In RSA Authentication Manager 7.1, how create multiple security domains

Hi,
RSA Authentication Manager 7.1 in configured with LDAP(Sun java system directory server); how create multiple security domains 7.1, is this security domains is releted to LDAP?
thanks

I think what you need to do is create an identity sequence with RSA as the selection in
Authentication and Attribute Retrieval Search List and AD in Additional Attribute Retrieval Search List. Then select this sequence as the result in the identity policy for the service

Similar Messages

  • ASA5540 ver.7.2(2) RSA Authentication Manager 7.1

    Good evening,
    I'm searching documentation to verify if my ASA appliance support as RADIUS Server, the solution RSA Authentication Manager 7.1.
    I assumed which with RADIUS Server authentication support provide by ASA software, is possible.
    I've find also an a RSA SecureID Implementation Guide that I'm attached; in this document you should read about solution in conjuction with ASA ver.7.0.1 and RSA Authentication Manager 6.1
    I'm verifing to don't have problem in future with compatibility between twe two brands.
    Any information, link, or user guide are welcomed!
    Cheers
    Davide Sacca'

    According to the ASA 8.0 documentation
    http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/aaa.html#wp1057621
    SDI Version Support
    The security appliance supports SDI Version 5.0 and 6.0.
    If you configure the RSA device as a SDI, you may have issues getting support as 7.x is unsupported. If RSA device is configured as a RADIUS device, you should not have a problem.

  • RSA Authentication Manager Connector 9.0.4

    Hi to all. I need to connect Oracle Identity Manager 11g with an RSA Authentication Manager 6.0. So, searching through Oracle website, I noted that with the newest version of the RSA Authentication Manager Connector (9.1.0.7.0) it is only possible to connect with an RSA 7.1 with SP3 or higher. Now my questions are:
    1. Where is it possibile to download the older version of this connector?
    2. Even if I could download this older version (9.0.4), is it possibile to get it work with Oracle Identity Manager 11.1.1.5.2?
    Thank you in advance.
    Giuseppe.

    Older version connectors aren't available on oracle web sites. You need to raise SR through metalink (support.oracle.com) and ask them for older versions.
    Refer certification matrix/compatibility section of connector document to know if it'll work with Oracle Identity Manager 11.1.1.5.2.
    regards,
    Gp

  • How create multiple named folders at one time? 10.10.02

    How create multiple named folders at one time? 10.10.02
    Hello all,
    I need to create 208 named folders at one time. Please advise.
    Thanks!

    You may want to ask this in the Yosemite forum. This is the Mavericks forum.

  • RSA Authentication Manager connector exception with OIM 9.1.0.2

    Hi,
    I have installed RSA AM connector 9.1.0.7 on OIM 9.1.0.2 BP18 on Windows Server 2008 R2.
    When I run the RSA recon schedule task, I get the following exception:
    DEBUG,24 Feb 2012 12:11:13,227,[XELLERATE.ADAPTERS],Class/Method: tcADPClassLoader:findClass - Data: loading class - Value: org.iscreen.impl.xml.PositionContext
    *ERROR,24 Feb 2012 12:11:13,229,[OIMCP.RSAM],====================================================*
    *ERROR,24 Feb 2012 12:11:13,229,[OIMCP.RSAM],oracle.iam.connectors.rsaauthmgr.usermgmt.tasks.RSALookupRecon : getGroups : An error occurred parsing the XML located at com/rsa/admin/SearchGroupsCommand_validators.xml. The location within the file is at /. The following was found that was in error: Unable to load/locate configuration file.*
    *ERROR,24 Feb 2012 12:11:13,229,[OIMCP.RSAM],====================================================*
    *ERROR,24 Feb 2012 12:11:13,230,[OIMCP.RSAM],================= Start Stack Trace =======================*
    *ERROR,24 Feb 2012 12:11:13,230,[OIMCP.RSAM],oracle.iam.connectors.rsaauthmgr.usermgmt.tasks.RSALookupRecon : getGroups*
    *ERROR,24 Feb 2012 12:11:13,230,[OIMCP.RSAM],An error occurred parsing the XML located at com/rsa/admin/SearchGroupsCommand_validators.xml. The location within the file is at /. The following was found that was in error: Unable to load/locate configuration file.*
    *ERROR,24 Feb 2012 12:11:13,230,[OIMCP.RSAM],Description : An error occurred parsing the XML located at com/rsa/admin/SearchGroupsCommand_validators.xml. The location within the file is at /. The following was found that was in error: Unable to load/locate configuration file.*
    *ERROR,24 Feb 2012 12:11:13,230,[OIMCP.RSAM],org.iscreen.impl.xml.XmlConfigurationException: An error occurred parsing the XML located at com/rsa/admin/SearchGroupsCommand_validators.xml. The location within the file is at /. The following was found that was in error: Unable to load/locate configuration file.*
    at org.iscreen.impl.xml.XmlParser.getInput(XmlParser.java:215)
    at org.iscreen.impl.xml.XmlParser.parse(XmlParser.java:116)
    at org.iscreen.impl.xml.XmlServiceFactory.registerInclude(XmlServiceFactory.java:117)
    at org.iscreen.impl.xml.XmlServiceFactory.loadConfig(XmlServiceFactory.java:285)
    at org.iscreen.ValidationFactory.buildFactory(ValidationFactory.java:120)
    Any idea what may be the issue???
    Thanks.

    As per given bug it is looking for jars which is missing
    have you install connector using deployment manager?? if yes it copy required jars at target location. verify if not there copy jars in Scheduled Task folder.
    Check the document if any external jars required and same put at ThirdParty folder

  • ACS 3.3, RSA Authentication Manager, Win2k3 AD

    What is the best practice for implementing cisco ACS 3.3, RSA, Win2k3 AD.
    We want to use these combo to authenticate our Remote access client. Our VPN/Firewall box is a ASA5540.
    Thx

    Hi
    You basically have 2 posibilities:
    Posibility 1:
    Use the ACS as the Central AAA Server and integrate all other Authentication-Servers with the ACS.
    The ACS Supports different Token Servers / AD / RADIUS Server directly.
    This is very smooth, you use the ACS to control all Authentication Request from your Network devices , TACACS+ or RADIUS.
    There is some limitations'thoug: ACS only supports One AD Domain and no Trusts ... this can be painful..
    Poisibility2:
    Use The ACS as a RADIUS proxy-Server.
    There are no "direct intagration" with the other Radius Servers - such as the ACE or the different ISA-Servers, but still alll client can use the ACS as their "AAA Radius Server".
    This requires separate configuration of all RADIUS servers, but it overcomes the limitation of the ACS Support of Microsoft TRUSTS.
    It is possible to use a mixture of both Cenarios, and you could use things like the domain-suffix (everything behind @ in [email protected]) to deside wich RADIUS server should do the Authentication.
    Hope This Helps
    Greetings
    Jarle

  • How to implement Security Domains with Delegated Management

    Hello,
    I have read the GlobalPlatform docs and 'scoured' the Internet for some useful advice on how to implement DM with Java Card.
    The GlobalPlatform docs say that "The interface between a SD and the Card Manager is not defined by Open Platform" and that "It is assumed that a SD cannot be developed in the same manner as a normal app". How then is someone supposed to be able to implement a system that includes Java Card applets and post-issuance uploading of applets using DM?
    I have purchased the Aspects Developer IDE with DM supported Java Card smart cards but am at a loss of how to actually implement the SD applets with DM....I know this technology is not supposed to be easy , but it should be possible to research and find the information that is required to learn it.
    Can anyone point me in the direction of somewhere that will provide me with some direction?
    Thanks in advance,
    Ann

    Hi Kavitha,
    check this link http://andrejusb.blogspot.in/2011/04/housekeeping-for-adf-security-test-all.html
    http://www.orastudy.com/oradoc/selfstu/fusion/web.1111/b31974/adding_security.htm
    Edited by: MaDi on Jun 11, 2012 3:46 PM

  • Need help for connecting in an RSA authentication agent

    i am not sure if this is the right place but i was hoping i am lucky enough for someone with knowledge about rsa or somebody who has experience in developing security pages.
    my problem is something like this, simple, how do i connect to an RSA Authentication Agent, or RSA Authentication Manager.
    i was hoping you could paste an answer or paste an web address of a forum.
    this kind of question is very rare in forums, so i don't really have much choice. any relevant answers are appreciated...
    thank you

    Hi,
    What is the gateway used by Solaris. Please send the result of ifconfig -a on the Sun OS.
    Sunil.

  • Configure cisco wlc for rsa authentication

                       Hi,
    I wanted to find out if it is possible to authenticate wireless networks using rsa. Currently we have a cisco wlc 2504, rsa authentication manager 7.1
    Do we require a cisco ACS device to make this work. Please advise.
    Thanks

    Yes it is possible.  The below is the list of items which you require to configure RSA authentication on WLC
    •1.       RSA Authentication Manager 6.1
    •2.       RSA Authentication Agent 6.1 for Microsoft Windows
    •3.       Cisco Secure ACS 4.0(1) Build 27
        Note: The RADIUS server that is included can be used in place of the Cisco ACS. See the RADIUS documentation that was included with the RSA Authentication Manager on how to configure the server.
    •4.       Cisco WLCs and Lightweight Access Points for Release 4.0 (version 4.0.155.0)
    For more information you can go through this link:
    http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a008090399a.shtml

  • OIM 11g - RSA Authentication Connector

    Hello,
    I need some information about RSA Authentication Manager connector.
    We use RSA for VPN access authentication and we would like to integrate it into OIM.
    I need to understand the capabilities of this connector such as provisioning and deprovisioning tokens and how to automate the distribution of soft tokens.
    Can anyone help me ? Any docs or relevant links would help as well.
    Thanks,
    Bala

    download connetor doc from below location(RSA Authentication Manager )
    http://docs.oracle.com/cd/E11223_01/index.htm
    Else try to download the connector extract it and open the connector doc(RSA Authentication Manager 9.1.0.7.0 )
    http://www.oracle.com/technetwork/middleware/id-mgmt/downloads/connectors-101674.html

  • How can I create a new Security Domain ?

    Hi everyone,
    I would like to know how can I create an Security Domain other than ISD ?(If my card support multi SD and delegated management)
    I read Global Platform v2.1.1 ,but I don't know how can I create new SD practically(how can I write it's code ,how can I install it and how can I associate an applet to it,...).
    if there is any document or link can help me ,please inform me.
    I'll appreciate for any one if explain it to me step by step.
    yours sincerely.
    Orchid.

    You're right, it is not visible looking at your script, but at the APDU log. /card is an internal JCShell script to do the following:
    cm>  /card
    resetCard with timeout: 0 (ms)First the card is reset. This is analogous with /atr
    --Waiting for card...
    ATR=3B FA 13 00 00 81 31 FE 45 4A 43 4F 50 34 31 56    ;.....1.EJCOP41V
        32 33 31 97                                        231.
    ATR: T=1, FI=1/DI=3 (93clk/etu), N=0, IFSC=254, BWI=4/CWI=5, Hist="JCOP41V231"Then an /identify command is issued.
    => 00 A4 04 00 09 A0 00 00 01 67 41 30 00 FF          .........gA0..
    (163429 nsec)
    <= 09 01 01 29 00 00 00 00 50 48 36 35 30 41 00 00    ...)....PH650A..
        6A 82                                              j.
    Status: File not foundNow the Issuer Security Domain (ISD) is selected. You can do the same sending the JCShell 'select' command.
    => 00 A4 04 00 07 A0 00 00 00 03 00 00 00             .............
    (650082 nsec)
    <= 6F 65 84 08 A0 00 00 00 03 00 00 00 A5 59 9F 65    oe...........Y.e
        01 FF 9F 6E 06 40 51 70 92 29 00 73 4A 06 07 2A    ...n.@Qp.).sJ..*
        86 48 86 FC 6B 01 60 0C 06 0A 2A 86 48 86 FC 6B    .H..k.`...*.H..k
        02 02 01 01 63 09 06 07 2A 86 48 86 FC 6B 03 64    ....c...*.H..k.d
        0B 06 09 2A 86 48 86 FC 6B 04 02 15 65 0B 06 09    ...*.H..k...e...
        2B 85 10 86 48 64 02 01 03 66 0C 06 0A 2B 06 01    +...Hd...f...+..
        04 01 2A 02 6E 01 02 90 00                         ..*.n....
    Status: No ErrorThe answer is the File Control Information (FCI) returned by the ISD. The format is also described in GP.

  • RSA authentication MGR 8

    Hi all,
    I'm wondering if RSA Authentication manager 8 is supported on Cisco 5520 running 8.4?
    Thanks

    It's little late to reply but let's see where this issue stands.
    If it is still unresolved, can we check the "debug radius" and "debug aaa authentication" for an attempt.
    Also, do you see any hits on the RSA auth manager. Please share what doc you followed to setup the same.
    ~BR
    Jatin Katyal
    **Do rate helpful posts**

  • Who shall create a specific Security Domain compliant to GP 2.1?

    Particularly, in case of the delegated management, the GP card specification 2.1.1 decribes as follows:
    "Security Domains authorized by the Card Issuer to perform Card Content changes shall request the OPEN to load, install, extradite, and delete applications."
    I think that the Security Domain is implemented by the Application Provider using GP API. The OPEN is ,however, the component of the Card Manager which should be implemented by a GP compliant JCVM provider or a GP component provider.
    My questions are:
    1. How does a Security Domain request the OPEN to load, install.. ? How do they interface with each other? Does the GP compliant JCVM provider have to provide the specific interfaces used to change Card Contents for the Application Providers who implement their own Security Domain?
    2. If the GP compliant JCVM provider is also responsible for implementing a specific Security Domain, what is the role of the Application Provider? only as a provider of his own security policy for the GP compliant JCVM provider? Can't a Application Provider implement his own Security Domain himself (using only GP2.1 public API)?
    I am grateful to you for a kind assistance.

    I think that the Security Domain is implemented by theApplication Provider using GP API. The OPEN is
    ,however, the component of the Card Manager which
    should be implemented by a GP compliant JCVM provider
    or a GP component provider. Typically and due to the fact that the GP specification is missing the API that would allow a Security Domain to be loaded on the card, Security Domains are developed by the card vendor and present on the card at production. The vendor can decide which features are implemented in the Security Domain e.g. Secure Channel services, DAP Verification, Delegated Management. If, as an Application Provider, you wish to develop your own Security Domain, your vendor may be willing to provide you with details of their proprietary API but this would be specific to this vendors product.
    >
    My questions are:
    1. How does a Security Domain request the OPEN to
    load, install.. ? How do they interface with each
    other? Does the GP compliant JCVM provider have to
    provide the specific interfaces used to change Card
    Contents for the Application Providers who implement
    their own Security Domain?Yes.
    >
    2. If the GP compliant JCVM provider is also
    responsible for implementing a specific Security
    Domain, what is the role of the Application Provider?
    only as a provider of his own security policy for the
    GP compliant JCVM provider? Can't a Application
    Provider implement his own Security Domain himself
    (using only GP2.1 public API)?No.
    >
    I am grateful to you for a kind assistance.

  • Custom Authentication Provider and User Manage like SQLAuthenticator, How?

    Hi everyone,
    I faced a problem with login function of my portal (Webcenter Application). The Problem is:
    - Allow the users logging in by user that store in another system. I must communicate using low level of socket. This really is not a problem.
    - If user logged in, for first time of logging in, i must store them in some identity store (Maybe tables database).
    - View Users in Weblogic Console. To do that, i known that i must implemeted something that i dont what that are.
    Here are my work:
    - I Created a Custom Authentication Provider. And configuration in Admin Console. But i don't know what are that i should implementing to View user & group in Admin Console.
    - I Cannot logging in: After i created simple application for testing, i cannot logging in even i tested with SQLAuthenticator Provider and original DefaultProvider. In Logging Console, I saw every I Printed In The Code of Login Module.
    Here are my Code:
    <?xml version="1.0" ?>
    <MBeanType Name = "OrkitVASPortal" DisplayName = "OrkitVASPortal"
               Package = "orkit"
               Extends = "weblogic.management.security.authentication.Authenticator"
               PersistPolicy = "OnUpdate">
        <MBeanAttribute
            Name        = "ProviderClassName"
            Type        = "java.lang.String"
            Writeable   = "false"
            Default     = "&quot;orkit.OrkitVASPortalProviderImpl&quot;"
    />
        <MBeanAttribute
            Name        = "Description"
            Type        = "java.lang.String"
            Writeable   = "false"
            Default     = "&quot;WebLogic Simple Sample Audit Provider&quot;"
    />
        <MBeanAttribute
            Name        = "Version"
            Type        = "java.lang.String"
            Writeable   = "false"
            Default     = "&quot;1.0&quot;"
    />
        <MBeanAttribute
            Name        = "LogFileName"
            Type        = "java.lang.String"
            Default     = "&quot;SimpleSampleAuditor.log&quot;"
    />
    </MBeanType>
    package orkit;
    import java.util.HashMap;
    import javax.security.auth.login.AppConfigurationEntry;
    import javax.security.auth.login.AppConfigurationEntry.LoginModuleControlFlag;
    import weblogic.management.security.ProviderMBean;
    import weblogic.security.provider.PrincipalValidatorImpl;
    import weblogic.security.spi.*;
    public final class OrkitVASPortalProviderImpl implements AuthenticationProviderV2 {
        private String description;
        private LoginModuleControlFlag controlFlag;
        public OrkitVASPortalProviderImpl() {
            System.out.println("The Orkit VASPortal Provider Implemented!!!!!");
        @Override
        public IdentityAsserterV2 getIdentityAsserter() {
            return null;
        // Our mapping of users to passwords/groups, instead of being in LDAP or in a
        // database, is represented by a HashMap of MyUserDetails objects..
        public class MyUserDetails {
            String pw;
            String group;
            // We use this to represent the user's groups and passwords
            public MyUserDetails(String pw, String group) {
                this.pw = pw;
                this.group = group;
            public String getPassword() {
                return pw;
            public String getGroup() {
                return group;
        // This is our database
        private HashMap userGroupMapping = null;
        public void initialize(ProviderMBean mbean, SecurityServices services) {
            System.out.println("The Orkit VASPortal Provider is intializing......");
            OrkitVASPortalMBean myMBean = (OrkitVASPortalMBean) mbean;
            description = myMBean.getDescription() + "\n" + myMBean.getVersion();
            System.err.println("#In realm:" + myMBean.getRealm().wls_getDisplayName());
            // We would typically use the realm name to find the database
            // we want to use for authentication. Here, we just create one.
            userGroupMapping = new HashMap();
            userGroupMapping.put("a", new MyUserDetails("passworda", "g1"));
            userGroupMapping.put("b", new MyUserDetails("passwordb", "g2"));
            userGroupMapping.put("system", new MyUserDetails("12341234",
                    "Administrators"));
            String flag = myMBean.getControlFlag();
            if (flag.equalsIgnoreCase("REQUIRED")) {
                controlFlag = LoginModuleControlFlag.REQUIRED;
            } else if (flag.equalsIgnoreCase("OPTIONAL")) {
                controlFlag = LoginModuleControlFlag.OPTIONAL;
            } else if (flag.equalsIgnoreCase("REQUISITE")) {
                controlFlag = LoginModuleControlFlag.REQUISITE;
            } else if (flag.equalsIgnoreCase("SUFFICIENT")) {
                controlFlag = LoginModuleControlFlag.SUFFICIENT;
            } else {
                throw new IllegalArgumentException("Invalid control flag " + flag);
        public AppConfigurationEntry getLoginModuleConfiguration() {
            HashMap options = new HashMap();
            options.put("usermap", userGroupMapping);
            System.out.println("UserMap: " + options);
            return new AppConfigurationEntry(
                    "orkit.OrkitVASPortalLoginModule",
                    controlFlag, options);
        public String getDescription() {
            return description;
        public PrincipalValidator getPrincipalValidator() {
            return new PrincipalValidatorImpl();
        public AppConfigurationEntry getAssertionModuleConfiguration() {
            return null;
    //    public IdentityAsserter getIdentityAsserter() {
    //        return null;
        public void shutdown() {
    * To change this template, choose Tools | Templates
    * and open the template in the editor.
    package orkit;
    import orkit.OrkitVASPortalProviderImpl;
    import java.io.IOException;
    import java.util.*;
    import javax.security.auth.Subject;
    import javax.security.auth.callback.*;
    import javax.security.auth.login.*;
    import javax.security.auth.spi.LoginModule;
    import weblogic.security.principal.WLSGroupImpl;
    import weblogic.security.principal.WLSUserImpl;
    * This login module will be called by our Authentication Provider. It assumes
    * that the option, usermap, will be passed which contains the map of users to
    * passwords and groups.
    public class OrkitVASPortalLoginModule implements LoginModule {
        private Subject subject;
        private CallbackHandler callbackHandler;
        private HashMap userMap;
        // Authentication status
        private boolean loginSucceeded;
        private boolean principalsInSubject;
        private Vector principalsBeforeCommit = new Vector();
        public void initialize(Subject subject, CallbackHandler callbackHandler,
                Map sharedState, Map options) {
            this.subject = subject;
            this.callbackHandler = callbackHandler;
            // Fetch user/password map that should be set by the authenticator
            userMap = (HashMap) options.get("usermap");
         * Called once after initialize to try and log the person in
        public boolean login() throws LoginException {
            // First thing we do is create an array of callbacks so that
            // we can get the data from the user
            Callback[] callbacks;
            callbacks = new Callback[2];
            callbacks[0] = new NameCallback("username: ");
            callbacks[1] = new PasswordCallback("password: ", false);
            try {
                callbackHandler.handle(callbacks);
            } catch (IOException eio) {
                throw new LoginException(eio.toString());
            } catch (UnsupportedCallbackException eu) {
                throw new LoginException(eu.toString());
            String username = ((NameCallback) callbacks[0]).getName();
            System.out.println("Username: " + username);
            char[] pw = ((PasswordCallback) callbacks[1]).getPassword();
            String password = new String(pw);
            System.out.println("PASSWORD: " + password);
            if (username.length() > 0) {
                if (!userMap.containsKey(username)) {
                    throw new FailedLoginException("Authentication Failed: Could not find user:" + username);
                }else{
                    System.out.println("Contstainded Username");
                String realPassword = ((OrkitVASPortalProviderImpl.MyUserDetails) userMap.get(username)).getPassword();
                if (realPassword == null || !realPassword.equals(password)) {
                    throw new FailedLoginException("Authentication Failed: Password incorrect for user" + username);
                }else{
                    System.out.println("Everyitng OKIE");
            } else {
                // No Username, so anonymous access is being attempted
            loginSucceeded = true;
            // We collect some principals that we would like to add to the user
            // once this is committed.
            // First, we add his username itself
            principalsBeforeCommit.add(new WLSUserImpl(username));
            // Now we add his group
            principalsBeforeCommit.add(new WLSGroupImpl(((OrkitVASPortalProviderImpl.MyUserDetails) userMap.get(username)).getGroup()));
            return loginSucceeded;
        public boolean commit() throws LoginException {
            if (loginSucceeded) {
                subject.getPrincipals().removeAll(principalsBeforeCommit);
                principalsInSubject = true;
                return true;
            } else {
                return false;
        public boolean abort() throws LoginException {
            if (principalsInSubject) {
                subject.getPrincipals().removeAll(principalsBeforeCommit);
                principalsInSubject = false;
            return true;
        public boolean logout() throws LoginException {
            return true;
    }and OrkitVASPortalMBean & OrkitVASPortalImpl class created by MBeanMaker tool.
    Can someome help.
    Thanks in advance!

    Hi ,
    SQLAuthenticator is not yet supported with UCM 11g due to some JPS Provider limitations .
    Currently there is an Enhancement request for this .
    Thanks
    Srinath

  • How to create a security group to manage a Distribution list in exchange 2013

    Hi folks,
    We have AD synced with Online Exchange 2013. Dirsync is installed on AD. We would like to create a security group for a Distribution list(for instance: distribution list name is [email protected] and it is managed via a security group named "abc" ).
    How can this be achieved? I do see an option under Online Exchange console using browser-> Groups to create a new security group but it doesn't allow me to add the group created in AD-instead it ask us to create a new one. If we create a new one in Exchange
    online console- will it publish to our local AD?

    Hi TR,
    Thank you for your question.
    Are there any errors when we could not add group which is in local AD.
    When we could not add group which was created In AD, there are following options we could check:
    If current user who logon Exchange server has enough permission to add it
    The connection between Exchange server and AD
    If we create a new DG in Exchange online, it will be published to local AD.
    We could run the following command to create DG for abc.com:
    New-DistributionGroup -Name "abc" -Alias abc -Type "Security" -MemberJoinRestriction open
    We could refer to the following link to learn more about distribution group:
    https://technet.microsoft.com/en-us/library/bb124513%28v=exchg.150%29.aspx
    If there are any questions regarding this issue, please be free to let me know. 
    Best Regard,
    Jim
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
    Jim Xu
    TechNet Community Support

Maybe you are looking for