locked
Skype for Business - External Access Policy RRS feed

  • Question

  • We are running SfB 2015 on prem.  In configuring remote user access, we have 3 policies that will allow remote user access, and the Global policy that does not allow Remote user access.  At this time we only have 5 accounts that are assigned one of the 3 policies that allows Remote user access, the rest are assigned the Global policy(no remote access)

    But users that are in the Global policy can configure SfB on their phones and connect.  How is this possible?  Am I missing somewhere else that will restrict remote access?

    Of course the Access Edge Configuration global policy allows remote access on all the edge servers.

    Thanks

    Thursday, December 7, 2017 3:37 PM

Answers

  • Hi Pete,

    You need to configure your CsMobilityPolicy for mobile users, to disable access. Mobile clients connects trough Reverse Proxy.

    See https://docs.microsoft.com/en-us/powershell/module/skype/set-csmobilitypolicy?view=skype-ps

    Greetings,

    Erdem


    Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.


    • Edited by Er-D Thursday, December 7, 2017 3:48 PM
    • Marked as answer by PeteK01 Thursday, December 7, 2017 3:49 PM
    Thursday, December 7, 2017 3:44 PM
  • Deleted
    • Marked as answer by PeteK01 Thursday, December 7, 2017 3:49 PM
    Thursday, December 7, 2017 3:44 PM

All replies

  • Hi Pete,

    You need to configure your CsMobilityPolicy for mobile users, to disable access. Mobile clients connects trough Reverse Proxy.

    See https://docs.microsoft.com/en-us/powershell/module/skype/set-csmobilitypolicy?view=skype-ps

    Greetings,

    Erdem


    Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.


    • Edited by Er-D Thursday, December 7, 2017 3:48 PM
    • Marked as answer by PeteK01 Thursday, December 7, 2017 3:49 PM
    Thursday, December 7, 2017 3:44 PM
  • Hi PeteK01,

    Agree with others.

    Lync Server 2013 provides mobility policies that determine who can use mobility features, Call via Work, voice over IP (VoIP) or video, and whether WiFi will be required for either VoIP or video.

    Moreover, I will share a document about Lync mobility

    https://technet.microsoft.com/en-us/library/hh690018(v=ocs.15).aspx


    Regards,

    Alice Wang


    Please remember to mark the replies as answers if they helped.
    If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Monday, December 11, 2017 8:19 AM