Use this option for excluding rights account certificates of external users who do not have an Active Directory Domain Services ...