Filterable properties for the Filter parameter

You use the Filter parameter to create OPATH filters based on the properties of user and group objects in Exchange Server 2016. The Filter parameter is available on these recipient cmdlets:

For more information, see Recipient filters in Exchange Management Shell commands.

Note: The Filter parameter is also available on other cmdlets (for example, Get-MailboxStatistics, Get-Queue, and Get-Message ). However, the property values that are accepted by the Filter parameter on these cmdlets aren't similar to the user and group properties that are described in this topic.

Filterable properties

The properties that have been confirmed to work with the Filter parameter in user and group cmdlets are described in the following table.

Notes:

  • The list might include:

    • Properties that are only used in one type of environment: Microsoft Office 365, on-premises Exchange, or hybrid. The property might exist on recipient objects in all environments, but the value is only meaningful (a value other than blank or None) in one type of environment.

    • Properties that are present, but correspond to features that are no longer used in Exchange 2016.

  • Not all recipient properties have a corresponding Active Directory property. The LDAP display name value in the table is "n/a" for these properties, which indicates that the property calculated (likely by Exchange).

  • Text string properties that accept wildcard characters require the -like operator (for example, Property -like '*abc').

  • To look for blank or non-blank property values, use the value $null (for example, {Property -eq $null} or {Property -ne $null}).

  • For more information about creating filters in recipient commands, see Additional OPATH syntax information.

Property name LDAP display name Available on cmdlets Value Comments
AcceptMessagesOnlyFrom
authOrig
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
String or $null
This filter requires the distinguished name of the individual recipient (a mailbox, mail user, or mail contact). For example, Get-DistributionGroup -Filter {AcceptMessagesOnlyFrom -eq 'CN=Yuudai Uchida,CN=Users,DC=contoso,DC=com'} or Get-DistributionGroup -Filter {AcceptMessagesOnlyFrom -eq 'contoso.com/Users/Angela Gruber'}.
To find the distinguished name of the individual recipient, replace <RecipientIdentity> with the name, alias, or email address of the recipient, and run this command: `Get-Recipient -Identity ""
AcceptMessagesOnlyFromDLMembers
dLMemSubmitPerms
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
String or $null
This filter requires the distinguished name or canonical distinguished name of the group (a distribution group, mail-enabled security group, or dynamic distribution group). For example, Get-Mailbox -Filter {AcceptMessagesOnlyFromDLMembers -eq 'CN=Marketing Department,CN=Users,DC=contoso,DC=com'}. or Get-Mailbox -Filter {AcceptMessagesOnlyFromDLMembers -eq 'contoso.com/Users/Marketing Department'}.
To find the distinguished name of the group, replace <GroupIdentity> with the name, alias, or email address of the group, and run one of these commands: `Get-DistributionGroup -Identity ""
ActiveSyncAllowedDeviceIDs
msExchMobileAllowedDeviceIds
Get-CASMailbox
String (wildcards accepted) or $null
A device ID is a text string that uniquely identifies the device. Use the Get-MobileDevice cmdlet to see the devices that have ActiveSync partnerships with a mailbox. To see the device IDs on a mailbox, replace <MailboxIdentity> with the name, alias, or email address of the mailbox, and run this command: `Get-MobileDevice -Mailbox
ActiveSyncBlockedDeviceIDs
msExchMobileBlockedDeviceIds
Get-CASMailbox
String (wildcards accepted) or $null
A device ID is a text string that uniquely identifies the device. Use the Get-MobileDevice cmdlet to see the devices that have ActiveSync partnerships with a mailbox. To see the device IDs on a mailbox, replace <MailboxIdentity> with the name, alias, or email address of the mailbox, and run this command: `Get-MobileDevice -Mailbox
ActiveSyncEnabled
n/a
Get-CASMailbox
Boolean ( $true or $false)
For example, Get-CasMailbox -Filter {ActiveSyncEnable -eq $false}.
ActiveSyncMailboxPolicy
msExchMobileMailboxPolicyLink
Get-CASMailbox
Get-Recipient
String or $null
This filter requires the distinguished name of the ActiveSync mailbox policy. For example, Get-CASMailbox -Filter {ActiveSyncMailboxPolicy -eq 'CN=Default,CN=Mobile Mailbox Policies,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
You can find the distinguished names of ActiveSync mailbox policies by running this command: `Get-MobileDeviceMailboxPolicy
ActiveSyncSuppressReadReceipt
n/a
Get-CASMailbox
Boolean ( $true or $false)
For example, Get-CasMailbox -Filter {ActiveSyncSuppressReadReceipt -eq $true}.
AddressBookPolicy
msExchAddressBookPolicyLink
Get-Mailbox
Get-Recipient
String or $null
This filter requires the distinguished name of the address book policy. For example, Get-Mailbox -Filter {AddressBookPolicy -eq 'CN=Contoso ABP,CN=AddressBook Mailbox Policies,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
You can find the distinguished names of address book policies by running this command: `Get-AddressBookPolicy
AddressListMembership
showInAddressBook
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
String or $null
This filter requires the distinguished name of the address list. For example, Get-MailContact -Filter {AddressListMembership -eq 'CN=All Contacts,CN=All Address Lists,CN=Address Lists Container,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
You can find the distinguished names of address lists by running this command: `Get-AddressList
AdminDisplayName
adminDisplayName
Get-SecurityPrincipal
String (wildcards accepted) or $null
For example, `Get-SecurityPrincipal -Filter {AdminDisplayName -ne $null}
AdministrativeUnits
msExchAdministrativeUnitLink
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
Get-User
String or $null
For example, Get-User -Filter {AdministrativeUnits -ne $null}.
AggregatedMailboxGuids
msExchAlternateMailboxes
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
String or $null
For example, Get-Mailbox -Filter {AggregatedMailboxGuids -ne $null}.
Alias
mailNickname
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
String (wildcards accepted)
For example, Get-Recipient -Filter {Alias -like '*smith'}.
AllowUMCallsFromNonUsers
msExchUMListInDirectorySearch
Get-Contact
Get-LinkedUser
Get-UMMailbox
Get-User
None (0) or SearchEnabled (1)
For example, Get-User -Filter {AllowUMCallsFromNonUsers -ne 'SearchEnabled'}.
ArbitrationMailbox
msExchArbitrationMailbox
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
String or $null
This filter requires the distinguished name of the arbitration mailbox. For example, Get-DistributionGroup -Filter {ArbitrationMailbox -eq 'CN=SystemMailbox{1f05a927-2e8f-4cbb-9039-2cfb8b95e486},CN=Users,DC=contoso,DC=com'}.
You can find the distinguished names of arbitration mailboxes by running this command: `Get-Mailbox -Arbitration
ArchiveDatabase
msExchArchiveDatabaseLink
Get-Mailbox
Get-MailUser
Get-Recipient
Get-RemoteMailbox
String or $null
This filter requires the distinguished name of the archive mailbox database. For example, Get-Mailbox -Filter {ArchiveMailbox -eq 'CN=MBX DB02,CN=Databases,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
You can find the distinguished names of mailbox databases by running this command: `Get-MailboxDatabase
ArchiveDomain
msExchArchiveAddress
Get-Mailbox
String (wildcards accepted) or $null
This property is used in on-premises Exchange environments to identify the Office 365 organization that holds the archive mailbox. For example, Get-Mailbox -Filter {ArchiveDomain -like '*contoso.onmicrosoft.com'}.
ArchiveGuid
msExchArchiveGUID
Get-Mailbox
Get-MailUser
Get-Recipient
Get-RemoteMailbox
String or $null
This filter requires the GUID of the archive mailbox. For example, Get-Mailbox -Filter {ArchiveMailbox -eq '6476f55e-e5eb-4462-a095-f2cb585d648d'}.
You can find the GUID of archive mailboxes by running this command: `Get-Mailbox -Archive
ArchiveName
msExchArchiveName
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
String (wildcards accepted) or $null
This filter requires the name of the archive mailbox. For example, Get-Mailbox -Filter {ArchiveName -like 'In-Place Archive*'}.
You can find the names of archive mailboxes by running this command: `Get-Mailbox -Archive
ArchiveQuota
msExchArchiveQuota
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
A byte quantified size value (for example, 300MB or 1.5GB), or Unlimited. Unqualified values are treated as bytes.
You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter {ArchiveQuota -eq 'Unlimited'} or Get-Mailbox -Filter {ArchiveQuota -ne 'Unlimited'}.
You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: `Get-Mailbox
ArchiveWarningQuota
msExchArchiveWarnQuota
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
A byte quantified size value (for example, 300MB or 1.5GB), or Unlimited. Unqualified values are treated as bytes.
You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter {ArchiveWarningQuota -eq 'Unlimited'} or Get-Mailbox -Filter {ArchiveWarningQuota -ne 'Unlimited'}.
You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: `Get-Mailbox
ArchiveRelease
msExchArchiveRelease
Get-Mailbox
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-User
None, E14, E15, or $null.
For example, Get-Recipient -Filter {ArchiveRelease -ne $null}.
ArchiveState
n/a
Get-Mailbox
Get-Recipient
Get-RemoteMailbox
None (0), Local (1), HostedProvisioned (2), HostedPending (3), or OnPremise (4).
For example, Get-Recipient -Filter {ArchiveState -eq 'HostedProvisioned'}.
ArchiveStatus
msExchArchiveStatus
Get-Mailbox
Get-MailUser
Get-Recipient
Get-RemoteMailbox
None (0) or Active (1).
For example, Get-Recipient -Filter {ArchiveStatus -eq 'Active'}.
AssistantName
msExchAssistantName
Get-Contact
Get-LinkedUser
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {AssistantName -like 'Julia*'}.
AuditEnabled
msExchMailboxAuditEnable
Get-Mailbox
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {AuditEnabled -eq $true}.
AuditLogAgeLimit
msExchMailboxAuditLogAgeLimit
Get-Mailbox
A time span value: dd.hh:mm:ss where dd = days, hh = hours, mm = minutes, and ss = seconds.
You can't use the Filter parameter to look for time span values for this property. Instead, use this syntax: `Get-Mailbox
BlockedSendersHash
msExchBlockedSendersHash
Get-Recipient
Blank ( $null) or a hashed value.
Realistically, you can only use this value to filter on blank or non-blank values. For example, Get-Recipient -Filter {BlockedSendersHash -ne $null}.
c
c
Get-Contact
Get-LinkedUser
Get-Recipient
Get-SecurityPrincipal
Get-User
String (wildcards accepted) or $null
This filter requires the ISO 3166-1 two-letter country code for the user (for example, US for the United States). This property is used together with the co and countryCode properties to define the user's country in Active Directory.
For example, Get-User -Filter {c -eq 'US'}.
CalendarLoggingQuota
msExchCalendarLoggingQuota
Get-Mailbox
A byte quantified size value (for example, 300MB or 1.5GB), or Unlimited. Unqualified values are treated as bytes.
You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter {CalendarLoggingQuota -eq 'Unlimited'} or Get-Mailbox -Filter {CalendarLoggingQuota -ne 'Unlimited'}.
You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: `Get-Mailbox
CalendarRepairDisabled
msExchCalendarRepairDisabled
Get-Mailbox
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {CalendarRepairDisabled -eq $true}.
CertificateSubject
n/a
Get-LinkedUser
Get-User
String or $null
The X509 certificate that's published for the user account (visible on the Published Certificates tab in Active Directory Users and Computers).
For example, Get-User -Filter {CertificateSubject -eq 'X509:<I>C=US,O=InternetCA,CN=APublicCertificateAuthority<S>C=US,O=Fabrikam,OU=Sales,CN=Jeff Smith')
City
l
Get-Contact
Get-LinkedUser
Get-Recipient
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {City -eq 'Redmond'}.
Company
company
Get-Contact
Get-LinkedUser
Get-Recipient
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {Company -like 'Contoso*'}.
ComplianceTagHoldApplied
n/a
Get-Mailbox
Get-MailUser
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {ComplianceTagHoldApplied -eq $true}.
ConsumerNetID
n/a
Get-LinkedUser
Get-User
String or $null
For example, Get-User -Filter {ConsumerNetID -ne $null}.
CountryCode
countryCode
Get-Contact
Get-LinkedUser
Get-Recipient
Get-SecurityPrincipal
Get-User
Integer
This filter requires the ISO 3166-1 three-digit country code for the user (for example, 840 for the United States). This property is used together with the c and co properties to define the user's country in Active Directory.
For example, Get-User -Filter {countryCode -eq 796}.
CountryOrRegion
co
Get-Contact
Get-LinkedUser
Get-Recipient
Get-SecurityPrincipal
Get-User
String
This filter requires the ISO 3166-1 country name for the user (for example, United States). You can select an available value in Active Directory Users and Computers ( Address tab > Country/region field), or the Exchange admin center (user properties > Contact information tab > Country/Region field).
When you select a user's country in Active Directory Users and Computers or the EAC, the corresponding values for the co and countryCode properties are automatically configured.
For example, Get-User -Filter {CountryOrRegion -like 'United*'}.
CustomAttribute1 to CustomAttribute15
extensionAttribute1 to extensionAttribute15
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
String (wildcards accepted) or $null
For example, Get-Recipient -Filter {CustomAttribute8 -like '*audited*'}.
Database
homeMDB
Get-Mailbox
Get-Recipient
String
This filter requires the distinguished name of the mailbox database. For example, Get-Mailbox -Filter {Database -eq 'CN=MBX DB02,CN=Databases,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
You can find the distinguished names of mailbox databases by running this command: `Get-MailboxDatabase
DefaultPublicFolderMailbox
msExchPublicFolderMailbox
Get-Mailbox
String or $null
This filter requires the distinguished name or canonical distinguished name of the public folder mailbox. For example, Get-Mailbox -Filter {DefaultPublicFolderMailbox -eq 'CN=PF Mailbox01,CN=Users,DC=contoso,DC=com'} or Get-Mailbox -Filter {DefaultPublicFolderMailbox -eq 'contoso.com/Users/PF Mailbox01'}.
To find the distinguished names of public folder mailboxes, run this command: `Get-Mailbox -PublicFolder
DeletedItemFlags
deletedItemFlags
Get-Mailbox
Get-SecurityPrincipal
DatabaseDefault (0), RetainUntilBackupOrCustomPeriod (3), or RetainForCustomPeriod (5).
For example, Get-Mailbox -Filter {DeletedItemFlags -ne 'DatabaseDefault'}.
DeliverToMailboxAndForward
deliverAndRedirect
Get-Mailbox
Get-MailPublicFolder
Get-MailUser
Get-MailPublicFolder
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {DeliverToMailboxAndForward -eq $true}.
Department
department
Get-Contact
Get-LinkedUser
Get-Recipient
Get-User
String (wildcards accepted) or $null
For example, Get-Recipient -Filter {Department -like 'Engineering*'}.
DirectReports
directReports
Get-Contact
Get-LinkedUser
Get-User
String or $null
This filter requires the distinguished name or canonical distinguished name of the direct report. For example, Get-User -Filter {DirectReports -eq 'CN=Angela Gruber,CN=Users,DC=contoso,DC=com'} or Get-User -Filter {DirectReports -eq 'contoso.com/Users/Angela Gruber'}.
To find the distinguished name of a direct report, replace <RecipientIdentity> with the name, alias, or email address of the recipient, and run this command: `Get-Recipient -Identity ""
DisabledArchiveDatabase
msExchDisabledArchiveDatabaseLink
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
String or $null
This filter requires the distinguished name of the disabled archive mailbox database. For example, Get-Mailbox -Filter {DisabledArchiveDatabase -eq 'CN=MBX DB02,CN=Databases,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
You can find the distinguished names of mailbox databases by running this command: `Get-MailboxDatabase
DisabledArchiveGuid
msExchDisabledArchiveDatabaseGUID
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
String or $null
This filter requires the GUID of the disabled archive mailbox. For example, Get-Mailbox -Filter {DisabledArchiveGuid -eq '6476f55e-e5eb-4462-a095-f2cb585d648d'}.
You can find the GUID of archive mailboxes by running this command: `Get-Mailbox -Archive
DisplayName
displayName
Get-CASMailbox
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-SecurityPrincipal
Get-UMMMailbox
Get-User
String (wildcards accepted)
For example, Get-Recipient -Filter {DisplayName -like 'Julia*'}.
DistinguishedName
distinguishedName
Get-CASMailbox
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-SecurityPrincipal
Get-UMMMailbox
Get-User
String
This filter requires the distinguished name of the recipient. For example, Get-Mailbox -Filter {DistinguishedName -eq 'CN=Basho Kato,CN=Users,DC=contoso,DC=com'}.
You can find the distinguished names of recipients by running this command: `Get-Recipient
EcpEnabled
n/a
Get-CASMailbox
Boolean ( $true or $false)
For example, Get-CASMailbox -Filter {EcpEnabled -eq $false}.
EmailAddresses
proxyAddresses
Get-CASMailbox
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-UMMMailbox
String (wildcards accepted)
For example, Get-Recipient -Filter {EmailAddresses -like '*marketing*'}.
When you use a complete email address, you don't need to account for the smtp: prefix. If you use wildcards, you do. For example, if {EmailAddresses -eq 'lila@fabrikam.com'} returns a match, {EmailAddresses -like 'lila*'} won't return a match, but {EmailAddresses -like '*lila*'} or {EmailAddresses -like 'smtp:lila*'} will return a match.
Although this is a multivalued property, the filter will return a match if the property contains the specified value.
EmailAddressPolicyEnabled
n/a
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Boolean ( $true or $false)
For example, Get-Recipient -Filter {EmailAddressPolicyEnabled -eq $false}.
EntryId
msExchPublicFolderEntryId
Get-MailPublicFolder
String (wildcards accepted)
For example, Get-MailPublicFolder -Filter {EntryId -like '*60000'}.
You can find the entry IDs of mail-enabled public folders by running this command: `Get-MailPublicFolder
EwsApplicationAccessPolicy
msExchEwsApplicationAccessPolicy
Get-CASMailbox
EnforceAllowList, EnforceBlockList. or $null
For example, Get-CASMailbox -Filter {EwsApplicationAccessPolicy -ne $null}.
EwsEnabled
msExchEwsEnabled
Get-CASMailbox
0 (disabled), 1 (enabled) or $null.
For example, Get-CASMailbox -Filter {EwsEnabled -eq 1}.
ExchangeGuid
msExchMailboxGuid
Get-Mailbox
Get-MailUser
Get-Recipient
Get-RemoteMailbox
String
For example, Get-Mailbox -Filter {ExchangeGuid -eq 'c80a753d-bd4a-4e19-804a-6344d833ecd8'}.
To find the Exchange GUID of a recipient, replace <RecipientIdentity> with the name, alias, or email address of the recipient, and run this command: `Get-Recipient -Identity ""
ExchangeUserAccountControl
msExchUserAccountControl
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
None (0) or AccountDisabled (2)
For example, Get-Mailbox -Filter {ExchangeUserAccountControl -eq 'AccountDisabled'}.
ExchangeVersion
msExchVersion
Get-CASMailbox
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-SecurityPrincipal
Get-UMMMailbox
Get-User
Integer
This property contains the earliest version of Exchange that you can use to manage the recipient. The property values that you see are different than the values that you need to use in the filter. To see the ExchangeVersion property values, run this command: `Get-Recipient
ExpansionServer
msExchExpansionServerName
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Recipient
String (wildcards accepted) or $null
For example, Get-Recipient -Filter {ExpansionServer -like '*Mailbox01'}.
For an exact match, you need to use the ExchangeLegacyDN value of the server. For example, Get-Recipient -Filter {ExpansionServer -eq '/o=Contoso Corporation/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Mailbox01'}
You can find the ExchangeLegacyDN value by running this command: `Get-ExchangeServer
ExtensionCustomAttribute1 to ExtensionCustomAttribute5
msExchExtensionCustomAttribute1 to msExchExtensionCustomAttribute5
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
String (wildcards accepted) or $null
For example, Get-Recipient -Filter {ExtensionCustomAttribute8 -like '*audited*'}.
ExternalDirectoryObjectId
msExchExternalDirectoryObjectId
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-User
String or $null
For example, Get-Recipient -Filter {ExternalDirectoryObjectId -ne $null}.
ExternalEmailAddress
targetAddress
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
String (wildcards accepted) or $null
For example, Get-Recipient -Filter {ExternalEmailAddress -like '*@fabrikam.com'}.
When you use a complete email address, you don't need to account for the smtp: prefix. If you use wildcards, you do. For example, if {ExternalEmailAddress -eq 'lila@fabrikam.com'} returns a match, {ExternalEmailAddress -like 'lila*'} won't return a match, but {ExternalEmailAddress -like '*lila*'} or {ExternalEmailAddress -like 'smtp:lila*'} will return a match.
ExternalOofOptions
msExchExternalOOFOptions
Get-Mailbox
External (0) or InternalOnly (1)
For example, Get-Mailbox -Filter {ExternalOofOptions -eq 'External'}.
Fax
facsimileTelephoneNumber
Get-Contact
Get-LinkedUser
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {Fax -like '206*'}.
FirstName
givenName
Get-Contact
Get-LinkedUser
Get-Recipient
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {FirstName -like 'Chris*'}.
ForwardingAddress
altRecipient
Get-Mailbox
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
String or $null
This filter requires the distinguished name or canonical distinguished name of the forwarding recipient. For example, Get-Mailbox -Filter {ForwardingAddress -eq 'CN=Angela Gruber,CN=Users,DC=contoso,DC=com'} or Get-Mailbox -Filter {ForwardingAddress -eq 'contoso.com/Users/Angela Gruber'}.
To find the distinguished name of a forwarding recipient, replace <RecipientIdentity> with the name, alias, or email address of the recipient, and run this command: `Get-Recipient -Identity ""
ForwardingSmtpAddress
msExchGenericForwardingAddress
Get-Mailbox
String (wildcards accepted) or $null
For example, Get-Mailbox -Filter {ForwardingSmtpAddress -like '*@fabrikam.com'}.
When you use a complete email address, you don't need to account for the smtp: prefix. If you use wildcards, you do. For example, if {ForwardingSmtpAddress -eq 'lila@fabrikam.com'} returns a match, {ForwardingSmtpAddress -like 'lila*'} won't return a match, but {ForwardingSmtpAddress -like '*lila*'} or {ForwardingSmtpAddress -like 'smtp:lila*'} will return a match.
GeneratedOfflineAddressBooks
msExchOABGeneratingMailboxBL
Get-Mailbox
String or $null
This property is only meaningful on arbitration mailboxes, so you need to use the Arbitration switch in the filter command. Also, This filter requires the distinguished name of the offline address book. For example, Get-Mailbox -Arbitration -Filter {GeneratedOfflineAddressBooks -eq 'CN=OAB 1,CN=Offline Address Lists,CN=Address Lists Container,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
You can find the distinguished names of offline address books by running this command: `Get-OfflineAddressBook
GrantSendOnBehalfTo
publicDelegates
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
String or $null
This filter requires the distinguished name or canonical distinguished name of the mail-enabled security principal (mailbox, mail user, or mail-enabled security group). For example, Get-Mailbox -Filter {GrantSendOnBehalfTo -eq 'CN=Angela Gruber,CN=Users,DC=contoso,DC=com'} or Get-Mailbox -Filter {GrantSendOnBehalfTo -eq 'contoso.com/Users/Angela Gruber'}.
To find the distinguished name of a mail-enabled security principal, replace <RecipientIdentity> with the name, alias, or email address of the recipient, and run this command: `Get-Recipient -Identity ""
GroupType
groupType
Get-DistributionGroup
Get-Group
None (0), Global (2), DomainLocal (4), BuiltinLocal (5), Universal (8), or SecurityEnabled (-2147483648).
Distribution groups have the value Universal, and mail-enabled security groups have the value Universal, SecurityEnabled. You can specify multiple values separated by commas, and the order doesn't matter. For example, Get-DistributionGroup -Filter {GroupType -eq 'Universal,SecurityEnabled'} returns the same results as Get-DistributionGroup -Filter {GroupType -eq 'SecurityEnabled,Universal'}.
This multivalued property will only return a match if the property equals the specified value.
Guid
objectGuid
Get-CASMailbox
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-SecurityPrincipal
Get-UMMMailbox
Get-User
String
For example, Get-Recipient -Filter {Guid -eq '8a68c198-be28-4a30-83e9-bffb760c65ba'}.
You can find the GUIDs of recipients by running this command: `Get-Recipient
HasActiveSyncDevicePartnership
Not applicable
Get-CASMailbox
Get-Recipient
Boolean ( $true or $false)
For example, Get-Recipient -Filter {HasActiveSyncDevicePartnership -eq $true}.
HiddenFromAddressListsEnabled
msExchHideFromAddressLists
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Boolean ( $true or $false)
For example, Get-Recipient -Filter {HiddenFromAddressListsEnabled -eq $true}.
HomePhone
homePhone
Get-Contact
Get-LinkedUser
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {HomePhone -like '206*'}.
Id
distinguishedName
Get-CASMailbox
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-UMMMailbox
Get-User
Get-SecurityPrincipal
This filter requires the distinguished name or canonical distinguished name of the recipient. For example, Get-Mailbox -Filter {Id -eq 'CN=Angela Gruber,CN=Users,DC=contoso,DC=com'} or Get-Mailbox -Filter {Id -eq 'contoso.com/Users/Angela Gruber'}.
To find the distinguished name of a recipient, replace <RecipientIdentity> with the name, alias, or email address of the recipient, and run this command: `Get-Recipient -Identity ""
IgnoreMissingFolderLink
n/a
Get-MailPublicFolder
Boolean ( $true or $false)
For example, Get-MailPublicFolder -Filter {IgnoreMissingFolderLink -eq $true}.
ImapEnabled
n/a
Get-CASMailbox
Boolean ( $true or $false)
For example, Get-CASMailbox -Filter {ImapEnabled -eq $false}.
ImmutableId
msExchGenericImmutableId
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
String or $null
For example, Get-Mailbox -Filter {ImmutableId -ne $null}.
IncludeInGarbageCollection
n/a
Get-Mailbox
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {IncludeInGarbageCollection -eq $true}.
Initials
initials
Get-Contact
Get-LinkedUser
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {Initials -like 'B.'}.
InPlaceHolds
msExchUserHoldPolicies
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
String
This filter requires the InPlaceHoldIdentity value of the mailbox search. For example, Get-Mailbox -Filter {InPlaceHolds -eq '9d0f81154cc64c6b923ecc0be5ced0d7'}.
To find the InPlaceHoldIdentity values of mailbox searches, run this command: `Get-MailboxSearch
InPlaceHoldsRaw
n/a
Get-LinkedUser
Get-User
String
This filter requires the InPlaceHoldIdentity value of the mailbox search. For example, Get-Mailbox -Filter {InPlaceHoldsRaw -eq '9d0f81154cc64c6b923ecc0be5ced0d7'}.
To find the InPlaceHoldIdentity values of mailbox searches, run this command: `Get-MailboxSearch
IsDirSynced
msExchIsMSODirsynced
Get-Contact
Get-DistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailUser
Get-RemoteMailbox
Get-User
Boolean ( $true or $false)
For example, Get-User -Filter {IsDirSynced -eq $true}.
IsExcludedFromServingHierarchy
n/a
Get-Mailbox
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {IsExcludedFromServingHierarchy -eq $true}.
IsHierarchyReady
n/a
Get-Mailbox
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {IsHierarchyReady -eq $false}.
IsHierarchySyncEnabled
n/a
Get-Mailbox
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {IsHierarchySyncEnabled -eq $false}.
IsInactiveMailbox
n/a
Get-Mailbox
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {IsInactiveMailbox -eq $false}.
IsLinked
n/a
Get-LinkedUser
Get-Mailbox
Get-User
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {IsLinked -eq $true}.
IsMailboxEnabled
n/a
Get-Mailbox
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {IsMailboxEnabled -eq $false}.
IsResource
n/a
Get-Mailbox
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {IsResource -eq $true}.
IsSecurityPrincipal
n/a
Get-LinkedUser
Get-User
Boolean ( $true or $false)
For example, Get-User -Filter {IsSecurityPrincipal -eq $false}.
IsShared
n/a
Get-Mailbox
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {IsShared -eq $true}.
IsSoftDeletedByDisable
n/a
Get-LinkedUser
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
Get-User
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {IsSoftDeletedByDisable -eq $true}.
IsSoftDeletedByRemove
n/a
Get-LinkedUser
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
Get-User
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {IsSoftDeletedByRemove -eq $true}.
IssueWarningQuota
mDBStorageQuota
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
A byte quantified size value (for example, 300MB or 1.5GB), or Unlimited. Unqualified values are treated as bytes.
You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter {IssueWarningQuota -eq 'Unlimited'} or Get-Mailbox -Filter {IssueWarningQuota -ne 'Unlimited'}.
You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: `Get-Mailbox
JournalArchiveAddress
n/a
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
String
This property uses an SMTP email address. For example, Get-Mailbox -Filter {JournalArchiveAddress -eq 'michelle@contoso.com'}.
LanguagesRaw
msExchUserCulture
Get-Mailbox
String (wildcards accepted) or $null
This property is named Languages in the properties of a mailbox, and it contains the language preference for the mailbox in the format <ISO 639 two-letter culture code>-<ISO 3166 two-letter subculture code>. For example, United States English is en-US. For more information, see CultureInfo Class.
You can specify multiple values separated by commas, but the order matters. For example, Get-Mailbox -Filter {LanguagesRaw -eq 'en-US,es-MX'} returns different results than Get-Mailbox -Filter {LanguagesRaw -eq 'es-MX,en-US'}.
For single values, this multivalued property will return a match if the property contains the specified value.
LastExchangeChangedTime
msExchLastExchangeChangedTime
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
A date/time value or $null
For example, Get-Mailbox -Filter {LastExchangeChangedTime -ne $null}.
LitigationHoldDate
msExchLitigationHoldDate
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
A date/time value or $null
For example, Get-Mailbox -Filter {LitigationHoldDate -gt '8/13/2017'}.
LitigationHoldEnabled
n/a
Get-Mailbox
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {LitigationHoldEnabled -eq $true}.
LitigationHoldOwner
msExchLitigationHoldOwner
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
String (wildcards accepted) or $null
This property uses the user principal name of the litigation hold owner. For example, Get-Mailbox -Filter {LitigationHoldOwner -eq 'agruber@contoso.com'}.
LastName
sn
Get-Contact
Get-LinkedUser
Get-Recipient
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {LastName -like 'Martin*'}.
LegacyExchangeDN
legacyExchangeDN
Get-CASMailbox
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
Get-UMMailbox
Get-User
String (wildcards accepted)
For example, Get-User -Filter {LegacyExchangeDN -like '*-Osca'}.
You can find LegacyExchangeDN values for users by running this command: `Get-User
MailboxContainerGUID
msExchMailboxContainerGuid
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
String or $null
For example, Get-Mailbox -Filter {MailboxContainerGUID -ne $null}.
MailboxMoveBatchName
msExchMailboxMoveBatchName
Get-Mailbox
Get-MailUser
Get-Recipient
Get-RemoteMailbox
String (wildcards accepted) or $null
This property includes the name of the migration batch. For example, Get-Mailbox -Filter {MailboxMoveBatchName -like '*LocalMove 01*'}.
You can find the names of migration batches by running the Get-MigrationBatch command. Note that migration batches that you create in the Exchange admin center use the naming convention MigrationService:<MigrationBatchName>.
MailboxMoveFlags
msExchMailboxMoveFlags
Get-Mailbox
Get-MailUser
Get-Recipient
Get-RemoteMailbox
For valid values, see the description of the Flags parameter inGet-MoveRequest.
For example, Get-Mailbox -Filter {MailboxMoveFlags -ne 'None'}.
You can specify multiple values separated by commas, and the order doesn't matter. For example, Get-Recipient -Filter {MailboxMoveFlags -eq 'IntraOrg,Pull'} returns the same results as Get-Recipient -Filter {MailboxMoveFlags -eq 'Pull,IntraOrg'}.
This multivalued property will only return a match if the property equals the specified value.
MailboxMoveRemoteHostName
msExchMailboxMoveRemoteHostName
Get-Mailbox
Get-MailUser
Get-Recipient
Get-RemoteMailbox
String or $null
For example, Get-Mailbox -Filter {MailboxMoveRemoteHostName -ne $null}.
MailboxMoveSourceMDB
msExchMailboxMoveSourceMDBLink
Get-Mailbox
Get-MailUser
Get-Recipient
Get-RemoteMailbox
String or $null
This filter requires the distinguished name of the source mailbox database. For example, Get-Mailbox -Filter {MailboxMoveSourceMDB -eq 'CN=MBX DB02,CN=Databases,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
You can find the distinguished names of mailbox databases by running this command: `Get-MailboxDatabase
MailboxMoveStatus
msExchMailboxMoveStatus
Get-Mailbox
Get-MailUser
Get-Recipient
Get-RemoteMailbox
For valid values, see the description of the MoveStatus parameter inGet-MoveRequest.
For example, Get-Mailbox -Filter {MailboxMoveStatus -eq 'Completed'}.
MailboxMoveTargetMDB
msExchMailboxMoveTargetMDBLink
Get-Mailbox
Get-MailUser
Get-Recipient
Get-RemoteMailbox
String or $null
This filter requires the distinguished name of the target mailbox database. For example, Get-Mailbox -Filter {MailboxMoveTargetMDB -eq 'CN=MBX DB02,CN=Databases,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
You can find the distinguished names of mailbox databases by running this command: `Get-MailboxDatabase
MailboxPlan
msExchParentPlanLink
Get-Mailbox
String or $null
Mailbox plans correspond to Office 365 license types. The availability of a license plans is determined by the selections that you make when you enroll your domain.
For example, Get-Mailbox -Filter {MailboxPlan -ne $null}.
MailboxRelease
msExchMailboxRelease
Get-Mailbox
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-User
None, E14, E15, or $null.
For example, Get-Recipient -Filter {MailboxRelease -ne $null}.
MailTipTranslations
msExchSenderHintTranslations
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
String (wildcards accepted) $null
When you use this property in a filter, you need to account for the leading and trailing HTML tags. For example, Get-DistributionGroup -Filter {MailTipTranslations -like '*is not monitored.*'}.
ManagedBy
managedBy
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-Recipient
String or $null
This filter requires the distinguished name or canonical distinguished name of the group owner (a mail-enabled security principal, which is a mailbox, mail user, or mail-enabled security group). For example, Get-Mailbox -Filter {ManagedBy -eq 'CN=Angela Gruber,CN=Users,DC=contoso,DC=com'} or Get-Mailbox -Filter {ManagedBy -eq 'contoso.com/Users/Angela Gruber'}.
To find the distinguished name of a mail-enabled security principal, replace <RecipientIdentity> with the name, alias, or email address of the recipient, and run this command: `Get-Recipient -Identity ""
ManagedFolderMailboxPolicy
msExchMailboxTemplateLink
Get-Mailbox
Get-Recipient
String or $null
Managed folder mailbox policies aren't available in Exchange 2013 or later.
For example, Get-Mailbox -Filter {ManagedFolderMailboxPolicy -eq $null}.
This filter requires the distinguished name of the managed folder mailbox policy. For example, Get-Mailbox -Filter {ManagedFolderMailboxPolicy -eq 'CN=MFM Inbox Policy,CN=ELC Mailbox Policies,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
You can find the distinguished names of managed folder mailbox policies on Exchange 2010 servers by running this command: `Get-ManagedFolderMailboxPolicy
Manager
manager
Get-Contact
Get-LinkedUser
Get-Recipient
Get-User
String or $null
This filter requires the distinguished name or canonical distinguished name of the manager (a mailbox or mail user). For example, Get-User -Filter {Manager -eq 'CN=Angela Gruber,CN=Users,DC=contoso,DC=com'} or Get-Mailbox -Filter {Manager -eq 'contoso.com/Users/Angela Gruber'}.
To find the distinguished name of a manager, replace <RecipientIdentity> with the name, alias, or email address of the recipient, and run this command: `Get-Recipient -Identity ""
MAPIEnabled
n/a
Get-CASMailbox
Boolean ( $true or $false)
For example, Get-CASMailbox -Filter {MAPIEnabled -eq $false}.
MasterAccountSid
msExchMasterAccountSid
Get-Mailbox
Get-LinkedUser
Get-Recipient
Get-SecurityPrincipal
Get-User
String or $null
For example, Get-Mailbox -Filter {MasterAccountSid -ne $null}.
This value is blank ( $null) for mailboxes with associated user accounts, and S-1-5-10 (Self) for mailboxes without associated user accounts (for example, shared mailboxes, resource mailboxes, discovery search mailboxes, arbitration mailboxes, and public folder mailboxes).
MaxBlockedSenders
msExchMaxBlockedSenders
Get-Mailbox
Integer or $null
For example, Get-Mailbox -Filter {MaxBlockedSenders -gt 0}.
MaxReceiveSize
delivContLength
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
A byte quantified size value (for example, 75MB), or Unlimited. Unqualified values are treated as bytes.
You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter {MaxReceiveSize -eq 'Unlimited'} or Get-Mailbox -Filter {MaxReceiveSize -ne 'Unlimited'}.
You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: `Get-Mailbox
MaxSafeSenders
msExchMaxSafeSenders
Get-Mailbox
Integer or $null
For example, Get-Mailbox -Filter {MaxSafeSenders -gt 0}.
MaxSendSize
submissionContLength
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
A byte quantified size value (for example, 75MB), or Unlimited. Unqualified values are treated as bytes.
You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter {MaxSendSize -eq 'Unlimited'} or Get-Mailbox -Filter {MaxSendSize -ne 'Unlimited'}.
You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: `Get-Mailbox
MemberDepartRestriction
msExchGroupDepartRestriction
Get-DistributionGroup
Closed (0), Open (1), or ApprovalRequired (2).
For example, Get-DistributionGroup -Filter {MemberDepartRestriction -eq 'ApprovalRequired'}.
MemberJoinRestriction
msExchGroupDepartRestriction
Get-DistributionGroup
Closed (0), Open (1), or ApprovalRequired (2).
For example, Get-DistributionGroup -Filter {MemberJoinRestriction -eq 'ApprovalRequired'}.
MemberOfGroup
memberOf
Get-CASMailbox
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-SecurityPrincipal
Get-UMMMailbox
Get-User
String or $null
This filter requires the distinguished name or canonical distinguished name of the distribution group or mail-enabled security group. For example, Get-User -Filter {MemberOfGroup -eq 'CN=Marketing Department,CN=Users,DC=contoso,DC=com'} or Get-User -Filter {MemberOfGroup -eq 'contoso.com/Users/Marketing Group'}.
To find the distinguished name of a group, replace <GroupIdentity> with the name, alias, or email address of the group, and run this command: `Get-DistributionGroup -Identity ""
Members
member
Get-DistributionGroup
Get-Group
Get-Recipient
Get-SecurityPrincipal
String or $null
This filter requires the distinguished name or canonical distinguished name of the group member. For example, Get-Group -Filter {Members -eq 'CN=Angela Gruber,CN=Users,DC=contoso,DC=com'} or Get-User -Filter {Members -eq 'contoso.com/Users/Angela Gruber'}.
To find the distinguished name of a group member, replace <RecipientIdentity> with the name, alias, or email address of the group member, and run this command: `Get-Recipient -Identity ""
MobilePhone
mobile
Get-Contact
Get-LinkedUser
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {MobilePhone -like '*5555'}.
ModeratedBy
msExchModeratedByLink
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
String
This filter requires the distinguished name or canonical distinguished name of the group moderator (a mail-enabled security principal, which is a mailbox, mail-user, or mail-enabled security group). For example, Get-DistributionGroup -Filter {ModeratedBy -eq 'CN=Angela Gruber,CN=Users,DC=contoso,DC=com'} or Get-DistributionGroup -Filter {ModeratedBy -eq 'contoso.com/Users/Angela Gruber'}.
To find the distinguished name of a mail-enabled security principal, replace <RecipientIdentity> with the name, alias, or email address of the recipient, and run this command: `Get-Recipient -Identity ""
ModerationEnabled
msExchEnableModeration
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
Boolean ( $true or $false)
For example, Get-DistributionGroup -Filter {ModerationEnabled -eq $true}.
Name
name
Get-CASMailbox
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-SecurityPrincipal
Get-UMMMailbox
Get-User
String (wildcards accepted)
For example, Get-User -Filter {Name -like 'Laura*'}.
NetID
n/a
Get-LinkedUser
Get-Mailbox
Get-User
String or $null
This property is populated for Office 365 mailboxes in hybrid environments. A sample value is 1003BFFD9A0CFA03.
For example, Get-User -Filter {NetId -ne $null}.
Notes
info
Get-Contact
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Recipient
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {Notes -like '*Events Team*'}.
ObjectCategory
objectCategory
Get-CASMailbox
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-SecurityPrincipal
Get-UMMMailbox
Get-User
String
This filter requires the canonical distinguished name of the object. The value uses the syntax <domain>/Configuration/Schema/<Type>.
Valid <Type> values are: Person for mailboxes, mail users, and mail contacts, Group for distribution groups and mail-enabled security groups, ms-Exch-Public-Folder for mail-enabled public folders, and ms-Exch-Dynamic-Distribution-List for dynamic distribution groups.
For example, Get-Recipient -Filter {ObjectCategory -eq 'contoso.com/Configuration/Schema/Group'}.
ObjectClass
objectClass
Get-CASMailbox
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-SecurityPrincipal
Get-UMMMailbox
Get-User
String
The value of this property is top, person, organizationalPerson, user for mailboxes and mail users, top, person, organizationalPerson, contact for mail contacts, top, group for distribution groups and mail-enabled security groups, msExchDynamicDistributionList for dynamic distribution groups and top, publicFolder for mail-eanbled public folders
For example, Get-Recipient -Filter {ObjectClass -eq 'Contact'}.
Although this is a multivalued property, the filter will return a match if the property contains the specified value.
Office
physicalDeliveryOfficeName
Get-Contact
Get-LinkedUser
Get-Mailbox
Get-Recipient
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {Office -like '22*'}.
OfflineAddressBook
msExchUseOAB
Get-Mailbox
String or $null
This filter requires the distinguished name of the offline address book. For example, Get-Mailbox -Arbitration -Filter {OfflineAddressBook -eq 'CN=OAB 1,CN=Offline Address Lists,CN=Address Lists Container,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}
You can find the distinguished names of offline address books by running this command: `Get-OfflineAddressBook
OnPremisesObjectId
n/a
Get-MailPublicFolder
String or $null
For example, Get-MailPublicFolder -Filter {OnPremisesObjectId -ne $null}.
OperatorNumber
msExchUMOperatorNumber
Get-UMMailbox
String (wildcards accepted) or $null
For example, Get-UMMailbox -Filter {OperatorNumber -eq 5}.
OtherFax
otherFacsimileTelephoneNumber
Get-Contact
Get-LinkedUser
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {OtherFax -like '206*'}.
OtherHomePhone
otherHomePhone
Get-Contact
Get-LinkedUser
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {OtherHomePhone -like '206*'}.
OtherTelephone
otherTelephone
Get-Contact
Get-LinkedUser
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {OtherTelephone -like '206*'}.
OWAEnabled
n/a
Get-CASMailbox
Boolean ( $true or $false)
The filter operates backwards. For example, Get-CASMailbox -Filter {OWAEnabled -eq $true} returns mailboxes where the OWAEnabled property is False, and Get-CASMailbox -Filter {OWAEnabled -eq $false} returns mailboxes where the OWAEnabled property is True
OWAforDevicesEnabled
msExchOmaAdminWirelessEnable
Get-CASMailbox
Boolean ( $true or $false)
For example, Get-CASMailbox -Filter {OWAForDevicesEnabled -eq $true}.
OWAMailboxPolicy
msExchOWAPolicy
Get-CASMailbox
Get-Recipient
String or $null
This filter requires the distinguished name of the Outlook on the web mailbox policy (formerly known as an Outlook Web App mailbox policy). For example, Get-CASMailbox -Filter {OWAMailboxPolicy -eq 'CN=Default,CN=OWA Mailbox Policies,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
You can find the distinguished names of Outlook on the web mailbox policies by running this command: `Get-OwaMailboxPolicy
Pager
pager
Get-Contact
Get-LinkedUser
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {Pager -like '206*'}.
PersistedCapabilities
n/a
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
String or $null
Typically, the value of this property something other than $null (blank) for Office 365 accounts and mailboxes. For more information about the valid property values, seeCapability enumeration.
For example, Get-Mailbox -Filter {PersistedCapabilities -ne $null}.
Although this is a multivalued property, the filter will return a match if the property contains the specified value.
Phone
telephoneNumber
Get-Contact
Get-LinkedUser
Get-Recipient
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {Phone -like '206*'}.
PhoneProviderId
msExchUMPhoneProvider
Get-UMMailbox
String (wildcards accepted) or $null
For example, Get-UMMMailbox -Filter {PhoneProviderId -like '*206*'}.
PhoneticDisplayName
msDS-PhoneticDisplayName
Get-Contact
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-MailPublicFolder
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {PhoneticDisplayName -like '*Lila*'}.
PoliciesExcluded
msExchPoliciesExcluded
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
String or $null
For example, Get-Recipient -Filter {PoliciesExcluded -ne $null}.
PoliciesIncluded
msExchPoliciesIncluded
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
String or $null
For example, Get-Recipient -Filter {PoliciesIncluded -eq $null}.
PopEnabled
n/a
Get-CASMailbox
Boolean ( $true or $false)
For example, Get-CASMailbox -Filter {POPEnabled -eq $false}.
PostalCode
postalCode
Get-Contact
Get-LinkedUser
Get-Recipient
Get-User
String (wildcards accepted) or $null
For example, Get-Recipient -Filter {PostalCode -eq 90210}.
PostOfficeBox
postOfficeBox
Get-Contact
Get-LinkedUser
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {PostOfficeBox -like '*555*'}.
PreviousRecipientTypeDetails
msExchPreviousRecipientTypeDetails
Get-LinkedUser
Get-User
String or $null
For valid values, see the description of the RecipientTypeDetails parameter inGet-Recipient.
For example, Get-User -Filter {PreviousRecipientTypeDetails -ne $null}.
PrimarySmtpAddress
n/a
Get-CASMailbox
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-UMMailbox
String (wildcards accepted)
For example, Get-Recipient -Filter {PrimarySMTPAddress -like '*@fabrikam.com'}.
ProhibitSendQuota
mDBOverQuotaLimit
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
A byte quantified size value (for example, 300MB or 1.5GB), or Unlimited. Unqualified values are treated as bytes.
You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter {ProhibitSendQuota -eq 'Unlimited'} or Get-Mailbox -Filter {ProhibitSendQuota -ne 'Unlimited'}.
You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: `Get-Mailbox
ProhibitSendReceiveQuota
mDBOverHardQuotaLimit
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
A byte quantified size value (for example, 300MB or 1.5GB), or Unlimited. Unqualified values are treated as bytes.
You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter {ProhibitSendReceiveQuota -eq 'Unlimited'} or Get-Mailbox -Filter {ProhibitSendReceiveQuota -ne 'Unlimited'}.
You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: `Get-Mailbox
ProtocolSettings
protocolSettings
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
String (wildcards accepted) or $null
The default value of this property on mailboxes is RemotePowerShell§1. This property is populated with additional values when you use Set-CASMailbox to disable prococols (for example, POP3 or IMAP4).
For example, Get-Mailbox -Filter {ProtocolSettings -like '*POP3*'}.
PublicFolderContacts
pFContacts
Get-MailPublicFolder
String or $null
This property is displayed as Contacts in the results of the command `Get-MailPublicFolder -Identity
QueryBaseDN
msExchQueryBaseDN
Get-Mailbox
String or $null
This property was used in Exchange 2007 global address list segregation to specify a location in Active Directory. This feature was replaced by address book policies in Exchange 2010 Service Pack 2, so the value of this property should always be blank ( $null).
For example, Get-Mailbox -Filter {QueryBaseDN -ne $null}.
RecipientContainer
msExchDynamicDLBaseDN
Get-DynamicDistributionGroup
String or $null
This filter requires the distinguished name or canonical distinguished name of the organizational unit or container in Active Directory. For example, Get-DynamicDistributionGroup -Filter {RecipientContainer -eq 'CN=Users,DC=contoso,DC=com'} or Get-DynamicDistributionGroup -Filter {RecipientContainer -eq 'contoso.com/Users'}
To find the distinguished names or canonical distinguished names of organizational units and containers in Active Directory, run this command: `Get-OrganizationalUnit -IncludeContainers
RecipientLimits
msExchRecipLimit
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
Integer or Unlimited
For example, Get-Mailbox -Filter {RecipientLimits -ne 'Unlimited'}.
RecipientType
n/a
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-SecurityPrincipal
Get-User
DynamicDistributionGroup, MailContact, MailNonUniversalGroup, MailUniversalDistributionGroup, MailUniversalSecurityGroup, MailUser, PublicFolder or UserMailbox
For example, Get-Recipient -Filter {RecipientType -eq 'MailContact'}.
RecipientTypeDetails
n/a
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-SecurityPrincipal
Get-User
String
For valid values, see the description of the RecipientTypeDetails parameter inGet-Recipient.
For example, Get-Recipient -Filter {RecipientTypeDetails -eq 'SharedMailbox'}.
RecoverableItemsQuota
msExchDumpsterQuota
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
A byte quantified size value (for example, 300MB or 1.5GB), or Unlimited. Unqualified values are treated as bytes.
You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter {RecoverableItemsQuota -eq 'Unlimited'} or Get-Mailbox -Filter {RecoverableItemsQuota -ne 'Unlimited'}.
You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: `Get-Mailbox
RecoverableItemsWarningQuota
msExchDumpsterWarningQuota
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
A byte quantified size value (for example, 300MB or 1.5GB), or Unlimited. Unqualified values are treated as bytes.
You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter {RecoverableItemsWarningQuota -eq 'Unlimited'} or Get-Mailbox -Filter {RecoverableItemsWarningQuota -ne 'Unlimited'}.
You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: `Get-Mailbox
RejectMessagesFrom
unauthOrig
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
String or $null
This filter requires the distinguished name of the individual recipient (a mailbox, mail user, or mail contact). For example, Get-DistributionGroup -Filter {RejectMessagesFrom -eq 'CN=Yuudai Uchida,CN=Users,DC=contoso,DC=com'} or Get-DistributionGroup -Filter {RejectMessagesFrom -eq 'contoso.com/Users/Angela Gruber'}.
To find the distinguished name of the individual recipient, replace <RecipientIdentity> with the name, alias, or email address of the recipient, and run this command: `Get-Recipient -Identity ""
RejectMessagesFromDLMembers
dLMemRejectPerms
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
String or $null
This filter requires the distinguished name or canonical distinguished name of the group (a distribution group, mail-enabled security group, or dynamic distribution group). For example, Get-Mailbox -Filter {RejectMessagesFromDLMembers -eq 'CN=Marketing Department,CN=Users,DC=contoso,DC=com'}. or Get-Mailbox -Filter {RejectMessagesFromDLMembers -eq 'contoso.com/Users/Marketing Department'}.
To find the distinguished name of the group, replace <GroupIdentity> with the name, alias, or email address of the group, and run one of these commands: `Get-DistributionGroup -Identity ""
RemoteAccountPolicy
msExchSyncAccountsPolicyDN
Get-Mailbox
String or $null
This filter requires the distinguished name of the remote account policy. For example, Get-Mailbox -Filter {RemoteAccountPolicy -eq 'CN=Contoso Remote Account Policy,CN=Remote Accounts Policies Container,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
RemotePowerShellEnabled
n/a
Get-User
Boolean ( $true or $false)
For example, Get-User -Filter {RemotePowerShellEnabled -eq $false}.
RemoteRecipientType
msExchRemoteRecipientType
Get-Mailbox
Get-RemoteMailbox
None (0), ProvisionMailbox (1), ProvisionArchive (2), Migrated (4), DeprovisionMailbox (8), DeprovisionArchive (16), RoomMailbox (32), EquipmentMailbox (64), SharedMailbox (96), TeamMailbox (128), or $null.
For example, Get-RemoteMailbox -Filter {RemoteRecipientType -eq 'ProvisionMailbox'}.
ReportToManagerEnabled
reportToOwner
Get-DistributionGroup
Get-DynamicDistributionGroup
Boolean ( $true or $false)
For example, Get-DistributionGroup -Filter {ReportToManagerEnabled -eq $true}.
ReportToOriginatorEnabled
reportToOriginator
Get-DistributionGroup
Get-DynamicDistributionGroup
Boolean ( $true or $false)
For example, Get-DistributionGroup -Filter {ReportToOriginatorEnabled -eq $false}.
RequireAllSendersAreAuthenticated
msExchRequireAuthToSendTo
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
Get-SecurityPrincipal
Boolean ( $true or $false)
This property is displayed as RequireSenderAuthenticationEnabled in the results of the command `Get- -Identity
ResourceCapacity
msExchResourceCapacity
Get-Mailbox
Integer or $null
For example, Get-Mailbox -Filter {ResourceCapacity -gt 15}
ResourceCustom
n/a
Get-Mailbox
String or $null
You create custom resource properties by using the Set-ResourceConfig cmdlet. For example, Set-ResourceConfig -ResourcePropertySchema Room/Whiteboard,Equipment/Van. After you create the properties, you can assign them to room or equipment mailboxes. For example, Set-Mailbox -Identity "Conference Room 1" -ResourceCustom Whiteboard.
When you search for values, use the custom resource property that's assigned to the room or equipment mailbox. For example, Get-Mailbox -Filter {ResourceCustom -eq 'Whiteboard'}.
ResourceType
n/a
Get-Mailbox
Get-Recipient
Room (0), Equipment (1), or $null
For example, Get-Mailbox -Filter {ResourceType -eq 'Equipment'}
RetainDeletedItemsFor
garbageCollPeriod
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
A time span value: dd.hh:mm:ss where dd = days, hh = hours, mm = minutes, and ss = seconds.
You can't use the Filter parameter to look for time span values for this property. Instead, use this syntax: `Get-Mailbox
RetentionComment
msExchRetentionComment
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
String (wildcards accepted) or $null
For example, Get-Mailbox -Filter {RetentionComment -like '*7 years*'}
RetentionPolicy
n/a
Get-Mailbox
Get-Recipient
String or $null
This filter requires the distinguished name of the retention policy. For example, Get-Mailbox -Filter {RetentionPolicy -eq 'CN=Default MRM Policy,CN=Retention Policies Container,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
To find the distinguished names of retention policies, run this command: `Get-RetetionPolicy
RetentionUrl
msExchRetentionURL
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
String (wildcards accepted) or $null
For example, Get-Mailbox -Filter {RetentionUrl -like 'https://intranet.contoso.com/*'}
RoleAssignmentPolicy
msExchRBACPolicyLink
Get-Mailbox
String (wildcards accepted) or $null
This filter requires the distinguished name of the role assignment policy in Office 365. For example, Get-Mailbox -Filter {RoleAssignmentPolicy -eq 'CN=Default Role Assignment Policy,CN=Policies,CN=RBAC,CN=Configuration,CN=contoso.onmicrosoft.com,CN=ConfigurationUnits,DC=NAMPR10A001,DC=PROD,DC=OUTLOOK,DC=COM'}.
To find the distinguished names of role assignment policies in Office 365, run this command: `Get-RoleAssignmentPolicy
RulesQuota
msExchMDBRulesQuota
Get-Mailbox
A byte quantified size value (for example, 50B or 128KB). Unqualified values are treated as bytes.
You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: `Get-Mailbox
SafeRecipientsHash
msExchSafeRecipientsHash
Get-Recipient
Blank ( $null) or a hashed value.
Realistically, you can only use this value to filter on blank or non-blank values. For example, Get-Recipient -Filter {SafeRecipientsHash -ne $null}.
SafeSendersHash
msExchSafeSendersHash
Get-Recipient
Blank ( $null) or a hashed value.
Realistically, you can only use this value to filter on blank or non-blank values. For example, Get-Recipient -Filter {SafeSendersHash -ne $null}.
SamAccountName
SamAccountName
Get-CASMailbox
Get-DistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-UMMailbox
Get-User
String (wildcards accepted) or $null
For example, Get-Recipient -Filter {SamAccountName -like '*laura*'}
SCLDeleteThresholdInt
msExchMessageHygieneSCLDeleteThreshold
Get-Mailbox
-2147483648 (SCL value 0), -2147483647 (SCL value 1), -2147483646 (SCL value 2), -2147483645 (SCL value 3), -2147483644 (SCL value 4), -2147483643 (SCL value 5), -2147483642 (SCL value 6), -2147483641 (SCL value 7), -2147483640 (SCL value 8), -2147483639 (SCL value 9) or $null
This property is displayed as SCLDeleteThreshold in the results of the command `Get-Mailbox -Identity
SCLJunkThresholdInt
msExchMessageHygieneSCLJunkThreshold
Get-Mailbox
-2147483648 (SCL value 0), -2147483647 (SCL value 1), -2147483646 (SCL value 2), -2147483645 (SCL value 3), -2147483644 (SCL value 4), -2147483643 (SCL value 5), -2147483642 (SCL value 6), -2147483641 (SCL value 7), -2147483640 (SCL value 8), -2147483639 (SCL value 9) or $null
This property is displayed as SCLJunkThreshold in the results of the command `Get-Mailbox -Identity
SCLQuarantineThresholdInt
msExchMessageHygieneSCLQuarantineThreshold
Get-Mailbox
-2147483648 (SCL value 0), -2147483647 (SCL value 1), -2147483646 (SCL value 2), -2147483645 (SCL value 3), -2147483644 (SCL value 4), -2147483643 (SCL value 5), -2147483642 (SCL value 6), -2147483641 (SCL value 7), -2147483640 (SCL value 8), -2147483639 (SCL value 9) or $null
This property is displayed as SCLQuarantineThreshold in the results of the command `Get-Mailbox -Identity
SCLRejectThresholdInt
msExchMessageHygieneSCLRejectThreshold
Get-Mailbox
-2147483648 (SCL value 0), -2147483647 (SCL value 1), -2147483646 (SCL value 2), -2147483645 (SCL value 3), -2147483644 (SCL value 4), -2147483643 (SCL value 5), -2147483642 (SCL value 6), -2147483641 (SCL value 7), -2147483640 (SCL value 8), -2147483639 (SCL value 9) or $null
This property is displayed as SCLRejectThreshold in the results of the command `Get-Mailbox -Identity
SendOofMessageToOriginatorEnabled
oOFReplyToOriginator
Get-DistributionGroup
Get-DynamicDistributionGroup
Boolean ( $true or $false)
For example, Get-DistributionGroup -Filter {SendOofMessageToOriginatorEnabled -eq $true}.
ServerLegacyDN
msExchHomeServerName
Get-CASMailbox
Get-Mailbox
Get-Recipient
Get-UMMailbox
String (wildcards accepted) or $null
For example, Get-Mailbox -Filter {ServerLegacyDN -like '*Mailbox01'}.
This is an example of a complete ServerLegacyDN value: /o=Contoso Corporation/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Mailbox01.
ServerName
n/a
Get-CASMailbox
Get-Mailbox
Get-Recipient
Get-UMMailbox
String or $null
For example, Get-Recipient -Filter {ServerName -eq 'Mailbox01'}.
SharingPolicy
msExchSharingPolicyLink
Get-Mailbox
Get-Recipient
String or $null
This filter requires the distinguished name of the sharing policy. For example, Get-Mailbox -Filter {SharingPolicy -eq 'CN=Custom Sharing Policy,CN=Federation,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
To find the distinguished names of sharing policies, run this command: `Get-SharingPolicy
Sid
objectSid
Get-Group
Get-LinkedUser
Get-SecurityPrincipal
Get-User
String
For example, Get-User -Filter {Sid -eq 's-1-5-21-3628364307-1600040346-819251021-2603'}.
SidHistory
SIDHistory
Get-Group
Get-LinkedUser
Get-User
String or $null
For example, Get-User -Filter {SidHistory -eq 's-1-5-21-3628364307-1600040346-819251021-2603'}.
SimpleDisplayName
displayNamePrintable
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {SimpleDisplayName -like '*lila*'}.
SingleItemrecoveryEnabled
n/a
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {SingleItemRecoveryEnabled -eq $true}.
SKUAssigned
n/a
Get-LinkedUser
Get-Mailbox
Get-MailUser
Get-Recipient
Get-User
Boolean ( $true or $false) or $null.
For example, Get-User -Filter {SKUAssigned -eq $true}.
SourceAnchor
n/a
Get-Mailbox
String (wildcards accepted) or $null
For example, Get-Mailbox -Filter {SourceAnchor -ne $null}.
StateOrProvince
st
Get-Contact
Get-LinkedUser
Get-Recipient
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {StateOrProvince -like '*Carolina'}.
StreetAddress
streetAddress
Get-Contact
Get-LinkedUser
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {StreetAddress -like '*36th Ave NE*'}.
StsRefreshTokensValidFrom
msExchStsRefreshTokensValidFrom
Get-LinkedUser
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
Get-User
A date/time value or $null
For example, Get-User -Filter {StsRefreshTokensValidFrom -gt '8/1/2017'}.
TelephoneAssistant
telephoneAssistant
Get-Contact
Get-LinkedUser
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {TelephoneAssistant -like '206*'}.
ThrottlingPolicy
msExchThrottlingPolicyDN
Get-Mailbox
String or $null
This filter requires the distinguished name of the throttling policy. For example, Get-Mailbox -Filter {ThrottlingPolicy -eq 'CN=Custom Throttling Policy,CN=Global Settings,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
To find the distinguished names of throttling policies, run this command: `Get-ThrottlingPolicy
Title
title
Get-Contact
Get-LinkedUser
Get-Recipient
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {Title -eq 'Dr.'}.
UMAddresses
msExchUMAddresses
Get-UMMailbox
String (wildcards accepted) or $null
For example, Get-UMMailbox -Filter {UMAddresses -ne $null}.
UMCallingLineIds
msExchUMCallingLineIds
Get-Contact
Get-LinkedUser
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {UMCallingLineIds -like '123*'}.
Although this is a multivalued property, the filter will return a match if the property contains the specified value.
UMDtmfMap
msExchUMDtmfMap
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
Get-UMMailbox
Get-User
String (wildcards accepted) or $null
For example, Get-Mailbox -Filter {UMDtmfMap -like '*26297*'}.
Although this is a multivalued property, the filter will return a match if the property contains the specified value.
UMEnabled
n/a
Get-Mailbox
Get-Recipient
Get-UMMailbox
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {UMEnabled -eq $true}.
UMMailboxPolicy
msExchUMTemplateLink
Get-Recipient
Get-UMMailbox
String or $null
This filter requires the distinguished name of the UM mailbox policy. For example, Get-Recipient -Filter {UMMailboxPolicy -eq 'CN=Contoso Default Policy,CN=UM Mailbox Policies,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
To find the distinguished names of UM mailbox policies, run this command: `Get-UMMailboxPolicy
UMRecipientDialPlanId
msExchUMRecipientDialPlanLink
Get-Recipient
String or $null
This filter requires the distinguished name of the UM dial plan. For example, Get-Recipient -Filter {UMMailboxPolicy -eq 'CN=Contoso ,CN=UM DialPlan Container,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'}.
To find the distinguished names of UM dial plans, run this command: `Get-UMDialPlan
UpgradeRequest
n/a
Get-User
None (0), TenantUpgrade (1), PrestageUpgrade (2), CancelPrestageUpgrade (3), PilotUpgrade (4), or TenantUpgradeDryRun (5),
For example, Get-User -Filter {UpgradeRequest -ne 'None'}.
UpgradeStatus
n/a
Get-User
None (0), NotStarted (1), InProgress (2), Warning (3), Error (4), Cancelled (5), Complete (6), or ForceComplete (7).
For example, Get-User -Filter {UpgradeStatus -ne 'None'}.
UsageLocation
msExchUsageLocation
Get-Mailbox
Get-MailUser
Get-Recipient
String or $null
This filter requires the ISO 3166-1 country name (for example, United States), or two-letter country code (for example US) for the user in Office 365. For more information, see Country Codes - ISO 3166.
For example, Get-Recipient -Filter {UsageLocation -ne $null}.
UseDatabaseQuotaDefaults
mDBUseDefaults
Get-Mailbox
Boolean ( $true or $false)
For example, Get-Mailbox -Filter {UseDatabaseQuotaDefaults -eq $false}.
UserAccountControl
userAccountControl
Get-LinkedUser
Get-User
AccountDisabled, DoNotExiprePassword, or NormalAccount
For example, Get-User -Filter {UserAccountControl -eq 'NormalAccount'}.
You can specify multiple values separated by commas, but the order matters. For example, Get-User -Filter {UserAccountControl -eq 'AccountDisabled,NormalAccount'} returns different results than Get-User -Filter {UserAccountControl -eq 'NormalAccount,AccountDisabled'}.
This multivalued property will only return a match if the property equals the specified value.
UserPrincipalName
userPrincipalName
Get-LinkedUser
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
Get-User
String (wildcards accepted)
For example, Get-User -Filter {UserPrincipalName -like 'julia@*'}.
VoiceMailSettings
msExchUCVoiceMailSettings
Get-Contact
Get-LinkedUser
Get-User
String or $null
For example, Get-User -Filter {VoiceMailSettings -ne $null}.
WebPage
wWWHomePage
Get-Contact
Get-LinkedUser
Get-User
String (wildcards accepted) or $null
For example, Get-User -Filter {WebPage -like 'https://intranet.contoso.com/*'}.
WhenChanged
WhenChanged
Get-CASMailbox
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-SecurityPrincipal
Get-UMMMailbox
Get-User
A date/time value
For example, Get-Recipient -Filter {WhenChanged -gt '8/1/2017 2:00:00 PM'}.
WhenChangedUTC
n/a
Get-CASMailbox
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-SecurityPrincipal
Get-UMMMailbox
Get-User
A date/time value in Coordinated Universal Time (UTC)
For example, Get-Recipient -Filter {WhenChangedUTC -gt '8/1/2017 2:00:00 PM'}.
WhenCreated
whenCreated
Get-CASMailbox
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-SecurityPrincipal
Get-UMMMailbox
Get-User
A date/time value
For example, Get-Recipient -Filter {WhenCreated -gt '8/1/2017 2:00:00 PM'}.
WhenCreatedUTC
n/a
Get-CASMailbox
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-SecurityPrincipal
Get-UMMMailbox
Get-User
A date/time value in Coordinated Universal Time (UTC)
For example, Get-Recipient -Filter {WhenCreatedUTC -gt '8/1/2017 2:00:00 PM'}.
WhenMailboxCreated
msExchWhenMailboxCreated
Get-Mailbox
Get-MailUser
Get-Recipient
Get-RemoteMailbox
A date/time value
For example, Get-Recipient -Filter {WhenMailboxCreated -gt '8/1/2017 2:00:00 PM'}.
WhenSoftDeleted
msExchWhenSoftDeletedTime
Get-LinkedUser
Get-Mailbox
Get-MailUser
Get-RemoteMailbox
Get-User
A date/time value
This filter requires the SoftDeleted switch in the command for mailboxes.
For example, Get-Mailbox -SoftDeleted -Filter {WhenChanged -gt '8/1/2017 2:00:00 PM'}.
WindowsEmailAddress
mail
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-RemoteMailbox
Get-User
String (wildcards accepted) or $null.
For example, Get-Mailbox -Filter {WindowsEmailAddress -like '*@fabrikam.com'}.
WindowsLiveID
msExchWindowsLiveID
Get-LinkedUser
Get-Mailbox
Get-MailUser
Get-Recipient
Get-User
String (wildcards accepted) or $null.
For example, Get-Mailbox -Filter {WindowsEmailAddress -like '*@fabrikam.onmicrosoft.com'}.

For more information

Exchange 2007 was the first version of Exchange that required OPATH filters instead of LDAP filters. For more information about converting LDAP filters to OPATH filters, see the Microsoft Exchange Team Blog article, Need help converting your LDAP filters to OPATH?.

For more information about the syntax that can be used within OPATH filters, see Exchange cmdlet syntax.