Asked by:
Selective blocking of ports/services depending on location

Question
-
Is it possible to allow all Skype for Business services within a location while blocking most services between designated locations? Example: You have locations A, B, C, D. Within each location you want full capabilities. Between those locations we may want to limit services due to bandwidth. Location A to B can use all services, but A to C and A to D need to limit allowed services. Standard server in each location.Tuesday, November 19, 2019 9:33 PM
All replies
-
Hi Msgreenjeans,
Are these servers in the same pool or each server in a single pool?
If in the same pool, you can deploy load balancing in the pool. Load balancing distributes traffic among the servers in a pool.
For more details, please refer to:
In my experience, I’m afraid that it is impossible to selectively block the ports or services depending on location.
Best Regards,
Sharon Zhao
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
- Edited by sharon_zhaoMicrosoft contingent staff Wednesday, November 20, 2019 8:35 AM
- Proposed as answer by sharon_zhaoMicrosoft contingent staff Friday, November 22, 2019 7:28 AM
Wednesday, November 20, 2019 8:30 AM -
Hi Msgreenjeans,
Is there any update on this case?
Please feel free to drop us a note if there is any update.
Have a nice day!
Best Regards,
Sharon Zhao
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.Wednesday, November 27, 2019 7:15 AM -
So we decided to take a different approach. First let me explain that we are not using a full set up. We have only one standard / front-end server at each location. After researching it was decided that most users would simply be provided the ability to text, while a select group would be allowed all of the services to aid in troubleshooting user issues.
Thank you for your response.
Wednesday, November 27, 2019 2:11 PM -
Hi Msgreenjeans,
According to your description, you could try to create a custom client policy and assign to the specific users. The client policy manages the Skype for Business client experience.
Please refer to the following steps:
1.Create a new client policy:
New-CsClientPolicy -Identity TestClientPolicy -DisableCalendarPresence $True -DisablePhonePresence $True -DisplayPhoto "PhotosFromADOnly"
Reference link:
https://docs.microsoft.com/en-us/powershell/module/skype/new-csclientpolicy?view=skype-ps
2.Edit a client policy
Set-CsClientPolicy -Identity TestClientpolicy -DisableEmoticons $True -DisableHtmlIm $True -DisableRTFIm $True
Reference link:
https://docs.microsoft.com/en-us/powershell/module/skype/set-csclientpolicy?view=skype-ps
3.Get the current configuration of client policy
Get-CsClientPolicy -Identity TestClientPolicy
Reference link:
https://docs.microsoft.com/en-us/powershell/module/skype/get-csclientpolicy?view=skype-ps
4.Assign a client policy to users
Grant-CsClientPolicy -Identity testuser -PolicyName TestPolicy
Reference link:
https://docs.microsoft.com/en-us/powershell/module/skype/grant-csclientpolicy?view=skype-ps
You can also use Skype for Business Control Panel to assign a client policy to users as below:
Open control panel > Users > search for the user > Edit > Show details > Client policy
Best Regards,
Sharon Zhao
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
- Edited by sharon_zhaoMicrosoft contingent staff Monday, December 2, 2019 8:10 AM
- Proposed as answer by sharon_zhaoMicrosoft contingent staff Thursday, December 5, 2019 9:24 AM
Monday, December 2, 2019 8:09 AM -
Hi Msgreenjeans,
Do you have any further issue on this topic?
Meanwhile, if there is no issue, please remember to mark helpful reply as answer to close the thread. Your action would be helpful to other users who encounter the same issue and read this thread.
Thanks for your understanding.
Best Regards,
Sharon Zhao
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.Tuesday, December 10, 2019 5:49 AM -
Here I will provide a brief and temporary summary of this post.
<Request/Expectation>:
Is it possible to selective block ports and services depending on location?
<Suggestions>:
I'm afraid that it is impossible to realize this. You could try to create a custom client policy and assign to the specific users.
Please refer to the following steps:
1.Create a new client policy:
New-CsClientPolicy -Identity TestClientPolicy -DisableCalendarPresence $True -DisablePhonePresence $True -DisplayPhoto "PhotosFromADOnly"
2.Edit a client policy
Set-CsClientPolicy -Identity TestClientpolicy -DisableEmoticons $True -DisableHtmlIm $True -DisableRTFIm $True
3.Get the current configuration of client policy
Get-CsClientPolicy -Identity TestClientPolicy
4.Assign a client policy to users
Grant-CsClientPolicy -Identity testuser -PolicyName TestPolicy
You can also use Skype for Business Control Panel to assign a client policy to users as below:
Open control panel > Users > search for the user > Edit > Show details > Client policy
<Reference Links>:
https://docs.microsoft.com/en-us/powershell/module/skype/new-csclientpolicy?view=skype-ps
https://docs.microsoft.com/en-us/powershell/module/skype/set-csclientpolicy?view=skype-ps
https://docs.microsoft.com/en-us/powershell/module/skype/get-csclientpolicy?view=skype-ps
https://docs.microsoft.com/en-us/powershell/module/skype/grant-csclientpolicy?view=skype-ps
Best Regards,
Sharon Zhao
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.Thursday, December 26, 2019 2:45 AM