Skype for Business 2016 Skype for Business 2016 16.0.4266.1001 Skype for Business 2016 Microsoft Lync Feature Policies Specify server Specifies how Microsoft Lync identifies the server. If you enable this policy setting, you must specify the server name that Microsoft Lync uses. If you disable this policy setting, Microsoft Lync uses a DNS lookup to identify the server. If you do not configure this policy setting, the user can choose automatic configuration, or the user can specify the name of the server in Microsoft Lync user preferences. To set the user preferences, from the Microsoft Lync Tools menu, click Options, click the Personal tab, within the SIP Communications My Account area click Advanced, select Configure Settings, type the server name in the Server name field. Note: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence. DNS name of the internal server DNS name of the external server Configure SIP security mode When Lync connects to the server, it supports various authentication mechanisms. This policy allows the user to specify whether Digest and Basic authentication are supported. Disabled (default): NTLM/Kerberos/TLS-DSK/Digest/Basic Enabled: Authentication mechanisms: NTLM/Kerberos/TLS-DSK Gal Download: Requires HTTPS if user is not logged in as an internal user. Configure SIP compression mode Defines when to turn on SIP compression. Default: Based on adaptor speed. Setting this policy may cause an increase in sign-in time. Always disabled Always enabled Based on adaptor speed (default) Based on ping round-trip time Prevent users from running Microsoft Lync Prevents users from running Microsoft Lync. If you enable this policy setting, users cannot run Microsoft Lync. If you disable or do not configure this policy setting, users can run Microsoft Lync. Note: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence. Allow storage of user passwords Allows Microsoft Lync to store user passwords. If you enable this policy setting, Microsoft Lync can store a password on request from the user. If you disable this policy setting, Microsoft Lync cannot store a password. If you do not configure this policy setting and the user logs on to a domain, Microsoft Lync does not store the password. If you do not configure this policy setting and the user does not log on to a domain (for example, if the user logs on to a workgroup), Microsoft Lync can store the password. Note: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence. Require logon credentials Requires the user to provide logon credentials for Microsoft Lync rather than automatically using the Windows credentials when Microsoft Lync authenticates the user using NTLM or Kerberos. If you enable this policy setting, Microsoft Lync requires the user to provide logon credentials. If you disable or do not configure this policy setting, Microsoft Lync authenticates the user based on the logon credentials for Windows. Note: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence. Disable HTTP fallback for SIP connection Prevents from HTTP being used for SIP connection in case TLS or TCP fail. Disable server version check Prevents Microsoft Lync from checking the server version before signing in. Additional server versions supported Specify a semicolon separated list of server version names, e.g. RTC/2.9;RTC/3.0;RTC/4.0, to which Microsoft Lync allows logon in addition to the server versions that are supported by default. Space character is treated as part of the version string. Server version names (semicolon separated list): Enable using BITS to download Address Book Service files This policy allows Microsoft Lync to use BITS (Background Intelligent Transfer Service) to download the Address Book Services files. Disable automatic upload of sign-in failure logs Uploads the sign-in failure logs to the Microsoft Lync Server automatically for analysis. No logs will be automatically uploaded if sign-in is successful. If this policy is not configured, then the following happens: For Lync Online Users: Sign-in failure logs are automatically uploaded. For Lync On-Premise Users: A confirmation seeking consent from the user is shown before upload. When this is disabled, sign-in logs would be uploaded to the Microsoft Lync Server for both Lync On-Premise and Online users automatically. When this is enabled, sign-in logs will never be uploaded automatically. Trusted Domain List When Lync connects to an unknown domain, it needs explicit user consent. A dialog is shown asking the user for confirmation on whether it should continue. This policy gives administrators the ability to provide trusted domain names. If a domain name is added to this list, Lync will trust that domain and will not show the dialog requesting permission. Multiple domain addresses as comma separated values can be provided. By setting this policy, Lync will not explicitly trust the default domains specified below. It will exclusively trust the domain specified by the policy. Supported values: Not Configured (Default)/Disabled: By default the following domains will be trusted: "lync.com, outlook.com, lync.glbdns.microsoft.com, and microsoftonline.com." Enabled: The list of domains to be trusted. For example: "contoso.com, contoso.co.in" Trusted Domains (comma separated list): Global Address Book Download Initial Delay When set, this will delay the initial download of the Global Address Book by a random number between 0 and the number of minutes specified after sign-in. When the value is 0, the download will begin immediately after sign-in. By default, the value is 60. This means that there will be a random delay between 0 and 60 minutes after sign-in before Lync begins to download the address book. The maximum possible number of minutes to delay download. Must be greater than or equal to zero Configure SIP compression mode Maximum possible number of minutes to delay download: Configure SIP compression mode Maximum possible number of minutes to delay download: