Exchange Mailbox Protocol Settings Modification via PolicyXpress

Products

• CA Identity Manager
• CA Identity Suite
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

This article outlines the configuration steps to modify the protocolSettings attribute for Exchange mailboxes. It explains the requirements for direct Active Directory (AD) modification versus the JSON format required for implementation within a PolicyXpress (PX) policy, including specific handling for the ActiveSync protocol.

Environment

Identity Manager

Resolution

The protocolSettings attribute governs how users interact with Exchange protocols. Depending on your implementation method, use one of the following formats.

Direct Active Directory Modification

If modifying the protocolSettings attribute directly within Active Directory, use the following syntax:

 

 

Protocol	Value String
HTTP	HTTP§1§1§§§§§§
OWA	OWA§1
MAPI	MAPI§1§§§§§§§
POP3	POP3§1§§§§§§§§
IMAP4	IMAP4§1§§§§§§§§

PolicyXpress JSON Configuration

When using PolicyXpress, attributes must be defined in JSON format.

To Enable Protocols: Combine these JSON strings in your policy:

• {"isEnabled":true,"protocolType":"POP3"}
• {"isEnabled":true,"protocolType":"OWA"}
• {"isEnabled":true,"protocolType":"IMAP4"}
• {"isEnabled":true,"protocolType":"MAPI"}
• {"isEnabled":true,"protocolType":"ActiveSync"}

To Disable Protocols: Combine these JSON strings in your policy:

• {"isEnabled":false,"protocolType":"POP3"}
• {"isEnabled":false,"protocolType":"OWA"}
• {"isEnabled":false,"protocolType":"IMAP4"}
• {"isEnabled":false,"protocolType":"MAPI"}
• {"isEnabled":false,"protocolType":"ActiveSync"}

ActiveSync Specifics

To successfully disable ActiveSync, you must also update the msExchOmaAdminWirelessEnable attribute to 4. This attribute controls the ActiveSync setting.

Value Breakdown for msExchOmaAdminWirelessEnable:

• 0: All features enabled
• 1: Up-to-date Notifications not allowed
• 2: OMA not allowed
• 4: User Initiated Synchronization (ActiveSync) not allowed
• 5: User Initiated Synchronization & Up-to-date Notifications not allowed

Additional Information

N/A