Filterable properties for the RecipientFilter parameter on Exchange cmdlets

You use the RecipientFilter parameter to create OPATH filters based on the properties of recipient objects in Exchange Server 2016 or later and Exchange Online. The RecipientFilter parameter is available in the following cmdlets, which aren't available in Security & Compliance PowerShell:

Cmdlet	Exchange Server	Exchange Online
New-AddressList
Set-AddressList
New-DynamicDistributionGroup
Set-DynamicDistributionGroup
New-EmailAddressPolicy		^*
Set-EmailAddressPolicy		^*
New-GlobalAddressList
Set-GlobalAddressList

^* In Exchange Online, the RecipientFilter parameter isn't available on the *-EmailAddressPolicy cmdlets (email address policies in Exchange Online apply only to Microsoft 365 Groups).

This article describes the recipient properties that are confirmed to work with the RecipientFilter parameter on these cmdlets. Each property has its own section that lists the LDAP display name and the values that you can filter on.

The Value column in each table shows the values that you can use in the filter for each property.

For more information about the Filter parameter in Exchange PowerShell, see Filterable properties for the Filter parameter on Exchange cmdlets.

As you review the properties, keep the following points in mind:

A property might be meaningful in only one environment (Exchange Online, on-premises Exchange, or hybrid deployments). The property can exist on recipient objects in every environment, but hold a meaningful value (something other than blank or None) in only one of them.
A property might correspond to a feature that's no longer used.
You can't use properties from other Active Directory schema extensions with the RecipientFilter parameter.
Not all recipient properties have a corresponding Active Directory property. The LDAP display name is "n/a" for these properties, which indicates that Exchange calculates the value.

Keep the following syntax rules in mind when you build a filter:

Enclose the whole OPATH filter in double quotation marks (" "). If the filter contains system values (for example, $true, $false, or $null), use single quotation marks (' ') instead.
Although the RecipientFilter parameter is a string (not a script block), you can also use braces ({ }), but only if the filter doesn't contain variables.
Properties that hold a link to another object (for example, a mailbox, a distribution group, a mailbox database, or an email address policy) store the object's distinguished name (DN), so you must use the DN as the filter value. The object's name, email address, and GUID are accepted by the filter syntax, but don't match anything. To find an object's DN, use the Get- cmdlet that corresponds to the object's type (for example, Get-EmailAddressPolicy | Format-List Name,DistinguishedName). To use a friendly value, store the DN in a variable and then use the variable in the filter, as shown in the affected property sections.
Wildcards (*) work only with the -like operator, and only on text string properties (for example, "Property -like 'abc*'"). In Exchange Online PowerShell, you can't use a wildcard as a prefix (for example, "Property -like '*abc'" isn't allowed).

Tip

Even if a wildcard prefix works in a filter in Exchange Online PowerShell, we don't recommend using it because of poor performance.
The values listed in each property's section describe the usable values for the OPATH filter, not necessarily the underlying property. The *-AddressList, *-EmailAddressPolicy, and *-GlobalAddressList cmdlets enforce the value type that's shown. The *-DynamicDistributionGroup cmdlets are more permissive: their OPATH filters can treat a typed property (for example, a date or numeric value) as a text string, so they also accept wildcards for many properties, as noted in the affected property sections.
To look for blank or non-blank property values, use the value $null (for example, 'Property -eq $null' or 'Property -ne $null').

For more information about OPATH filter syntax, see Additional OPATH syntax information.

For filtering considerations for the nine exclusive Get-EXO* cmdlets in the Exchange Online PowerShell module, see Filters in the Exchange Online PowerShell module.

AcceptMessagesOnlyFrom

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
authOrig	Blank or non-blank.

With the *-DynamicDistributionGroup cmdlets, you can also match a specific recipient in the list by using the recipient's distinguished name (DN). Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Oscar Banda").DistinguishedName), and then use the variable in the filter ("AcceptMessagesOnlyFrom -eq '$dn'").

AcceptMessagesOnlyFromDLMembers

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
dLMemSubmitPerms	Blank or non-blank.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Pedro Pizarro").DistinguishedName), and then use the variable in the filter ("AcceptMessagesOnlyFromDLMembers -eq '$dn'").

ActiveSyncAllowedDeviceIDs

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMobileAllowedDeviceIds	String (wildcards accepted).

ActiveSyncBlockedDeviceIDs

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMobileBlockedDeviceIds	String (wildcards accepted).

ActiveSyncEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

ActiveSyncMailboxPolicy

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMobileMailboxPolicyLink	Distinguished name (DN).

The default Exchange ActiveSync mailbox policy is named Default.

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-ActiveSyncMailboxPolicy "Default").DistinguishedName), and then use the variable in the filter ("ActiveSyncMailboxPolicy -eq '$dn'").

ActiveSyncSuppressReadReceipt

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

AddressBookPolicy

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchAddressBookPolicyLink	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-AddressBookPolicy "All ABP").DistinguishedName), and then use the variable in the filter ("AddressBookPolicy -eq '$dn'").

AddressListMembership

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
showInAddressBook	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-AddressList "All Users").DistinguishedName), and then use the variable in the filter ("AddressListMembership -eq '$dn'").

AdminDisplayName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
adminDisplayName	String (wildcards accepted).

AdministrativeUnits

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchAdministrativeUnitLink	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-AdministrativeUnit "West Coast").DistinguishedName), and then use the variable in the filter ("AdministrativeUnits -eq '$dn'").

AggregatedMailboxGuids

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchAlternateMailboxes	GUID.

Alias

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
mailNickname	String (wildcards accepted).

This property contains the recipient's Exchange alias (also known as the mail nickname). This value identifies the recipient as a mail-enabled object, and shouldn't be confused with multiple email addresses for the same recipient (also known as proxy addresses). A recipient can have only one Alias value.

AllowUMCallsFromNonUsers

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchUMListInDirectorySearch	`None` (0) or `SearchEnabled` (1).

ArbitrationMailbox

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchArbitrationMailbox	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Mailbox -Arbitration "SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}").DistinguishedName), and then use the variable in the filter ("ArbitrationMailbox -eq '$dn'").

ArchiveDatabase

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchArchiveDatabaseLink	Distinguished name (DN).

In Exchange Server, friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-MailboxDatabase "Mailbox Database 1234567890").DistinguishedName), and then use the variable in the filter ("ArchiveDatabase -eq '$dn'").

In Exchange Online, you can filter only on the presence or absence of an archive database ("ArchiveDatabase -ne $null" or "ArchiveDatabase -eq $null"). Filtering by a specific archive database value isn't supported.

ArchiveDomain

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchArchiveAddress	String (wildcards accepted).

ArchiveGuid

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchArchiveGUID	GUID.

ArchiveName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchArchiveName	String (wildcards accepted).

ArchiveQuota

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchArchiveQuota	A byte quantified size value (for example, `300MB` or `1.5GB`). Unqualified values are treated as bytes.

ArchiveRelease

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchArchiveRelease	String (wildcards accepted).

ArchiveState

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	`None` (0) `Local` (1) `HostedProvisioned` (2) `HostedPending` (3) `OnPremise` (4)

ArchiveStatus

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchArchiveStatus	`None` (0) or `Active` (1).

ArchiveWarningQuota

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchArchiveWarnQuota	A byte quantified size value (for example, `300MB` or `1.5GB`). Unqualified values are treated as bytes.

AssistantName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchAssistantName	String (wildcards accepted).

The name of the recipient's assistant.

AuditEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMailboxAuditEnable	Boolean (`$true` or `$false`).

AuditLogAgeLimit

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMailboxAuditLogAgeLimit	Timespan.

The value of this property is a time span: dd.hh:mm:ss, where dd is days, hh is hours, mm is minutes, and ss is seconds.

AuthenticationPolicy

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchAuthPolicyLink	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-AuthenticationPolicy "Engineering Group").DistinguishedName), and then use the variable in the filter ("AuthenticationPolicy -eq '$dn'").

C

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
C	String (wildcards accepted).

This property contains the two-letter country/region designation from the International Organization for Standardization (ISO) 3166 standard. For more information, see Country Codes - ISO 3166.

CalendarLoggingQuota

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchCalendarLoggingQuota	`Unlimited` or a byte quantified size value (for example, `300MB` or `1.5GB`). Unqualified values are treated as bytes.

CalendarRepairDisabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchCalendarRepairDisabled	Boolean (`$true` or `$false`).

Certificate

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
userCertificate	`System.Byte[]`.

This property contains the DER-encoded X.509 v3 certificates issued to the user.

CertificateSubject

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	`X509:<I>X500Issuer<S>X500Subject` (for example, `X509:<I>C=US,O=InternetCA,CN=APublicCertificateAuthority<S>C=US,O=Fabrikam,OU=Sales,CN=Rand Zaher`).

The X.509 certificate published for the user account (visible on the Published Certificates tab in Active Directory Users and Computers).

City

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
l	String (wildcards accepted).

The recipient's city.

Co

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
Co	String (wildcards accepted).

The name of the recipient's country or region. You can locate valid Co values on the Address tab in the recipient's properties in Active Directory Users and Computers.

CommonName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
cn	String (wildcards accepted).

Company

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
company	String (wildcards accepted).

The recipient's company name.

ComplianceTagHoldApplied

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

CountryOrRegion

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	String (wildcards accepted).

This calculated property filters on the country/region using either the two-letter ISO 3166 country code (for example, US) or the country name (for example, United States). The underlying c, co, and countryCode properties store these values. For more information, see Country Codes - ISO 3166.

CustomAttribute1 to CustomAttribute15

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
extensionAttribute1 to extensionAttribute15	String (wildcards accepted).

These properties contain custom attributes that you can add to a recipient.

Database

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
homeMDB	Distinguished name (DN).

The identity of the user's mailbox database.

Friendly identifier values like name don't work in the filter.

DataEncryptionPolicy

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchDataEncryptionPolicyLink	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-DataEncryptionPolicy "US Mailboxes").DistinguishedName), and then use the variable in the filter ("DataEncryptionPolicy -eq '$dn'").

DefaultPublicFolderMailbox

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchPublicFolderMailbox	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Mailbox "PF Mailbox").DistinguishedName), and then use the variable in the filter ("DefaultPublicFolderMailbox -eq '$dn'").

DeletedItemFlags

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
deletedItemFlags	`DatabaseDefault` (0) `RetainUntilBackupOrCustomPeriod` (3) `RetainForCustomPeriod` (5)

DeliverToMailboxAndForward

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
deliverAndRedirect	Boolean (`$true` or `$false`).

Department

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
department	String (wildcards accepted).

The recipient's department.

Description

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
description	String (wildcards accepted).

DirectReports

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
directReports	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Rick Hofer").DistinguishedName), and then use the variable in the filter ("DirectReports -eq '$dn'").

DisabledArchiveDatabase

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchDisabledArchiveDatabaseLink	Distinguished name (DN).

In Exchange Server, friendly identifier values like name don't work in the filter.

In Exchange Online, you can filter only on the presence or absence of a disabled archive database ("DisabledArchiveDatabase -ne $null" or "DisabledArchiveDatabase -eq $null"). Filtering by a specific archive database value isn't supported.

DisabledArchiveGuid

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchDisabledArchiveDatabaseGUID	GUID.

DisplayName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
displayName	String (wildcards accepted).

DistinguishedName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
distinguishedName	String.

With the *-DynamicDistributionGroup cmdlets, you can also use a text string with wildcards for this property.

EcpEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

ElcExpirationSuspensionEndDate

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchELCExpirySuspensionEnd	A date/time value using the time zone and regional settings of the Exchange server.

This property contains a date/time value.

ElcExpirationSuspensionStartDate

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchELCExpirySuspensionStart	A date/time value using the time zone and regional settings of the Exchange server.

This property contains a date/time value.

ElcMailboxFlags

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchELCMailboxFlags	`None` (0) `ExpirationSuspended` (1) `ElcV2` (2) `DisableCalendarLogging` (4) `LitigationHold` (8) `SingleItemRecovery` (16) `ValidArchiveDatabase` (32) `ShouldUseDefaultRetentionPolicy` (128) `EnableSiteMailboxMessageDedup` (256) `ElcProcessingDisabled` (512) `ComplianceTagHold` (1024)

EmailAddresses

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
proxyAddresses	String (wildcards accepted).

This property contains the recipient's email addresses (the primary email address and all proxy addresses). This is the property used to identify inactive mailboxes.

EmailAddressPolicyEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

EntryId

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchPublicFolderEntryId	String (wildcards accepted).

EwsApplicationAccessPolicy

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchEwsApplicationAccessPolicy	`EnforceAllowList` or `EnforceBlockList`.

EwsEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchEwsEnabled	Integer.

ExchangeGuid

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMailboxGuid	GUID.

ExchangeUserAccountControl

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchUserAccountControl	For valid values, see ADS_USER_FLAG_ENUM enumeration. The integer values work as described. Most of the text values don't work as described (even if you remove `ADS_UF` and all underscores).

ExchangeVersion

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchVersion	`ExchangeObjectVersion` values.

ExpansionServer

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchExpansionServerName	String (wildcards accepted).

ExtensionCustomAttribute1 to ExtensionCustomAttribute5

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchExtensionCustomAttribute1 to msExchExtensionCustomAttribute5	String (wildcards accepted).

In Exchange Online, these attributes are typically blank because Microsoft Entra Connect Sync doesn't synchronize them, so filtering on these properties usually returns no results. For more information, see Microsoft Entra Connect Sync: Attributes synchronized to Microsoft Entra ID.

ExternalDirectoryObjectId

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchExternalDirectoryObjectId	String (wildcards accepted).

ExternalEmailAddress

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
targetAddress	String (wildcards accepted).

This property contains the external email address for mail contacts and mail users.

ExternalOofOptions

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchExternalOOFOptions	`External` (0) or `InternalOnly` (1).

Fax

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
facsimileTelephoneNumber	String (wildcards accepted).

FirstName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
givenName	String (wildcards accepted).

The recipient's first name.

ForwardingAddress

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
altRecipient	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Suk-Jae Yoo").DistinguishedName), and then use the variable in the filter ("ForwardingAddress -eq '$dn'").

ForwardingSmtpAddress

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchGenericForwardingAddress	String (wildcards accepted).

GeneratedOfflineAddressBooks

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchOABGeneratingMailboxBL	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-OfflineAddressBook "Default Offline Address Book").DistinguishedName), and then use the variable in the filter ("GeneratedOfflineAddressBooks -eq '$dn'").

GrantSendOnBehalfTo

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
publicDelegates	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Valeria Barrios").DistinguishedName), and then use the variable in the filter ("GrantSendOnBehalfTo -eq '$dn'").

GroupType

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
groupType	`None` (0) `Global` (2) `DomainLocal` (4) `BuiltinLocal` (5) `Universal` (8) `SecurityEnabled` (-2147483648)

Guid

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
objectGuid	GUID.

HasActiveSyncDevicePartnership

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

HiddenFromAddressListsEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchHideFromAddressLists	Boolean (`$true` or `$false`).

This property specifies whether the recipient is visible in the global address list or other address lists.

HiddenGroupMembershipEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
hideDLMembership	Boolean (`$true` or `$false`).

HomeMTA

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
homeMTA	Distinguished name (DN).

You must use the object's distinguished name (DN) in the filter. The object's name and GUID don't work.

HomePhone

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
homePhone	String (wildcards accepted).

Id

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
distinguishedName	String.

With the *-DynamicDistributionGroup cmdlets, you can also use a text string with wildcards for this property.

ImapEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

ImmutableId

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchGenericImmutableId	String (wildcards accepted).

IncludedRecipients

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	`None` (0) `MailboxUsers` (1) `Resources` (2) `MailContacts` (4) `MailGroups` (8) `MailUsers` (16) `AllRecipients` (-1)

IncludeInGarbageCollection

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

Initials

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
initials	String (wildcards accepted).

InPlaceHolds

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchUserHoldPolicies	String.

InPlaceHoldsRaw

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	String (wildcards accepted).

With the *-DynamicDistributionGroup cmdlets, you can't use wildcards for this property.

InternetEncoding

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
internetEncoding	Integer.

For valid values, see the Remarks section in Encoding Class.

IsDirSynced

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchIsMSODirsynced	Boolean (`$true` or `$false`).

IsExcludedFromServingHierarchy

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

IsHierarchyReady

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

IsHierarchySyncEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

IsInactiveMailbox

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

IsMailboxEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

This property specifies whether the user is mailbox-enabled.

IsSecurityPrincipal

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

IsSoftDeletedByDisable

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

IsSoftDeletedByRemove

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

IssueWarningQuota

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
mDBStorageQuota	A byte quantified size value (for example, `300MB` or `1.5GB`). Unqualified values are treated as bytes.

JournalArchiveAddress

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	An SMTP email address (for example, `julia@contoso.com`).

LanguagesRaw

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchUserCulture	String (wildcards accepted).

This property contains the language preference for this mailbox in the format <ISO 639 two-letter culture code>-<ISO 3166 two-letter subculture code>. For example, United States English is en-US. For more information, see CultureInfo Class.

LastExchangeChangedTime

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchLastExchangeChangedTime	A date/time value using the time zone and regional settings of the Exchange server.

LastName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
sn	String (wildcards accepted).

LdapRecipientFilter

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchDynamicDLFilter	String (wildcards accepted).

LegacyExchangeDN

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
legacyExchangeDN	String (wildcards accepted).

LitigationHoldDate

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchLitigationHoldDate	A date/time value using the time zone and regional settings of the Exchange server.

LitigationHoldEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

LitigationHoldOwner

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchLitigationHoldOwner	String (wildcards accepted).

LocaleID

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
localeID	Integer.

For valid values, see Microsoft Locale ID Values.

MailboxMoveBatchName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMailboxMoveBatchName	String (wildcards accepted).

MailboxMoveFlags

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMailboxMoveFlags	For valid values, see the description of the Flags parameter in Get-MoveRequest.

MailboxMoveRemoteHostName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMailboxMoveRemoteHostName	String (wildcards accepted).

MailboxMoveSourceMDB

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMailboxMoveSourceMDBLink	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

MailboxMoveStatus

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMailboxMoveStatus	For valid values, see the description of the MoveStatus parameter in Get-MoveRequest.

MailboxMoveTargetMDB

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMailboxMoveTargetMDBLink	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

MailboxPlan

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchParentPlanLink	Distinguished name (DN).

Mailbox plans correspond to Microsoft 365 license types. The availability of license plans is determined by the selections that you make when you enroll your domain.

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-MailboxPlan "ExchangeOnlineEnterprise").DistinguishedName), and then use the variable in the filter ("MailboxPlan -eq '$dn'").

MailboxRelease

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMailboxRelease	String (wildcards accepted).

MailTipTranslations

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchSenderHintTranslations	String (wildcards accepted).

ManagedBy

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
managedBy	Distinguished name (DN).

This property identifies the security principal that manages the group.

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Yuudai Uchida").DistinguishedName), and then use the variable in the filter ("ManagedBy -eq '$dn'").

Manager

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
manager	Distinguished name (DN).

The recipient's manager.

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Yuuto Sasaki").DistinguishedName), and then use the variable in the filter ("Manager -eq '$dn'").

MAPIEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

MapiRecipient

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
mAPIRecipient	Boolean (`$true` or `$false`).

MaxBlockedSenders

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMaxBlockedSenders	`Unlimited` or an integer.

MaxReceiveSize

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
delivContLength	A byte quantified size value (for example, `50MB`). Unqualified values are treated as bytes.

MaxSafeSenders

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMaxSafeSenders	`Unlimited` or an integer.

MaxSendSize

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
submissionContLength	A byte quantified size value (for example, `50MB`). Unqualified values are treated as bytes.

MemberDepartRestriction

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchGroupDepartRestriction	`Closed` (0) `Open` (1) `ApprovalRequired` (2)

MemberJoinRestriction

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchGroupJoinRestriction	`Closed` (0) `Open` (1) `ApprovalRequired` (2)

MemberOfGroup

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
memberOf	Distinguished name (DN).

You must use the distinguished name (DN). This property works only with groups that Exchange recognizes, so Microsoft Entra security groups don't work.

Members

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
member	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Akia Al-Zuhairi").DistinguishedName), and then use the variable in the filter ("Members -eq '$dn'").

MessageHygieneFlags

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMessageHygieneFlags	`None` (0) or `AntispamBypass` (1).

MobileAdminExtendedSettings

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchOmaAdminExtendedSettings	String (wildcards accepted).

MobileFeaturesEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchOmaAdminWirelessEnable	`None` (0) `AirSyncDisabled` (4) `MowaDisabled` (8)

MobileMailboxFlags

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMobileMailboxFlags	`None` (0) `HasDevicePartnership` (1) `ActiveSyncSuppressReadReceipt` (2)

MobilePhone

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
mobile	String (wildcards accepted).

ModeratedBy

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchModeratedByLink	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Angela Gruber").DistinguishedName), and then use the variable in the filter ("ModeratedBy -eq '$dn'").

ModerationEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchEnableModeration	Boolean (`$true` or `$false`).

Name

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
name	String (wildcards accepted).

The recipient's unique name.

NetID

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	A sample value is `1003BFFD9A0CFA03`.

This property is populated for Exchange Online mailboxes in hybrid environments.

Notes

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
info	String (wildcards accepted).

ObjectCategory

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
objectCategory	Valid Active Directory `ObjectCategory` values.

Valid values use the format CN=<Type>,CN=Schema,CN=Configuration,DC=<domain>, where <Type> is typically Person or Group for recipients. For example, CN=Person,CN=Schema,CN=Configuration,DC=contoso,DC=com.

With the *-DynamicDistributionGroup cmdlets, you can also use a text string with wildcards for this property.

ObjectClass

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
objectClass	Valid Active Directory `ObjectClass` values.

Common values for recipients are:

contact
organizationalPerson
person
top
group
msExchDynamicDistributionList
user

With the *-DynamicDistributionGroup cmdlets, you can also use a text string with wildcards for this property.

Office

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
physicalDeliveryOfficeName	String (wildcards accepted).

OfflineAddressBook

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchUseOAB	Distinguished name (DN).

This property contains the offline address book (OAB) that's associated with this recipient.

Friendly identifier values like name don't work in the filter.

OperatorNumber

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchUMOperatorNumber	String (wildcards accepted).

OtherFax

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
otherFacsimileTelephoneNumber	String (wildcards accepted).

OtherHomePhone

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
otherHomePhone	String (wildcards accepted).

OtherTelephone

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
otherTelephone	String (wildcards accepted).

OWAEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

OWAforDevicesEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchOmaAdminWirelessEnable	Boolean (`$true` or `$false`).

OWAMailboxPolicy

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchOWAPolicy	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-OwaMailboxPolicy "Default").DistinguishedName), and then use the variable in the filter ("OWAMailboxPolicy -eq '$dn'").

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
pager	String (wildcards accepted).

Phone

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
telephoneNumber	String (wildcards accepted).

PhoneProviderId

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchUMPhoneProvider	String (wildcards accepted).

PhoneticCompany

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msDS-PhoneticCompanyName	String (wildcards accepted).

PhoneticDepartment

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msDS-PhoneticDepartment	String (wildcards accepted).

PhoneticDisplayName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msDS-PhoneticDisplayName	String (wildcards accepted).

PhoneticFirstName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msDS-PhoneticFirstName	String (wildcards accepted).

PhoneticLastName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msDS-PhoneticLastName	String (wildcards accepted).

PoliciesExcluded

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchPoliciesExcluded	String (wildcards accepted).

PoliciesIncluded

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchPoliciesIncluded	String (wildcards accepted).

PopEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

PostalCode

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
postalCode	String (wildcards accepted).

PostOfficeBox

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
postOfficeBox	String (wildcards accepted).

PreviousRecipientTypeDetails

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchPreviousRecipientTypeDetails	For valid values, see the description of the RecipientTypeDetails parameter in Get-Recipient.

PrimaryGroupId

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
primaryGroupId	Integer.

For domain users, the value of this property is typically 513, which corresponds to the Domain Users group.

PrimarySmtpAddress

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	String (wildcards accepted).

Don't use the PrimarySmtpAddress property; use the EmailAddresses property instead. Any filter that uses the PrimarySmtpAddress property also searches values in the EmailAddresses property. For example, if a mailbox has the primary email address dario@contoso.com and the proxy addresses dario2@contoso.com and dario3@contoso.com, all of the following filters return that mailbox in the result: "PrimarySmtpAddress -eq 'dario@contoso.com'", "PrimarySmtpAddress -eq 'dario2@contoso.com'", or "PrimarySmtpAddress -eq 'dario3@contoso.com'".

ProhibitSendQuota

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
mDBOverQuotaLimit	A byte quantified size value (for example, `50MB` or `1.5GB`). Unqualified values are treated as bytes.

ProhibitSendReceiveQuota

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
mDBOverHardQuotaLimit	A byte quantified size value (for example, `50MB` or `1.5GB`). Unqualified values are treated as bytes.

ProtocolSettings

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
protocolSettings	String (wildcards accepted).

PublicFolderContacts

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
pFContacts	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Bishamon Tamura").DistinguishedName), and then use the variable in the filter ("PublicFolderContacts -eq '$dn'").

PurportedSearchUI

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchPurportedSearchUI	String (wildcards accepted).

QueryBaseDN

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchQueryBaseDN	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-OrganizationalUnit "contoso.com/Users").DistinguishedName), and then use the variable in the filter ("QueryBaseDN -eq '$dn'").

RawCanonicalName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
canonicalName	String (wildcards accepted).

This property is based on a constructed Active Directory attribute and doesn't correctly resolve all members when used in Get-Recipient -RecipientPreviewFilter.

RawExternalEmailAddress

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
targetAddress	String (wildcards accepted).

RawName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
name	String (wildcards accepted).

RecipientContainer

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchDynamicDLBaseDN	Distinguished name (DN).

The Active Directory container or organizational unit (OU) that holds the recipient object.

Friendly identifier values like name don't work in the filter.

RecipientDisplayType

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchRecipientDisplayType	`MailboxUser` (0) `DistributionGroup` (1) `PublicFolder` (2) `DynamicDistributionGroup` (3) `Organization` (4) `PrivateDistributionList` (5) `RemoteMailUser` (6) `ConferenceRoomMailbox` (7) `EquipmentMailbox` (8)

RecipientFilter

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchQueryFilter	String (wildcards accepted).

RecipientLimits

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchRecipLimit	`Unlimited` or an integer.

This property specifies the maximum number of recipients allowed in messages that the mailbox sends.

RecipientType

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	For valid values, see the description of the RecipientType parameter in Get-Recipient.

RecipientTypeDetails

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	For valid values, see the description of the RecipientTypeDetails parameter in Get-Recipient.

RecoverableItemsQuota

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchDumpsterQuota	A byte quantified size value (for example, `50MB` or `1.5GB`). Unqualified values are treated as bytes.

RecoverableItemsWarningQuota

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchDumpsterWarningQuota	A byte quantified size value (for example, `50MB` or `1.5GB`). Unqualified values are treated as bytes.

RejectMessagesFrom

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
unauthOrig	Blank or non-blank.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Daigoro Aoki").DistinguishedName), and then use the variable in the filter ("RejectMessagesFrom -eq '$dn'").

RejectMessagesFromDLMembers

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
dLMemRejectPerms	Blank or non-blank.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Elizabeth Brunner").DistinguishedName), and then use the variable in the filter ("RejectMessagesFromDLMembers -eq '$dn'").

RemoteAccountPolicy

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchSyncAccountsPolicyDN	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

RemotePowerShellEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

RemoteRecipientType

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchRemoteRecipientType	`None` (0) `ProvisionMailbox` (1) `ProvisionArchive` (2) `Migrated` (4) `DeprovisionMailbox` (8) `DeprovisionArchive` (16) `RoomMailbox` (32) `EquipmentMailbox` (64) `SharedMailbox` (96) `TeamMailbox` (128)

ReportToManagerEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
reportToOwner	Boolean (`$true` or `$false`).

ReportToOriginatorEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
reportToOriginator	Boolean (`$true` or `$false`).

RequireAllSendersAreAuthenticated

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchRequireAuthToSendTo	Boolean (`$true` or `$false`).

ResourceCapacity

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchResourceCapacity	Integer.

ResourceCustom

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	String.

ResourceMetaData

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchResourceMetaData	String (wildcards accepted).

ResourcePropertiesDisplay

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchResourceDisplay	String (wildcards accepted).

ResourceSearchProperties

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchResourceSearchProperties	String (wildcards accepted).

ResourceType

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	`Room` (0) or `Equipment` (1).

RetainDeletedItemsFor

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
garbageCollPeriod	Timespan.

The value of this property is a time span: dd.hh:mm:ss, where dd is days, hh is hours, mm is minutes, and ss is seconds.

RetentionComment

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchRetentionComment	String (wildcards accepted).

RetentionPolicy

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	String.

RetentionUrl

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchRetentionURL	String (wildcards accepted).

RoleAssignmentPolicy

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchRBACPolicyLink	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-RoleAssignmentPolicy "Default Role Assignment Policy").DistinguishedName), and then use the variable in the filter ("RoleAssignmentPolicy -eq '$dn'").

RulesQuota

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMDBRulesQuota	A byte quantified size value (for example, `50MB` or `1.5GB`). Unqualified values are treated as bytes.

SafeRecipientsHash

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchSafeRecipientsHash	`System.Byte[]`.

A user's safe recipients list is one-way hashed with SHA-256 before it's stored as a binary large object in Active Directory.

SafeSendersHash

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchSafeSendersHash	`System.Byte[]`.

A user's safe senders list is one-way hashed with SHA-256 before it's stored as a binary large object in Active Directory.

SamAccountName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
SamAccountName	String (wildcards accepted).

This property specifies an identifier that's compatible with older versions of Microsoft Windows client and server operating systems (also known as the pre-Windows 2000 user account or group name).

SCLDeleteThresholdInt

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMessageHygieneSCLDeleteThreshold	An integer from 0 through 9.

SCLJunkThresholdInt

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMessageHygieneSCLJunkThreshold	An integer from 0 through 9.

SCLQuarantineThresholdInt

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMessageHygieneSCLQuarantineThreshold	An integer from 0 through 9.

SCLRejectThresholdInt

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchMessageHygieneSCLRejectThreshold	An integer from 0 through 9.

SecurityProtocol

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
securityProtocol	`System.Byte[]`.

SendDeliveryReportsTo

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	`None` (0) `Manager` (1) `Originator` (2)

SendOofMessageToOriginatorEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
oOFReplyToOriginator	Boolean (`$true` or `$false`).

ServerLegacyDN

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchHomeServerName	String (wildcards accepted).

ServerName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	String.

SharingPolicy

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchSharingPolicyLink	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-SharingPolicy "Default Sharing Policy").DistinguishedName), and then use the variable in the filter ("SharingPolicy -eq '$dn'").

SimpleDisplayName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
displayNamePrintable	String (wildcards accepted).

SingleItemRecoveryEnabled

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

SKUAssigned

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

SMimeCertificate

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
userSMIMECertificate	`System.Byte[]`.

This property contains the binary encoded S/MIME certificates that are issued to the user.

StateOrProvince

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
st	String (wildcards accepted).

StreetAddress

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
streetAddress	String (wildcards accepted).

StsRefreshTokensValidFrom

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchStsRefreshTokensValidFrom	A date/time value using the time zone and regional settings of the Exchange server.

TelephoneAssistant

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
telephoneAssistant	String (wildcards accepted).

TextEncodedORAddress

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
textEncodedORAddress	String (wildcards accepted).

ThrottlingPolicy

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchThrottlingPolicyDN	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-ThrottlingPolicy "Sales Throttling Policy").DistinguishedName), and then use the variable in the filter ("ThrottlingPolicy -eq '$dn'").

Title

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
title	String (wildcards accepted).

UMAddresses

Applicable:

Exchange Server (Exchange 2016 or earlier; Unified Messaging was removed in Exchange 2019)
Exchange Online

LDAP display name	Value
msExchUMAddresses	String (wildcards accepted).

UMCallingLineIds

Applicable:

Exchange Server (Exchange 2016 or earlier; Unified Messaging was removed in Exchange 2019)
Exchange Online

LDAP display name	Value
msExchUMCallingLineIds	String (wildcards accepted).

UMDtmfMap

Applicable:

Exchange Server (Exchange 2016 or earlier; Unified Messaging was removed in Exchange 2019)
Exchange Online

LDAP display name	Value
msExchUMDtmfMap	String (wildcards accepted).

UMEnabled

Applicable:

Exchange Server (Exchange 2016 or earlier; Unified Messaging was removed in Exchange 2019)
Exchange Online

LDAP display name	Value
n/a	Boolean (`$true` or `$false`).

This property specifies whether Unified Messaging (UM) is enabled for this mailbox.

UMEnabledFlags

Applicable:

Exchange Server (Exchange 2016 or earlier; Unified Messaging was removed in Exchange 2019)
Exchange Online

LDAP display name	Value
msExchUMEnabledFlags	`None` (0) `UMEnabled` (1) `FaxEnabled` (2) `TUIAccessToCalendarEnabled` (4) `TUIAccessToEmailEnabled` (8) `SubscriberAccessEnabled` (16) `TUIAccessToAddressBookEnabled` (32) `AnonymousCallersCanLeaveMessages` (256) `ASREnabled` (512) `VoiceMailAnalysisEnabled` (1024)

UMMailboxPolicy

Applicable:

Exchange Server (Exchange 2016 or earlier; Unified Messaging was removed in Exchange 2019)
Exchange Online

LDAP display name	Value
msExchUMTemplateLink	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-UMMailboxPolicy "MyUMMailboxPolicy").DistinguishedName), and then use the variable in the filter ("UMMailboxPolicy -eq '$dn'").

UMPinChecksum

Applicable:

Exchange Server (Exchange 2016 or earlier; Unified Messaging was removed in Exchange 2019)
Exchange Online

LDAP display name	Value
msExchUMPinChecksum	`System.Byte[]`.

UMRecipientDialPlanId

Applicable:

Exchange Server (Exchange 2016 or earlier; Unified Messaging was removed in Exchange 2019)
Exchange Online

LDAP display name	Value
msExchUMRecipientDialPlanLink	Distinguished name (DN).

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-UMDialPlan "MyUMDialPlan").DistinguishedName), and then use the variable in the filter ("UMRecipientDialPlanId -eq '$dn'").

UMServerWritableFlags

Applicable:

Exchange Server (Exchange 2016 or earlier; Unified Messaging was removed in Exchange 2019)
Exchange Online

LDAP display name	Value
msExchUMServerWritableFlags	`None` (0) `MissedCallNotificationEnabled` (1) `SMSVoiceMailNotificationEnabled` (2) `SMSMissedCallNotificationEnabled` (4) `PinlessAccessToVoiceMailEnabled` (8)

UMSpokenName

Applicable:

Exchange Server (Exchange 2016 or earlier; Unified Messaging was removed in Exchange 2019)
Exchange Online

LDAP display name	Value
msExchUMSpokenName	`System.Byte[]`.

UnicodePassword

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
unicodePwd	`System.Byte[]`.

UsageLocation

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchUsageLocation	A valid ISO 3166-1 two-letter country code value or the corresponding display name (for example, `US` or `UnitedStates`). For more information, see Country Codes - ISO 3166.

UseDatabaseQuotaDefaults

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
mDBUseDefaults	Boolean (`$true` or `$false`).

If the value of this property is $true, the values of these properties are ignored for the mailbox:

IssueWarningQuota
ProhibitSendQuota
ProhibitSendReceiveQuota
CalendarLoggingQuota
RecoverableItemsWarningQuota
RecoverableItemsQuota

UserAccountControl

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
userAccountControl	For valid values, see the Remarks section in User-Account-Control attribute. You need to convert the hexadecimal values to decimal. Most of the text values don't work as described (even if you remove `ADS_UF` and all underscores).

UserPrincipalName

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
userPrincipalName	String (wildcards accepted).

This property contains the user principal name (UPN) for this recipient (for example, kim@contoso.com). You can't use this property to identify inactive mailboxes.

VoiceMailSettings

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchUCVoiceMailSettings	String (wildcards accepted).

Valid values for this property are:

ExchangeHostedVoiceMail=0
ExchangeHostedVoiceMail=1
CsHostedVoiceMail=0
CsHostedVoiceMail=1

In Exchange Online, this property holds a legacy hosted voicemail value and is typically blank, so filtering on this property usually returns no results.

WebPage

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
wWWHomePage	String (wildcards accepted).

WhenChanged

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
whenChanged	A date/time value using the time zone and regional settings of the Exchange server.

WhenChangedUTC

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	A date/time value in Coordinated Universal Time (UTC).

WhenCreated

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
whenCreated	A date/time value using the time zone and regional settings of the Exchange server.

WhenCreatedUTC

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
n/a	A date/time value in Coordinated Universal Time (UTC).

WhenMailboxCreated

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchWhenMailboxCreated	A date/time value using the time zone and regional settings of the Exchange server.

WhenSoftDeleted

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchWhenSoftDeletedTime	A date/time value using the time zone and regional settings of the Exchange server.

WindowsEmailAddress

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
mail	String (wildcards accepted).

WindowsLiveID

Applicable:

Exchange Server
Exchange Online

LDAP display name	Value
msExchWindowsLiveID	String (wildcards accepted).

For more information

Exchange Server 2007 was the first version of Exchange that required OPATH filters instead of LDAP filters. For more information about converting LDAP filters to OPATH filters, see the Microsoft Exchange Team Blog article Need help converting your LDAP filters to OPATH?.

Feedback

Was this page helpful?

Last updated on 2026-06-19