Personally Identifiable Information

 

Topic Last Modified: 2011-07-17

Microsoft Lync Server 2010 has the potential to disclose information over a public network that might be able to be linked to an individual. The information types can be broken down to two specific categories:

  • Enhanced presence data   Enhanced presence data is information that a user can choose to share or not share over a link to a federated partner or with contacts within an organization. This data is not shared with users on a public IM network. Client policies and other client configuration may put some control with the system administrator. In Lync Server 2010, enhanced presence privacy mode can be configured for an individual user to prevent Lync users not on the user’s Contacts list from seeing the user’s presence information. Enhanced presence privacy mode does not prevent users of Microsoft Office Communicator 2007 and Microsoft Office Communicator 2007 R2 from seeing a user’s presence information. For details, see What's New in Client Deployment in the Getting Start documentation and Configuring Enhanced Presence Privacy Mode in the Deployment documentation.

  • Mandatory data   Mandatory data is data that is required for the proper operation of the server or the client and is NOT under the control of the client or system administration. This is information that is necessary at a server or network level for the purposes of routing, state maintenance, and signaling.

The following tables list the data that is exposed.

Enhanced Presence Data

Data disclosed Possible settings

Personal Data

Name, Title, Company, Email address, Time zone

Telephone Numbers

Work, Mobile, Home

Calendar Information

Free/Busy, Out-of-town notice, meeting details (to those who have access to your calendar)

Presence Status

Away, Available, Busy, Do Not Disturb, Offline

Mandatory Data

Data disclosed Example information

IP Address

Actual address of computer or NATed address

SIP URI

jeremylos@litwareinc.com

Name

Jeremy Los (as defined in Active Directory Domain Services)