

Start the Skype for Busines Server Management Shell: Click Start, click All Programs, click Skype for Business Server, and then click Skype for Business Server Management Shell. To configure an existing policy using Windows PowerShell to support access by users of federated domains

For details, see Assign an external user access policy. If this is a user policy, you must also apply the policy to users that you want to be able to collaborate with federated users. For details, see Enable or disable federation and public IM connectivity. To enable federated user access, you must also enable support for federation in your organization. To disable federated user access for the policy, clear the Enable communications with federated users check box. To enable federated user access for the policy, select the Enable communications with federated users check box. (Optional) If you want to add or edit a description, specify the information for the policy in Description. To change an existing policy, click the appropriate policy listed in the table, click Edit, and then click Show details. In New External Access Policy, create a unique name in the Name field that indicates what the user policy covers (for example, EnableFederatedUsers for a user policy that enables communications for federated domain users). To create a new user policy, click New, and then click User policy. In Select a Site, click the appropriate site from the list and then click OK. To create a new site policy, click New, and then click Site policy. To configure the global policy to support federated user access, click the global policy, click Edit, and then click Show details. On the External Access Policy page, do one of the following: In the left navigation bar, click External User Access, and then click External Access Policy. Open a browser window, and then enter the Admin URL to open the Skype for Business Server Control Panel. To configure a policy to support access by users of federated domainsįrom a user account that is a member of the RTCUniversalServerAdmins group (or has equivalent user rights), or is assigned to the CsAdministrator role, log on to any computer in your internal deployment. Additionally, if you specify a user policy to control federated user access, the policy applies only to users that are enabled for Skype for Business Server and configured to use the policy. For details about enabling federation, see Enable or disable remote user access. However, the policies that you configure are in effect only when you have federation enabled for your organization. You can configure policies to control federated user access, even if you have not enabled federation for your organization.
