Parameters

Federation is a means by which two organizations can set up a trust relationship that facilitates communication between the two groups. When federation has been established, users in the two organizations can send each other instant messages, subscribe for presence notifications, and otherwise communicate with one another by using SIP applications such as Microsoft Lync 2010. Microsoft Lync Server 2010 allows for three types of federation: 1) direct federation between your organization and another; 2) federation between your organization and a public provider; and, 3) federation between your organization and a third-party hosting provider.

Setting up direct federation with another organization involves several tasks. To begin with, you must enable your servers running the Lync Server Access Edge service to allow federation. In addition, the other organization must enable federation with you; federation cannot be established unless both parties agree to the relationship.

To set up a federated relationship you might also need to manage two federation-related lists: the allowed list and the blocked list. The allowed list represents the organizations you have chosen to federate with. If a domain appears on the allowed list then (depending on your configuration settings) your users will be able to exchange instant messages and presence information with users who have accounts in that federated domain. Conversely, the blocked list represents domains that users are expressly forbidden from federating with; for example, messages sent from a blocked domain will automatically be rejected by Lync Server 2010.

If you want to discontinue a federation relationship, you can use the Remove-CsAllowedDomain cmdlet to remove the appropriate domain from the list of allowed domains and then, if appropriate, use New-CsBlockedDomain to add the domain to the blocked domain list. Note that a domain cannot simultaneously appear on both the allowed and the blocked lists.

Who can run this cmdlet: By default, members of the following groups are authorized to run the Remove-CsAllowedDomain cmdlet locally: RTCUniversalServerAdmins. To return a list of all the role-based access control (RBAC) roles this cmdlet has been assigned to (including any custom RBAC roles you have created yourself), run the following command from the Windows PowerShell prompt:

Get-CsAdminRole | Where-Object {$_.Cmdlets –match "Remove-CsAllowedDomain"}

Microsoft.Rtc.Management.WritableConfig.Settings.Edge.AllowedDomain object. Remove-CsAllowedDomain accepts pipelined instances of the allowed domain object.

Deletes instances of the Microsoft.Rtc.Management.WritableConfig.Settings.Edge.AllowedDomain object.

-------------------------- Example 1 ------------------------

	Copy Code
Remove-CsAllowedDomain -Identity fabrikam.com

The command shown in Example 1 removes the domain fabrikam.com from the list of allowed domains.

-------------------------- Example 2 ------------------------

	Copy Code
Get-CsAllowedDomain -Filter *fabrikam* | Remove-CsAllowedDomain

In Example 2, all of the domains that have the string value "fabrikam" somewhere in their Identity are removed from the list of allowed domains. To do this, the command first uses Get-CsAllowedDomain and the Filter parameter to return a collection of domains that have the string value "fabrikam" somewhere in their Identity (the Identity is the only property you can filter for). That filtered collection is then piped to Remove-CsAllowedDomain, which, in turn, removes all of the items in the filtered collection from the list of allowed domains.

-------------------------- Example 3 ------------------------

	Copy Code
Get-CsAllowedDomain | Where-Object {$_.ProxyFqdn -eq $Null} | Remove-CsAllowedDomain

Example 3 removes all the domains without an identified proxy server from the list of allowed domains. To carry out this task, Get-CsAllowedDomain is called to return a collection of all the domains currently on the allowed list. That collection is piped to the Where-Object cmdlet, which picks out only those domains where the ProxyFqdn property is equal to a null value. The filtered collection is then piped to Remove-CsAllowedDomain, which removes each domain in the collection from the allowed list.

-------------------------- Example 4 ------------------------

	Copy Code
Get-CsAllowedDomain | Where-Object {$_.Comment -match "Ken Myer"} | Remove-CsAllowedDomain

In the preceding example, all of the domains where the Comment field contains the string value "Ken Myer" are removed from the list of allowed domains. To do this, the command first uses Get-CsAllowedDomain to retrieve a collection of all the domains currently on the allowed domains list. This collection is then piped to the Where-Object cmdlet, which selects only those domains where the Comment property contains the string value "Ken Myer". This filtered collection is then piped to Remove-CsAllowedDomain, which removes each item in the collection from the list of allowed domains.

Other Resources