Your company network includes Forefront Identity Manager (FIM) 2010. You manage the FIM 2010 Add-ins and Extensions through a Group Policy Object (GPO) configured according to the two exhibits. (Click

Adding fim.adatum.com to the 'Configure valid ActiveX sites' policy setting is required because FIM's Password Reset and Registration portal uses an ActiveX control that must be explicitly trusted via this GPO setting; without it, users cannot access or complete the self-service registration workflow.

The 'Configure the address book containing valid groups' setting is used to define which address book FIM searches when resolving group membership, not for enabling password reset registration or Outlook approval buttons.

The 'Configure the address book containing valid members' setting controls which address book is used to look up valid group members in FIM workflows, and is unrelated to enabling password reset or rendering Outlook approval buttons.

Adding FIM administrator addresses to 'Configure valid senders of approval requests' is incorrect because the approval emails are sent from the FIM service mailbox, not from administrator accounts; using administrator addresses would not trigger the Approve/Reject buttons in Outlook.

The 'Configure valid senders of approval requests' policy setting must include the address of the mailbox hosting the FIM web service because Outlook uses this setting to validate that incoming approval request emails originate from a trusted FIM source, which is what causes the Approve and Reject buttons to render in the Outlook client.