Skype for Business 2016Skype for Business 201616.0.4266.1001Skype for Business 2016Microsoft Lync Feature PoliciesSpecify server
Specifies how Microsoft Lync identifies the server.
If you enable this policy setting, you must specify the server name that Microsoft Lync uses.
If you disable this policy setting, Microsoft Lync uses a DNS lookup to identify the server.
If you do not configure this policy setting, the user can choose automatic configuration, or the user can specify the name of the server in Microsoft Lync user preferences. To set the user preferences, from the Microsoft Lync Tools menu, click Options, click the Personal tab, within the SIP Communications My Account area click Advanced, select Configure Settings, type the server name in the Server name field.
Note: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.
DNS name of the internal serverDNS name of the external serverConfigure SIP security mode
When Lync connects to the server, it supports various authentication mechanisms. This policy allows the user to specify whether Digest and Basic authentication are supported.
Disabled (default): NTLM/Kerberos/TLS-DSK/Digest/Basic
Enabled:
Authentication mechanisms: NTLM/Kerberos/TLS-DSK
Gal Download: Requires HTTPS if user is not logged in as an internal user.
Configure SIP compression mode
Defines when to turn on SIP compression. Default: Based on adaptor speed.
Setting this policy may cause an increase in sign-in time.
Always disabledAlways enabledBased on adaptor speed (default)Based on ping round-trip timePrevent users from running Microsoft Lync
Prevents users from running Microsoft Lync.
If you enable this policy setting, users cannot run Microsoft Lync.
If you disable or do not configure this policy setting, users can run Microsoft Lync.
Note: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.
Allow storage of user passwords
Allows Microsoft Lync to store user passwords.
If you enable this policy setting, Microsoft Lync can store a password on request from the user.
If you disable this policy setting, Microsoft Lync cannot store a password.
If you do not configure this policy setting and the user logs on to a domain, Microsoft Lync does not store the password. If you do not configure this policy setting and the user does not log on to a domain (for example, if the user logs on to a workgroup), Microsoft Lync can store the password.
Note: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.
Require logon credentials
Requires the user to provide logon credentials for Microsoft Lync rather than automatically using the Windows credentials when Microsoft Lync authenticates the user using NTLM or Kerberos.
If you enable this policy setting, Microsoft Lync requires the user to provide logon credentials.
If you disable or do not configure this policy setting, Microsoft Lync authenticates the user based on the logon credentials for Windows.
Note: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.
Disable HTTP fallback for SIP connectionPrevents from HTTP being used for SIP connection in case TLS or TCP fail.Disable server version checkPrevents Microsoft Lync from checking the server version before signing in.Additional server versions supported
Specify a semicolon separated list of server version names, e.g. RTC/2.9;RTC/3.0;RTC/4.0, to which Microsoft Lync allows logon in addition to the server versions that are supported by default. Space character is treated as part of the version string.
Server version names (semicolon separated list):Enable using BITS to download Address Book Service filesThis policy allows Microsoft Lync to use BITS (Background Intelligent Transfer Service) to download the Address Book Services files.Disable automatic upload of sign-in failure logs
Uploads the sign-in failure logs to the Microsoft Lync Server automatically for analysis. No logs will be automatically uploaded if sign-in is successful.
If this policy is not configured, then the following happens:
For Lync Online Users: Sign-in failure logs are automatically uploaded.
For Lync On-Premise Users: A confirmation seeking consent from the user is shown before upload.
When this is disabled, sign-in logs would be uploaded to the Microsoft Lync Server for both Lync On-Premise and Online users automatically.
When this is enabled, sign-in logs will never be uploaded automatically.
Trusted Domain List
When Lync connects to an unknown domain, it needs explicit user consent. A dialog is shown asking the user for confirmation on whether it should continue.
This policy gives administrators the ability to provide trusted domain names. If a domain name is added to this list, Lync will trust that domain and will not show the dialog requesting permission. Multiple domain addresses as comma separated values can be provided.
By setting this policy, Lync will not explicitly trust the default domains specified below. It will exclusively trust the domain specified by the policy.
Supported values:
Not Configured (Default)/Disabled: By default the following domains will be trusted: "lync.com, outlook.com, lync.glbdns.microsoft.com, and microsoftonline.com."
Enabled: The list of domains to be trusted. For example: "contoso.com, contoso.co.in"
Trusted Domains (comma separated list):Global Address Book Download Initial Delay
When set, this will delay the initial download of the Global Address Book by a random number between 0 and the number of minutes specified after sign-in. When the value is 0, the download will begin immediately after sign-in. By default, the value is 60. This means that there will be a random delay between 0 and 60 minutes after sign-in before Lync begins to download the address book.
The maximum possible number of minutes to delay download. Must be greater than or equal to zeroConfigure SIP compression mode
Maximum possible number of minutes to delay download:
Configure SIP compression mode
Maximum possible number of minutes to delay download: