Change Exchange Mailbox protocolSettings via PolicyXpress Policy

book

Article ID: 17022

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance CA Identity Portal CA Risk Analytics CA Secure Cloud SaaS - Arcot A-OK (WebFort) CLOUDMINDER ADVANCED AUTHENTICATION CA Secure Cloud SaaS - Advanced Authentication CA Secure Cloud SaaS - Identity Management CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

We would like to change the Exchange Mailbox protocol settings via PolicyXpress Policy, we understand the protocolSettings attribute can be directly modified in Active Directory with special value strings such as one of the following. 
HTTP§1§1§§§§§§
OWA§1
MAPI§1§§§§§§§
POP3§1§§§§§§§§
IMAP4§1§§§§§§§§

 

However, we can not use these values on PolicyXpress Policy, we need a json string to present the values.



How to change Exchange Mailbox protocolSettings via PolicyXpress Policy?

Environment

Exchange 2007Exchange 2010Exchange 2013Exchange 2016

Resolution

On Policy Xpress policy, a combine of the following json strings can be used to explicitly enable certain Exchange protocol settings: 

{"isEnabled":true,"protocolType":"POP3"} 

{"isEnabled":true,"protocolType":"OWA"} 

{"isEnabled":true,"protocolType":"IMAP4"} 

{"isEnabled":true,"protocolType":"MAPI"} 

{"isEnabled":true,"protocolType":"ActiveSync"}

A combine of the following json strings can be used to disable certain Exchange Mailbox protocol settings:

{"isEnabled":false,"protocolType":"POP3"} 

{"isEnabled":false,"protocolType":"OWA"} 

{"isEnabled":false,"protocolType":"IMAP4"} 

{"isEnabled":false,"protocolType":"MAPI"} 

{"isEnabled":"false","protocolType":"ActiveSync"} 

To disable ActiveSync, we need to change an additional attribute, Hidden ActiveSync(msExchOmaAdminWirelessEnable), to value 4.

MsExchOmaAdminWirelessEnable is the attribute controlling the ActiveSync setting since Exchange 2003. 

The msExchOmaAdminWirelessEnable property breaks down this way: 

0 = All Enabled 
1 = Up-to-date Notifications not allowed
2 = OMA not allowed
4 = User Initiated Synchronization (ActiveSync) not allowed
5 = User Initiated Synchronization & Up-to-date Notifications not allowed



Additional Information

N/A