From b904a9b3aa6f468d02b8693611d697a20c2cb693 Mon Sep 17 00:00:00 2001 From: Evie Grimshaw <116228522+EvieGrimshaw@users.noreply.github.com> Date: Thu, 10 Oct 2024 11:47:36 -0700 Subject: [PATCH 1/6] Learn Editor: Update New-CsTeamsWorkLocationDetectionPolicy.md --- teams/teams-ps/teams/New-CsTeamsWorkLocationDetectionPolicy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/teams/teams-ps/teams/New-CsTeamsWorkLocationDetectionPolicy.md b/teams/teams-ps/teams/New-CsTeamsWorkLocationDetectionPolicy.md index b4f16b7404..ed4a9728db 100644 --- a/teams/teams-ps/teams/New-CsTeamsWorkLocationDetectionPolicy.md +++ b/teams/teams-ps/teams/New-CsTeamsWorkLocationDetectionPolicy.md @@ -11,7 +11,7 @@ author: artemiykozlov # New-CsTeamsWorkLocationDetectionPolicy ## SYNOPSIS -This cmdlet is used to create a new instance of the TeamsWorkLocationDetectionPolicy. The end user experience utilizing this policy is currently under development and has not been made generally available. You can see updates on when it will be generally available at [Microsoft 365 Roadmap | Microsoft 365](https://www.microsoft.com/en-us/microsoft-365/roadmap?msockid=287ab43847c06d0008cca05b46076c18&filters=&searchterms=automatically%2Cset%2Cwork%2Clocation). +This cmdlet is used to create a new instance of the TeamsWorkLocationDetectionPolicy. The end user experience utilizing this policy has rolled out to the general public. You can see updates at [Microsoft 365 Roadmap | Microsoft 365](https://www.microsoft.com/en-us/microsoft-365/roadmap?msockid=287ab43847c06d0008cca05b46076c18&filters=&searchterms=automatically%2Cset%2Cwork%2Clocation"https://www.microsoft.com/en-us/microsoft-365/roadmap?msockid=287ab43847c06d0008cca05b46076c18&filters=&searchterms=automatically%2cset%2cwork%2clocation") and to learn more on how to enable the end user experience, please see [Setting up Bookable Desks in Microsoft Teams - Microsoft Teams | Microsoft Learn](/microsoftteams/rooms/bookable-desks"https://learn.microsoft.com/en-us/microsoftteams/rooms/bookable-desks"). ## SYNTAX From 926872db11ce111f81dad9aae6dd4a918db6569e Mon Sep 17 00:00:00 2001 From: Evie Grimshaw <116228522+EvieGrimshaw@users.noreply.github.com> Date: Thu, 10 Oct 2024 13:57:25 -0700 Subject: [PATCH 2/6] Learn Editor: Update New-CsTeamsWorkLocationDetectionPolicy.md --- teams/teams-ps/teams/New-CsTeamsWorkLocationDetectionPolicy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/teams/teams-ps/teams/New-CsTeamsWorkLocationDetectionPolicy.md b/teams/teams-ps/teams/New-CsTeamsWorkLocationDetectionPolicy.md index ed4a9728db..324b51e87e 100644 --- a/teams/teams-ps/teams/New-CsTeamsWorkLocationDetectionPolicy.md +++ b/teams/teams-ps/teams/New-CsTeamsWorkLocationDetectionPolicy.md @@ -11,7 +11,7 @@ author: artemiykozlov # New-CsTeamsWorkLocationDetectionPolicy ## SYNOPSIS -This cmdlet is used to create a new instance of the TeamsWorkLocationDetectionPolicy. The end user experience utilizing this policy has rolled out to the general public. You can see updates at [Microsoft 365 Roadmap | Microsoft 365](https://www.microsoft.com/en-us/microsoft-365/roadmap?msockid=287ab43847c06d0008cca05b46076c18&filters=&searchterms=automatically%2Cset%2Cwork%2Clocation"https://www.microsoft.com/en-us/microsoft-365/roadmap?msockid=287ab43847c06d0008cca05b46076c18&filters=&searchterms=automatically%2cset%2cwork%2clocation") and to learn more on how to enable the end user experience, please see [Setting up Bookable Desks in Microsoft Teams - Microsoft Teams | Microsoft Learn](/microsoftteams/rooms/bookable-desks"https://learn.microsoft.com/en-us/microsoftteams/rooms/bookable-desks"). +This cmdlet is used to create a new instance of the TeamsWorkLocationDetectionPolicy. The end user experience utilizing this policy has rolled out to the general public. You can see updates at [Microsoft 365 Roadmap | Microsoft 365](https://www.microsoft.com/en-us/microsoft-365/roadmap?msockid=287ab43847c06d0008cca05b46076c18&filters=&searchterms=automatically%2Cset%2Cwork%2Clocation%22https://www.microsoft.com/en-us/microsoft-365/roadmap?msockid=287ab43847c06d0008cca05b46076c18&filters=&searchterms=automatically%2cset%2cwork%2clocation%22) and to learn more on how to enable the end user experience, please see [Setting up Bookable Desks in Microsoft Teams - Microsoft Teams | Microsoft Learn](/microsoftteams/rooms/bookable-desks"https://learn.microsoft.com/en-us/microsoftteams/rooms/bookable-desks"). ## SYNTAX From 2f98a21dad66408b46365a74c1e2fa86fcb50b35 Mon Sep 17 00:00:00 2001 From: Krammer Liu <99905184+krammerliu@users.noreply.github.com> Date: Thu, 10 Oct 2024 17:15:44 -0700 Subject: [PATCH 3/6] Update New-CsExternalAccessPolicy.md --- teams/teams-ps/teams/New-CsExternalAccessPolicy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/teams/teams-ps/teams/New-CsExternalAccessPolicy.md b/teams/teams-ps/teams/New-CsExternalAccessPolicy.md index cb65796765..cc6de5e36b 100644 --- a/teams/teams-ps/teams/New-CsExternalAccessPolicy.md +++ b/teams/teams-ps/teams/New-CsExternalAccessPolicy.md @@ -24,7 +24,7 @@ For information about external access in Microsoft Teams, see [Manage external a ## SYNTAX ```powershell -New-CsExternalAccessPolicy [-Tenant ] [-Description ] [-EnableFederationAccess ] [-EnableAcsFederationAccess ] +New-CsExternalAccessPolicy [-Tenant ] [-Description ] [-EnableFederationAccess ] [-CommunicationWithExternalOrgs ] [-AllowedExternalDomains ] [-BlockedExternalDomains ] [-EnableAcsFederationAccess ] [-EnableXmppAccess ] [-EnablePublicCloudAccess ] [-EnablePublicCloudAudioVideoAccess ] [-EnableTeamsConsumerAccess ] [-EnableTeamsConsumerInbound ] [-EnableOutsideAccess ] [-Identity] [-InMemory] [-Force] [-WhatIf] [-Confirm] [] From 1c252e145499f850ec732c2a5d8cf58fe227f3e0 Mon Sep 17 00:00:00 2001 From: Krammer Liu <99905184+krammerliu@users.noreply.github.com> Date: Fri, 11 Oct 2024 01:05:25 -0700 Subject: [PATCH 4/6] Update New-CsExternalAccessPolicy.md add description for granular federation in New-CsExternalAccessPolicy.md --- .../teams/New-CsExternalAccessPolicy.md | 55 +++++++++++++++++++ 1 file changed, 55 insertions(+) diff --git a/teams/teams-ps/teams/New-CsExternalAccessPolicy.md b/teams/teams-ps/teams/New-CsExternalAccessPolicy.md index cc6de5e36b..b2fe361498 100644 --- a/teams/teams-ps/teams/New-CsExternalAccessPolicy.md +++ b/teams/teams-ps/teams/New-CsExternalAccessPolicy.md @@ -113,6 +113,14 @@ Finally, the last command uses the Set-CsExternalAccessPolicy cmdlet to create a If you do not call the Set-CsExternalAccessPolicy cmdlet, then the virtual policy will disappear as soon as you end your Windows PowerShell session or delete the variable $x. Should that happen, an external access policy with the Identity RedmondAccessPolicy will never be created. +### -------------------------- Example 5 ------------------------ +``` +New-CsExternalAccessPolicy -Identity GranularFederationExample -CommunicationWithExternalOrgs "AllowSpecificExternalDomains" -AllowedExternalDomains @("example1.com", "example2.com") +Set-CsTenantFederationConfiguration -CustomizeFederation $true +``` + +In this example, we create an ExternalAccessPolicy named "GranularFederationExample" that allows communication with specific external domains, namely `example1.com` and `example2.com`. The federation policy is set to restrict communication to only these allowed domains. After that, we still have to enable the `CustomizeFederation` setting in the TenantFederationConfiguration to allow the federation settings as defined in the ExternalAccessPolicy to work. + ## PARAMETERS ### -Identity @@ -171,6 +179,53 @@ Accept pipeline input: False Accept wildcard characters: False ``` +### -CommunicationWithExternalOrgs +Indicates how the users get assigned by this policy can communicate with the external orgs. There are 5 options: +* OrganizationDefault: the users of this policy will follow the federation settings defined in TenantFederationConfiguration +* AllowAllExternalDomains: the users are open to communicate with all domains +* AllowSpecificExternalDomains: the users can only communicate with the users of the domains defined in `AllowedExternalDomains` +* BlockSpecificExternalDomains: only users from the domains defined in `BlockedExternalDomains` are blocked from communicating with the users of this policy +* BlockAllExternalDomains: the users are not able to communicate with any external domains +```yaml +Type: String +Parameter Sets: (All) +Aliases: +Applicable: Lync Server 2010, Lync Server 2013, Skype for Business Server 2015, Skype for Business Server 2019 +Required: False +Position: Named +Default value: OrganizationDefault +Accept pipeline input: False +Accept wildcard characters: False +``` + +### -AllowedExternalDomains +Indicates the domains that are allowed to communicate with the users of this policy. This is referenced only when `CommunicationWithExternalOrgs` is set to be `AllowSpecificExternalDomains` +```yaml +Type: List +Parameter Sets: (All) +Aliases: +Applicable: Lync Server 2010, Lync Server 2013, Skype for Business Server 2015, Skype for Business Server 2019 +Required: False +Position: Named +Default value: None +Accept pipeline input: False +Accept wildcard characters: False +``` + +### -BlockedExternalDomains +Indicates the domains that are blocked from communicating with the users of this policy. This is referenced only when `CommunicationWithExternalOrgs` is set to be `BlockSpecificExternalDomains` +```yaml +Type: List +Parameter Sets: (All) +Aliases: +Applicable: Lync Server 2010, Lync Server 2013, Skype for Business Server 2015, Skype for Business Server 2019 +Required: False +Position: Named +Default value: None +Accept pipeline input: False +Accept wildcard characters: False +``` + ### -EnableTeamsConsumerAccess (Microsoft Teams Only) Indicates whether the user is allowed to communicate with people who have who are using Teams with an account that's not managed by an organization. From cf6b51e5f4e2f8dd5db4b45ffccc34c2be389307 Mon Sep 17 00:00:00 2001 From: Evie Grimshaw <116228522+EvieGrimshaw@users.noreply.github.com> Date: Fri, 11 Oct 2024 11:12:16 -0700 Subject: [PATCH 5/6] Learn Editor: Update New-CsTeamsWorkLocationDetectionPolicy.md --- teams/teams-ps/teams/New-CsTeamsWorkLocationDetectionPolicy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/teams/teams-ps/teams/New-CsTeamsWorkLocationDetectionPolicy.md b/teams/teams-ps/teams/New-CsTeamsWorkLocationDetectionPolicy.md index 324b51e87e..1dcb92a919 100644 --- a/teams/teams-ps/teams/New-CsTeamsWorkLocationDetectionPolicy.md +++ b/teams/teams-ps/teams/New-CsTeamsWorkLocationDetectionPolicy.md @@ -11,7 +11,7 @@ author: artemiykozlov # New-CsTeamsWorkLocationDetectionPolicy ## SYNOPSIS -This cmdlet is used to create a new instance of the TeamsWorkLocationDetectionPolicy. The end user experience utilizing this policy has rolled out to the general public. You can see updates at [Microsoft 365 Roadmap | Microsoft 365](https://www.microsoft.com/en-us/microsoft-365/roadmap?msockid=287ab43847c06d0008cca05b46076c18&filters=&searchterms=automatically%2Cset%2Cwork%2Clocation%22https://www.microsoft.com/en-us/microsoft-365/roadmap?msockid=287ab43847c06d0008cca05b46076c18&filters=&searchterms=automatically%2cset%2cwork%2clocation%22) and to learn more on how to enable the end user experience, please see [Setting up Bookable Desks in Microsoft Teams - Microsoft Teams | Microsoft Learn](/microsoftteams/rooms/bookable-desks"https://learn.microsoft.com/en-us/microsoftteams/rooms/bookable-desks"). +This cmdlet is used to create a new instance of the TeamsWorkLocationDetectionPolicy. The end user experience utilizing this policy has rolled out to the general public. You can see updates at [Microsoft 365 Roadmap | Microsoft 365](https://www.microsoft.com/en-us/microsoft-365/roadmap?msockid=287ab43847c06d0008cca05b46076c18&filters=&searchterms=automatically%2Cset%2Cwork%2Clocation%22https://www.microsoft.com/en-us/microsoft-365/roadmap?msockid=287ab43847c06d0008cca05b46076c18&filters=&searchterms=automatically%2cset%2cwork%2clocation%22) and to learn more on how to enable the end user experience, please see [Setting up Bookable Desks in Microsoft Teams - Microsoft Teams | Microsoft Learn.](/microsoftteams/rooms/bookable-desks) ## SYNTAX From 043714b0c6f04f9cd43aca5bf7b9f4b0e532976a Mon Sep 17 00:00:00 2001 From: Evie Grimshaw <116228522+EvieGrimshaw@users.noreply.github.com> Date: Fri, 11 Oct 2024 11:21:14 -0700 Subject: [PATCH 6/6] Learn Editor: Update New-CsTeamsWorkLocationDetectionPolicy.md