All IBM® Lotus® Sametime® users are automatically assigned to default policies. You can create additional user policies, and assign users and groups to these policies.

When a user authenticates, Lotus Sametime applies a default policy if no other policy can be found for that user. You can create new policies that grant or limit access to features, and assign users to these policies. Users can be assigned to more than one policy. If a user belongs to more than one policy, then Lotus Sametime uses the policy weight to determine policy precedence. Custom policies can be designed for specific groups in the company, and the default policy can be inherited or assigned. Meetings policy changes take effect immediately, while Instant Messaging and Media Services policy changes take effect within an hour.

There is also an anonymous policy that is assigned by default to users who have not authenticated, and unauthenticated users always receive this policy.

Note: If you are using the Sametime System Console at your site, you must use it to manage your policies. See the Policies view not visible on STCenter in Sametime 8.5 technote for more information.

1. Enter the URL for the Sametime server: http://hostname /stcenter.nsf
   
   where hostname is the fully qualified Domain Name Service (DNS) name or the IP address of the Sametime server you want to administer.
   
   For versions of Lotus Sametime that do not support web conferencing, enter the following URL in your browser: http://hostname.
2. On the Sametime Welcome page, click Administer the Server.
3. Click Policies in the navigator on the left.
4. Click New to add a policy or click a policy name to edit a policy.

You can click Override setting for all policies if you want to quickly apply a setting to all existing policies.

Policy changes take effect after the Policy service is restarted or after a configurable time out. The changes should be replicated to all servers in the Sametime community.

Community Services

Setting	Purpose	Sametime Instant Messaging Default Policy	Sametime Instant Messaging Anonymous Policy
Must set this server community as the default server community	Users must log in to this community before they can log in to other communities.	Selected	Selected
Allow file transfer	Allows user to transfer files to other users.	Selected.	Not selected
Maximum file size	Limits the size of the file that can be transferred by the specified value. In kilobytes.	1000	0
Allow client-to-client file transfer	Allows users to transfer files without passing the files through the Lotus Sametime server. These files are not logged.	Selected	Not selected
Use exclude file types list	Limits the types of files that users can transfer.	Not selected.	Not selected
Exclude file types from transfer.	If Use exclude file types transfer list is selected , then a value must be entered in this field. Type the three-letter extension of each file type, separated by a comma or semicolon. Accepts bmp, gif, txt, pdf, sxi, sxc, sxw file extensions. Comma separated, values, and spaces are acceptable.	exe, com, bat	Blank
Allow telephony	Allow access to third-party service provider capabilities from contact lists, instant messages, and meetings.	Not selected	Not selected
Allow changes to preferred numbers	If not selected, user cannot add telephony devices. This gives the administrator control over the devices that can make or receive calls in the system. "Allow access to third-party service provider capabilities from contact lists, instant messages, and meetings" must be selected to specify this setting.	Selected	Selected
Allow changes to the permanent call routing rule	If this setting is not selected a lock appears next to this rule in the user's preferences. "Allow access to third-party service provider capabilities from contact lists, instant messages, and meetings" must be selected to specify this setting.	Selected	Selected
Allow use of Offline status in call routing rules	Allows users to add their own devices to make and receive calls. "Allow access to third-party service provider capabilities from contact lists, instant messages, and meetings" must be selected to specify this setting.	Selected	Selected

Meetings

Setting	Purpose	Sametime Instant Messaging Default Policy	Sametime Instant Messaging Anonymous Policy
Allow users to create instant meetings and breakout sessions	Lets users start a meeting from the contact list, from an existing chat, and from within a meeting (breakout session).	Selected	Not selected
Allow Sametime IP audio and video for instant meetings and breakout sessions	No Does not allow use of Sametime Internet Protocol audio and video in instant meetings and breakout sessions. IP audio only Allow use of Sametime Internet Protocol audio but not video in instant meetings and breakout sessions. IP audio and video Allows use of Sametime Internet Protocol audio and video but in instant meetings and breakout sessions.	No	No
Allow participation in meeting room chats	Allows participants in the meeting to use the chat window to communicate with any other participant in the meeting.	Selected	Not selected
Allow screen sharing	No - Users cannot share screens or applications. Application only - Users can share a specific application. No other applications or their desktops are shared. Entire screen, frame, and applications - Users share their whole screen including any applications that they open on their screens.	Entire screen, frame, and applications	Entire screen, frame, and applications
Allow user to control another user's shared screen	Allow others to control a user's shared screen. Any participant can make changes to the shared information.	Selected	Not selected

Instant Messaging

Setting	Purpose	Sametime Instant Messaging Default Policy	Sametime Instant Messaging Anonymous Policy
Allow to save chat transcripts	If this is enabled, users see the File-Save option in the chat window. Chat history capabilities are available.	Selected	Not selected
Allow client-to-client voice call	Allows users to use computer audio in instant messages and instant meetings.	Selected	Selected
Set UDP port for voice call	Port for all audio chats. Port is open for both incoming and outgoing UDP traffic.	20830
Allow client-to-client video call	Allows users to use computer video in instant messages and instant meetings. The Allow client-to-client voice call policy must be set before setting this policy.	Selected 512	Selected 512
Set UDP port for video call	Port for all video calls, Port is open for both incoming and outgoing UDP traffic	20832	20832
Allow custom emoticons	Allows all actions on the preferences palette: new, import, export, add picture, add palettes.	Selected	Not Selected
Allow screen captures and images	Allows pasting and right- click copying of image and screen captures.	Selected	Not Selected
Set maximum image size for custom emoticons, screen captures and inline images	This setting Includes images pasted inline through the palette emoticons, cut and paste, screen captures, and print screen. It does not include images sent through file transfer.	Not selected 500	Not Selected 0
Allow mobile client	This feature lets users deploy Lotus Sametime awareness and chat features mobile device.	Selected	Selected
Allow multiple server communities	If this is checked, community preferences and menus are available to users.	Selected	Not selected
Allow users to add external users using the Sametime Gateway	Allowing users to connect to external communities such as AIM, OCS, and Google Talk. If this policy is not allowed, the check box and text for adding external users by e-mail address is not available in clients.	Not selected	Not selected
Sametime update site URL	Provides a URL where users can retrieve updates to features for the Lotus Sametime Connect client.	updates.sametime.ibm.com	Blank.
Sametime optional add-on site URLs	Type the URLs separated by a comma or semicolon. If no value is specified, then the Check for Optional Features item on the Tools > Plug-ins menu not valid.	Blank.	Blank.
Allow plug-ins installation	Allows users to install plugins and updates from the Lotus Sametime Connect Tools > Plug-ins menu.	Selected	Selected
Limit size of contact list	This limits the number of contacts that users can enter in their contact lists.	Not selected	Not selected