 7 Configure Music on Hold, choose the music you want callers to listen to
while waiting for an agent by doing one of the following:
To use an audio file recording for the music on hold, click Select a music file. If you
125
want to upload a new audio file, click the a music file link. In the new browser
window, click Browse, select the file that you want to use, and then click Open. Click
Upload to load the audio file.
Note:
All user provided audio files must meet certain requirements. For details
about supported audio file formats, see Response Group Audio File
Requirements.
29. Click Deploy.
126
To enter the welcome message as text that is converted to speech for callers, click
127
Use text-to-speech, and then type the welcome message in the text box.
Note:
Do not include HTML tags in the text you enter. If you include HTML tags,
you will receive an error message.
To use a Wave or Windows Media Audio file recording for the welcome message,
click Select a recording. If you want to upload a new audio file, click the a recording
link. In the new browser window, click Browse, select the audio file that you want to
use, and then click Open. Click Upload to load the audio file.
Note:
All user-provided audio files must meet certain requirements. For details
about supported file formats, see Response Group Audio File Requirements.
18. Under Step 4 Specify Your Business Hours, in the Your time zone box, click the time
zone of the workflow.
Note:
The time zone is the time zone where the callers and agents of the workflow
reside. It is used to calculate the open and close hours. For example, if the
workflow is configured to use the North American Eastern Time zone and the
workflow is scheduled to open at 7:00 A.M. and close at 11:00 P.M., the open and
close times are assumed to be 7:00 Eastern Time and 11:00 Eastern Time
respectively. (You must enter the times in 24-hour time notation.)
19. Select the type of business hours schedule you want to use by doing one of the following:
To use a predefined schedule of business hours, click Use a preset schedule, and
then select the schedule you want to use from the drop-down list.
Note:
You must have defined at least one preset schedule previously to be able to
select this option. You define preset schedules by using the NewCSRgsHoursOfBusiness cmdlet. For details, see (Optional) Define
Response Group Business Hours and Holidays
Note:
When you select a preset schedule, Day, Open, and Close are automatically
filled with the days and hours that the response group is available.
To use a custom schedule that applies only to this workflow, click Use a custom
schedule.
20. If you are creating a custom schedule for this workflow, click the check boxes for the days
of the week that the response group is available.
21. If you are creating a custom schedule, type the Open and Close hours when the
response group available.
Note:
The Open and Close hours must be in 24-hour time notation. For example, if
128
your office works a 9-to-5 work day and closes at noon for lunch, the business
hours are specified as Open 9:00, Close 12:00, Open 13:00, and Close 17:00.
22. If you want to play a message when the office is not open, select the Play a message
when the response group is outside of business hours check box, and then specify
the message to play by doing one of the following:
To enter the message as text that is converted to speech for the caller, click Use
text-to-speech, and then type the message in the text box.
Note:
Do not include HTML tags in the text you enter. If you include HTML tags,
you will receive an error message.
To use an audio file recording for the message, click Select a recording. If you want
to upload a new audio file, click the a recording link. In the new browser window,
click Browse, select the file that you want to use, and then click Open. Click Upload
to load the audio file.
Note:
All user-provided audio files must meet certain requirements. For details
about supported file formats, see Response Group Audio File Requirements.
23. Specify how to handle calls after the message is played (if a message is configured):
To forward the call to voice mail, click Forward to voice mail, and then type the
voice mail address. The format for the voice mail address is
<username>@<domainname> (for example, bob@contoso.com).
To forward the call to another user, click Forward to SIP URI, and then type a user
address. The format for the user address is <username>@<domainname>.
24. Under Step 5 Specify Your Holidays, click the check boxes for one or more sets of
holidays that define the days when the response group is closed for business.
Note:
You need to define holidays and holiday sets before you configure the workflow.
Use the New-CsRgsHoliday and New-CsRgsHolidaySet cmdlets to define
holidays and holiday sets. For details, see (Optional) Define Response Group
Business Hours and Holidays.
25. If you want to play a message on holidays, select the Play a message during holidays
check box, and then specify the message to play by doing one of the following:
To enter the message as text that is converted to speech for the caller, click Use textto-speech, and then type the message in the text box.
Note:
129
Do not include HTML tags in the text you enter. If you include HTML tags,
you will receive an error message.
To use an audio file recording for the message, click Select a recording. If you want
to upload a new audio file, click the a recording link. In the new browser window,
click Browse, select the file that you want to use, and then click Open. Click Upload
to load the audio file.
Note:
All user-provided audio files must meet certain requirements. For details
about supported audio file formats, see Response Group Audio File
Requirements.
26. Specify how to handle calls after the message is played (if a message is configured):
To forward the call to voice mail, click Forward to voice mail, and then type the
voice mail address. The format for the voice mail address is
<username>@<domainname> (for example, bob@contoso.com).
To forward the call to another user, click Forward to SIP URI, and then type a user
address. The format for the user address is <username>@<domainname>.
27. Under Step 6 Configure Music on Hold, choose what you want callers to listen to while
waiting for an agent by doing one of the following:
To use an audio file recording for the on-hold music, click Select a music file. If you
want to upload a new audio file, click the a music file link. In the new browser
window, click Browse, select the file that you want to use, and then click Open. Click
Upload to load the audio file.
Note:
All user-provided audio files must meet certain requirements. For details
about supported file formats, see Response Group Audio File Requirements.
28. Under Step 7 Configure Interactive Voice Response, under the The user will hear the
following text or recorded message heading, specify the question to ask callers as
follows:
To enter the question in text format, click Use text-to-speech, and type the question
in the text box.
Note:
Do not include HTML tags in the text you enter. If you include HTML tags,
you will receive an error message.
Note:
130
To use a prerecorded audio file that contains the question, click Select a recording,
and then click the a recording link to upload the file. In the new browser window,
click Browse, select the audio file, and then click Open. Click Upload to load the file,
and then optionally you can type the question in the text box (this enables the
question, and the callers response, to be forwarded to the responding agent).
Note:
All user-provided audio files must meet certain requirements. For details
about supported file formats, see Response Group Audio File Requirements.
29. Under Response 1, specify the first possible answer to the question by doing the
following:
Important:
Do not use quotation marks (") in any voice responses. Quotation marks cause
the IVR to fail.
Note:
You can choose to allow callers to answer using speech, alphanumeric keypad
input, or both.
If you want to allow the caller to respond using speech, enter the answer in Enter a
voice response.
If you want to allow the caller to respond by pressing a key on the keypad, in Digit,
click the keypad digit.
30. Specify whether to route the caller to a queue, or to ask another question as follows:
To route the caller to a queue, click Send to a queue, and in Select a queue, click
the queue that you want to use.
To ask another question, click Ask another question, and then click Use text-tospeech and type the question, or click Select a recording. Use the response
groupings in this section to specify up to four possible responses to the additional
question and the queue to use for each response. To specify a third or fourth possible
response, click the Response 3 check box or the Response 4 check box.
31. Specify up to three more possible answers to the original question by repeating steps 28
and 29 to specify the possible responses and the action to take for each response. To
specify a third or fourth possible answer, click the Response 3 check box or the
Response 4 check box.
32. Click Deploy.
131
132
Warning:
A consultative transfer is where the agent who received the call first (that is, the
"transfer initiator") talks to the agent or user that they want to transfer call to (that
is, the "transfer receiver") before they actually transfer the call. Consultative
transfers are supported when the transfer receiver is not anonymous. If the
transfer initiator consultative transfers a call to a PSTN or a Lync user and uses
the anonymous option, the call will appear to transfer properly to the receiver.
However, the transfer will fail and the transferred caller is disconnected. The
transfer initiator can be either anonymous or known, but the effect is the same if
the transfer receiver is anonymous.
11. Under Enter the address of the group that will receive the calls, type the SIP address
of the group that you want to answer calls to the workflow.
12. In Display name, type the name that you want clients to display for the workflow (for
example, Lync 2010).
Note:
Do not include the "<" or ">" characters in the display name. Do not use the
following display names because they are reserved: RGS Presence Watcher or
Announcement Service.
13. Under Telephone number, type the line URI for the response group (for example,
+14255550165).
14. In Display number, type the number as you want it to appear for the response group (for
example, +1 (425) 555-0165).
15. (Optional) In Description, type a description for the workflow as you want it to appear on
the contact card in Lync 2010.
16. Under Step 2 Select a Language, click the language that you want to use for speech
recognition and text-to-speech.
17. If you want to configure a welcome message, under Step 3 Configure a Welcome
Message, select the Play a welcome message check box, and then do one of the
following:
To enter the welcome message as text that is converted to speech for callers, click
Use text-to-speech, and then type the welcome message in the text box.
Note:
Do not include HTML tags in the text you enter. If you include HTML tags,
you will receive an error message.
To use a wave (.wav) or Windows Media audio (.wma) file recording for the welcome
message, click Select a recording. If you want to upload a new audio file, click the a
recording link. In the new browser window, click Browse, select the audio file that
you want to use, and then click Open. Click Upload to load the audio file.
Note:
All user-provided audio files must meet certain requirements. For details
133
about supported file formats, see Response Group Audio File Requirements.
18. Under Step 4 Specify Your Business Hours, in Your time zone, click the time zone for
the workflow.
Note:
The time zone is the time zone where the callers and agents of the workflow
reside. It is used to calculate the open and close hours. For example, if the
workflow is configured to use the North American Eastern Time zone and the
workflow is scheduled to open at 7:00 A.M. and close at 11:00 P.M., the open and
close times are assumed to be 7:00 Eastern Time and 23:00 Eastern Time
respectively. (You must enter the times in 24-hour time notation.)
19. Select the type of business hours schedule you want to use by doing one of the following:
To use a predefined schedule of business hours, click Use a preset schedule, and
then select the schedule you want to use from the drop-down list.
Note:
You must have defined at least one preset schedule previously to be able to
select this option. You define preset schedules by using the NewCSRgsHoursOfBusiness cmdlet. For details, see (Optional) Define
Response Group Business Hours and Holidays.
Note:
When you select a preset schedule, Day, Open, and Close are automatically
filled with the days and hours that the response group is available.
To use a custom schedule that applies only to this workflow, click Use a custom
schedule.
20. If you are creating a custom schedule for this workflow, click the check boxes for the days
of the week that the response group is available.
21. If you are creating a custom schedule, type the Open and Close hours for each day of
the week that the response group available.
Note:
The Open and Close hours must be in 24-hour time notation. For example, if
your office works a 9-to-5 work day and closes at noon for lunch, the business
hours are specified as Open 9:00, Close 12:00, Open 13:00, and Close 17:00.
22. If you want to play a message when the office is not open, select the Play a message
when the response group is outside of business hours check box, and then specify
the message to play by doing one of the following:
To enter the message as text that is converted to speech for the caller, click Use textto-speech, and then type the message in the text box.
Note:
Do not include HTML tags in the text you enter. If you include HTML tags,
you will receive an error message.
134
To use an audio file recording for the message, click Select a recording. If you want
to upload a new audio file, click the a recording link. In the new browser window,
click Browse, select the file that you want to use, and then click Open. Click Upload
to load the audio file.
Note:
All user-provided audio files must meet certain requirements. For details
about supported audio file formats, see Response Group Audio File
Requirements.
23. Specify how to handle calls after the message is played (if a message is configured):
To forward the call to voice mail, click Forward to voice mail, and then type the
voice mail address. The format for the voice mail address is
<username>@<domainname> (for example, bob@contoso.com).
To forward the call to another user, click Forward to SIP URI, and then type a user
address. The format for the user address is <username>@<domainname>.
24. Under Step 5 Specify Your Holidays, click the check boxes for one or more sets of
holidays that define the days when the response group is closed for business.
Note:
You need to define holidays and holiday sets before you configure the workflow.
Use the New-CsRgsHoliday and New-CsRgsHolidaySet cmdlets to define
holidays and holiday sets. For details, see (Optional) Define Response Group
Business Hours and Holidays.
25. If you want to play a message on holidays, select the Play a message during holidays
check box, and then specify the message to play by doing one of the following:
To enter the message as text that is converted to speech for the caller, click Use textto-speech, and then type the message in the text box.
Note:
Do not include HTML tags in the text you enter. If you include HTML tags,
you will receive an error message.
To use an audio file recording for the message, click Select a recording. If you want
to upload a new audio file, click the a recording link. In the new browser window,
click Browse, select the file that you want to use, and then click Open. Click Upload
to load the audio file.
Note:
All user-provided audio files must meet certain requirements. For details
about supported audio file formats, see Response Group Audio File
135
Requirements.
26. Specify how to handle calls after the message is played (if a message is configured):
To forward the call to voice mail, click Forward to voice mail, and then type the
voice mail address. The format for the voice mail address is
<username>@<domainname> (for example, bob@contoso.com).
To forward the call to another user, click Forward to SIP URI, and then type a user
address. The format for the user address is <username>@<domainname>.
27. Under Step 6 Configure a Queue, in Select the queue that will receive the calls,
select the queue that you want to hold callers until an agent becomes available.
28. Under Step 7 Configure Music on Hold, choose the music you want callers to listen to
while waiting for an agent by doing one of the following:
To use an audio file recording for the music on hold, click Select a music file. If you
want to upload a new audio file, click the a music file link. In the new browser
window, click Browse, select the file that you want to use, and then click Open. Click
Upload to load the audio file.
Note:
All user provided audio files must meet certain requirements. For details
about supported audio file formats, see Response Group Audio File
Requirements.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Response Groups, and then click Workflow.
4. On the Workflow page, click Create or edit a workflow.
136
5. In the Select a Service search field, type part or all of the name of the
ApplicationServer service that hosts the workflow that you want to change.
6. In the list of services, click the service that you want, and then click OK.
Note:
The Response Group Configuration Tool webpage opens. You can also open the
Response Group Configuration Tool webpage directly from a web browser by
connecting to https://<webPoolFqdn>/RgsConfig.
7. Under Manage an Existing Workflow, locate the workflow that you want to change, and
then under Action, click Edit.
8. If you are ready for users to start calling the workflow, select the Activate the workflow
check box.
9. To allow federated users to call the group, select the Enable for federation check box.
10. To hide the identity of agents during calls, select the Enable agent anonymity check
box.
Note:
Anonymous calls cannot start with instant messaging (IM) or video, although the
agent or the caller can add IM and video after the call is established. An
anonymous agent can also put calls on hold, transfer calls (both blind and
consultative transfers), and park and retrieve calls. Anonymous calls do not
support conferencing, application sharing and desktop sharing, file transfer,
whiteboarding and data collaboration, and call recording.
Warning:
A consultative transfer is where the agent who received the call first (that is, the
"transfer initiator") talks to the agent or user that they want to transfer call to (that
is, the "transfer receiver") before they actually transfer the call. Consultative
transfers are supported when the transfer receiver is not anonymous. If the
transfer initiator consultative transfers a call to a PSTN or a Lync user and uses
the anonymous option, the call will appear to transfer properly to the receiver.
However, the transfer will fail and the transferred caller is disconnected. The
transfer initiator can be either anonymous or known, but the effect is the same if
the transfer receiver is anonymous.
11. In Enter the address of the group that will receive the calls, type the address of the
group that you want to answer calls to the workflow.
12. In Display name, type the name that clients, such as Lync 2010, are to display.
Note:
Do not include the "<" or ">" characters in the display name. Do not use the
following display names because they are reserved: RGS Presence Watcher or
Announcement Service.
13. In Telephone number, type the line URI for the response group (for example,
+14255550165).
137
14. In Display number, type the number as you want it to appear for the response group (for
example, +1 (425) 555-0165).
15. (Optional) In Description, type a description for the workflow that you want to appear on
the contact card in Lync 2010.
16. Under Step 2 Select a Language, click the language to use for speech recognition and
text-to-speech.
17. If you want to configure a welcome message, under Step 3 Configure a Welcome
Message, select the Play a welcome message check box, and then do one of the
following:
To enter the welcome message as text that is converted to speech for callers, click
Use text-to-speech, and then type the welcome message in the text box.
Note:
Do not include HTML tags in the text you enter. If you include HTML tags,
you will receive an error message.
To use a Wave or Windows Media Audio file recording for the welcome message,
click Select a recording. If you want to upload a new audio file, click the a recording
link. In the new browser window, click Browse, select the audio file that you want to
use, and then click Open. Click Upload to load the audio file.
Note:
All user-provided audio files must meet certain requirements. For details
about supported file formats, see Response Group Audio File Requirements.
18. Under Step 4 Specify Your Business Hours, in the Your time zone box, click the time
zone of the workflow.
Note:
The time zone is the time zone where the callers and agents of the workflow
reside. It is used to calculate the open and close hours. For example, if the
workflow is configured to use the North American Eastern Time zone and the
workflow is scheduled to open at 7:00 A.M. and close at 11:00 P.M., the open and
close times are assumed to be 7:00 Eastern Time and 23:00 Eastern Time
respectively. (You must enter the times in 24-hour time notation.)
19. Select the type of business hours schedule you want to use by doing one of the following:
To use a predefined schedule of business hours, click Use a preset schedule, and
then select the schedule you want to use from the drop-down list.
Note:
You must have defined at least one preset schedule previously to be able to
select this option. You define preset schedules by using the NewCSRgsHoursOfBusiness cmdlet. For details, see (Optional) Define
Response Group Business Hours and Holidays
Note:
When you select a preset schedule, Day, Open, and Close are automatically
138
filled with the days and hours that the response group is available.
To use a custom schedule that applies only to this workflow, click Use a custom
schedule.
20. If you are creating a custom schedule for this workflow, click the check boxes for the days
of the week that the response group is available.
21. If you are creating a custom schedule, type the Open and Close hours when the
response group available.
Note:
The Open and Close hours must be in 24-hour time notation. For example, if
your office works a 9-to-5 work day and closes at noon for lunch, the business
hours are specified as Open 9:00, Close 12:00, Open 13:00, and Close 17:00.
22. If you want to play a message when the office is not open, select the Play a message
when the response group is outside of business hours check box, and then specify
the message to play by doing one of the following:
To enter the message as text that is converted to speech for the caller, click Use
text-to-speech, and then type the message in the text box.
Note:
Do not include HTML tags in the text you enter. If you include HTML tags,
you will receive an error message.
To use an audio file recording for the message, click Select a recording. If you want
to upload a new audio file, click the a recording link. In the new browser window,
click Browse, select the file that you want to use, and then click Open. Click Upload
to load the audio file.
Note:
All user-provided audio files must meet certain requirements. For details
about supported file formats, see Response Group Audio File Requirements.
23. Specify how to handle calls after the message is played (if a message is configured):
To forward the call to voice mail, click Forward to voice mail, and then type the
voice mail address. The format for the voice mail address is
<username>@<domainname> (for example, bob@contoso.com).
To forward the call to another user, click Forward to SIP URI, and then type a user
address. The format for the user address is <username>@<domainname>.
24. Under Step 5 Specify Your Holidays, click the check boxes for one or more sets of
holidays that define the days when the response group is closed for business.
Note:
139
You need to define holidays and holiday sets before you configure the workflow.
Use the New-CsRgsHoliday and New-CsRgsHolidaySet cmdlets to define
holidays and holiday sets. For details, see (Optional) Define Response Group
Business Hours and Holidays.
25. If you want to play a message on holidays, select the Play a message during holidays
check box, and then specify the message to play by doing one of the following:
To enter the message as text that is converted to speech for the caller, click Use textto-speech, and then type the message in the text box.
Note:
Do not include HTML tags in the text you enter. If you include HTML tags,
you will receive an error message.
To use an audio file recording for the message, click Select a recording. If you want
to upload a new audio file, click the a recording link. In the new browser window,
click Browse, select the file that you want to use, and then click Open. Click Upload
to load the audio file.
Note:
All user-provided audio files must meet certain requirements. For details
about supported audio file formats, see Response Group Audio File
Requirements.
26. Specify how to handle calls after the message is played (if a message is configured):
To forward the call to voice mail, click Forward to voice mail, and then type the
voice mail address. The format for the voice mail address is
<username>@<domainname> (for example, bob@contoso.com).
To forward the call to another user, click Forward to SIP URI, and then type a user
address. The format for the user address is <username>@<domainname>.
27. Under Step 6 Configure Music on Hold, choose what you want callers to listen to while
waiting for an agent by doing one of the following:
To use an audio file recording for the on-hold music, click Select a music file. If you
want to upload a new audio file, click the a music file link. In the new browser
window, click Browse, select the file that you want to use, and then click Open. Click
Upload to load the audio file.
Note:
All user-provided audio files must meet certain requirements. For details
about supported file formats, see Response Group Audio File Requirements.
140
28. Under Step 7 Configure Interactive Voice Response, under the The user will hear the
following text or recorded message heading, specify the question to ask callers as
follows:
To enter the question in text format, click Use text-to-speech, and type the question
in the text box.
Note:
Do not include HTML tags in the text you enter. If you include HTML tags,
you will receive an error message.
Note:
The "#" symbol is translated by the text-to-speech engine as the word
"number". If you need to refer to the # key, you should use the key name,
rather than the symbol, in your prompt. For example, "To talk to sales, press
the pound key."
To use a prerecorded audio file that contains the question, click Select a recording,
and then click the a recording link to upload the file. In the new browser window,
click Browse, select the audio file, and then click Open. Click Upload to load the file,
and then optionally you can type the question in the text box (this enables the
question, and the callers response, to be forwarded to the responding agent).
Note:
All user-provided audio files must meet certain requirements. For details
about supported file formats, see Response Group Audio File Requirements.
29. Under Response 1, specify the first possible answer to the question by doing the
following:
Important:
Do not use quotation marks (") in any voice responses. Quotation marks cause
the IVR to fail.
Note:
You can choose to allow callers to answer using speech, alphanumeric keypad
input, or both.
If you want to allow the caller to respond using speech, enter the answer in Enter a
voice response.
If you want to allow the caller to respond by pressing a key on the keypad, in Digit,
click the keypad digit.
30. Specify whether to route the caller to a queue, or to ask another question as follows:
To route the caller to a queue, click Send to a queue, and in Select a queue, click
the queue that you want to use.
To ask another question, click Ask another question, and then click Use text-tospeech and type the question, or click Select a recording. Use the response
groupings in this section to specify up to four possible responses to the additional
question and the queue to use for each response. To specify a third or fourth possible
141
response, click the Response 3 check box or the Response 4 check box.
31. Specify up to three more possible answers to the original question by repeating steps 28
and 29 to specify the possible responses and the action to take for each response. To
specify a third or fourth possible answer, select the Response 3 check box or the
Response 4 check box.
32. Click Save.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Response Groups, and then click Workflow.
4. On the Workflow page, click Create or edit a workflow.
5. In the Select a Service search field, type part or all of the name of the
ApplicationServer service that hosts the workflow that you want to delete.
6. In the list of services, click the service that you want, and then click OK.
Note:
The Response Group Configuration Tool webpage opens. You can also open the
Response Group Configuration Tool webpage directly from a web browser by
connecting to https://<webPoolFqdn>/RgsConfig.
7. Under Manage an Existing Workflow, locate the workflow you want to delete, and then
under Action, click Delete.
8. Click Yes.
In This Section
142
143
To prevent participants from recording meetings, click None. This is the default
setting.
8. To allow external participants to record meetings, select the Allow federated and
anonymous participants to record check box. The default is to prevent external
participants from recording meetings.
9. In Audio/video, do one of the following:
To allow the use of audio but not video, click Enable IP audio.
To allow the use of audio and video, click Enable IP audio/video. This is the default
setting.
10. If you chose to allow the use of audio in Audio/video, do the following:
To prevent users from joining the meeting by dialing in, clear the Enable PSTN dialin conferencing check box. By default, users can dial in to meetings by using the
public switched telephone network (PSTN).
If you allow users to dial in to meetings and you want to allow unauthenticated
(anonymous) users to join a meeting by using dial out phoning, select the Allow
anonymous participants to dial out check box. With dial-out phoning, the
conference server calls the user, and the user answers the phone to join the meeting.
By default, anonymous users cannot join a meeting by using dial-out phoning.
11. If you chose to allow the use of video in Audio/video, in Maximum video resolution
allowed for conferencing, click the setting that you want to use. By default, the
maximum video resolution is 640*480(VGA).
144
To allow data collaboration, click Enable data collaboration. This is the default
setting.
13. If you chose to allow data collaboration in Data collaboration, do the following:
To prevent file transfers, clear the Allow participants to transfer files check box. By
default, users can transfer files.
To prevent the use of annotations, clear the Enable annotations check box. By
default, annotations are allowed.
To prevent the use of polls, clear the Enable polls check box. By default, polls are
allowed.
To allow the use of application sharing, click Enable application sharing. This is the
default setting.
15. If you chose to allow application sharing in Application sharing, do the following:
To prevent meeting participants from taking control of application sharing, clear the
Allow participants to take control check box. By default, participants can take
control of application sharing.
If you chose to allow meeting participants to take control of application sharing, select
the Allow federated and anonymous participants to take control check box to
allow external users to take control of application sharing. By default, external users
cannot take control of application sharing.
To prevent both application sharing and desktop sharing, click Disable application
and desktop sharing.
To allow application sharing but not desktop sharing, click Enable application
sharing.
To allow both application sharing and desktop sharing, click Enable application and
desktop sharing. This is the default setting.
17. To prevent peer-to-peer file transfers, clear the Enable peer-to-peer file transfer check
box. By default, peer-to-peer file transfers are allowed.
18. To allow peer-to-peer recording, select the Enable peer-to-peer recording check box.
By default, peer-to-peer recording is not allowed.
19. Click Commit
145
To create a site-level policy, click Site policy. In the Select a Site search field, type
all or part of the name of the site for which you want to create a policy. In the list of
sites, click the site that you want, and then click OK.
Note:
The site name becomes the conferencing policy name, and it cannot be
changed.
To prevent participants from recording meetings, click None. This is the default
setting.
9. To allow external participants to record meetings, select the Allow federated and
anonymous participants to record check box. The default is to prevent external
participants from recording meetings.
146
To allow the use of audio but not video, click Enable IP audio.
To allow the use of audio and video, click Enable IP audio/video. This is the default
setting.
11. If you chose to allow the use of audio in Audio/video, do the following:
To prevent users from joining the meeting by dialing in, clear the Enable PSTN dialin conferencing check box. By default, users can dial in to meetings by using the
public switched telephone network (PSTN).
If you allow users to dial in to meetings and you want to allow unauthenticated
(anonymous) users to join a meeting by using dial out phoning, select the Allow
anonymous participants to dial out check box. With dial-out phoning, the
conference server calls the user, and the user answers the phone to join the meeting.
By default, anonymous users cannot join a meeting by using dial-out phoning.
12. If you chose to allow the use of video in Audio/video, in Maximum video resolution
allowed for conferencing, click the setting that you want to use. By default, the
maximum video resolution is 640*480(VGA).
13. In Data collaboration, do one of the following:
To allow data collaboration, click Enable data collaboration. This is the default
setting.
14. If you chose to allow data collaboration in Data collaboration, do the following:
To prevent file transfers, clear the Allow participants to transfer files check box. By
default, users can transfer files.
To prevent the use of annotations, clear the Enable annotations check box. By
default, annotations are allowed.
To prevent the use of polls, clear the Enable polls check box. By default, polls are
allowed.
To allow the use of application sharing, click Enable application sharing. This is the
default setting.
16. If you chose to allow application sharing in Application sharing, do the following:
To prevent meeting participants from taking control of application sharing, clear the
Allow participants to take control check box. By default, participants can take
control of application sharing.
If you chose to allow meeting participants to take control of application sharing, select
147
the Allow federated and anonymous participants to take control check box to
allow external users to take control of application sharing. By default, external users
cannot take control of application sharing.
17. Under Participant policy, do one of the following:
To prevent both application sharing and desktop sharing, click Disable application
and desktop sharing.
To allow application sharing but not desktop sharing, click Enable application
sharing.
To allow both application sharing and desktop sharing, click Enable application and
desktop sharing. This is the default setting.
18. To prevent peer-to-peer file transfers, clear the Enable peer-to-peer file transfer check
box. By default, peer-to-peer file transfers are allowed.
19. To allow peer-to-peer recording, select the Enable peer-to-peer recording check box.
By default, peer-to-peer recording is not allowed.
20. Click Commit.
To modify an existing user or site policy
1. From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. On the left navigation bar, click Conferencing.
4. On the Conferencing Policy page, in the list of conferencing policies, click the policy
that you want to change, click Edit, and then click Show details.
5. In Edit Conferencing Policy, modify any of the policy settings, except for the policy
name, which cannot be modified.
6. Click Commit.
148
Description
Enable recording
Enable IP audio
Enable IP audio/video
Enable annotations
Enable polls
149
Description
Description
150
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Conferencing.
4. On the Conferencing Policy page, in the search field, type all or part of the name of the
policy you want to delete.
5. In the list of policies, click the policy that you want, click Edit, and then click Delete.
6. Click OK.
Whether users dialing in from the public switched telephone network (PSTN) go to the lobby
The topics in this section describe how to configure meeting join settings.
In This Section
151
5. To route participants who dial in from the public switched telephone network (PSTN)
through the lobby, clear the PSTN callers bypass lobby check box. By default,
participants dialing in from the PSTN go directly to the meeting.
6. To configure who can be a presenter in the meeting, in Designate as presenter, do one
of the following:
To not allow anyone other than the organizer to be a presenter, click None.
7. To have the organizer select a conference type when scheduling a meeting, clear the
Assigned conference type by default check box. By default, the conference type is
automatically assigned.
8. To prevent anonymous (unauthenticated) users from being automatically admitted, clear
the Admit anonymous users by default check box. By default, anonymous users are
automatically admitted to meetings.
9. Click Commit.
To create a site-level policy, click Site configuration. In the Select a Site search
field, type all or part of the name of the site for which you want to define meeting join
settings. In the resulting list of sites, click the site you want, and then click OK.
152
define meeting join settings. In the resulting list of services, click the pool you want,
and then click OK.
5. To route participants who dial in from the public switched telephone network (PSTN)
through the lobby, clear the PSTN callers bypass lobby check box. By default,
participants dialing in from the PSTN go directly to the meeting.
6. To configure who can be a presenter in the meeting, in Designate as presenter, do one
of the following:
To not allow anyone other than the organizer to be a presenter, click None.
7. To have the organizer select a conference type when scheduling a meeting, clear the
Assigned conference type by default check box. By default, the conference type is
automatically assigned.
8. To prevent anonymous (unauthenticated) users from being automatically admitted, clear
the Admit anonymous users by default check box. By default, anonymous users are
automatically admitted to meetings.
9. Click Commit.
To modify an existing site or pool meeting join configuration
1. From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Conferencing.
4. On the Meeting Configuration page, in the list of configurations, click the configuration
that you want to change, click Edit, and then click Show details.
5. In Edit Meeting Configuration, modify any of the meeting join settings, except for the
name, which cannot be modified.
6. Click Commit.
153
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Conferencing and then click Meeting Configuration.
4. On the Meeting Configuration page, in the search field, type all or part of the name of
the site or pool configuration that you want to delete.
5. In the list, click the configuration that you want, click Edit, and then click Delete.
6. Click OK.
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
154
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Conferencing and then click Dial-in Access Number.
4. On the Dial-in Access Number page, do one of the following:
Click one of the dial-in access numbers in the list, click Edit, and then click Show
details.
Note:
Using the search field to search for the contents of a column in the list of dialin access numbers may not yield the results you expect. Instead, sort the list
by the column of interest to identify the dial-in access number you want to
view or change.
5. In Display number, type the phone number that public switched telephone network
(PSTN) phone users dial to join a conference.
Note:
This number is displayed in meeting invitations and on the Dial-in Conferencing
Settings webpage.
6. In Display name, type a description for the dial-in access number. This is the name that
is associated with the dial-in access number in Lync 2010 search results.
Note:
This name is displayed in the client when a user calls the access number.
7. In Line URI, type the E.164 number of the dial-in access number in TEL URI format,
including the + symbol before the number and excluding spaces. For example, tel:
+14255550200.
Note:
The same Line URI cannot be reused by another dial-in conferencing access
number.
8. In SIP URI, do the following:
In the text box, type a unique SIP URI for this dial-in conferencing access number.
This SIP URI is displayed in various locations including, but not limited to, call
notification messages and previous versions of Communicator clients.
Note:
The same SIP URI cannot be reused by another dial-in conferencing access
number. The SIP URI cannot be modified after the access number is created.
The only way to change the SIP URI is to delete and recreate the access
number.
In the drop-down list box, click the domain of the Conferencing Attendant application
that supports this dial-in access number.
9. In Pool, click the pool that is running the instance of Conferencing Attendant that
155
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Conferencing and then click Dial-in Access Number.
4. On the page, click the dial-in number you want to delete in the list, click Edit, and then
click Delete.
5. Click OK.
156
Create or Modify Dial-in Conferencing PIN Settings for a Site or Group of Users
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Conferencing and then click PIN Policy.
4. On the PIN Policy page, click the Global policy, click Edit, and then click Show details.
5. In Edit PIN Policy, in Minimum PIN length, type or select the minimum PIN length that
you want to allow. The default minimum length is five digits.
6. To be able to specify the maximum number of logon attempts before a user is locked out,
select the Specify maximum logon attempts check box. If you do not select this option,
the maximum number of allowed attempts is automatically determined based on the PIN
length. By default, the maximum number of attempts is automatically determined.
7. If you selected the Specify maximum logon attempts check box, in Maximum logon
attempts, type or select the maximum number of logon attempts that you want to allow.
157
8. To have PINs expire, select the Enable PIN expiration check box. If you do not select
this option, PINs will never expire. By default, PINs never expire.
9. If you selected the Enable PIN expiration check box, in PIN expires after (days), type
or select the number of days after which PINs expire.
10. In PIN history count, type the number of PINs that a user must create before the user
can reuse a PIN. By default, users can reuse their PINs.
11. To allow common patterns of digits in PINs, such as sequential numbers and repetitive
sets of numbers, select the Allow common patterns check box. If you do not select this
option, only complex patterns of digits are allowed. By default, only complex patterns of
digits are allowed.
Important:
We recommend that you do not allow common patterns.
12. Click Commit.
Create or Modify Dial-in Conferencing PIN Settings for a Site or Group of Users
Follow these steps to create or modify a user-level or a site-level dial-in conferencing personal
identification number (PIN) policy. For details about how to change the global PIN policy, see
Modify the Default Dial-in Conferencing PIN Settings.
To create a user or site PIN policy
1. From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Conferencing and then click PIN Policy.
4. On the PIN Policy page, click New, and then do one of the following:
To create a user-level policy, click User policy. In New PIN Policy, in Name, type a
name that describes the policy.
To create a site-level policy, click Site policy. In the Select a Site search field, type
all or part of the name of the site for which you want to create a policy. In the list of
sites, click the site you want, and then click OK.
158
8. If you selected the Specify maximum logon attempts check box, in Maximum logon
attempts, type or select the maximum number of logon attempts that you want to allow.
9. To have PINs expire, select the Enable PIN expiration check box. If you do not select
this option, PINs will never expire. By default, PINs never expire.
10. If you selected the Enable PIN expiration check box, in PIN expires after (days), type
or select the number of days after which PINs expire.
11. In PIN history count, type the number of PINs that a user must create before the user
can reuse a PIN. By default, users can reuse their PINs.
12. To allow common patterns of digits in PINs, such as sequential numbers and repetitive
sets of numbers, select the Allow common patterns check box. If you do not select this
option, only complex patterns of digits are allowed. By default, only complex patterns of
digits are allowed.
Important:
We recommend that you do not allow common patterns.
13. Click Commit.
To change a user or site PIN policy
1.
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Conferencing and then click PIN Policy.
4. On the PIN Policy page, click the PIN policy that you want to change, click Edit, and
then click Show details.
5. In Edit PIN Policy, modify any of the policy settings (except for the policy name, which
cannot be modified).
6. Click Commit.
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
159
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Conferencing and then click PIN Policy.
4. On the PIN Policy page, in the search field, type all or part of the name of the policy you
want to delete.
5. In the list of policies, click the policy that you want, click Edit, and then click Delete.
6. Click OK.
In This Section
Modify the Default Action for Clients Not Explicitly Supported or Restricted
160
Note:
Because anonymous users are not associated with a user, site, or service, anonymous
users are affected by global-level policies only.
Important:
Filters are listed in order of precedence. For example, if you have a filter that allows
clients running version 1.5 or later to connect, followed by a filter that blocks clients
running a version earlier than 2.0, the first filter takes precedence, and clients running
version 1.5 are allowed to connect.
To edit the default client version policy
1. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
2. In the left navigation bar, click Clients.
Note:
The Client Version Policy tab is selected by default.
3. On the Client Version Policy page, double-click the Global policy in the list.
4. In Edit Client Version Policy, do one of the following:
Click one of the defined client types in the list, and then click Show details.
Note:
You can use wildcards to indicate the client type.
In Major version, type the number that corresponds to the major release of the
client.
In Minor version, type the number that corresponds to the minor release of the
client.
In Build, type the number that corresponds to the major and minor release of the
client.
In Update, type the number that corresponds to the updated release of the client.
Note:
You can use wildcards to indicate the client version number.
7. To specify the matching operation for the client version you specified in the preceding
steps, in Comparison operation, click one of the following:
Same as
Is not
Newer than
161
Older than
8. To specify the action to perform when the criteria in the preceding steps are met, click
one of the following in Action:
To allow the client to log on and receive updates from Windows Server Update
Service or Microsoft Update, click Allow and Upgrade. This action is available only
when Microsoft Lync 2010 is selected.
Note:
Selecting this action causes a notification to appear the next time users sign
into Lync 2010. The notification states that an update is available, even if
updates have not yet been released to Windows Server Update Service or
Microsoft Update. To avoid confusion, you should choose this action only
after updates become available.
To allow the client to log on and display a message about where to download another
client version, click Allow with URL. You specify the URL later in this procedure.
To prevent the client from logging on and allow the client to receive updates from
Windows Server Update Service or Microsoft Update, click Block and Upgrade. This
action is available only when the Lync 2010 application is selected.
To prevent the client from logging on and display a message about where to
download another client version, click Block with URL. You specify the URL later in
this procedure.
9. (Optional) If you clicked Allow with URL or Block with URL in the previous step, type
the client download URL to include in the message in URL.
10. Click OK, and then click Commit.
162
To see the latest status of services running on the computer, click Get service
status.
To see a list of specific services running on the computer and the status of each
service, click Properties and then click Close to return to the list.
Modify the Default Action for Clients Not Explicitly Supported or Restricted
In addition to specifying the version of clients that you want to support in your Microsoft Lync
Server 2010 environment, you can also specify a default action for clients that do not already
have a version policy defined. This enables you to restrict which client versions are used in your
Lync Server 2010 environment, which can help you control the costs associated with supporting
multiple client versions.
To modify the default action for clients not explicitly supported or restricted
1. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
2. In the left navigation bar, click Clients, and then click Client Version Configuration.
3. On the Client Version Configuration page, double-click the Global configuration in the
list.
4. In the Edit Client Version Configuration dialog box, verify that the Enable version
control check box is selected and then, under Default action, select one of the
following:
Allow Allows the client to log on if the client version does not match any filter in the
Client version policies list.
Block Prevents the client from logging on if the client version does not match any
filter in the Client version policies list.
Block with URL Prevents the client from logging on if the client version does not
match any filter in the Client version policies list, and include an error message
containing a URL where a newer client can be downloaded.
Allow with URL Allows the client to log on if the client version does not match any
filter in the Client version policies list, and include an error message containing a
URL where a newer client can be downloaded.
5. If you selected Block with URL, type the client download URL to include in the error
message in the URL box.
6. Click Commit.
To disable client version control
To disable version control to allow all clients to log on regardless of the client version,
163
clear the Enable version control check box, and then click Commit.
If the .cab file is located on the same computer as the one running the service to be
updated (service:Redmond-websvc-2), run the following cmdlet:
Import-CsDeviceUpdate Identity service:Redmond-websvc-2
FileName C:\Updates\UCUpdates.cab
If the .cab file is located on a different computer than the one running the service to
be updated (service:Redmond-websvc-3), run the following cmdlet:
Import-CsDeviceUpdate Identity service:Redmond-websvc-3
ByteInput C:\Updates\UCUpdates.cab
3. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
4. In the left navigation bar, click Clients, and then click Device Update.
5. On the Device Update page, click an update in the list, and then do one of the following:
Cancel a pending update. To prevent the selected update from being deployed to
your organizations devices, click the Action menu, and then click Cancel pending
updates.
164
If you clicked Site test device, select a site from the list of available sites, and then
click OK.
5. In New Test Device, type a name for the device in Device name.
6. Under Identifier type, click either MAC address or Serial number.
7. In the Unique identifier box, type the MAC address or serial number of the device.
8. Click Commit.
165
You can change these settings according to your organizations requirements. If you do not want
Device Update Web service to purge log files automatically, you can purge them manually, as
needed. Log settings can be changed globally or per site.
Caution:
Purging files permanently removes them from the file system. After you purge a file, it
cannot be recovered.
To change logging settings
1. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
2. In the left navigation bar, click Clients, and then click Device Log Configuration.
3. On the Device Log Configuration page, double-click the configuration that you want to
change.
4. In the Edit Log Setting dialog box, change any of the following settings as necessary:
Maximum file size (bytes) Specifies the maximum size a log file can become
before it is purged. The default is 1,024,000 bytes (1 MB).
Maximum cache size (bytes) Specifies the maximum amount of information (in
bytes) that can be held in the log file cache before that cache must be cleared and
the data is written to a log file. The default is 512,000 bytes (0.5 MB).
Number of minutes to flush cache (1-60) Indicates how often information stored
in the log file cache is written to the actual log file. After the data is logged, the cache
is cleared. The default is five minutes.
Number of days to keep log files (1-365) Specifies the number of days the log
files are kept before they are purged. The default is 10 days.
5. Click Commit.
166
4. In Edit Device Configuration, under SIP security, specify the SIP security level. The
default level is High.
Minimum PIN length The minimum length for the personal identification number (PIN) that
is used to unlock the phone. The range for the PIN length is four to 15 digits. The default
length is six digits.
Phone lock time-out The minimum length of time before the phone locks itself. The range
for the time-out is 0 to 60 minutes; the default value is 10 minutes. Enter the value in the
format HH:MM:SS.
To configure the phone lock
1. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
2. Click Clients, and then click Device Configuration.
3. On the Device Configuration tab, in the list of device configurations, double-click the
configuration for which you want to change the phone lock settings.
4. In the Edit Device Configuration dialog box, verify that the Enforce device locking
167
Enable support for your organization. To enable support for external user access in your
deployment, you enable each type external user access that you want to support. You enable
and disable support for external user access Lync Server 2010 Control Panel by editing the
global settings on the Access Edge Configuration page in the External User Access
group. Enabling support for external user access specifies that your servers running the Lync
Server Access Edge service support communications with external users, but external users
cannot communicate with internal users until you also configure at least one policy to manage
the use of external user access. External users cannot communicate with users of your
organization when external user access is disabled or if no policies are configured to support
it.
Configure and assign one or more policies to support external user access, which can include
the following.
External user access policies, which you can create and configure to control use of one
or more types of external user access, including access for your remote users, access by
168
users of federated domains, and access for users of supported public IM service
providers. You configure external user policies in Lync Server 2010 Control Panel using
the global policy and, optionally, one or more site and user policies, on the External
Access Policy page in the External User Access group. The global policy is created
when you first deploy an Edge Server or Edge pool and cannot be deleted. You create
and configure any site and user policies that you want to use to limit external user access
to specific sites or users. Global and site policies are automatically assigned. If you
create and configure a user policy, you must then assign it to the specific users or users
groups to whom you want it to apply. Each external user access policy can support one or
more of the following: remote user access, federated user access, and public IM
connectivity.
Conferencing policies, which you can create and configure to control conferencing in your
organization, including which users in your organization can invite anonymous users to
conferences that they host. After creating a conferencing policy and enabling support for
anonymous users in the policy, you must then assign the policy to the specific users or
user groups that need to be able to invite anonymous users to their conferences.
You can configure external user access settings, including any policies that you want to use to
control external user access, even if you have not enabled external user access for your
organization. However, the policies and other settings that you configure are in effect only when
you have external user access enabled for your organization. External users cannot communicate
with users of your organization when external user access is disabled or if no external user
access policies are configured to support it.
Your edge deployment authenticates the types of external users and controls access based on
how you configure your edge support. In order to control communications across the firewall, you
can configure one or more policies and configure other settings that define how users inside and
outside your firewall communicate with each other. This includes the default global policy for
external user access, in addition to site and user policies that you can create and configure to
enable one or more types of external user access for specific sites or users.
In This Section
Remote user access Enable this if you want users in your organization who are outside
your firewall, such as telecommuters and users who are traveling, to be able to connect to
Lync Server 2010.
Federation Enable this if you want to support access by users of federated partner
domains, users of public IM service providers, or both.
169
Anonymous user access Enable this if you want internal users to be able to invite
anonymous users to their conferences.
Note:
In addition to enabling external user access support, you must also configure policies to
control the use of external user access in your organization before any type of external
user access is available to users. For details about creating, configuring, and applying
policies for external user access, see Manage Communications with External Users in
the Deployment documentation or Operations documentation.
In This Section
170
Configuration.
4. On the Access Edge Configuration page, click Global, click Edit, and then click Show
details.
5. In Edit Access Edge Configuration, do one of the following:
To enable remote user access for your organization, select the Enable remote user
access check box.
To disable remote user access for your organization, clear the Enable remote user
access check box.
6. Click Commit.
To enable remote users to sign in to your servers running Lync Server 2010, you must also
configure at least one external access policy to support remote user access. For details, see
Manage Remote User Access in the Deployment documentation or the Operations
documentation.
Enable partner domain discovery. If you enable this option, Lync Server 2010 uses Domain
Name System (DNS) records to try to discover domains not listed in the allowed domains list,
automatically evaluating incoming traffic from discovered federated partners and limiting or
blocking that traffic based on trust level, amount of traffic, and administrator settings. If you do
not select this option, federated user access is enabled only for users in the domains that you
include on the allowed domains list. Whether or not you select this option, you can specify
that individual domains to be blocked or allowed, including restricting access to specific
servers running the Access Edge service in the federated domain. For details about
controlling access by federated domains, see Control Access by Individual Federated
Domains.
Send an archiving disclaimer to federated partners to advise them that communications are
recorded. If you support archiving of external communications with federated partner
domains, you should enable the archiving disclaimer notification to warn partners that their
messages are being archived.
171
If you later want to temporarily or permanently prevent access by users of federated domains,
you can disable federation for your organization. Use the procedure in this section to enable or
disable federated user access for your organization, including specifying the appropriate
federation options to be supported for your organization.
Note:
Enabling federation for your organization only specifies that your servers running the
Access Edge service support routing to federated domains. Users in federated domains
cannot participate in IM or conferences in your organization until you also configure at
least one policy to support federated user access. Users of public IM service providers
cannot participate in IM or conferences in your organization until you also configure at
least one policy to support public IM connectivity. Lync Server cannot use a hosted
Exchange service to provide call answering, Outlook Voice Access (including voice mail),
or auto-attendant services for users whose mailboxes are located on a hosted Exchange
service until you configure a hosted voice mail policy that provides routing information.
For details about configuring policies for communication with users of federated domains
in other organizations, see Manage Federated Partner User Access in the Deployment
documentation or the Operations documentation. Additionally, if you want to support
communication with users of IM service providers, you must configure policies to support
it and also configure support for the individual service providers that you want to support.
For details, see Manage IM Provider Support in the Deployment documentation or the
Operations documentation. For details about creating a hosted voice mail policy, see
Manage Hosted Voice Mail Policies in the Deployment documentation.
To enable or disable federated user access for your organization
1. From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click External User Access, and then click Access Edge
Configuration.
4. On the Access Edge Configuration page, click Global, click Edit, and then click Show
details.
5. In Edit Access Edge Configuration, do one of the following:
To enable federated user access for your organization, select the Enable
communications with federated users check box.
To disable federated user access for your organization, clear the Enable
communications with federated users check box.
6. If you selected the Enable communications with federated users check box, do the
following:
a. If you want to support automatic discovery of partner domains, select the Enable
172
173
4. On the Access Edge Configuration page, click Global, click Edit, and then click Show
details.
5. In Edit Access Edge Configuration, do one of the following:
To enable anonymous user access for your organization, select the Enable
communications with anonymous users check box.
To disable anonymous user access for your organization, clear the Enable
communications with anonymous users check box.
6. Click Commit.
To enable anonymous users to participate in conferences hosted by users in your Lync
Server 2010 deployment, you must also configure and assign at least one conferencing policy
to support anonymous users. For details, see Configure Conferencing Policies to Support
Anonymous Users in the Deployment documentation or the Operations documentation.
Global policy The global policy is created when you deploy your Edge Servers. By default,
no external user access options are enabled in the global policy. To support external user
access at the global level, you configure the global policy to support one or more types of
external user access options. The global policy applies to all users in your organization, but
site policies and user policies override the global policy. If you delete the global policy, you do
not remove it. Instead, you reset it to the default setting.
Site policy You can create and configure one or more site policies to limit support for
external user access to specific sites. The configuration in the site policy overrides the global
policy, but only for the specific site covered by the site policy. For example, if you enable
remote user access in the global policy, you might specify a site policy that disables remote
user access for a specific site. By default, a site policy is applied to all users of that site, but
you can assign a user policy to a user to override the site policy setting.
User policy You can create and configure one or more user policies to limit support for
remote user access to specific users. The configuration in the user policy overrides the global
and site policy, but only for the specific users to whom the user policy is assigned. For
example, if you enable remote user access in the global policy and site policy, you might
specify a user policy that disables remote user access and then assign that user policy to
specific users. If you create a user policy, you must apply it to one or more users before it
takes effect.
174
participation is enabled to users or user groups enables those users to invite anonymous users to
conferences that they host.
In addition to external user access policies and conferencing policies, some external user access
options, including access by federated users and access by public users, require configuration of
other options. This includes the following:
Specifying allowed and blocked domains for federated partners, in addition to any specific
servers running the Access Edge service that you want to allow or block.
Specifying which specific service providers your organization supports, including the name of
the server running the Access Edge service and the verification level supported for the
provider.
In This Section
175
support federated user access and public user access. For details about configuring
policies to support federated users, see Configure Policies to Control Federated User
Access. For details about configuring policies to support public users, see Configure
Policies to Control Access by Users of IM Service Providers.
To configure an external access policy to support remote user access
1.
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click External User Access, and then click External Access
Policy.
4. On the External Access Policy page, do one of the following:
To configure the global policy to support remote user access, click the global policy,
click Edit, and then click Show details.
To create a new site policy, click New, and then click Site policy. In Select a Site,
click the appropriate site from the list and then click OK.
To create a new user policy, click New, and then click User policy. In New External
Access Policy, create a unique name in the Name field that indicates what the user
policy covers (for example, EnableRemoteUsers for a user policy that enables
communications for remote users).
To change an existing policy, click the appropriate policy listed in the table, click Edit,
and then click Show details.
5. (Optional) If you want to add or edit a description, specify the information for the policy in
Description.
6. Do one of the following:
To enable remote user access for the policy, select the Enable communications
with remote users check box.
To disable remote user access for the policy, clear the Enable communications
with remote users check box.
7. Click Commit.
To enable remote user access, you must also enable support for remote user access in your
organization. For details, see Enable or Disable Remote User Access for Your Organization in
the Deployment documentation or the Operations documentation.
If this is a user policy, you must also apply the policy to users that you want to be able to
connect remotely. For details, see Apply External User Access Policies to Users in the
Deployment documentation or the Operations documentation.
176
Configure one or more external user access policies to support users of federated domains.
Specify any specific federated domains that you want to allow or block.
177
Policy.
4. On the External Access Policy page, do one of the following:
To configure the global policy to support federated user access, click the global
policy, click Edit, and then click Show details.
To create a new site policy, click New, and then click Site policy. In Select a Site,
click the appropriate site from the list and then click OK.
To create a new user policy, click New, and then click User policy. In New External
Access Policy, create a unique name in the Name field that indicates what the user
policy covers (for example, EnableFederatedUsers for a user policy that enables
communications for federated domain users).
To change an existing policy, click the appropriate policy listed in the table, click Edit,
and then click Show details.
5. (Optional) If you want to add or edit a description, specify the information for the policy in
Description.
6. Do one of the following:
To enable federated user access for the policy, select the Enable communications
with federated users check box.
To disable federated user access for the policy, clear the Enable communications
with federated users check box.
7. Click Commit.
To enable federated user access, you must also enable support for federation in your
organization. For details, see Enable or Disable Federation for Your Organization in the
Deployment documentation or the Operations documentation.
If this is a user policy, you must also apply the policy to users that you want to be able to
collaborate with federated users. For details, see Apply External User Access Policies to
Users in the Deployment documentation or the Operations documentation.
178
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click External User Access, click Access Edge
Configuration.
4. On the Access Edge Configuration page, click Global, click Edit, and then click Show
details.
5. In Edit Access Edge Configuration, under Enable communications with federated
users, select or clear the Enable partner domain discovery check box to enable or
disable automatic discovery of partner domains.
6. Click Commit.
To enable federated users to collaborate with users in your Lync Server 2010 deployment,
you must have also configured at least one external access policy to support federated user
access. For details, see Manage Federated Partner User Access in the Deployment
documentation or the Operations documentation. For details about controlling access for
specific federated domains, see Control Access by Individual Federated Domains in the
Deployment documentation or Operations documentation.
Configure one or more specific external domains as allowed federated domains. To do this,
add each domain to the list of allowed domains. Even if partner discovery is enabled for your
organization, do this if the domain is a federated partner that might need to communicate with
more than 1,000 of your users or might need to send more than 20 messages per second. If
partner discovery is not enabled for your organization, only users of external domains that
you add to the allowed domains list can participate in IM and conferencing with users in your
organization. If you want to restrict access for a federated domain to a specific server running
the Access Edge service of the federated partner, you can specify the domain name of the
server running the Access Edge service for each domain in the list of allowed domains.
Block one or more external domains from connecting to your organization. To do this, add the
domain to the list of blocked domains.
Note:
This procedure describes how to configure support for specific domains, but
implementing support for federated users also requires that you enable support for
federated users for your organization, and configure and apply policies to control which
users can collaborate with federated users. For details about enabling support for
federated users, see Enable or Disable Federation for Your Organization in the
Deployment documentation or the Operations documentation. For details about
configuring policies to control federation, see Configure Policies to Control Federated
User Access in the Deployment documentation or the Operations documentation.
179
In Domain name (or FQDN), type the name of the federated partner domain.
Notes:
This name must be unique and cannot already exist as an allowed domain for this server
running the Access Edge service. The name cannot exceed 256 characters in length.
The search on the federated partner domain name performs a suffix match. For example, if
you type contoso.com, the search will also return the domain it.contoso.com.
A federated partner domain cannot simultaneously be blocked and allowed. Lync Server 2010
prevents this from happening so that you do not have to synch up your lists.
If you want to restrict access for this federated domain to users of a specific server
running the Access Edge service, in Access Edge service (FQDN), type the FQDN
of the federated domains server running the Access Edge service.
If you want to provide additional information, in Comment, type information that you
want to share with other system administrators about this configuration.
6. Click Commit.
7. Repeat steps 4 through 6 for each federated partner domain that you want to allow.
To enable federated user access, you must also enable support for federated user access in
your organization. For details, see Enable or Disable Federation for Your Organization in the
Deployment documentation or the Operations documentation.
Additionally, you must configure and apply the policy to users that you want to be able to
collaborate with federated users. For details, see Configure Policies to Control Federated
User Access in the Deployment documentation or the Operations documentation.
To add an external domain to the list of blocked domains
1. From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
180
In Domain name (or FQDN), type the name of the federated partner domain that you
want to block.
Notes:
(Optional) In Comment, type information that you want to share with other system
administrators about this configuration.
6. Click Commit.
7. Repeat steps 4 through 6 for each federated partner that you want to block.
181
Configure one or more external user access policies to support the use of public IM services.
182
that can sign in to Lync Server 2010, see Apply External User Access Policies to Users in
the Deployment documentation or the Operations documentation.
Use the following procedure to configure a policy to support access by users of one or more
public IM providers.
To configure an external access policy to support public user access
1.
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click External User Access, and then click External Access
Policy.
4. On the External Access Policy page, do one of the following:
To configure the global policy to support public user access, click the global policy,
click Edit, and then click Show details.
To create a new site policy, click New, and then click Site policy. In Select a Site,
click the appropriate site from the list and then click OK.
To create a new user policy, click New, and then click User policy. In New External
Access Policy, create a unique name in the Name field that indicates what the user
policy covers (for example, EnablePublicUsers for a user policy that enables
communications for public users).
To change an existing policy, click the appropriate policy listed in the table, click Edit,
and then click Show details.
5. (Optional) If you want to add or edit a description, specify the information for the policy in
Description.
6. Do one of the following:
To enable public user access for the policy, select the Enable communications with
public users check box.
To disable public user access for the policy, clear the Enable communications with
public users check box.
7. Click Commit.
To enable public user access, you must also enable support for federation in your
organization. For details, see Enable or Disable Federation for Your Organization in the
Deployment documentation or the Operations documentation.
If this is a user policy, you must also apply the policy to public users that you want to be able
to collaborate with public users. For details, see Apply External User Access Policies to Users
in the Deployment documentation or the Operations documentation.
183
Whether the IM service provider is hosted or public. Hosted IM service providers are internal
to your organization, running as hosted services. Some organizations allow external users to
establish federation with internal servers as a hosting provider, similar to establishing
federation with a public provider, such as MSN.
The network address of the IM service providers Access Edge, which you specify by using
the fully qualified domain name (FQDN) of the server running the Access Edge service.
Allow communications only with users verified by this provider This setting is the
default. It means that you trust the IM service provider's verification level and handle
incoming messages accordingly. Requests marked as unverified are handled as
described for the Allow communications only with users on recipients' contact lists
option. Requests marked as verified are handled as described for the Allow all
communications with this provider option.
Allow communications only with users on recipients' contact lists This setting
means you do not trust verification levels asserted by the IM service provider. If you
choose this option, the server running the Access Edge service marks all incoming
presence subscription requests as unverified. If the sender is already on the recipients
Allow list, the internal server responds to that request. Otherwise, the request is rejected.
Similarly, requests for an IM session that are marked unverified are rejected by the client.
Allow all communications with this provider This setting means that you accept all
messages regardless of whether they are verified or not. If you choose this option, the
server running the Access Edge service marks all messages as verified. The recipient's
home pool or server notifies the client, and all messages are handled according to
184
settings on the client. In the case of presence subscription requests, the client settings
determine how the message is handled.
By default, the Windows Live, AOL, and Yahoo! are available in the list, but are not enabled. For a
public IM service provider, public IM connectivity may require the purchase of additional service
licenses and provisioning the connections. For details, see the Lync Server 2010 licensing
information at http://go.microsoft.com/fwlink/?LinkId=202848. Pricing and licensing information for
public IM connectivity are available through Microsoft Volume Licensing programs. For details,
see the Microsoft Volume Licensing page at http://go.microsoft.com/fwlink/?LinkId=144874. For
details about specific requirements for public IM service providers, see the "Office
Communications Server Public IM Connectivity Provisioning Guide" at
http://go.microsoft.com/fwlink/?LinkId=155970.
Note:
You can configure support for public IM providers, even if you have not enabled
federation for your organization. However, the provider support that you configure is in
effect only when you have federation enabled for your organization. For details about
enabling federation, see Enable or Disable Federation for Your Organization in the
Deployment documentation or the Operations documentation. Additionally, support for IM
service providers requires configuration of policies to support user access. For details
about configuring policies to support access by users of IM service providers, see
Configure Policies to Control Access by Users of IM Service Providers.
Use the following procedure to configure IM provider support for one or more hosted or public IM
service providers.
To configure support for an IM service provider
1.
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click External User Access, click Providers, and then do one
of the following:
To create a new provider, click New, and then click Public or Hosted.
Note:
Select Hosted if your IM service provider is internal to your organization,
running as hosted services. Some organizations allow external users to
establish federation with internal servers as a hosting provider, similar to
establishing federation with a public provider like MSN.
In Access Edge (or FQDN), type the name of each individual server running the
Access Edge service.
185
To enable this provider, select the Enable communications with this provider
check box, and then do one of the following:
Select the Allow communications only with users on recipients' contact lists
check box.
Select the Allow all communications with this provider check box.
5. To modify an existing provider, click the appropriate provider listed in the table, click Edit,
and then click Show details. Then, do one of the following:
To enable this provider, select the Enable communications with this provider
check box, and then do one of the following:
Select the Allow communications only with users on recipients' contact lists
check box.
Select the Allow all communications with this provider check box.
6. Click Commit.
To enable public user access, you must also enable support for federation in your
organization. For details, see Enable or Disable Federation for Your Organization in the
Deployment documentation or the Operations documentation.
Support for IM service providers also requires configuration of policies to support user
access. For details about configuring policies to support access by users of IM service
providers, see Configure Policies to Control Access by Users of IM Service Providers.
At the global level, you can specify whether or not you want to enable anonymous user
access to conferences.
186
At the user account level, you can control a users ability to invite anonymous users by
specifying which conferencing policy to apply to individual users.
To configure policies to allow anonymous participation in meetings
1.
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click External User Access.
4. In the Access Edge Configuration page, click the global policy, click Edit, and then click
Show details.
5. In Edit Access Edge Configuration, select the Enable anonymous user access to
conferences check box.
6. Click Commit.
7. In the left navigation bar, click Conferencing, and then do one of the following:
a. To create a new site policy, click New, and then click Site policy. In Select a Site,
click the appropriate site from the list and then click OK.
b. To configure an existing policy, click the appropriate policy listed in the table, click
Edit, then Show details.
8. In Conferencing Policies, select the Allow participants to invite anonymous users
check box.
9. Click Commit.
To enable users to invite anonymous users to conferences, you must also enable support for
anonymous users in your organization. For details, see Enable or Disable Anonymous User
Access for Your Organization in the Deployment documentation or the Operations
documentation.
Additionally, you must apply the policy to users that you want to be able to invite anonymous
users. For details, see Apply External User Access Policies to Users in the Deployment
documentation or the Operations documentation.
187
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Users, and then search on the user account that you want
to configure.
4. In the table that lists the search results, click the user account, click Edit, and then click
Show details.
5. In Edit Lync Server User under External access policy, select the user policy that you
want to apply.
Note:
The <Automatic> settings apply the default server installation settings. These
settings are applied automatically by the server.
188
Note:
In addition to configuring and applying a policy to enable users to invite anonymous
users, you must also enable support for anonymous users for your organization. For
details, see Enable or Disable Anonymous User Access for Your Organization.
To configure a user policy for anonymous participation in meetings
1.
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Conferencing, and then do one of the following:
a. To create a new user policy, click New, and then click User policy. Create a unique
name in the Name field that indicates what the user policy covers (for example,
EnableAnonymous for a user policy that enables communications with anonymous
users).
b. To configure an existing user policy, click the appropriate policy listed in the table,
click Edit, and then click Show details.
4. In the Conferencing Policies dialog box, select the Allow participants to invite
anonymous users check box.
5. Click Commit.
6. In the left navigation bar, click Users, search on the user account that you want to
configure.
7. In the table that lists the search results, click the user account, click Edit, and then click
Show details.
8. In Edit Lync Server User under Conferencing policy, select the user policy with the
anonymous user access configuration that you want to apply to this user.
Note:
The <Automatic> settings apply the default server installation settings and are
applied automatically by the server.
To enable users to invite anonymous users to conferences, you must also enable support for
anonymous users in your organization. For details, see Enable or Disable Anonymous User
Access for Your Organization in the Deployment documentation or the Operations
documentation.
189
Reset the global policy to the default settings. The default global policy settings deny any
external user access. The global policy cannot be deleted.
In This Section
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. Click External User Access, click External Access Policy.
4. On the External Access Policy tab, click the site or user policy you want to delete, click
Edit, and then click Delete.
5. When prompted to confirm the deletion, click OK.
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click External User Access, click External Access Policy.
4. On the External Access Policy tab, click the global policy, click Edit, and then click
Delete.
190
5. When prompted to confirm the deletion, click OK. A message appears at the top of the
page informing you that the global policy has been reset.
Managing Monitoring
Topics in this section provide step-by-step procedures for tasks you can perform using the
Monitoring and Archiving group in Lync Server Control Panel to configure monitoring.
In This Section
Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Monitoring and Archiving, and then click Call Detail
Recording.
4. On the Call Detail Recording page, click New.
5. In Select a Site, click the site to which the policy is to be applied and click OK.
6. In New Call Detail Recording Setting, do the following:
Select the Enable monitoring of call detail recordings (CDR) check box to turn on
monitoring.
Select the Enable purging of call detail recordings (CDR) check box to turn on
purging.
In Keep call detail recordings for maximum duration (days), select the maximum
191
In Keep error report data for maximum duration (days), select the maximum
number of days that error reports should be retained.
7. Click Commit.
2.
Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Monitoring and Archiving, and then click Quality of
Experience Data.
4. On the Quality of Experience Data page, click New.
5. In Select a Site, click the site to which the policy is to be applied and click OK.
6. In New Quality of Experience Setting, do the following:
In Keep call detail recordings for maximum duration (days), select the maximum
number of days that call detail recordings should be retained.
7. Click Commit.
192
Note:
In order to enable CDR you must first install the Monitoring Server and connect it to a
Monitoring back-end database. For details, see Deploying Monitoring.
To enable CDR
1.
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Monitoring and Archiving, and then click Call Detail
Recording.
4. On the Call Detail Recording page, click the appropriate site from the table, click
Action, and then click Enable CDR.
Note:
CDR is enabled by default.
193
194
Note:
You should configure call detail recording (CDR) and QoE to retain data for the same
number of days. Each call in the call detail reports (CDRs), available from the Monitoring
Server reports homepage, includes CDR and QoE information. If the purging duration for
CDR and QoE is different, some calls may only include CDR data, while other may only
include QoE data.
The following procedure describes how to configure purge settings for QoE data.
To specify retention of QoE data
1.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Monitoring and Archiving, and then click Quality of
Experience Data.
4. On the Quality of Experience Data page, click the appropriate site from the table, click
Edit, and then click Show Details.
5. To turn on purging, select Enable Purging for Monitoring Servers.
6. In Keep call detail recordings for maximum duration (days): select the maximum
number of days that QoE data should be retained.
7. Click Commit.
195
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Monitoring and Archiving, and then click Quality of
Experience Data.
4. On the Quality of Experience Data page, in the search field, type all or part of the name
of the policy you want to delete.
5. In the list of policies, click the policy that you want, click Edit, and then click Delete.
6. Click OK.
Managing Archiving
Topics in this section provide step-by-step procedures for tasks you can perform using the
Monitoring and Archiving page in Lync Server Control Panel to configure archiving.
Note:
In order to configure and use archiving, you must first install the Archiving Server and the
archiving database. For details, see Deploying Archiving in the Deployment
documentation.
In This Section
196
Change the Global Policy for Archiving of Internal and External Communications
Change the Global Policy for Archiving of Internal and External Communications
The global policy is created by default when you install your first Archiving Server. You can
change the settings to control whether archiving is enabled for internal users and external users.
The global policy cannot be deleted. You can also enable or disable archiving for specific sites
and users by creating site policies and user policies. For details, see Create a Site Policy for
Archiving and Create a User Policy for Archiving, both of which are available in the Deployment
documentation and the Operations documentation.
Notes:
In order to configure and use archiving, you must first install the Archiving Server and the
archiving database. For details, see Deploying Archiving in the Deployment documentation.
To configure archiving support, you must enable support for each type of archiving you want to
support, as well as configure and, if appropriate, assign policies and configure other options to
197
control how archiving is implemented. For details, see Managing External Connectivity in the
Operations documentation.
Use the procedure in this topic to configure the global policy.
To change the global policy for archiving
1. From a user account that is assigned to the CsArchivingAdministrator or CsAdministrator
role, log on to any computer in your internal deployment.
2.
Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Monitoring and Archiving, and then click Archiving
Policy.
4. Click Global in the list of policies, click Edit, and then click Show details.
5. In Edit Archiving Policy - Global, do the following:
To enable or disable internal archiving for the deployment, select or clear the Archive
internal communications check box.
To enable or disable external archiving for the deployment, select or clear the
Archive external communications check box.
6. Click Commit.
Internal communications
External communications
The configuration in the site policy overrides the global policy, but only for the specific site
covered by the site policy. For example, if you enable archiving of internal and external
communications in the global policy, you might specify a site policy that disables archiving for
internal communications, external communications, or both for that one site.
Notes:
In order to configure and use archiving, you must first install the Archiving Server and the
archiving database. For details, see Deploying Archiving in the Deployment documentation.
To configure archiving support, you must enable support for each type of archiving you want to
support, as well as configure and, if appropriate, assign policies and configure other options to
control how archiving is implemented. For details, see Configuring Support for External User
Access and Configure Archiving Options for a Site in the Deployment documentation or Managing
External Connectivity in the Operations documentation.
To create an archiving policy for a site
1. From a user account that is assigned to the CsArchivingAdministrator or CsAdministrator
198
Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Monitoring and Archiving, and then click Archiving
Policy.
4. Click New, and the click Site policy.
5. In Select a Site, click the site to which the policy is to be applied.
6. In New Archiving Policy, do the following:
In Name, specify a name for the new site policy (for example, externalContoso).
In Description, provide details about what the site policy is (for example, External
user archiving policy for Contoso).
To control archiving of internal communications for the site, select or clear the
Archive internal communications check box.
To control archiving of communications with external users for the site, select or clear
the Archive external communications check box.
7. Click Commit.
199
To enable or disable internal archiving for the policy, select or clear the Archive
internal communications check box.
To enable or disable external archiving for the policy, select or clear the Archive
external communications check box.
5. Click Commit.
Internal communications
External communications
In Microsoft Lync Server 2010 Control Panel, you define user policies that can be assigned to
users in Users.
The user policy overrides the global policy and site policies, but only for the specific users
assigned the user policy. For example, if you enable archiving of internal and external
communications in the global policy, you might specify a site policy that disables it for internal
communications, external communications, or both for that one site, and then specify a user
policy that enables archiving for a specific group of users at that site.
Notes:
In order to configure and use archiving, you must first install the Archiving Server and the
archiving database. For details, see Deploying Archiving in the Deployment documentation.
To configure archiving support, you must enable support for each type of archiving you want to
support, as well as configure and, if appropriate, assign policies and configure other options to
control how archiving is implemented. For details, see Configuring Support for External User
Access and Configure Archiving Options for a Site in the Deployment documentation or Managing
External Connectivity in the Operations documentation.
To create a user policy for archiving
1. From a user account that is assigned to the CsArchivingAdministrator or CsAdministrator
role, log on to any computer in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Monitoring and Archiving, and then click Archiving
Policy.
200
In Description, provide details about what the user policy is (for example, External
user archiving policy for Contoso)
To control archiving of internal communications for the specified users, select or clear
the Archive internal communications check box.
To control external archiving for the specifying users, select or clear the Archive
external communications check box.
6. Click Commit.
To enable or disable internal archiving for the users, select or clear the Archive
201
To enable or disable external archiving for the users, select or clear the Archive
external communications check box.
5. Click Commit.
202
Use the procedure in this topic to apply a previously created archiving user policy to one or more
user accounts or user groups.
To apply an archiving user policy to a user account
1. From a user account that is assigned to the CsArchivingAdministrator or CsAdministrator
role, log on to any computer in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Users, and then search on the user account that you want
to configure.
4. In the table that lists the search results, click the user account, click Edit, and then click
Show details.
5. In Edit Lync Server User under Archiving policy, select the archiving user policy that
you want to apply.
Note:
The <Automatic> settings apply the default server installation settings. These
settings are applied automatically by the server.
6. Click Commit.
203
To enable archiving only for instant messaging (IM) sessions, click Archive IM
sessions.
To enable archiving for both IM sessions and conferences, click Archive IM and web
conferencing sessions.
6. Click Commit.
To enable archiving for both IM sessions and conferences, click Archive IM and web
conferencing sessions.
6. Click Commit.
204
Notes:
In order to configure and use archiving, you must first install the Archiving Server and the
archiving database. For details, see Deploying Archiving in the Deployment documentation.
To configure archiving support, you must enable support for each type of archiving you want to
support and configure, and, if appropriate, assign policies and configure other options to control
how archiving is implemented. For details, see Managing External Connectivity in the Operations
documentation.
To enable or disable purging for archiving
1. From a user account that is assigned to the CsArchivingAdministrator or CsAdministrator
role, log on to any computer in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Monitoring and Archiving, and then click Archiving
Configuration.
4. Click Global or one of the sites in the list, click Edit, click Show details, and then do the
following:
To enable purging, select the Enable purging of archiving data check box and then
do one of the following:
To purge all records, click the Purge exported archiving data and stored archiving
data after maximum duration (days), and then specify the number of days.
To purge only the data that has been exported, click Purge exported archiving data
only.
To disable purging, clear the Enable purging of archiving data check box.
5. Click Commit.
205
Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Monitoring and Archiving, and then click Archiving
Configuration.
4. Click Global or one of the sites in the list, click Edit, and then click Show details.
5. To set how archiving behaves when a failure occurs, select or clear the Block instant
messaging (IM) or web conferencing sessions if archiving fails check box.
6. Click Commit.
206
you must have also configured at least one external access policy to support federated user
access. For details, see Manage Federated Partner User Access in the Deployment
documentation or the Operations documentation. For details about controlling access for
specific federated domains, see Control Access by Individual Federated Domains in the
Deployment documentation or Operations documentation.
Configuring Security
Topics in this section provide step-by-step procedures for tasks you can perform using the
Security group in Lync Server Control Panel.
In This Section
Delete a Registrar
See Also
Managing On-Premises Meetings
NTLM This is the password-based authentication available to clients that use a challengeresponse hashing scheme on the password. This is the only form of authentication available
to clients without connectivity to a Key Distribution Center (Kerberos domain controller), such
as remote users. If a server authenticates only remote users, you should choose NTLM.
Certificate authentication This is the new authentication method when the server needs to
obtain certificates from Microsoft Lync 2010 Phone Edition clients, common area phones and
Microsoft Lync 2010. On Lync Phone Edition clients, after a user signs in and is successfully
authenticated by providing a personal identification number (PIN), Microsoft Lync Server
207
2010 then provisions the SIP URI to the phone and provisions a Lync Server signed
certificate or a user certificate that identifies Joe (Ex: SN=joe@contoso.com ) to the phone.
This certificate is used for authenticating with the Registrar and Web Services.
Note:
We recommend that you enable both Kerberos and NTLM when a server supports
authentication for both remote and enterprise clients. The Edge Server and internal
servers communicate to ensure that only NTLM authentication is offered to remote
clients. If only Kerberos is enabled on these servers, they cannot authenticate remote
users. If enterprise users also authenticate against the server, Kerberos is used.
Follow these steps to create a new Registrar.
To create a Registrar
1.
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Security and then click Registrar.
4. On the Registrar page, click New
5. In Select a Service, click the service to which the Registrar is to be applied and then
click OK.
6. In New Registrar Setting, select one or more of the following depending on the
capabilities of the clients and support in your environment:
Enable Kerberos authentication to have the servers in the pool issue challenges
using Kerberos authentication.
Enable NTLM authentication to have the servers in the pool issue challenges using
NTLM.
Enable certificate authentication to have the servers in the pool issue certificates
to clients.
7. Click Commit.
208
clients. If only Kerberos is enabled on these servers, they cannot authenticate remote
users. If enterprise users also authenticate against the server, Kerberos is used.
Follow these steps to modify an existing Registrar.
To modify an existing Registrar
1.
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Security and then click Registrar.
4. On the Registrar page, click a service, click Edit, and then click Show details.
5. In Edit Registrar Setting, select one or more of the following depending on the
capabilities of the clients and support in your environment:
Enable Kerberos authentication to have the servers in the pool issue challenges
using Kerberos authentication.
Enable NTLM authentication to have the servers in the pool issue challenges using
NTLM.
Enable certificate authentication to have the servers in the pool issue certificates
to clients.
6. Click Commit.
Delete a Registrar
Follow these steps to delete a Registrar.
To delete a Registrar
1. From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Security and then click Registrar.
4. On the Registrar page, and in the search field, type all or part of the name of the
Registrar you want to delete.
5. In the list, click the Registrar that you want, click Edit, and then click Delete.
6. Click OK.
209
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Security and then click Web Service.
4. On the Web Service page, click New, and then do one of the following:
To configure the Web Service for a site, click Site configuration. In Select a Site,
click the site to which the Web Service policy will be applied a site and click OK.
To configure the Web Service for a pool, click Pool configuration. In Select a
Service, click the service to which the Web Service policy will be applied and click
OK.
Enable certificate authentication to have the servers in the pool issue certificates
to clients.
Show Lync Attendee download link to give the users the option to download Lync
2010 Attendee.
Show the link for user to join meeting using legacy client to give users the option
to join meetings using a previous version of Communicator.
7. Click Commit.
210
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Security and then click Web Service.
4. On the Web Service page, click a configuration, click Edit, and then click Show details.
5. In Edit Web Service Setting, in Windows authentication, select Negotiate, NTLM, or
None.
6. Select one or more of the following depending on the capabilities of the clients and
support in your environment:
Enable certificate authentication to have the servers in the pool issue certificates
to clients.
Show Lync Attendee download link to give the users the option to download Lync
2010 Attendee.
Show the link for user to join meeting using legacy client to give users the option
to join meetings using a previous version of Communicator.
7. Click Commit.
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Security and then click Web Service.
4. On the Web Service page, and in the search field, type all or part of the name of the
policy you want to delete.
5. In the list of policies, click the policy that you want, click Edit, and then click Delete.
6. Click OK.
211
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Security and then click PIN Policy.
4. On the PIN Policy page, click New, and then do one of the following:
To create a user-level policy, click User policy. In New PIN Policy, in Name, type a
name that describes the policy.
To create a site-level policy, click Site policy. In the Select a Site search field, type
all or part of the name of the site for which you want to create a policy. In the resulting
list of sites, click the site you want, and then click OK.
212
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Security and then click PIN Policy.
4. On the PIN Policy page, click a policy, click Edit, and then click Show details.
5. In Edit PIN Policy, in Minimum PIN length, type or select the minimum PIN length that
you want to allow. The default minimum length is five digits.
6. To be able to specify the maximum number of logon attempts before a user is locked out,
select the Specify maximum logon attempts check box. If you do not select this option,
the maximum number of allowed attempts is automatically determined based on the PIN
length. By default, the maximum number of attempts is automatically determined.
7. If you selected the Specify maximum logon attempts check box, in Maximum logon
attempts, type or select the maximum number of logon attempts that you want to allow.
8. To have PINs expire, select the Enable PIN expiration check box. If you do not select
this option, PINs will never expire. By default, PINs never expire.
9. If you selected the Enable PIN expiration check box, in PIN expires after (days), type
or select the number of days after which PINs expire.
10. In PIN history count, type the number of PINs that a user must create before the user
can reuse a PIN. By default, users can reuse their PINs.
11. To allow common patterns of digits in PINs, such as sequential numbers and repetitive
sets of numbers, select the Allow common patterns check box. If you do not select this
option, only complex patterns of digits are allowed. By default, only complex patterns of
digits are allowed.
213
Important:
We recommend that you do not allow common patterns.
12. Click Commit.
From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or assigned to the CsServerAdministrator or CsAdministrator role,
log on to any computer that is in the network in which you deployed Lync Server 2010.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Security and then click PIN Policy.
4. On the PIN Policy page, and in the search field, type all or part of the name of the policy
you want to delete.
5. In the list of policies, click the policy that you want, click Edit, and then click Delete.
6. Click OK.
In This Section
214
215
Always bypass Select this option to attempt media bypass on all calls. This option
will be unavailable if call admission control (CAC) is enabled. If CAC is not enabled,
select this option in the following situations:
Use sites and region configuration If CAC is enabled, this option is selected by
default and cannot be changed. When this option is selected, network configuration
sites and regions will be used to determine when media bypass is possible. If you
select this option, you can choose to enable bypass for sites that are not mapped.
Click the Enable bypass for non-mapped sites check box only if you have one or
more large sites associated with the same region that do not have bandwidth
constraints (for example, a large central site) and you also have some branch sites
associated with the same region that do have bandwidth constraints. When you
enable bypass for non-mapped sites, configuration is streamlined because you
specify only the subnets associated with the branch sites rather than needing to
216
specify all subnets associated with all sites. We recommend that you do not select
the Enable bypass for non-mapped sites check box if CAC is enabled.
8. Click Commit to save your changes.
See Also
Global Media Bypass Options
Media Bypass
217
To create a site policy, click Site policy. In Select a Site, choose the site to which
you want the policy applied and click OK. On the New Location Policy page, the
Scope field contains the value Site, and the Name field contains the name of the site
you chose. You cannot modify either of these fields. A site policy is automatically
applied to all users on the specified site and overrides the global policy for those
users.
To create a User policy, click User policy. In the New Location Policy, the Scope
field contains the value User. You cannot modify this value. In the Name field, type
the name you want to give this policy. A user policy does not automatically apply to
any users. After creating the user policy, you must manually grant the policy to the
users or network sites to which you want to policy to apply.
Enable enhanced emergency services Select this check box to enable the users
associated with this policy for E9-1-1. When emergency services are enabled,
Microsoft Lync Server 2010 clients will retrieve location information on registration
and include that information when an emergency call is made.
Required The user will be prompted to input location information when the client
registers at a new location. The user can dismiss the prompt without entering any
information. If information is entered, an emergency call will first be answered by the
emergency services provider to verify the location before being routed to the Public
Safety Answering Point (PSAP) operator (that is, the 911 operator).
Not Required The user will not be prompted for a location. When a call is made
with no location information, the emergency services provider will answer the call and
ask for a location.
Disclaimer This option is the same as Required except that the user cannot
dismiss the prompt without entering location information. The user can still complete
an emergency call, but no other calls can be completed without entering the
information. In addition, disclaimer text will be displayed to the user that can alert
them to the consequences of declining to enter location information. To set the
disclaimer text, you must run the Set-CsEnhancedEmergencyServiceDisclaimer
cmdlet at command line by using the Lync Server Management Shell. For details,
218
Use location for emergency services only Location information can be used by
the Microsoft Lync 2010 client for various reasons (for example, to notify teammates
of your current location). Select this check box to ensure location information is
available only for use with an emergency call.
PSTN usage The public switched telephone network (PSTN) usage that will be
used to determine which voice route will be used to route emergency calls from
clients using this profile. The route associated with this usage should point to a SIP
trunk dedicated to emergency calls.
Emergency dial number The number that is dialed to reach emergency services.
In the United States this value is 911. The string must be made of the digits 0 through
9 and can be from 1 to 10 digits in length.
Emergency dial mask A number that you want to translate into the value of the
emergency dial number value when it is dialed. For example, if you enter a value of
212 in this field and the emergency dial number field has a value of 911, if a user
dials 212 the call will be made to 911. This allows for alternate emergency numbers
to be dialed and still have the call reach emergency services (for example, if
someone from a country or region with a different emergency number attempts to dial
that country or regions number rather than the number for the country or region they
are currently in). You can define multiple emergency dial masks by separating the
values with semicolons. For example, 212;414. Maximum length of the string is 100
characters. Each character must be a digit 0 through 9.
Important:
Ensure that the specified dial mask value is not the same as a number in a
call park orbit range. Call park routing will take precedence over emergency
dial string conversion. To see the existing call park orbit ranges, click Voice
Features in the left navigation bar and then click Call Park. For details, see
Configure Phone Number Extensions for Parking Calls.
Conference URI The SIP URI, in this case the telephone number, of a third party
that will be conferenced in to any emergency calls that are made. For example, the
company security office could receive a call when an emergency call is made and
listen in or participate in that call (depending on the value supplied in the Conference
mode field). The string must be from 1 to 256 characters in length and must begin
219
with the prefix sip:. An example is displayed until you click inside this field.
Conference mode If you specify a value in the Conference URI field, the
Conference mode determines whether a third party can participate in the call or can
only listen in. Specify one of the following options:
One-way A third party can only listen to the conversation between the caller and the
PSAP operator.
Two-way A third party can listen in and participate in the call between the caller and
the PSAP operator.
6. Click Commit.
Important
When you create a user policy, initially that policy does not apply to any users or network
sites. To apply the policy to a user, click Users in the left navigation bar. Find the user to
which you want to apply the policy. On the Edit menu, click Show details. On the Edit Lync
Server User page, select the new location policy from the Location policy drop-down list
and then click Commit.
To apply the policy to a network site, click Network Configuration in the left navigation bar
and then click Site. Find the network site to which you want to apply the policy. On the Edit
menu, click Show details. In Edit Site, select the new location policy from the Location
policy drop-down list and then click Commit.
To modify a location policy
1. From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Network Configuration and then click Location Policy.
4. On the Location Policy page, select the location policy that you want to modify.
5. On the Edit menu, click Show details.
6. On the Edit Location Policy page, modify the fields as necessary (for details, see Step 5
in the "To create a new location policy" procedures earlier in this topic).
7. Click Commit.
To delete a location policy
1. From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
220
221
6. In the Audio limit field, type a numeric value. This value is the maximum amount of
bandwidth to allocate for all audio connections, expressed in kbps.
7. Enter a numeric value in the Audio session limit field. This value is the maximum
amount of bandwidth to allocate for an individual audio connection, expressed in kbps.
This value must be 40 or higher.
8. Enter a numeric value in the Video limit field. This value is the maximum amount of
bandwidth to allocate for all video connections, expressed in kbps.
9. Enter a numeric value in the Video session limit field. This value is the maximum
amount of bandwidth to allocate for an individual video connection, expressed in kbps.
This value must be 100 or higher.
10. (Optional) Type a value in the Description field to provide more information about this
bandwidth policy profile that cannot be expressed by the name alone.
11. Click Commit.
Note:
Creating a new bandwidth policy profile does not automatically enforce
bandwidth restrictions. You must first associate the policy profile with a site. For
details about how to associate a policy profile with a site, see Configuring
Network Sites.
To modify a bandwidth policy profile
1. From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Network Configuration and then click Policy Profile.
4. On the Policy Profile page, click the bandwidth policy profile that you want to modify.
5. On the Edit menu, click Show details.
6. On the Edit Bandwidth Policy Profile page, modify the fields as necessary (for details,
see the "To create a bandwidth policy profile" section earlier in this topic).
7. Click Commit.
Note:
When you modify the bandwidth policy profile, it will immediately update the
bandwidth limitations of all network sites associated with this bandwidth policy
profile.
To delete a bandwidth policy profile
1. From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
222
223
224
225
3. In the left navigation bar, click Network Configuration and then click Site.
4. On the Site page, click New.
5. In New Site, type a name for this site in the Name field.
Note:
Site names must be unique within the Microsoft Lync Server 2010 deployment.
6. In the Region drop-down list, select a network region to associate with this site.
7. (Optional) If you want to place bandwidth limitations on audio or video calls to this site,
select the bandwidth policy profile with the appropriate settings from the Bandwidth
policy drop-down list.
Note:
You can view the details of the available bandwidth policy profiles, or create a
new bandwidth policy profile, on the Policy Profile page of the Network
Configuration group. For details, see Configuring Bandwidth Policy Profile.
8. (Optional) If you want to provide location settings for this site, select a location policy from
the Location policy drop-down list.
Note:
The location policy assigns specific Enhanced 9-1-1 (E9-1-1) and client location
settings to the site. You can view the details of the available location policies, or
create a new location policy, from the Location Policy page of the Network
Configuration group. For details, see Configuring Location Policy.
9. (Optional) Type a value in the Description field to provide more information about this
site that cannot be expressed by the name alone.
10. Click Commit.
Note:
You do not use the Associated Subnets table when you create a new network
site. You associate a subnet with a site when you create or modify the subnet.
For details, see Configuring Network Subnets.
To modify a network site
1. From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Network Configuration and then click Site.
4. On the Site page, click the site that you want to modify.
5. On the Edit menu, click Show details.
6. On the Edit Site page, you can modify the description, region, bandwidth policy profile,
226
and location policy associated with the site. For details, see "To create a network site"
section earlier in this topic.
7. Click Commit.
You cannot modify the Associated Subnets table on this page. The list of associated
subnets is provided for reference so that you are aware of what subnets will be affected when
you modify the site settings.
To delete a network site
1. From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Network Configuration and then click Site.
4. On the Site page, click the site that you want to delete.
Note:
You can delete more than one site at a time. To do this, press CTRL and select
multiple sites while holding down the CTRL key. Or, to select all sites, click Select
all on the Edit menu.
5. On the Edit menu, click Delete.
6. Click OK.
Warning:
You cannot remove a network site if it is associated with a network subnet. If you
attempt to remove a site associated with a subnet you will receive an error
message. To see if a site is associated with any subnets, click the site and then
click Show details on the Edit menu.
See Also
Configure a Network Site
New-CsNetworkSite
Set-CsNetworkSite
Remove-CsNetworkSite
Get-CsNetworkSite
227
In most deployments of Microsoft Lync Server 2010 where call admission control (CAC) is
implemented, there will typically be a large number of subnets. Because of this, it is often best to
configure subnets from the Lync Server Management Shell. From there you can call NewCsNetworkSubnet in conjunction with the Windows PowerShell cmdlet Import-CSV. By using
these cmdlets together, you can read in subnet settings from a comma-separated values (.csv)
file and create multiple subnets at the same time. For examples of how to create subnets from
a .csv file, see New-CsNetworkSubnet.
To create a network subnet
1. From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Network Configuration and then click Subnet.
4. On the Subnet page, click New.
5. In New Subnet, enter a value in the Subnet ID field. This must be an IP address (for
example, 174.11.12.0), and it must be the first address in the IP address range defined by
the subnet.
6. In the Mask field, enter a numeric value from 1 through 32.
Note:
This value is the bitmask that is to be applied to the subnet being created.
7. In Network site ID, select the site to which this subnet belongs.
8. (Optional) Type a value in the Description field to provide more information about this
subnet that cannot be expressed by the name alone.
9. Click Commit.
To modify a network subnet
1. From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Network Configuration and then click Subnet.
4. On the Subnet page, click the subnet that you want to modify.
5. On the Edit menu, click Show details.
6. On the Edit Subnet page, you can modify the bitmask, associated network site, or
description. If you modify the bitmask, keep in mind that the Subnet ID must still be the
228
229
230
231
9. Click Commit.
To modify a network region route
1. From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Network Configuration and then click Region Route.
4. On the Region Route page, click the region route that you want to modify.
5. On the Edit menu, click Show details.
6. In Edit Region Route, you can modify the regions joined by this route and the region
links associated with the route.
7. Click Commit.
To delete a network region route
1. From a user account that is a member of the RTCUniversalServerAdmins group (or has
equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer
in your internal deployment.
2. Open a browser window, and then enter the Admin URL to open the Lync Server Control
Panel. For details about the different methods you can use to start Lync Server Control
Panel, see Open Lync Server Administrative Tools.
3. In the left navigation bar, click Network Configuration and then click Region Route.
4. On the Region Route page, click the region route that you want to delete.
Note:
You can delete more than one region route at a time. To do this, press CTRL and
select multiple region routes while holding down the CTRL key. Or, to select all
region routes, click Select all on the Edit menu.
5. On the Edit menu, click Delete.
6. Click OK.
See Also
Configure a Network Region Route
New-CsNetworkInterRegionRoute
Set-CsNetworkInterRegionRoute
Remove-CsNetworkInterRegionRoute
Get-CsNetworkInterRegionRoute
232
233
234
The listening ports shown are the ports that are configured for Internet Information Server
(IIS) on each Front End Server.
The internal and external listening ports must be different for IIS. For the external
235
listening ports, these are typically the same because one represents the hardware load
balancer for internal web traffic and one represents the reverse proxy server for external
web traffic.
The published ports must be configured on the reverse proxy or hardware load balancer
as listening ports.
For an Front End pool (not shown in the example), the internal SIP pool FQDN must be
different from the internal web services FQDN, because web traffic comes through the
hardware load balancer and the internal SIP pool traffic travels comes through the DNS
load balancer. This requirement must be met.
A Lync Server Standard Edition deployment does not need or allow an internal web
services FQDN to be overridden because this server cannot be load balanced.
If you have a hardware load balancer in your environment that you use for both internal
SIP and web traffic, the Topology Builder cannot make the distinction.
The external web services works in conjunction with a reverse proxy in the perimeter network.
It provides clients external access to Microsoft Lync Server 2010 by using these web
services. The FQDNs configured here are sent to clients when they log on, and are used to
make an HTTPS connection back to the reverse proxy when connecting remotely. The
reverse-proxy server forwards the external web service FQDN to an internal hardware load
balancer, or directly to the pool. The reverse proxy must be able to resolve the external web
services FQDN to the IP address of the internal Web server. The external web services
FDQN must be resolvable in the public Internet.
If your internal server is a Standard Edition server, the internal FQDN is the Standard Edition
server FQDN. If your internal server is a Front End pool, the FQDN is a hardware load
balancer virtual IP (VIP) that load balances the internal web farm servers. A hardware load
balancer is required in a Front End pool with more than one Enterprise Edition server. A load
balancer is not required for a Standard Edition server or a single Enterprise Edition Front End
Server.
236
clients, such as Microsoft Lync 2010, Microsoft Lync 2010 Phone Edition and Microsoft Lync 2010
Mobile, can use these normalized numbers.
As discussed in the New Address Book Features, the normalization rules that were used in
previous versions may not work properly without some adjustments. Because the white space
and non-mandatory characters are removed prior to the normalization rules, if your regex
expression is specifically looking for a dash or other character that was removed, your
normalization rule might fail. You should review your normalization rules to ensure that either they
are not looking for these non-mandatory characters, or that the rule can fail gracefully and
continue in the event that the character is not present where the rule anticipates it will be.
Name
Flags
givenName
0x01400000
Sn
0x02400000
displayName
0x03420000
Title
0x04000000
mailNickname
0x05400000
Company
0x06000000
physicalDeliveryOfficeName
0x07000000
msRTCSIP-PrimaryUserAddress
0x08520C00
telephoneNumber
0x09022800
237
Name
Flags
10
homePhone
0x0A302800
11
Mobile
0x0B622800
12
otherTelephone
0x0C302000
13
ipPhone
0x0D302000
14
0x0E500000
15
groupType
0x0F010800
16
Department
0x10000000
17
Description
0x11000100
18
Manager
0x12040001
19
proxyAddress
0x00500105
20
msExchHideFromAddressLists
0xFF000003
99
entryID
0x99000000
The numbers in the ID column must be unique and should never be reused. Also, keeping the ID
values under 256 saves space in the output files written by the Address Book Server. However,
the maximum ID value is 65535. The Name column corresponds to the Active Directory attribute
name that User Replicator should put in the AbUserEntry table for each contact. The value in the
Flags column is used to define the type of attribute. The following types of Address Book Server
attributes are recognized by User Replicator, indicated by the low byte of the value in the Flags
column.
Attribute
Description
0x0
0x1
0x2
238
Description
0x3
0x4
0x5
0x100
0x400
0x800
0x1000
0x2000
0x4000
239
Description
has this flag bit set, then contacts that have this
attribute are not written to the database.
0x8000
0x10000
0x20000
Description
0x800
240
Description
0x8000
Note:
If both the 0x4000 (exclude attribute) and 0x8000 (include attribute) flag bits are set, the
0x4000 bit overrides the 0x8000 bit and the contact is excluded.
Although you can filter the Address Book to include only certain users, limiting entries does not
limit other users' ability to contact the filtered users or to see their presence status. Users can
always find, manually send instant messages, or manually initiate calls to users not in the
Address Book by entering a user's complete sign-in name. Also, contact information for a user
could also be found in Outlook or the Windows Address Book.
While having full contact records in the Address Book files enables you to use Lync 2010 to
initiate email, telephone, or Enterprise Voice calls (that is, if Enterprise Voice is enabled on the
server) with users that are not configured for Session Initiation Protocol (SIP), some organizations
prefer to include only SIP-enabled users in their Address Book Server entries. You can filter the
Address Book to include only SIP-enabled users by clearing the 0x800 bit in the Flags column of
the following required attributes: mailNickname, telephoneNumber, homePhone, and mobile.
You can also filter the Address Book to include only SIP-enabled users by setting the 0x8000
(include attribute) in the Flags column of the msRTCSIP-PrimaryUserAddress attribute. This
also helps to exclude service accounts from the Address Book files.
After you modify the AbAttribute table, you can refresh the data in the AbUserEntry table by
running the cmdlet Update-CsUserDatabase command. After UR replication completes, you can
241
update the file in the Address Book Server file store by manually running the cmdlet
UpdateCsAddressBook command.
Note:
The Front End that the Address Book Server is placed is not administratively
configurable. One is chosen during deployment typically the first Front End deployed. In
the event of failure, the Address Book Service will move to another Front End, and
requires no administrative attention. Also, there are two databases for the Address Book
Service RTCab and RTCab1. The databases are updated daily, but alternate which
database is updated. If the RTCab database is being updated, queries are preformed
against the RTCab1 database while the update is in progress. The next day, RTCab1 is
updated and queries are preformed against RTCab while the update is in progress. This
ensures that at least one of the databases will be available for query and Address Book
file creation.
Important:
If you have consolidated or otherwise modified your infrastructure from a multi-forest
deployment or a parent/child deployment (such as consolidating your infrastructure
before moving to Lync Server 2010), you may find that the Address Book service
download and the Address Book Web Query fails for some users. When in a deployment
that had multiple domains or forests, the attribute MsRTCSIP-OriginatorSid is populated
on the user objects that are exhibiting the problem. The MsRTCSIP-OriginatorSid
attribute must be set to NULL on these objects to resolve the problem.
242
Related Sections
See Also
http://go.microsoft.com/fwlink/?LinkId=205826
New-CsAddressBookConfiguration for Address Book Management
Who can run this cmdlet: By default, members of the following groups are authorized to run the
New-CsAddressBookConfiguration cmdlet locally: RTCUniversalServerAdmins. To return a list of
all the role-based access control (RBAC) roles this cmdlet has been assigned to (including any
custom RBAC roles you have created yourself), run the following command from the Windows
PowerShell prompt:
Get-CsAdminRole | Where-Object {$_.Cmdlets match "NewCsAddressBookConfiguration"}
The New-CsAddressBookConfiguration cmdlet creates a new configuration to manage the
behavior of the Address book. Specific to this cmdlet is the ability to define if the Address Book
Service creates the client download files, how and if normalization rules are used, how long to
retain delta and compact delta files, delta file size before incorporating a new full file creation,
what time of day the full file Address Book is created, and what the internal should be for
synchronization of information in the User database.
For example:
New-CsAddressBookConfiguration -Identity site:Redmond -KeepDuration 15
-SynchronizePollingInterval 00:10:00
For a detailed description of the full command, refer to the following in the main Lync Server
Windows PowerShell RTCCmdlets reference.
See Also
New-CsAddressBookConfiguration
Set-CsAddressBookConfiguration for Address Book Management
Who can run this cmdlet: By default, members of the following groups are authorized to run the
Set-CsAddressBookConfiguration cmdlet locally: RTCUniversalServerAdmins. To return a list of
all the role-based access control (RBAC) roles this cmdlet has been assigned to (including any
custom RBAC roles you have created yourself), run the following command from the Windows
PowerShell prompt:
Get-CsAdminRole | Where-Object {$_.Cmdlets match "SetCsAddressBookConfiguration"}
243
244
any custom RBAC roles you have created yourself), run the following command from the
Windows PowerShell prompt:
Get-CsAdminRole | Where-Object {$_.Cmdlets match "RemoveCsAddressBookConfiguration"}
As the name implies, Remove-CsAddressBookConfiguration will remove the configuration based
on the defined Site Identity.
For example:
Remove-CsAddressBookConfiguration -Identity site:Redmond
For a detailed description of the full command, refer to the following in the main Lync Server
Windows PowerShell RTCCmdlets reference.
See Also
Remove-CsAddressBookConfiguration
Test-CsAddressBookService for Address Book Management
Who can run this cmdlet: By default, members of the following groups are authorized to run the
Test-CsAddressBookService cmdlet: RTCUniversalServerAdmins. To return a list of all the rolebased access control (RBAC) roles this cmdlet has been assigned to (including any custom
RBAC roles you have created yourself), run the following command from the Windows
PowerShell prompt:
Get-CsAdminRole | Where-Object {$_.Cmdlets match "TestCsAddressBookService"}
Lync Server 2010 contains a number of cmdlets that initiate synthetic commands to confirm that a
specific function or feature is working properly. Test-CsAddressBookService confirms that a
defined user can connect and request the local files from the Address Book Web service.
For example:
Test-CsAddressBookService -TargetFqdn atl-cs-001.contoso.com
-UserCredential contoso\bob -UserSipAddress "sip:bob@contoso.com"
For a detailed description of the full command, refer to the following in the main Lync Server
Windows PowerShell RTCCmdlets reference.
See Also
Test-CsAddressBookService
Test-CsAddressBookWebQuery for Address Book Management
Who can run this cmdlet: By default, members of the following groups are authorized to run the
Test-CsAddressBookWebQuery cmdlet: RTCUniversalServerAdmins. To return a list of all the
role-based access control (RBAC) roles this cmdlet has been assigned to (including any custom
RBAC roles you have created yourself), run the following command from the Windows
PowerShell prompt:
245
246
WebSearchAndFileDownload
WebSearchOnly
FileDownloadOnly
When defined, it determines how the Address Book is accessed by clients. If you define this
parameter, you must define one of the options. If you do not modify this setting, the default
WebSearchAndFileDownload remains in effect.
For example:
New-CsClientPolicy -Identity RedmondClientPolicy
-DisableCalendarPresence $True -DisablePhonePresence $True -DisplayPhoto
"PhotosFromADOnly" AddressBookAvailability WebSearchOnly
For a detailed description of the full command, refer to the following in the main Lync Server
Windows PowerShell RTCCmdlets reference.
See Also
New-CsClientPolicy
Set-CsClientPolicy for Address Book Management
Who can run this cmdlet: By default, members of the following groups are authorized to run the
Set-CsClientPolicy cmdlet locally: RTCUniversalServerAdmins. To return a list of all the rolebased access control (RBAC) roles this cmdlet has been assigned to (including any custom
RBAC roles you have created yourself), run the following command from the Windows
PowerShell prompt:
Get-CsAdminRole | Where-Object {$_.Cmdlets match "Set-CsClientPolicy"}
Similar to New-CsClientPolicy, the Set-CsClientPolicy cmdlet allows you to modify client settings
that are already in place.
For example:
Set-CsClientPolicy -Identity RedmondClientPolicy -WebServicePollInterval
"00:15:00" AddressBookAvailability WebSearchAndFileDownload
247
For a detailed description of the full command, refer to the following in the main Lync Server
Windows PowerShell RTCCmdlets reference.
See Also
Set-CsClientPolicy
Get-CsService for Address Book Management
Who can run this cmdlet: By default, members of the following groups are authorized to run the
Get-CsService cmdlet locally: RTCUniversalUserAdmins, RTCUniversalServerAdmins. To return
a list of all the role-based access control (RBAC) roles this cmdlet has been assigned to
(including any custom RBAC roles you have created yourself), run the following command from
the Windows PowerShell prompt:
Get-CsAdminRole | Where-Object {$_.Cmdlets match "Get-CsService"}
Get-CsService is valuable to retrieve and display the current configuration of your infrastructures
defined Web Services. By defining the pools fully qualified domain name (FQDN) and the
parameter WebServer, the cmdlet returns the web-based services offered by your server,
including the Address Book handler and distribution list expansion URIs.
For example:
Get-CsService -PoolFqdn "fe01.contoso.net" WebServer
This cmdlet returns the following:
Identity
FileStore
UserServer
: WebServer:pool01.contoso.net
: FileStore:dc01.contoso.net
: UserServer:pool01.contoso.net
PrimaryHttpPort
: 80
PrimaryHttpsPort
: 443
ExternalHttpPort
: 8080
ExternalHttpsPort
: 4443
PublishedPrimaryHttpPort
: 80
PublishedPrimaryHttpsPort
: 443
PublishedExternalHttpPort
: 80
PublishedExternalHttpsPort
: 443
ReachPrimaryPsomServerPort
: 8060
ReachExternalPsomServerPort
: 8061
AppSharingPortStart
AppSharingPortCount
LIServiceInternalUri
ABHandlerInternalUri
ABHandlerExternalUri
: 49152
: 16383
: https://internalweb.contoso.net/locationinformation/liservice.svc
: https://internalweb.contoso.net/abs/handler
: https://csweb.contoso.com/abs/handler
248
DLExpansionInternalUri
: https://internalweb.contoso.net/groupexpansion/service.svc
DLExpansionExternalUri
: https://csweb.contoso.com/groupexpansion/service.svc
CAHandlerInternalUri
:
https://internalweb.contoso.net/CertProv/CertProvisioningService.svc
CAHandlerInternalAnonUri
:
http://internalweb.contoso.net/CertProv/CertProvisioningService.svc
CollabContentInternalUri
: https://internalweb.contoso.net/CollabContent
CollabContentExternalUri
: https://csweb.contoso.com/CollabContent
CAHandlerExternalUri
: https://csweb.contoso.com/CertProv/CertProvisioningService.svc
DeviceUpdateDownloadInternalUri :
https://internalweb.contoso.net/RequestHandler/ucdevice.upx
DeviceUpdateDownloadExternalUri :
https://csweb.contoso.com/RequestHandlerExt/ucdevice.upx
DeviceUpdateStoreInternalUri
DeviceUpdateStoreExternalUri
RgsAgentServiceInternalUri
: http://internalweb.contoso.net/RequestHandler/Files
: https://csweb.contoso.com/RequestHandlerExt/Files
: https://internalweb.contoso.net/RgsClients/AgentService.svc
RgsAgentServiceExternalUri
: https://csweb.contoso.com/RgsClients/AgentService.svc
MeetExternalUri
: https://csweb.contoso.com/Meet
DialinExternalUri
: https://csweb.contoso.com/Dialin
CscpInternalUri
: https://internalweb.contoso.net/Cscp
ReachExternalUri
: https://csweb.contoso.com/Reach
ReachInternalUri
: https://internalweb.contoso.net/Reach
WebTicketExternalUri
: https://csweb.contoso.com/WebTicket/WebTicketService.svc
WebTicketInternalUri
: https://internalweb.contoso.net/WebTicket/WebTicketService.svc
ExternalFqdn
InternalFqdn
: csweb.contoso.com
: internalweb.contoso.net
DependentServiceList
: {Registrar:pool01.contoso.net,
ConferencingServer:pool01.contoso.net}
ServiceId
SiteId
PoolFqdn
Version
Role
: 1-WebServices-1
: Site:Redmond
: pool01.contoso.net
:5
: WebServer
For a detailed description of the full command, refer to the following in the main Lync Server
Windows PowerShell RTCCmdlets reference.
See Also
Get-CsService
249
250
See Also
Get-CsWebServiceConfiguration
Set-CsWebServiceConfiguration for Address Book Management
Who can run this cmdlet: By default, members of the following groups are authorized to run the
Set-CsWebServiceConfiguration cmdlet locally: RTCUniversalServerAdmins. To return a list of all
the role-based access control (RBAC) roles this cmdlet has been assigned to (including any
custom RBAC roles you have created yourself), run the following command from the Windows
PowerShell prompt:
Get-CsAdminRole | Where-Object {$_.Cmdlets match "SetCsWebServiceConfiguration"}
The Set-CsWebServiceConfiguration cmdlet allows the administrator to redefine an existing
attribute in the configuration of the Web Services.
For example:
Set-CsWebServiceConfiguration -Identity site:Redmond
-EnableGroupExpansion $True
For a detailed description of the full command, refer to the following in the main Lync Server
Windows PowerShell RTCCmdlets reference.
See Also
Set-CsWebServiceConfiguration
Remove-CsWebServiceConfiguration for Address Book Management
Who can run this cmdlet: By default, members of the following groups are authorized to run the
Remove-CsWebServiceConfiguration cmdlet locally: RTCUniversalServerAdmins. To return a list
of all the role-based access control (RBAC) roles this cmdlet has been assigned to (including any
custom RBAC roles you have created yourself), run the following command from the Windows
PowerShell prompt:
Get-CsAdminRole | Where-Object {$_.Cmdlets match "RemoveCsWebServiceConfiguration"}
The Remove-CsWebServiceConfiguration cmdlet allows an administrator to remove a previously
created Web Services configuration. The cmdlet cannot remove the global Web Services
configuration.
For example:
Remove-CsWebServiceConfiguration -Identity site:Redmond
For a detailed description of the full command, refer to the following in the main Lync Server
Windows PowerShell RTCCmdlets reference.
See Also
Remove-CsWebServiceConfiguration
251
252
-Identity "kenmyer"
253
For information about configuring Microsoft Outlook Web Access (OWA) and Lync Server, see
Configure Outlook Web App and Lync Server 2010 Integration at http://go.microsoft.com/fwlink/?
LinkId=210321.
To successfully publish, enable, or disable a topology when adding or removing a server role, you
should be logged on as a user who is a member of the RTCUniversalServerAdmins and Domain
Admins groups. It is also possible to delegate the proper administrator permissions and rights for
adding server roles. For details, see Delegate Setup Permissions in the Deployment
documentation. For other configuration changes, only membership in the
RTCUniversalServerAdmins group is required.
To configure a trusted application server
1. Log on to the computer where Topology Builder is installed as a member of the Domain
Admins group and the RTCUniversalServerAdmins group.
2. Start Topology Builder: Click Start, click All Programs, click Microsoft Lync Server
2010, and then click Lync Server Topology Builder.
3. Select Download topology from existing deployment, and then click OK.
4. In the Save Topology As dialog box, click the Topology Builder file you want to use, and
then click Save.
5. In the right pane, right-click Trusted application servers, and then click New Trusted
Application Pool.
6. Enter the Pool FQDN of the trusted application pool, select whether it will be a singleserver or multiple-server, and then click Next.
7. On the Select the next hop page, from the list, select the Lync Server 2010 Front End
pool.
8. Click Finish.
9. Select the top node Lync Server 2010, and then, from the Actions pane, click Publish.
The Trusted Application Pool should have been created successfully and associated
with the correct Front End pool.
254
Note:
Other software requirements for Lync Server Control Panel pertain to the operating
system on which Lync Server 2010 Control Panel and all other Microsoft Lync Server
2010 administrative tools can be installed. For details, see Server and Tools Operating
System Support in the Supportability documentation.
If your Internet browser blocks installation of Silverlight due to security considerations, add the
Uniform Resource Locator (URL) that opens Lync Server Control Panel to the list of trusted sites.
In Internet Explorer security settings, ensure that Run ActiveX controls and plug-ins is set to
Enabled. For details, see http://go.microsoft.com/fwlink/?LinkId=214060. Furthermore, ensure
that the browser is configured to use SSL 3.0.
If the Internet browser is configured to use a proxy server, verify that the browser is configured to
bypass the proxy server for sites that are automatically detected as internal sites. Or, add the
address to the browser's exception list in the proxy server configuration settings.
For step-by-step procedures to configure the administrative access URL, see Edit or Configure
Simple URLs in the Deployment documentation.
Note:
If you have more than one network adapter on the web server, you must manually
configure DNS for each additional network adapter in order for DNS resolution to function
properly.
255
256