How to change Exchange Mailbox protocolSettings via PolicyXpress Policy

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

How to change Exchange Mailbox protocolSettings via PolicyXpress Policy

 

Environment

All Identity Manager

Cause

The Exchange Mailbox protocolSettings attribute can be directly modified in Active Directory with special value strings such as one of the following:
HTTP§1§1§§§§§§
OWA§1
MAPI§1§§§§§§§
POP3§1§§§§§§§§
IMAP4§1§§§§§§§§

But when using a PolicyXpress Policy the value needs to be in JSON format

Resolution

On Policy Xpress policy, a combine of the following json strings can be used to explicitly enable certain Exchange protocol settings: 

{"isEnabled":true,"protocolType":"POP3"} 

{"isEnabled":true,"protocolType":"OWA"} 

{"isEnabled":true,"protocolType":"IMAP4"} 

{"isEnabled":true,"protocolType":"MAPI"} 

{"isEnabled":true,"protocolType":"ActiveSync"}

A combine of the following json strings can be used to disable certain Exchange Mailbox protocol settings:

{"isEnabled":false,"protocolType":"POP3"} 

{"isEnabled":false,"protocolType":"OWA"} 

{"isEnabled":false,"protocolType":"IMAP4"} 

{"isEnabled":false,"protocolType":"MAPI"} 

{"isEnabled":"false","protocolType":"ActiveSync"} 

To disable ActiveSync, we need to change an additional attribute, Hidden ActiveSync(msExchOmaAdminWirelessEnable), to value 4.

MsExchOmaAdminWirelessEnable is the attribute controlling the ActiveSync setting since Exchange 2003. 

The msExchOmaAdminWirelessEnable property breaks down this way: 

0 = All Enabled 
1 = Up-to-date Notifications not allowed
2 = OMA not allowed
4 = User Initiated Synchronization (ActiveSync) not allowed
5 = User Initiated Synchronization & Up-to-date Notifications not allowed

Additional Information

N/A