Hi guys, I have only 1 Active Directory domain where we have 4 "companies" been served by the exchange 2013 and lync 2013 according to their MX domain as logon.

is there a good way to isolate users from "company A" to use IM or found people from the "company B"?

regards,

Hi,

The "msRTCSIP-GroupingID" AD attribute is being used to achieve this and you can use the very handy tool here.

• Proposed as answer by Anthony CaragolMVP, Moderator 16 hours 17 minutes ago

Yoav is 100% correct.  That will keep them from finding each other in a search. 

The second question usually asked is if they can be prevented from IMing.  This concept is known as an ethical wall, and there isn't a good native solution for this other than a complex MSPL script.  Third party utilities do exist however, so if you're interested in that, I'd suggest taking a peek at Matt Landis' write-up:

http://windowspbx.blogspot.com/2012/07/controlling-who-has-what-access-to-who.html

Yes,

SWC saying right in this thread.

Hi,

Agree with above.

You can try to use the AD attribute msRTCSIP-GroupingID. Create users in different groups, then set different attribute msRTCSIP-GroupingID. Then users in different groups couldnt search users in other groups but only using Lync sip address.

More details:

http://blogs.technet.com/b/11/archive/2014/10/06/lync-server-2013-guidance-series-can-i-partition-global-address-list.aspx

Best Regards

Allan