Use this option for excluding rights account certificates of internal users who have an Active Directory Domain Services ...