@@ -20,16 +20,17 @@ These settings are used to determine which domains (if any) your users are allow
20
20
21
21
### Identity (Default)
22
22
```
23
- Set-CsTenantFederationConfiguration [-Tenant <Guid>] [-AllowedDomains <IAllowedDomainsChoice>]
24
- [-BlockedDomains <List>] [-AllowFederatedUsers <Boolean>] [-AllowPublicUsers <Boolean>] [-AllowTeamsConsumer <Boolean>] [-AllowTeamsConsumerInbound <Boolean>]
23
+ Set-CsTenantFederationConfiguration [-Tenant <Guid>]
24
+ [-AllowedDomains <IAllowedDomainsChoice>] [-BlockedDomains <List>] [-BlockAllSubdomains <Boolean>]
25
+ [-AllowFederatedUsers <Boolean>] [-AllowPublicUsers <Boolean>] [-AllowTeamsConsumer <Boolean>] [-AllowTeamsConsumerInbound <Boolean>]
25
26
[-TreatDiscoveredPartnersAsUnverified <Boolean>] [-SharedSipAddressSpace <Boolean>]
26
27
[-AllowedDomainsAsAList <List>] [[-Identity] <XdsIdentity>] [-Force] [-WhatIf] [-Confirm] [<CommonParameters>]
27
28
```
28
29
29
30
### Instance
30
31
```
31
32
Set-CsTenantFederationConfiguration [-Tenant <Guid>] [-AllowedDomains <IAllowedDomainsChoice>]
32
- [-BlockedDomains <List>] [-AllowFederatedUsers <Boolean>] [-AllowPublicUsers <Boolean>]
33
+ [-BlockedDomains <List>] [-BlockAllSubdomains <Boolean>] [- AllowFederatedUsers <Boolean>] [-AllowPublicUsers <Boolean>]
33
34
[-TreatDiscoveredPartnersAsUnverified <Boolean>] [-SharedSipAddressSpace <Boolean>]
34
35
[-AllowedDomainsAsAList <List>] [-Instance <PSObject>] [-Force] [-WhatIf] [-Confirm] [<CommonParameters>]
35
36
```
@@ -150,6 +151,15 @@ Set-CsTenantFederationConfiguration -AllowTeamsConsumer $True -AllowTeamsConsume
150
151
151
152
The command shown in Example 9 enables communication with people using Teams with an account that's not managed by an organization, to only be initiated by people in your organization. This means that people using Teams with an account that's not managed by an organization will not be able to discover or start a conversation with people in your organization.
152
153
154
+ ### -------------------------- Example 10 -------------------------
155
+ ```
156
+ Set-CsTenantFederationConfiguration -BlockAllSubdomains $True
157
+ ```
158
+
159
+ Example 10 shows how you can empower BlockedDomains to also block all subdomains.
160
+ Let's say you block contoso.com. Then all users from subdomain.contoso.com will also be blocked.
161
+ Note: Users from subcontoso.com will not be blocked because it's a completely different domain rather than a subdomain.
162
+
153
163
## PARAMETERS
154
164
155
165
### -AllowedDomains
@@ -256,6 +266,25 @@ Accept pipeline input: False
256
266
Accept wildcard characters: False
257
267
` ` `
258
268
269
+ # ## -BlockAllSubdomains
270
+ If the BlockedDomains parameter is used, then BlockAllSubdomains can be used to activate all subdomains blocking.
271
+ If the BlockedDomains parameter is ignored, then BlockAllSubdomains is also ignored.
272
+ Just like for BlockedDomains, users will be disallowed from communicating with users from blocked domains.
273
+ But all subdomains for domains in this list will also be blocked.
274
+
275
+ ` ` ` yaml
276
+ Type: SwitchParameter
277
+ Parameter Sets: (All)
278
+ Aliases:
279
+ Applicable: Skype for Business Online
280
+
281
+ Required: False
282
+ Position: Named
283
+ Default value: False
284
+ Accept pipeline input: False
285
+ Accept wildcard characters: False
286
+ ` ` `
287
+
259
288
# ## -Confirm
260
289
Prompts you for confirmation before executing the command.
261
290
0 commit comments