locked
Skype for business onprem users restriction policy RRS feed

  • Question

  • Dear All,

    i have some queries regarding the bandwidth  restriction and security hardening for users

    1) is it possible to block audio or video for individual users?, if yes how?

    2 how to restrict the video resolution for users in peer to peer and conferencing ?

    3) how to restrict the users   login from selected pcs or devices?

    4) if we disable mobility for a user, still users are able to login and chat?, how to disable user from login using miblie?

    5)disable desktop sharing for a individual user ?

    regards,

    sarma

    Tuesday, February 14, 2017 8:17 PM

Answers

  • Questions 1, 2 and 5 you would need to create dedicated conferencing policies for each option.

    Question 3 I don't think that's possible.

    Question 4 - If Mobility is disabled for a user using Mobility policy, there is no way a user can login on their mobile app.


    My Blog : http://www.theskypeguy.com Note: If you find a post informative, please mark it so using the arrow to the left. If it answers a question you have asked, please mark the thread as answered to aid others when they are looking for solutions to similar problems or queries.

    • Marked as answer by sarmakumar Wednesday, February 15, 2017 6:34 AM
    Wednesday, February 15, 2017 1:29 AM
  • Hi sarmakumar,

    1.Is it possible to block audio or video for individual users?, if yes how?
    Yes, you can. You can use the following command in SFB management shell and then assign this policy to any user you would like.  Note that they will have to log out/back in before the change will take effect, please note this command will only disable AV for Conferences: Set-CsConferencingPolicy -Identity "Tag:<PolicyName>" -AllowIPAudio $false -AllowIPVideo $false
    If you want to disable all AV function including peer to peer AV, you could do it in SFB control panel:

    2 how to restrict the video resolution for users in peer to peer and conferencing ?
    Conference video resolution parameters and support are version dependent. If you set conference policy, you can use the parameter MaxVideoConferenceResolution, but not supported for Lync Server 2013 or later clients, in Lync Server 2013 or later conferences. The MaxVideoConferenceResolution parameter determines the maximum resolution allowed for legacy clients in conferences organized by users who are homed on Lync Server 2013 or later.

    3) how to restrict the users  login from selected pcs or devices?
    So far, there is no method to restrict user login from selected devices.

    4) if we disable mobility for a user, still users are able to login and chat?, how to disable user from login using miblie?
    If you disable mobility for the user, then the user can’t use SFB on mobile device. You could use the command : Set-CsMobilityPolicy -EnableMobility $False, for details, please refer to
    https://technet.microsoft.com/en-us/library/hh690018(v=ocs.15).aspx

    5)disable desktop sharing for a individual user ?
    You could use conference policy, use the parameter EnableAppDesktopSharing and set the value to “None”, then user can’t share desktop.

    The following blog describes the parameter for conference policy, please refer to
    https://technet.microsoft.com/en-us/library/gg425788.aspx


    Regards,

    Alice Wang


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Proposed as answer by Liinus Wednesday, February 15, 2017 5:36 AM
    • Marked as answer by sarmakumar Wednesday, February 15, 2017 6:52 PM
    Wednesday, February 15, 2017 3:16 AM

All replies

  • Questions 1, 2 and 5 you would need to create dedicated conferencing policies for each option.

    Question 3 I don't think that's possible.

    Question 4 - If Mobility is disabled for a user using Mobility policy, there is no way a user can login on their mobile app.


    My Blog : http://www.theskypeguy.com Note: If you find a post informative, please mark it so using the arrow to the left. If it answers a question you have asked, please mark the thread as answered to aid others when they are looking for solutions to similar problems or queries.

    • Marked as answer by sarmakumar Wednesday, February 15, 2017 6:34 AM
    Wednesday, February 15, 2017 1:29 AM
  • Hi sarmakumar,

    1.Is it possible to block audio or video for individual users?, if yes how?
    Yes, you can. You can use the following command in SFB management shell and then assign this policy to any user you would like.  Note that they will have to log out/back in before the change will take effect, please note this command will only disable AV for Conferences: Set-CsConferencingPolicy -Identity "Tag:<PolicyName>" -AllowIPAudio $false -AllowIPVideo $false
    If you want to disable all AV function including peer to peer AV, you could do it in SFB control panel:

    2 how to restrict the video resolution for users in peer to peer and conferencing ?
    Conference video resolution parameters and support are version dependent. If you set conference policy, you can use the parameter MaxVideoConferenceResolution, but not supported for Lync Server 2013 or later clients, in Lync Server 2013 or later conferences. The MaxVideoConferenceResolution parameter determines the maximum resolution allowed for legacy clients in conferences organized by users who are homed on Lync Server 2013 or later.

    3) how to restrict the users  login from selected pcs or devices?
    So far, there is no method to restrict user login from selected devices.

    4) if we disable mobility for a user, still users are able to login and chat?, how to disable user from login using miblie?
    If you disable mobility for the user, then the user can’t use SFB on mobile device. You could use the command : Set-CsMobilityPolicy -EnableMobility $False, for details, please refer to
    https://technet.microsoft.com/en-us/library/hh690018(v=ocs.15).aspx

    5)disable desktop sharing for a individual user ?
    You could use conference policy, use the parameter EnableAppDesktopSharing and set the value to “None”, then user can’t share desktop.

    The following blog describes the parameter for conference policy, please refer to
    https://technet.microsoft.com/en-us/library/gg425788.aspx


    Regards,

    Alice Wang


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Proposed as answer by Liinus Wednesday, February 15, 2017 5:36 AM
    • Marked as answer by sarmakumar Wednesday, February 15, 2017 6:52 PM
    Wednesday, February 15, 2017 3:16 AM