Change Exchange Mailbox protocolSettings via PolicyXpress Policy

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Risk Analytics
• CA Secure Cloud SaaS - Arcot A-OK (WebFort)
• CLOUDMINDER ADVANCED AUTHENTICATION
• CA Secure Cloud SaaS - Advanced Authentication
• CA Secure Cloud SaaS - Identity Management
• CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

We would like to change the Exchange Mailbox protocol settings via PolicyXpress Policy, we understand the protocolSettings attribute can be directly modified in Active Directory with special value strings such as one of the following. 
HTTP§1§1§§§§§§
OWA§1
MAPI§1§§§§§§§
POP3§1§§§§§§§§
IMAP4§1§§§§§§§§

 

However, we can not use these values on PolicyXpress Policy, we need a json string to present the values.

How to change Exchange Mailbox protocolSettings via PolicyXpress Policy?

Environment

Exchange 2007Exchange 2010Exchange 2013Exchange 2016

Resolution

On Policy Xpress policy, a combine of the following json strings can be used to explicitly enable certain Exchange protocol settings: 

{"isEnabled":true,"protocolType":"POP3"} 

{"isEnabled":true,"protocolType":"OWA"} 

{"isEnabled":true,"protocolType":"IMAP4"} 

{"isEnabled":true,"protocolType":"MAPI"} 

{"isEnabled":true,"protocolType":"ActiveSync"}

A combine of the following json strings can be used to disable certain Exchange Mailbox protocol settings:

{"isEnabled":false,"protocolType":"POP3"} 

{"isEnabled":false,"protocolType":"OWA"} 

{"isEnabled":false,"protocolType":"IMAP4"} 

{"isEnabled":false,"protocolType":"MAPI"} 

{"isEnabled":"false","protocolType":"ActiveSync"} 

To disable ActiveSync, we need to change an additional attribute, Hidden ActiveSync(msExchOmaAdminWirelessEnable), to value 4.

MsExchOmaAdminWirelessEnable is the attribute controlling the ActiveSync setting since Exchange 2003. 

The msExchOmaAdminWirelessEnable property breaks down this way: 

0 = All Enabled 
1 = Up-to-date Notifications not allowed
2 = OMA not allowed
4 = User Initiated Synchronization (ActiveSync) not allowed
5 = User Initiated Synchronization & Up-to-date Notifications not allowed

Additional Information

N/A