Security

This article describes how similar results as that of the Security menu item in the legacy Control Panel can be achieved using cmdlets.

This article describes the following sub-menus :

Registrar

REGISTRAR sub-menu enables administrators to manage proxy servers through proxy server configuration settings. These settings, which can be applied at both the global scope and the service scope (albeit for only the Edge Server and Registrar services) enables to control such things as the authentication protocols that can be used by client endpoints and whether or not compression will be used on incoming and outgoing proxy server connections.

Let us consider the various tasks a user can do on REGISTRAR, and the Skype for Business cmdlets those tasks map to.


Scenario 1: List all the proxy configurations

List Proxy Configuration

Cmdlet

Get-CsProxyConfiguration

Example

 Get-CsProxyConfiguration

Scenario 2: Create a new proxy configuration

Create Proxy Configuration

Cmdlet

New-CsProxyConfiguration

Example

 New-CsProxyConfiguration -Identity "service:EdgeServer:atl-edge-001.litwareinc.com" -RequestServerCompression $True -MaxClientMessageBodySizeKb 256

Scenario 3: Get details of a chosen proxy configuration

Get Proxy Configuration

Cmdlet

Get-CsProxyConfiguration

Example

 Get-CsProxyConfiguration -Identity "service:EdgeServer:atl-cs-001.litwareinc.com"

Scenario 4: Delete chosen proxy configurations

Delete Proxy Configuration

Cmdlet

Remove-CsProxyConfiguration

Example

 Remove-CsProxyConfiguration -Identity service:EdgeServer:atl-edge-011.litwareinc.com

Scenario 5: Update a proxy configuration

Update Proxy Configuration

Cmdlet

Set-CsProxyConfiguration

Example

 Set-CsProxyConfiguration -Identity service:EdgeServer:atl-edge-001.litwareinc.com -AcceptServerCompression $True

Web Service

The WEB SERVICE sub-menu item under Security enables administrators to manage Web Services configuration settings throughout the organization; this includes managing group expansion, certificate settings, and allowed authentication methods. Because administrators can configure different settings at the global, site, and service scope (albeit for the only the Web Services service), one can customize Web Services capabilities for different users and different locations.

Let us consider the various tasks a user can do on WEB SERVICE, and the Skype for Business cmdlets those tasks map to.


Scenario 1: List all the web service configurations

List Web service configuration

Cmdlet

Get-CsWebServiceConfiguration

Example

 Get-CsWebServiceConfiguration

Scenario 2: Create a new web service configuration

New Web service configuration

Cmdlet

New-CsWebServiceConfiguration

Example

 New-CsWebServiceConfiguration -Identity site:Redmond -EnableGroupExpansion $False -UseCertificateAuth $True

Scenario 3: Get details of a chosen web service configuration

Get Web service configuration

Cmdlet

Get-CsWebServiceConfiguration

Example

 Get-CsWebServiceConfiguration -Identity site:Redmond

Scenario 4: Delete chosen web service configurations

Delete Web service configuration

Cmdlet

Remove-CsWebServiceConfiguration

Example

 Remove-CsWebServiceConfiguration -Identity site:Redmond

Scenario 5: Update a web service configuration

Update Web service configuration

Cmdlet

Set-CsWebServiceConfiguration

Example

 Set-CsWebServiceConfiguration -Identity site:Redmond -EnableGroupExpansion $True

PIN Policy

Administrators can use PIN POLICY to manage PIN authentication properties; for example, one can specify the minimum length for a PIN and determine whether one will allow PINs that use "common patterns" such as consecutive digits (for example, a PIN like 123456)

Let us consider the various tasks a user can do on PIN POLICY, and the Skype for Business cmdlets those tasks map to.


Scenario 1: List all the PIN policies

List Pin Policy

Cmdlet

Get-CsPinPolicy

Example

 Get-CsPinPolicy

Scenario 2: Create a new PIN policy

Create Pin Policy

Cmdlet

New-CsPinPolicy

Example

 New-CsPinPolicy -Identity "site:Redmond" -MinPasswordLength 10

Scenario 3: Get details of a chosen PIN Policy

Get PIN Policy

Cmdlet

Get-CsPinPolicy

Example

 Get-CsPinPolicy -Identity "site:Redmond"

Scenario 4: Delete chosen PIN policies

Delete PIN Policy

Cmdlet

Remove-CsPinPolicy

Example

 Remove-CsPinPolicy -Identity RedmondUsersPinPolicy

Scenario 5: Update a PIN Policy

Update PIN Policy

Cmdlet

Set-CsPinPolicy

Example

 Set-CsPinPolicy -Identity site:Redmond -MinPasswordLength 10