If you want to explicitly block one or more users from federating, you can use either Active Directory Users and Computers or the Live Communications Server 2005 administrative snap-in.
To block a user or group of users from remote access
Using Active Directory Users and Computers
Start Active Directory Users and Computers.
- Click Start, point to All Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
- Go to the folder where your users reside.
- Select one of the following:
Using the Live Communications Server administrative snap-in
Start Live Communications Server administrative snap-in.
- Click Start, point to All Programs, point to Administrative Tools, and then click Live Communications Server 2005.
- In the console tree, expand the forest node.
- Expand subsequent nodes under the Domains node until you reach the domain that the server or pool resides in.
- Expand the Live Communications servers and pools node.
- Expand the server or pool.
- Select one of the following:
To block all users on a server or pool from remote access
- Right-click the Users folder, and then click Configure users.
- On the Welcome to the Configure Users Wizard page, click Next.
- On the Configure User Settings page, click the Configure Users for Remote Access check box, and then click Block Users.
- On the Configure Operation Status page, click Export if you want to save the log file, and then click Finish.
To block one or more users on a server or pool from remote access
- Click the Users folder.
- In the details pane, select the users you want to block from remote access, right-click these users, and then click Configure users.
- On the Welcome to the Configure Users Wizard page, click Next.
- On the Configure User Settings page, click the Configure Users for Remote Access check box, and then click Block Users.
- On the Configure Operation Status page, click Export if you want to save the log file, and then click Finish.
To block an individual user from remote access
- Click the Users folder.
- In the details pane, right-click the user you want to allow to federate, and then click Properties.
- On the Live Communications tab, clear the Enable remote user access check box.
- Click Apply, and then click OK.
Note To perform this task, you must be a member of the RTCDomainServerAdmins group or the RTCDomainUserAdmins group.