Create custom external access policies

Skype for Business Online allows you to create other external access policies. Unlike client or conferencing policies, where you can have multiple combinations, there are three predefined external access policies that can cover most of the scenarios. These are:

• No Federated or Skype Consumer Access (Tag:NoFederationAndPIC )

• Federated Access Only (Tag:FederationOnly )

• Federated and Consumer Access (FederationAndPICDefault)

Custom external policies allow you to create additional policies that aren't covered by the settings above. When the policy was created, you would be required to set all required parameters and you couldn't alter them later. Creating new custom policies allow you to control features such as Skype consumer access or a policy to disable public cloud audio/video, which is something that wasn't covered with predefined settings. Custom external access policies follow the same syntax as client, mobility, and conferencing policies. You can find out more about those settings here.

To make this work, the user must be using a supported version of 2016 Click-to-Run Skype for Business app that supports it. The following minimum version of Skype for Business 2016 Click-to-Run client is required:

Start Windows PowerShell

1. Install the Teams PowerShell module.

2. Open a Windows PowerShell command prompt and run the following commands:

  # When using Teams PowerShell Module

  Import-Module MicrosoftTeams
  $credential = Get-Credential
  Connect-MicrosoftTeams -Credential $credential

If you want more information about starting Windows PowerShell, see Connect to all Microsoft 365 or Office 365 services in a single Windows PowerShell window or Set up your computer for Windows PowerShell.

Create a custom external access policy for a user

To do this, run:

New-CsExternalAccessPolicy -Identity BlockSkypeVideo -EnablePublicCloudAccess $True -EnablePublicCloudAudioVideoAccess $False -EnableFederationAccess $True -EnableOutsideAccess $True

Grant-CsExternalAccessPolicy -PolicyName BlockSkypeVideo -Identity [email protected]

Want to know more about Windows PowerShell?

• Windows PowerShell is all about managing users and what users are allowed or not allowed to do. With Windows PowerShell, you can manage Microsoft 365 or Office 365 and Skype for Business Online using a single point of administration that can simplify your daily work, when you have multiple tasks to do. To get started with Windows PowerShell, see these articles:

  • An introduction to Windows PowerShell and Skype for Business Online

  • Why you need to use Microsoft 365 or Office 365 PowerShell

• Windows PowerShell has many advantages in speed, simplicity, and productivity over only using the Microsoft 365 admin center such as when you're making setting changes for many users at one time. Learn about these advantages in the following articles:

  • Best ways to manage Microsoft 365 or Office 365 with Windows PowerShell

  • Using Windows PowerShell to manage Skype for Business Online

  • Using Windows PowerShell to do common Skype for Business Online management tasks

Related articles

Block point-to-point file transfers

Set up client policies for your organization

Set up conferencing policies in your organization