Applies to: Exchange Server 2013

Topic Last Modified: 2012-10-10

There may be situations where you may need to temporarily disable federated sharing for your organization. Instead of deleting the existing federation trust or deleting organization relationships and sharing policies that you may needed in the future, you can simply disable the organization identifier (OrgID) for the federation trust.

Caution:
For hybrid deployments with Office 365, disabling the federation trust for your on-premises servers will also disable hybrid features such as shared calendar free/busy information, MailTips and message tracking. However, secure mail transport won’t be disabled in the hybrid deployment if the federation trust for the on-premises organization is disabled.

To learn more about federation trusts, see Federation. To learn more about federated sharing, see Sharing.

For additional management tasks related to federated sharing, see Federation Procedures.

What do you need to know before you begin?

  • Estimated time to complete: 5 minutes.

  • You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the Federation and certificates permissions entry in the Exchange and Shell Infrastructure Permissions topic.

  • Any existing organization relationships and sharing policies for other federated Exchange organizations won’t be modified and won’t be functional. Sharing policies that are configured to provide Internet recipients with access to calendar or contact information won’t be affected.

  • You can’t use the Exchange Administration Center (EAC) to disable or enable the OrgID for a federation trust. You must use the Shell.

  • For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard Shortcuts in the Exchange Admin Center.

Use the Shell to disable or re-enable federated sharing

This example disables the OrgID and disables federation and federated sharing for the Exchange organization.

Copy Code
Set-FederatedOrganizationIdentifier -Enabled $false

This example enables the OrgID and re-enables federation and federated sharing for the Exchange organization.

Copy Code
Set-FederatedOrganizationIdentifier -Enabled $true

For detailed syntax and parameter information, see Set-FederatedOrganizationIdentifier.

How do you know this worked?

Successful completion of the Set-OrganizationIdentifier cmdlet will be the first indication that the OrgID has been disabled or enabled.

To further verify success, run the following Shell command and verify the value returned for the Enabled parameter

Copy Code
Get-FederatedOrganizationIdentifier
Tip:
Having problems? Ask for help in the Exchange forums. Visit the forums at: Exchange Server, Exchange Online, or Exchange Online Protection