Thank you for your answer, I appreciate it. However I think I didn't explain myself well enough. It's the same users that roam between internal and external computers.
To simplify things:
We have a user called Bob. He works in our company and will 90% of the time work from an internal computer on our network and here I want him to have 100% full access to ALL functionalities. Some times he connects with Lync from a personal computer from
his home as an external user. However as an external user I want him to only be able to chat from that remote client, and specifically not be able to transfer files or remote control another users computer by using Lync.
From the first link you posted, it seems like you can either completely disable or enable external access for users. I need to be able to set limitations on what they are able to use of functionalities when they are external.
I've looked at Get-CsExternalAccessPolicy, however this only contains 5 settings to completely enable or disable stuff like external access, federation and so on.
Then I looked at your second link about Conferencing Policies. This had at least some of what I needed, but unfortunately it seems like most of the parameters can't distinguish between if you're internal or external. Like the setting EnableAppDesktopSharing,
which is exactly what I need, except that it would also remove the functionality when the users were internal.
I hope you understand what I mean. Please let me know if you still believe it is possible and if at all, please post an example Lync Management Shell Command as an example for setting any of the parameters I've requested.
