Remove-CsExternalAccessPolicy -Identity <XdsIdentity> [-Confirm [<SwitchParameter>]] [-Force <SwitchParameter>] [-WhatIf [<SwitchParameter>]]

Parameters

When you install Communications Server 2010 your users are only allowed to exchange instant messages and presence information among themselves: by default, they can only communicate with other people who have SIP accounts in your Active Directory. In addition, users are not allowed to access Communications Server over the Internet; instead, they must be logged on to your internal network before they will be able to log on to Communications Server.

That might be sufficient to meet your communication needs. If it doesn’t meet your needs you can use external access policies to extend the ability of your users to communicate and collaborate. External access policies can grant (or revoke) the ability of your users to do any or all of the following:

Communicate with people who have SIP accounts with a federated organization. Note that enabling federation alone will not provide users with this capability. Instead, you must enable federation and then assign users an external access policy that gives them the right to communicate with federated users.

Communicate with people who have SIP accounts with a public instant messaging service such as AOL or Yahoo!.

Access Communications Server over the Internet, without having to first log on to your internal network. This enables your users to use Microsoft Communicator "14" and log on to Communications Server from an Internet café or other remote location.

When you install Communications Server a global external access policy is automatically created for you. (Because this is a global policy that means that all of your users, by default, have their external access capabilities managed by this policy.) In addition to the global policy, you can use the New-CsExternalAccessPolicy cmdlet to create external access policies configured at the site or per-user scopes.

The Remove-CsExternalAccessPolicy cmdlet enables you to delete any policies that were created using New-CsExternalAccessPolicy; that means you can delete any policies assigned to the site scope or the per-user scope. You can also run Remove-CsExternalAccessPolicy against the global external access policy. In that case, however, the global policies will not be deleted; by design, global policies cannot be deleted. Instead, the properties of the global policy will simply be reset to their default values.

Remove-CsExternalAccessPolicy does not return a value or object. Instead, the cmdlet deletes instances of the Microsoft.Rtc.Management.WriteableConfig.Policy.ExternalAccess.ExternalAccessPolicy object.

-------------------------- Example 1 ------------------------

	Copy Code
Remove-CsExternalAccessPolicy -Identity site:Redmond

In Example 1, the external access policy with the Identity site:Redmond is deleted. After the policy is removed users in the Redmond site will have their external access permissions dictated by the global policy.

-------------------------- Example 2 ------------------------

	Copy Code
Get-CsExternalAccessPolicy -Filter site:* | Remove-CsExternalAccessPolicy

The preceding command deletes all the external access policies that have been configured at the site scope. To carry out this task, the command first uses Get-CsExternalAccessPolicy and the -Filter parameter to return a collection of policies configured at the site scope; the filter value "site:*" limits the returned data to external access policies that have an Identity that begins with the string value "site:". (By definition, any such policy is a policy that has been configured at the site scope.) The filtered collection is then piped to Remove-CsExternalAccessPolicy, which deletes each policy in the collection.

-------------------------- Example 3 ------------------------

	Copy Code
Get-CsExternalAccessPolicy | Where-Object {$_.EnableFederationAccess -eq $True} | Remove-CsExternalAccessPolicy

In Example 3, all the external access policies that allow federation access are deleted. To do this, the command first calls Get-CsExternalAccessPolicy to return a collection of all the external access policies configured for use in the organization. This collection is then piped to the Where-Object cmdlet, which picks out only those policies where the EnableFederationAccess property is equal to (-eq) True ($True). This filtered collection is then piped to Remove-CsExternalAccessPolicy, which deletes each policy in the filtered collection.

-------------------------- Example 4 ------------------------

	Copy Code
Get-CsExternalAccessPolicy | Where-Object {$_.EnableFederationAccess -eq $True -or $_.EnablePublicCloudAccess -eq $True} | Remove-CsExternalAccessPolicy

Example 4 deletes all the external access policies that meet at least one of two criteria: either federation access is allowed, and/or public cloud access is allowed. To carry out this task, the command first uses Get-CsExternalAccessPolicy to return a collection of all the external access policies configured for use in the organization. This collection is then piped to Where-Object, which selects only those policies that meet the following criteria: either EnableFederationAcess is equal to True, and/or EnablePublicCloudAccess is equal to True. Policies meeting one (or both) of those criteria are then passed to, and removed by, the Remove-CsExternalAccessPolicy cmdlet.