Set AD attribute msExchHideFromAddressLists to TRUE

Ingrid 61

Sorry for posting another question.
I want to hide the mailbox for one specific user in the GAL.
I know how to do this on the exchange server, but I noticed in AD there is an attribute msExchHideFromAddressLists that is set to TRUE when you hide the account.

I want to use powershell to hide the mailbox, but cannot for the live of it find out how to change this to TRUE.

I am able to retrieve the status by running Get-ADuser -Identity username -property msExchHideFromAddressLists.
When using the Set-ADuser how can I set this attribute to true?

Might be a simple question, but I am having a brainfreeze here.

Thanks again

Accepted answer

Rich Matheisen 45,091 Reputation points

2022-07-07T14:46:48.29+00:00
Do you have the Exchange management tools installed on your machine?

Set-Mailbox -Identity <mailboxID> -HiddenFromAddressListsEnabled:$true
Please sign in to rate this answer.

1 person found this answer helpful.
Ingrid 61 Reputation points

2022-07-08T08:30:43.967+00:00

Unfortunately we don't
Sign in to comment

1 additional answer

Newbie Jones 1,306 Reputation points

2022-07-07T14:12:29.873+00:00
Get-ADuser -Identity username -property msExchHideFromAddressLists | Set-ADObject -Replace @{msExchHideFromAddressLists=$true}

Advantage of Set-ADObject is that you can use this with users, group or contact.
Please sign in to rate this answer.

2 people found this answer helpful.
Ingrid 61 Reputation points

2022-07-08T08:30:54.137+00:00

Thanks, but somehow this fails on me

msExchHideFromAddressLists : The term 'msExchHideFromAddressLists' is not recognized as the name of a cmdlet,
function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the
path is correct and try again.

with popup message.ps1:35 char:95

... essLists | Set-ADObject -Replace @(msExchHideFromAddressLists=$TRUE ...

~~~~~~~~~~~~~~~~~~~~~~~~~~

CategoryInfo : ObjectNotFound: (msExchHideFromAddressLists:String) [], CommandNotFoundException

FullyQualifiedErrorId : CommandNotFoundException

Set-ADObject : Cannot convert 'System.Object[]' to the type 'System.Collections.Hashtable' required by parameter
'Replace'. Specified method is not supported.
At C:\Users... out script .ps1:35 char:93

... ssLists | Set-ADObject -Replace @(msExchHideFromAddressLists=$TRUE)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CategoryInfo : InvalidArgument: (:) [Set-ADObject], ParameterBindingException

FullyQualifiedErrorId : CannotConvertArgument,Microsoft.ActiveDirectory.Management.Commands.SetADObject

Ingrid 61 Reputation points

2022-07-08T08:59:43.55+00:00

I tried only running Get-ADuser -Identity username -property msExchHideFromAddressLists but that does not give me the object in the results.
Also tried properties instead of property

Newbie Jones 1,306 Reputation points

2022-07-08T10:08:18.933+00:00

Good spot, it should be properties.
Try Get-ADUser username -properties * to see what properties are available.
Just pipe it to a text file and open that in notepad.
Get-ADUser username -properties * > user,txt

Does msExchHideFromAddressLists appear in the list.

Is this Exchange Online or OnPREM?

I can see this attribute for some of my OnPrem accounts.

Newbie Jones 1,306 Reputation points

2022-07-08T10:09:26.057+00:00

-properties *

The star got removed from the response.

Newbie Jones 1,306 Reputation points

2022-07-08T10:21:16.437+00:00

Just looked at this a bit further.

I can't actually find that attribute on the AD account. I have used this before, so I know it used to exist.

We are now in Hybrid mode, so our address book is controlled by EOL, so it might be different for you.

What I did notice is that Get-ADUser doesn't show the msExch attributes, but Get-ADObject does.

Get-ADObject is a bit more specific in what you give it as an identity, so pipe the results of Get-ADUser into Get-ADObject to check what attributes are showing. As Rich mentioned, Set-Mailbox is the best way to do this, but from what I can tell, you should be able to update this attribute (if its exists).

Get-ADUser username | Get-ADObject -properties * > user.txt

Ingrid 61 Reputation points

2022-07-08T11:37:02.113+00:00

I just ran Get-ADUser username | Get-ADObject -properties *
I get many msExch.... attributes, but not the one I am looking for :(
So I think this is a no go and I am gonna figure out how to get to our mailserver (we are OnPrem for now)

Ingrid 61 Reputation points

2022-07-08T11:58:46.46+00:00

Success!
I got info on how to connect to the Exchange server and I was able to hide it from there.

Thanks again peops!

Roman Zavolly 1 Reputation point

2022-11-29T20:35:25.267+00:00

How?
Sign in to comment