Topic Last Modified: 2011-04-12

Microsoft Lync Server 2010 has the potential to disclose information over a public network that might be able to be linked to an individual. The information types can be broken down to two specific categories:

• Enhanced presence data   Enhanced presence data is information that a user can choose to share or not share over a link to a federated partner or with contacts within an organization. This data is not shared with users on a public IM network. Client policies and other client configuration may put some control with the system administrator. In Lync Server 2010, enhanced presence privacy mode can be configured for an individual user to prevent Lync users not on the user’s contact list from seeing the user’s presence information. Enhanced presence privacy mode does not prevent users of Microsoft Office Communicator 2007 and Microsoft Office Communicator 2007 R2 from seeing a user’s presence information. For details, see What's New in Client Deployment in the Getting Start documentation and Configuring Enhanced Presence Privacy Mode in the Deployment documentation.
  
  
• Mandatory data   Mandatory data is data that is required for the proper operation of the server or the client and is NOT under the control of the client or system administration. This is information that is necessary at a server or network level for the purposes of routing, state maintenance, and signaling.
  
  

The following tables list the data that is exposed.

Enhanced Presence Data

Data disclosed	Possible settings
Personal Data	Name, Title, Company, E-mail address, Time zone
Telephone Numbers	Work, Mobile, Home
Calendar Information	Free/Busy, Out-of-town notice, meeting details (to those who have access to your calendar)
Presence Status	Away, Available, Busy, Do Not Disturb, Offline

Mandatory Data

Data disclosed	Example information
IP Address	Actual address of computer or NATed address
SIP URI	jeremylos@litwareinc.com
Name	Jeremy Los (as defined in Active Directory Domain Services)