Cannot disable Skype federation by policy

Hello,
All users are able to federate with Lync and Skype :-)
However some users must be prevented from federation - Lync,AOL,Skype.
I have created a new CsExternalAccessPolicy:
Identity                          : Tag:FederationDisabled
Description                       : Federation disabled
EnableFederationAccess            : False
EnableXmppAccess                  : False
EnablePublicCloudAccess           : False
EnablePublicCloudAudioVideoAccess : False
EnableOutsideAccess               : True
But still users can add Skype contacts and federate with them by selecting "Add contacts not in my organization" and select "Other"
Is there a hotfix for that or is there a way that I can remove the "other" meny ?

Thats not supposed to be the case, once you have applied the policy you have created the user should not be able to see Presence information for Federated contacts, that includes Skype.
Try replicating the Lync servers (Invoke-CsManagementStoreReplication - make sure all servers show UpToDate : True). Sign the user out, closing the Lync application and then launching it again (to make sure the client is loading the new policy)
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Lync Sorted blog

Similar Messages

  • Skype Federation issues

    Hi 
    I have a Lync Server 2013 deployment with Skype Federation enabled. Lync and Skype users cannot IM each other however Skype users can make a voice call to Lync users successfully.
    The Access Edge is secured by a public SSL certificate.
    Any thoughts?

    Hi,
    From your description above, it can be the issue of the ports for the Edge Server.
    Please double check the Edge ports with the help of the link below:
    https://technet.microsoft.com/en-us/library/jj618373.aspx
    Best Regards,
    Eason Huang
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
    Eason Huang
    TechNet Community Support

  • Strange Skype Federation Issue

    I have Lync 2013 with 1 edge server and 1 front end server. Everything is working fine both external and internal. I turned on Skype federation and was able to connect to a user.  From LYNC 2013 client (non-mobile) on Windows 8.1 I can see presence
    from the Skype user, IM the user and make an audio call. From the Skype client, I can also see presence for the Lync us4er and IM that user. when I try to make a call the call never connects. Eventually the Lync client times out.   From a IPAD the
    Skype can make an audio call to the IPAD which is the same user account as was singed into the Windows client.  Both the IPAD and Windows 8 machines are on the same network which is remote to the Lync servers.  It seems that any client running on
    the Windows 8 machines fails for inbound audio only.  I tried to turn off the FW, and and AV and no dice. 
    Any thoughts?

    Not sure about the sentence “Both the IPAD and Windows 8 machines are on the same network which is remote to the Lync servers”.
    Did you mean the clients are external users or internal users in another subnet?
    The call process is little different between Lync desktop client and mobile client.
    If both Skype users and Lync users signed in internally. The Skype may have problem to access A/V edge service. You can use network capture tool to check the traffic.
    The following blog is for your reference about the call process between Lync mobile clients:
    http://blog.schertz.name/2013/11/lync-mobility-media-paths/
    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software
    or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
    Lisa Zheng
    TechNet Community Support

  • Skype federation: no icon, no new menu line

    Hello,
    My Skype federation is enabled and functionnal. I can talk from Skype to Lync, and from Lync to Skype.
    Nevertheless, I would like that my user be able to add simply a new Skype contact. I runned the cmdlets:
    Remove-CsPublicProvider -Identity Messenger
    New-CsPublicProvider -Identity Skype -ProxyFqdn federation.messenger.msn.com -IconUrl "https://images.edge.messenger.live.com/Messenger_16x16.png" -VerificationLevel 2 -Enabled 1
    I understood it should provide in Lync client a new menu line with the Skype icon. However, I cannot see it in my Lync client. Why is that  ?
    Thank you for your help.

    I just thought about it.... Would it be a limitation of the basic Lync 2013 client ?

  • In Lion 10.7.x I cannot disable the Lock documents for 2 weeks in Time Machine! Thus it prevents to change anything else like the system preferences or other settings. How I can disable it?

    Hello, In Lion 10.7.x I cannot disable the Lock documents for 2 weeks in Time Machine! Thus it prevents to change anything else like the system preferences or other settings. All is locked. How I can disable it?

    Do you mean the check box isn't enabled?
    Or you remove the check but it doesn't "stick"?
    Or you remove the box but documents are stil getting locked?
    That setting doesn't apply to other things in System Preferences, just apps that support AutoSave and Versions.  If you're having a problem with System Prefs, please clarify exactly what.

  • ERROR CANNOT OPEN SKYPE AT ALL

    Hello, I have version of skype 6.22 and windows 7 64-bit professional (fully updated) and cannot open skype at all, the message appears is: Application Error: Exception EOIeSysError in module Skype.exe at 0012A0F1. Access is denied.
    I have tried several times to unistall and install skype but no any progress.
    Please advise
    Thanks

    Open Windows Event Viewer -> Custom Views -> Administrative Events. Look for the recent error messages with timestamp corresponding to Skype crash. Copy and paste here the text from the General tab.

  • Acrobat X Pro: Check for Updates Error 1007 Updates have been disabled by your system policy

    Because of another Acrobat problem (I won't go into here), today I uninstalled Acrobat Pro 10.1.9 and re-installed Acrobat 10.0.0. I thought I could get back to 10.1.9 by selecting "Check for Updates" after installation. My system is Win7x64 and I'm running as a named user with Administrator rights on a machine that is not part of domain.
    When I select "Check for Updates", I receive a window titled "Adobe Acrobat Updater" that says "Update failed Updates have been disabled by your system policy. Error: 1007 <Close>" About ten seconds later, Acrobat X terminates, leaving this window hanging around.
    What do I do to enable checking for updates?

    Thanks Bill@VT and LeoAdobeX. It's still not working though.
    Over the last few days, Windows System Restore says I have done 4 (four) Remove/Install Pairs. I tried the helpful cleaner you suggested. I knew I probably had some Acrobat9 cruft, so I ran the Acrobat9 and Reader9 cleaners, then the AcrobatX cleaner (I never had ReaderX). I also uninstalled absolutely every Adobe program from my system: Flash Player (three versions), iFilter, Adobe AIR, Amazon Music Importer (relies on Adobe AIR).
    I tried it both as 10.0.0, and installing 10.0.0 and then the 10.1.9 MSP you pointed me to at the "update link" above. I installed as "Trial" mostly, but once with my registration key.
    Starting up Acrobat X still fails epically. Also, every time I've looked, it hasn't solved the "other Acrobat problem" that initiated all of this.
    The most that I've received from Acrobat X today is the splash screen came up once. Only once. Even after a restart of Windows 7, launching AcrobatX from the Start Menu, Desktop or even directly from the EXE under "Program Files (x86) does nothing. I thought it might just be slow the last time, so I took a 15 minute coffee break after attempting to launch. Nothing.
    Ergo, I am looking at Windows System Restore. I miss two days of not being able to read PDF's even if the "other Acrobat problem" remains.
    However, I got a whiff that I have another problem headed my way. I bought update version of Acrobat9 and AcrobatX. I've now wiped all traces of Acrobat9 (and will shortly do another wipe of AcrobatX). The Cleaner log reports "** Info : Installed product not found for upgrade code". The MyAdobe website has all my install codes back to Acrobat4, but I'm not sure I could locate my Adobe 4 CDROM or the intervening CDROM's that would be required to source me back to a full version (maybe Acrobat6?).
    As I understand it, System Restore will do many things but not actually install the program files that I've been writing and deleting from my disk over the last two days. So, I'm going to have to do some install of AcrobatX after I do the System Restore and I now have little hope that even that installation will work to "just put things back the way they were".
    Is AcrobatX supported on Windows7x64 Ultimate? Is there some place to track down what may be the "issues due to the 64-bit system"?
    I have checked the policies under Control Panel->Administrator and there is more to check there. My account is a member of Administrators, which I would think would give me the rights to do just about anything, but when I click on the "Local Security Policy" shortcut, I get a "Group Policy Error: Failed to open the Group Policy Object on this computer. You may not have the appropriate rights. <Close> Details: Unspecified error". I'll chase this down if the System Restore does not make this error go away, but this part is clearly not a problem with Adobe software. All of the Other Admin/MMC Tools like Computer Management open fine.
    Thank you very much for the responses. I found them to be very helpful but I still feel I've got a big problem ahead.

  • I cannot disable the full keyboard  navigation

    Hello I have quite a problem.
    As it says above, I cannot disable the full keyboard navigation option, whenever I try to, it re-activates itself in the preferences, even if I just change tabs and return within the preferences.
    Furthermore, the keys seem to activate oddly, as I do not know of any shortcuts bound to the S key (JUST the s key), which commonly causes Itunes to skip forward a track in whatever playlist I am playing.
    I have tried changing the other preferences, and I can change them with no difficulties, it is just the Keyboard navigation that is giving me problems.
    Any help would be appreciated.
    Thank you in advance.

    On second thought... The help article cor-el linked mentions that Firefox may prompt you every time if the file is sent with the disposition:attachment header, i.e., forced save. You can bypass that problem (change disposition:attachment to disposition:inline) using the Inline Disposition extension. It has been around for a while, but I haven't tried it myself: [https://addons.mozilla.org/en-US/firefox/addon/inlinedisposition/]. Maybe that's what you need for Gmail.

  • Java.sql.SQLException: Cannot disable AUTO_COMMIT

    Hi,
    I am getting "java.sql.SQLException: Cannot disable AUTO_COMMIT" exception when using mySQL
    with Weblogic 5.1 EJB (through org.gjt.mm.mysql.Driver JDBC driver).
    Can anybody help!!!!!!
    Thank you, Eric
    [email protected]

    eric wrote:
    >
    Hi,
    I am getting "java.sql.SQLException: Cannot disable AUTO_COMMIT" exception when using mySQL
    with Weblogic 5.1 EJB (through org.gjt.mm.mysql.Driver JDBC driver).Hi. I'd have to see the whole stack trace to know for sure, but it looks like the
    DBMS/driver you're using doesn't implement the transactional calls/behavior that
    are required for managing EJB transactions. If you can write a small standalone
    java program that just gets a JDBC connection to your database, then calls setAutoCommit(false),
    then does a few updates, then calls Conenction.commit(), then there may be a weblogic problem,
    but if your simple program gets the same error, you need a transactionally capable DBMS.
    Joe
    Can anybody help!!!!!!
    Thank you, Eric
    [email protected]

  • Cannot disable a mailbox in Exchange 2013 CU6!?!?!?!

    I cannot disable a mailbox in Exchange 2013 CU6. I get the following error:
    Anyone seen this error? As you know, I just want to remove the Exchange attributes from the user object in Active Directory. Of course, deleting the user object works just fine but don't want to go that route. 

    I tried with the EMS (Powershell) and I still get an error:
    [PS] C:\>disable-mailbox [email protected]
    Confirm
    Are you sure you want to perform this action?
    Disabling mailbox "[email protected]" will remove the Exchange properties from the Active Directory user object and mark the mailbox in the database for removal. If the mailbox has an archive or remote archive, the archive will also
    be 
    marked for removal. In the case of remote archives, this action is permanent. You can't reconnect this user to the remote archive again.
    [Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"): 
    Y
    Active Directory operation failed on LocalDCName.local.com. This error is not retriable. Additional information: The parameter is incorrect.
    Active directory response: 00000057: LdapErr: DSID-0C090CB9, comment: Error in attribute conversion operation, data 0, v2580
        + CategoryInfo          : NotSpecified: (:) [Disable-Mailbox], ADOperationException
        + FullyQualifiedErrorId : [Server=LA-MBX01Server,RequestId=6ed97c1e-ae68-4670-a097-c4e65f683274,TimeStamp=11/18/2014 7:50:07 PM] [FailureCategory=Cmdlet-ADOperationException] 8D6C0FEB,Microsoft.Exchange.Management.RecipientTasks.Disable 
       Mailbox
        + PSComputerName        : LocalDCName.local.com
    I captured everything with the START-TRANSCRIPT cmdlet and changed the specific values to our organization (i.e., "[email protected]" and "LocalDCName.Local.com"). I've tried this on other mailboxes and I receive the same error whether
    I use EMC or EMS. I believe this might be AD schema related just not sure where.

  • Cannot disable the tax-only calculation in a AR Credit Notes document

    Hello,
    When trying to raise a tax only credit the following error message appears "Cannot disable the tax-only calculation in a AR Credit Notes document that was based on another document"
    I have two lines specified in the AR Credit Note screen both with a tick under the 'Tax only' column.
    Would anyone be able to advise?
    Regards,
    Juan

    Hi,
    Just to confirm you there is no option for this. If you have created the invoice(base document) for that then you cant change it in target document..
    Other wise you can do one thing while copying it in target doc. just select customize option in copy from--> draw document wizard & select the right items you want.
    Regards.
    ShriX.

  • Cannot disable Homes: Enable Virtual Share Points

    Hello,
    We just installed 10.5 server this morning, and many things seem to be a big improvement-- e.g., the new version of Samba (3.0.25) now allows AD transitive trust users to connect, whereas 10.4's Samba (3.0.10) did not. But the problem now is: we cannot disable the virtual share points for homedirs on Samba. In Server Admin, if you uncheck the checkbox and hit "Apply", the GUI rechecks it.
    10.4 Server has this same configuration option, and it works as expected. I did a little investigation with the serveradmin command-line tool on our Leopard machine, and this tool exhibits the same problem. For example:
    floydpepper:/ admin$ sudo serveradmin settings smb:adminCommands:homes = no
    Password:
    smb:adminCommands:homes = yes
    For reference, we are set up as a Domain Member for Active Directory. We do not have any schema additions (for Mac stuff, anyway).
    I suspect that maybe there's some configuration option further up that supercedes this, and that's why Server Admin rechecks the checkbox. My guess was that maybe Directory Services was overlaying an attribute on top of AD information. And I see that if I use dscl and look at the attributes for my user in AD, there is indeed an attribute for home folders that clearly does not exist in the AD itself: "NFSHomeDirectory" which is set to /Users/[myusername]
    When I go back and us dscl to lookup the same thing in Tiger Server, Directory Services also appends the NFSHomeDirectory attribute, but without the same side-effect. So I'm probably mistaken that that is the cause.
    Anyone have any pointers? This looks an awful lot like a bug to me.
    Thanks,
    -b
    P.S. I also did have a look at where in smb.conf this is being set-- it is being put in an include'd smb.conf that is stored in /var/run. If I comment out the \[homes\] section, and restart Samba, that /var/run/smb.conf is overwritten with a new autogenerated version. I would just wipe that section out, lock the file, and restart Samba, but I really do want our administrators to be able to use the GUI tools. Otherwise, I would just be using Samba on Linux.

    I was able to "fix" the issue with an ugly workaround by modifying /etc/smb.conf and adding certain values to the [[homes]] share that render it ineffective. I added the following to /etc/smb.conf:
    ; Site-specific parameters can be added below this comment.
    ; END required configuration.
    ; Hack to disable virtual homes
    [[homes]]
    path = /dev/null
    valid users = root
    ; END hack
    With these values added to [[homes]], it is only available to the root user, and even then it would go nowhere. I debugged the issue to the point where it appears that the synchronize-preferences tool (/usr/libexec/samba/synchronize-preferences) ignores user settings for disabling virtual homes. I sent so far as to modify the system default in /System/Library/CoreServices/SmbFileServer.bundle/Resources/ServerDefaults.plis t to see if it was a simple case of default settings overriding user settings, but that also had no effect on the configuration that synchronize-preferences created in /var/db/smb.conf
    I hope this helps you all out.
    Message was edited by: Garret Huntress
    Message was edited by: Garret Huntress

  • Exception Typo: ORA-02297: cannot disable constraint (string.string)

    ORA-02297: cannot disable constraint (string.string) - dependencies exist
    Cause: an alter table disable constraint failed becuase the table has foriegn keys
    that are dpendent on this constraint.
    Action: Either disable the foreign key constraints or use disable cascade
    Note the typo of the word BECAUSE from Version 11R2 back to at least 10R2.
    Thanks.

    Actually, please also correct the words "foriegn" and "dpendent" too!

  • Cannot disable cookies

    iMac 24" OS Lion/ FF 5.0.1 & 6. cannot disable cookies even with permanent private mode ,cookies unchecked & third party unchecked when I open FF there are about 50 cookies I remove them they come right back with out going any where on the web !!!!!!! remove them again ,close FF, open FF they are all back !!! and when I surf the WEB I get MORE !!! ever since I started using Lion !! I now have tons of spam !! it was a Good Install no prob's I prepped for Lion Before Installed. No Issues at all !! Safari is the same way cookies everywhere !!!

    See http://kb.mozillazine.org/Preferences_not_saved and [[Preferences are not saved]]
    Start Firefox in [[Safe Mode]] to check if one of your add-ons is causing your problem (switch to the DEFAULT theme: Tools > Add-ons > Themes).
    See [[Troubleshooting extensions and themes]] and [[Troubleshooting plugins]]

  • Cannot disable or enable Bluetooth with user rights

    Hi,
     If user do not have administrator rights he/she cannot disable or enable bluetooth using Fn+F5 menu.Is there any solution to this problem?

    Still looking for solution....

Maybe you are looking for