Filterable properties for the Filter parameter on Exchange cmdlets

You use the Filter parameter to create OPATH filters that find user and group objects based on their property values. The Filter parameter is available in Exchange Server PowerShell, Exchange Online PowerShell, and Security & Compliance PowerShell on the following user and group cmdlets:

Cmdlet	Exchange Server	Exchange Online	Security & Compliance
Get-CASMailbox
Get-Contact
Get-DistributionGroup
Get-DynamicDistributionGroup
Get-Group
Get-LinkedUser
Get-Mailbox
Get-MailContact
Get-MailPublicFolder
Get-MailUser
Get-Recipient
Get-RemoteMailbox
Get-SecurityPrincipal
Get-UMMailbox	^*
Get-User
Get-UnifiedGroup

This article describes the user and group properties that are confirmed to work with the Filter parameter on these cmdlets. Each property has its own section that lists the supported environments, the LDAP display name, the cmdlets where the property is available, and the values that you can filter on.

^* Get-UMMailbox is available only in Exchange Server 2016 and earlier. Unified Messaging was removed in Exchange Server 2019.

For more information about recipient filters in Exchange PowerShell, see Recipient filters in Exchange PowerShell commands.

Note

The Filter parameter is also available on other cmdlets (for example, Get-MailboxStatistics, Get-Queue, and Get-Message). However, the property values on those cmdlets aren't similar to the user and group properties that are described in this article.

As you review the properties, keep the following points in mind:

A property might be meaningful in only one environment (Exchange Online, on-premises Exchange, hybrid deployments, or Security & Compliance PowerShell). The property can exist on user and group objects in every environment, but hold a meaningful value (something other than blank or None) in only one of them.
A property might correspond to a feature that's no longer used.
Not all user and group properties have a corresponding Active Directory property. The LDAP display name is "n/a" for these properties, which indicates that Exchange calculates the value.
A property is filterable only on the cmdlets listed in its section. Using it on a cmdlet that isn't listed returns a "not a recognized filterable property" error, even when that cmdlet returns the same objects.

Keep the following syntax rules in mind when you build a filter:

Enclose the whole OPATH filter in double quotation marks (" "). If the filter contains system values (for example, $true, $false, or $null), use single quotation marks (' ') instead.
Although the Filter parameter is a string (not a script block), you can also use braces ({ }), but only if the filter doesn't contain variables.
Wildcards (*) work only with the -like operator, and only on text string properties (for example, "Property -like 'abc*'"). Properties that hold non-string values (for example, SIDs, GUIDs, enumerations, or boolean values) require an exact match with -eq or -ne.
To look for blank or non-blank property values, use the value $null (for example, 'Property -eq $null' or 'Property -ne $null').
Some non-string properties don't support $null comparisons. For example, filtering on a SID property requires an actual value (-eq '<value>') rather than -eq $null or -ne $null.

For more information about OPATH filter syntax, see Additional OPATH syntax information.

For filtering considerations for the nine exclusive Get-EXO* cmdlets in the Exchange Online PowerShell module, see Filters in the Exchange Online PowerShell module.

AcceptMessagesOnlyFrom

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
authOrig	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-UnifiedGroup	Distinguished name (DN) or `$null`.

This filter requires the distinguished name of the individual recipient (a mailbox, mail user, or mail contact).

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Akia Al-Zuhairi").DistinguishedName), and then use the variable in the filter ("AcceptMessagesOnlyFrom -eq '$dn'").

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

AcceptMessagesOnlyFromDLMembers

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
dLMemSubmitPerms	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-UnifiedGroup	Distinguished name (DN) or `$null`.

This filter requires the distinguished name or canonical distinguished name of the group (a distribution group, mail-enabled security group, or dynamic distribution group).

To use a friendly value, store the DN in a variable (for example, $dn = (Get-DistributionGroup "Marketing Department").DistinguishedName), and then use the variable in the filter ("AcceptMessagesOnlyFromDLMembers -eq '$dn'").

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

ActiveSyncAllowedDeviceIDs

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMobileAllowedDeviceIds	Get-CASMailbox	String (wildcards accepted) or `$null`

A device ID is a text string that uniquely identifies the device. Use the Get-MobileDevice cmdlet to see the devices that have ActiveSync partnerships with a mailbox. To see the device IDs on a mailbox, replace <MailboxIdentity> with the name, alias, or email address of the mailbox, and run this command: Get-MobileDevice -Mailbox <MailboxIdentity> | Format-List.

After you have the device ID value, you can use it in the filter. For example, Get-CasMailbox -Filter "(ActiveSyncAllowedDeviceIDs -like 'text1*') -or (ActiveSyncAllowedDeviceIDs -eq 'text2')".

ActiveSyncBlockedDeviceIDs

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMobileBlockedDeviceIds	Get-CASMailbox	String (wildcards accepted) or `$null`

After you have the device ID value, you can use it in a filter. For example, Get-CasMailbox -Filter "(ActiveSyncBlockedDeviceIDs -like 'text1*') -or (ActiveSyncBlockedDeviceIDs -eq 'text2')".

ActiveSyncEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-CASMailbox	Boolean (`$true` or `$false`)

For example, Get-CasMailbox -Filter 'ActiveSyncEnabled -eq $false'.

ActiveSyncMailboxPolicy

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMobileMailboxPolicyLink	Get-CASMailbox Get-Recipient	Distinguished name (DN) or `$null`.

This filter requires the distinguished name of the ActiveSync mailbox policy.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-MobileDeviceMailboxPolicy "Default").DistinguishedName), and then use the variable in the filter ("ActiveSyncMailboxPolicy -eq '$dn'").

Note

For the default assignment of the default ActiveSync mailbox policy (named Default) to a mailbox, the value of the ActiveSyncMailboxPolicy property is blank ($null).

ActiveSyncSuppressReadReceipt

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-CASMailbox	Boolean (`$true` or `$false`)

For example, Get-CasMailbox -Filter 'ActiveSyncSuppressReadReceipt -eq $true'.

AddressBookPolicy

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchAddressBookPolicyLink	Get-Mailbox Get-Recipient	Distinguished name (DN) or `$null`.

This filter requires the distinguished name of the address book policy.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-AddressBookPolicy "Contoso ABP").DistinguishedName), and then use the variable in the filter ("AddressBookPolicy -eq '$dn'").

AddressListMembership

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
showInAddressBook	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-UnifiedGroup	Distinguished name (DN) or `$null`.

This filter requires the distinguished name of the address list.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-AddressList "All Contacts").DistinguishedName), and then use the variable in the filter ("AddressListMembership -eq '$dn'").

AdminDisplayName

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
adminDisplayName	Get-SecurityPrincipal	String (wildcards accepted) or `$null`

For example, Get-SecurityPrincipal -Filter 'AdminDisplayName -ne $null' | Format-Table -Auto Name,AdminDisplayName.

AdministrativeUnits

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchAdministrativeUnitLink	Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-User Get-UnifiedGroup	`$null`

For example, Get-User -Filter 'AdministrativeUnits -ne $null'.

AggregatedMailboxGuids

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchAlternateMailboxes	Get-Mailbox Get-MailUser Get-RemoteMailbox	String or `$null`

For example, Get-Mailbox -Filter 'AggregatedMailboxGuids -ne $null'.

Alias

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
mailNickname	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-UnifiedGroup	String (wildcards accepted)

For example, Get-Recipient -Filter "Alias -like 'smith*'".

AllowUMCallsFromNonUsers

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchUMListInDirectorySearch	Get-Contact Get-LinkedUser Get-UMMailbox Get-User	`None` (0) or `SearchEnabled` (1)

For example, Get-User -Filter "AllowUMCallsFromNonUsers -ne 'SearchEnabled'".

ArbitrationMailbox

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchArbitrationMailbox	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox	Distinguished name (DN) or `$null`.

This filter requires the distinguished name of the arbitration mailbox.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Mailbox -Arbitration "SystemMailbox{1f05a927-2e8f-4cbb-9039-2cfb8b95e486}").DistinguishedName), and then use the variable in the filter ("ArbitrationMailbox -eq '$dn'").

ArchiveDatabase

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchArchiveDatabaseLink	Get-Mailbox Get-MailUser Get-Recipient Get-RemoteMailbox	Distinguished name (DN) or `$null`.

In Exchange Server, this filter requires the distinguished name of the archive mailbox database.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-MailboxDatabase "Mailbox Database 1234567890").DistinguishedName), and then use the variable in the filter ("ArchiveDatabase -eq '$dn'").

In Exchange Online, you can filter only on the presence or absence of an archive database. For example, Get-Mailbox -Filter "ArchiveDatabase -ne $null" or Get-Mailbox -Filter "ArchiveDatabase -eq $null". Filtering by a specific archive database value isn't supported.

ArchiveDomain

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchArchiveAddress	Get-Mailbox	String (wildcards accepted) or `$null`

This property is used in on-premises Exchange environments to identify the Exchange Online organization that holds the archive mailbox. For example, Get-Mailbox -Filter "ArchiveDomain -like 'contoso.onmicrosoft.com*'".

ArchiveGuid

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchArchiveGUID	Get-Mailbox Get-MailUser Get-Recipient Get-RemoteMailbox	String or `$null`

This filter requires the GUID of the archive mailbox. For example, Get-Mailbox -Filter "ArchiveGuid -eq '6476f55e-e5eb-4462-a095-f2cb585d648d'".

You can find the GUID of archive mailboxes by running this command: Get-Mailbox -Archive | Format-Table -Auto Name,ArchiveGUID.

ArchiveName

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchArchiveName	Get-Mailbox Get-MailUser Get-RemoteMailbox	String (wildcards accepted) or `$null`

This filter requires the name of the archive mailbox. For example, Get-Mailbox -Filter "ArchiveName -like 'In-Place Archive*'".

You can find the names of archive mailboxes by running this command: Get-Mailbox -Archive | Format-Table -Auto Name,ArchiveName.

ArchiveQuota

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchArchiveQuota	Get-Mailbox Get-MailUser Get-RemoteMailbox	A byte quantified size value (for example, `300MB` or `1.5GB`), or `Unlimited`. Unqualified values are treated as bytes.

You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter "ArchiveQuota -eq 'Unlimited'" or Get-Mailbox -Filter "ArchiveQuota -ne 'Unlimited'".

You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: Get-Mailbox | where "$_.ArchiveQuota -<Operator> '<Size>'". For example, Get-Mailbox | where "$_.ArchiveQuota -gt '85GB'".

ArchiveRelease

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchArchiveRelease	Get-Mailbox Get-MailUser Get-Recipient Get-RemoteMailbox Get-User	`None` `E14` `E15` `$null`

For example, Get-Recipient -Filter "ArchiveRelease -eq 'E15'".

ArchiveState

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox Get-Recipient Get-RemoteMailbox	`None` (0) `Local` (1) `HostedProvisioned` (2) `HostedPending` (3) `OnPremise` (4)

For example, Get-Recipient -Filter "ArchiveState -eq 'HostedProvisioned'".

ArchiveStatus

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchArchiveStatus	Get-Mailbox Get-MailUser Get-Recipient Get-RemoteMailbox	`None` (0) or `Active` (1).

For example, Get-Recipient -Filter "ArchiveStatus -eq 'Active'".

ArchiveWarningQuota

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchArchiveWarnQuota	Get-Mailbox Get-MailUser Get-RemoteMailbox	A byte quantified size value (for example, `300MB` or `1.5GB`), or `Unlimited`. Unqualified values are treated as bytes.

You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter "ArchiveWarningQuota -eq 'Unlimited'" or Get-Mailbox -Filter "ArchiveWarningQuota -ne 'Unlimited'".

You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: Get-Mailbox | where "$_.ArchiveWarningQuota -<Operator> '<Size>'". For example, Get-Mailbox | where "$_.ArchiveWarningQuota -gt '85GB'".

AssistantName

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchAssistantName	Get-Contact Get-LinkedUser Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "AssistantName -like 'Julia*'".

AuditEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMailboxAuditEnable	Get-Mailbox	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'AuditEnabled -eq $true'.

AuditLogAgeLimit

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMailboxAuditLogAgeLimit	Get-Mailbox Get-UnifiedGroup	A time span value: dd.hh:mm:ss where dd = days, hh = hours, mm = minutes, and ss = seconds.

You can't use the Filter parameter to look for time span values for this property. Instead, use this syntax: Get-Mailbox | where "$_.AuditLogAgeLimit -<Operator> '<TimeSpan>'". For example, Get-Mailbox | where "$_.AuditLogAgeLimit -gt '60.00:00:00'".

AuthenticationPolicy

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchAuthPolicyLink	Get-User	Distinguished name (DN) (wildcards accepted) or `$null`.

This filter requires the distinguished name of the authentication policy.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-AuthenticationPolicy "Block Basic Auth").DistinguishedName), and then use the variable in the filter ("AuthenticationPolicy -eq '$dn'").

BlockedSendersHash

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchBlockedSendersHash	Get-Recipient	Blank ( `$null`) or a hashed value.

Realistically, you can only use this value to filter on blank or non-blank values. For example, Get-Recipient -Filter 'BlockedSendersHash -ne $null'.

c

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
c	Get-Contact Get-LinkedUser Get-Recipient Get-SecurityPrincipal Get-User	String (wildcards accepted) or `$null`

This filter requires the ISO 3166-1 two-letter country code for the user (for example, US for the United States). This property is used together with the co and countryCode properties to define the user's country in Active Directory.

For example, Get-User -Filter "c -eq 'US'".

CalendarLoggingQuota

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchCalendarLoggingQuota	Get-Mailbox	A byte quantified size value (for example, `300MB` or `1.5GB`), or `Unlimited`. Unqualified values are treated as bytes.

You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter "CalendarLoggingQuota -eq 'Unlimited'" or Get-Mailbox -Filter "CalendarLoggingQuota -ne 'Unlimited'".

You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: Get-Mailbox | where "$_.CalendarLoggingQuota -<Operator> '<Size>'". For example, Get-Mailbox | where "$_.CalendarLoggingQuota -gt '10GB'".

CalendarRepairDisabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchCalendarRepairDisabled	Get-Mailbox	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'CalendarRepairDisabled -eq $true'.

CertificateSubject

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-LinkedUser Get-User	String

The X509 certificate that's published for the user account (visible on the Published Certificates tab in Active Directory Users and Computers).

For example, Get-User -Filter "CertificateSubject -eq 'X509:<I>C=US,O=InternetCA,CN=APublicCertificateAuthority<S>C=US,O=Fabrikam,OU=Sales,CN=Felipe Apodaca'".

City

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
l	Get-Contact Get-LinkedUser Get-Recipient Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "City -eq 'Redmond'".

Company

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
company	Get-Contact Get-LinkedUser Get-Recipient Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "Company -like 'Contoso*'".

ComplianceTagHoldApplied

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox Get-MailUser	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'ComplianceTagHoldApplied -eq $true'.

ConsumerNetID

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-LinkedUser Get-User	String or `$null`

For example, Get-User -Filter 'ConsumerNetID -ne $null'.

CountryCode

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
countryCode	Get-Contact Get-LinkedUser Get-Recipient Get-SecurityPrincipal Get-User	Integer

This filter requires the ISO 3166-1 three-digit country code for the user (for example, 840 for the United States). This property is used together with the c and co properties to define the user's country in Active Directory.

For example, Get-User -Filter "countryCode -eq 796".

CountryOrRegion

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Contact Get-LinkedUser Get-Recipient Get-SecurityPrincipal Get-User	String (wildcards accepted)

This calculated property filters on the country/region using either the ISO 3166-1 two-letter country code (for example, US) or the country name (for example, United States). The underlying c, co, and countryCode properties store these values, and they're automatically configured when you select a user's country in Active Directory Users and Computers ( Address tab > Country/region field) or the Exchange admin center (user properties > Contact information tab > Country/Region field).

For example, Get-User -Filter "CountryOrRegion -like 'United*'".

CustomAttribute1 to CustomAttribute15

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
extensionAttribute1 to extensionAttribute15	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-UnifiedGroup	String (wildcards accepted) or `$null`

For example, Get-Recipient -Filter "CustomAttribute8 -like 'audited*'".

Database

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
homeMDB	Get-Mailbox Get-Recipient	Distinguished name (DN).

This filter requires the distinguished name of the mailbox database.

DefaultPublicFolderMailbox

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchPublicFolderMailbox	Get-Mailbox	Distinguished name (DN) or `$null`.

This filter requires the distinguished name or canonical distinguished name of the public folder mailbox.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Mailbox -PublicFolder "PF Mailbox01").DistinguishedName), and then use the variable in the filter ("DefaultPublicFolderMailbox -eq '$dn'").

DeletedItemFlags

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
deletedItemFlags	Get-Mailbox Get-SecurityPrincipal	`DatabaseDefault` (0) `RetainUntilBackupOrCustomPeriod` (3) `RetainForCustomPeriod` (5)

For example, Get-Mailbox -Filter "DeletedItemFlags -ne 'DatabaseDefault'".

DeliverToMailboxAndForward

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
deliverAndRedirect	Get-Mailbox Get-MailPublicFolder Get-MailUser Get-MailPublicFolder	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'DeliverToMailboxAndForward -eq $true'.

Department

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
department	Get-Contact Get-LinkedUser Get-Recipient Get-User	String (wildcards accepted) or `$null`

For example, Get-Recipient -Filter "Department -like 'Engineering*'".

DirectReports

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
directReports	Get-Contact Get-LinkedUser Get-User	Distinguished name (DN) or `$null`.

This filter requires the distinguished name or canonical distinguished name of the direct report.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Angela Gruber").DistinguishedName), and then use the variable in the filter ("DirectReports -eq '$dn'").

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

DisabledArchiveDatabase

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchDisabledArchiveDatabaseLink	Get-Mailbox Get-MailUser Get-RemoteMailbox	Distinguished name (DN) or `$null`.

In Exchange Server, this filter requires the distinguished name of the disabled archive mailbox database.

In Exchange Online, you can filter only on the presence or absence of a disabled archive database. For example, Get-Mailbox -Filter "DisabledArchiveDatabase -ne $null" or Get-Mailbox -Filter "DisabledArchiveDatabase -eq $null". Filtering by a specific archive database value isn't supported.

DisabledArchiveGuid

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchDisabledArchiveDatabaseGUID	Get-Mailbox Get-MailUser Get-RemoteMailbox	String or `$null`

This filter requires the GUID of the disabled archive mailbox. For example, Get-Mailbox -Filter "DisabledArchiveGuid -eq '6476f55e-e5eb-4462-a095-f2cb585d648d'".

You can find the GUID of archive mailboxes by running this command: Get-Mailbox -Archive | Format-Table -Auto Name,ArchiveGUID.

DisplayName

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
displayName	Get-CASMailbox Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-SecurityPrincipal Get-UMMailbox Get-User Get-UnifiedGroup	String (wildcards accepted)

For example, Get-Recipient -Filter "DisplayName -like 'Julia*'".

DistinguishedName

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
distinguishedName	Get-CASMailbox Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-SecurityPrincipal Get-UMMailbox Get-User Get-UnifiedGroup	Distinguished name (DN).

This filter requires the distinguished name of the recipient.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Bishamon Tamura").DistinguishedName), and then use the variable in the filter ("DistinguishedName -eq '$dn'").

EcpEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-CASMailbox	Boolean (`$true` or `$false`)

For example, Get-CASMailbox -Filter 'EcpEnabled -eq $false'.

EmailAddresses

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
proxyAddresses	Get-CASMailbox Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-UMMailbox Get-UnifiedGroup	String (wildcards accepted)

For example, Get-Recipient -Filter "EmailAddresses -like 'marketing*'".

When you use a complete email address, you don't need to account for the smtp: prefix. If you use wildcards, you do. For example, if "EmailAddresses -eq 'lila@fabrikam.com'" returns a match, "EmailAddresses -like 'lila*'" doesn't return a match, but "EmailAddresses -like 'smtp:lila*'" returns a match.

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

EmailAddressPolicyEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-UnifiedGroup	Boolean (`$true` or `$false`)

For example, Get-Recipient -Filter 'EmailAddressPolicyEnabled -eq $false'.

EntryId

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchPublicFolderEntryId	Get-MailPublicFolder	String (wildcards accepted)

For example, Get-MailPublicFolder -Filter "EntryId -like '60000*'".

You can find the entry IDs of mail-enabled public folders by running this command: Get-MailPublicFolder | Format-List Name,EntryId.

EwsApplicationAccessPolicy

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchEwsApplicationAccessPolicy	Get-CASMailbox	`EnforceAllowList` `EnforceBlockList` `$null`

For example, Get-CASMailbox -Filter "EwsApplicationAccessPolicy -eq 'EnforceAllowList'".

EwsEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchEwsEnabled	Get-CASMailbox	0 (disabled), 1 (enabled) or `$null`.

For example, Get-CASMailbox -Filter "EwsEnabled -eq 1".

ExchangeGuid

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMailboxGuid	Get-Mailbox Get-MailUser Get-Recipient Get-RemoteMailbox Get-UnifiedGroup	String

For example, Get-Mailbox -Filter "ExchangeGuid -eq 'c80a753d-bd4a-4e19-804a-6344d833ecd8'".

To find the Exchange GUID of a recipient, replace <RecipientIdentity> with the name, alias, or email address of the recipient, and run this command: Get-Recipient -Identity "<RecipientIdentity>" | Format-List Name,ExchangeGuid.

Note that an object's Exchange GUID value is different than its GUID value. Also, the Exchange GUID value for non-mailboxes (mail contacts, mail users, distribution groups, dynamic distribution groups, mail-enabled security groups, and mail-enabled public folders) is 00000000-0000-0000-0000-000000000000.

ExchangeUserAccountControl

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchUserAccountControl	Get-Mailbox Get-MailUser Get-RemoteMailbox	`None` (0) or `AccountDisabled` (2)

For example, Get-Mailbox -Filter "ExchangeUserAccountControl -eq 'AccountDisabled'".

ExchangeVersion

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchVersion	Get-CASMailbox Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-SecurityPrincipal Get-UMMailbox Get-User	Integer

This property contains the earliest version of Exchange that you can use to manage the recipient. The property values that you see are different than the values that you need to use in the filter. To see the ExchangeVersion property values, run this command: Get-Recipient | Format-Table Name,RecipientType,ExchangeVersion.

For the Exchange 2010 value 0.10 (14.0.100.0), use the value 44220983382016 in the filter.

For the Exchange 2013 or Exchange 2016 value 0.20 (15.0.0.0), use the value 88218628259840 in the filter.

For example, Get-Recipient -Filter "ExchangeVersion -lt 88218628259840".

ExpansionServer

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchExpansionServerName	Get-DistributionGroup Get-DynamicDistributionGroup Get-Recipient	String (wildcards accepted) or `$null`

For example, Get-Recipient -Filter "ExpansionServer -like 'Mailbox01*'".

For an exact match, you need to use the ExchangeLegacyDN value of the server. For example, Get-Recipient -Filter "ExpansionServer -eq '/o=Contoso Corporation/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Mailbox01'"

You can find the ExchangeLegacyDN value by running this command: Get-ExchangeServer | Format-List Name,ExchangeLegacyDN.

ExtensionCustomAttribute1 to ExtensionCustomAttribute5

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchExtensionCustomAttribute1 to msExchExtensionCustomAttribute5	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-UnifiedGroup	String (wildcards accepted) or `$null`

For example, Get-Recipient -Filter "ExtensionCustomAttribute3 -like 'audited*'".

ExternalDirectoryObjectId

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchExternalDirectoryObjectId	Get-DistributionGroup Get-DynamicDistributionGroup Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-User Get-UnifiedGroup	String or `$null`

For example, Get-Recipient -Filter 'ExternalDirectoryObjectId -ne $null'.

ExternalEmailAddress

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
targetAddress	Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient	String (wildcards accepted) or `$null`

For example, Get-Recipient -Filter "ExternalEmailAddress -like '@fabrikam.com*'".

When you use a complete email address, you don't need to account for the smtp: prefix. If you use wildcards, you do. For example, if "ExternalEmailAddress -eq 'lila@fabrikam.com'" returns a match, "ExternalEmailAddress -like 'lila*'" doesn't return a match, but "ExternalEmailAddress -like 'smtp:lila*'" returns a match.

ExternalOofOptions

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchExternalOOFOptions	Get-Mailbox	`External` (0) or `InternalOnly` (1)

For example, Get-Mailbox -Filter "ExternalOofOptions -eq 'External'".

Fax

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
facsimileTelephoneNumber	Get-Contact Get-LinkedUser Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "Fax -like '206*'".

FirstName

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
givenName	Get-Contact Get-LinkedUser Get-Recipient Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "FirstName -like 'Chris*'".

ForwardingAddress

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
altRecipient	Get-Mailbox Get-MailPublicFolder Get-MailUser Get-RemoteMailbox	Distinguished name (DN) or `$null`.

This filter requires the distinguished name or canonical distinguished name of the forwarding recipient.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Daigoro Aoki").DistinguishedName), and then use the variable in the filter ("ForwardingAddress -eq '$dn'").

ForwardingSmtpAddress

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchGenericForwardingAddress	Get-Mailbox	String (wildcards accepted) or `$null`

For example, Get-Mailbox -Filter "ForwardingSmtpAddress -like '@fabrikam.com*'".

When you use a complete email address, you don't need to account for the smtp: prefix. If you use wildcards, you do. For example, if "ForwardingSmtpAddress -eq 'lila@fabrikam.com'" returns a match, "ForwardingSmtpAddress -like 'lila*'" doesn't return a match, but "ForwardingSmtpAddress -like 'smtp:lila*'" returns a match.

GeneratedOfflineAddressBooks

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchOABGeneratingMailboxBL	Get-Mailbox	Distinguished name (DN) or `$null`.

This property is only meaningful on arbitration mailboxes, so you need to use the Arbitration switch in the filter command. Also, this filter requires the distinguished name of the offline address book.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-OfflineAddressBook "Default Offline Address Book").DistinguishedName), and then use the variable in the filter ("GeneratedOfflineAddressBooks -eq '$dn'").

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

GrantSendOnBehalfTo

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
publicDelegates	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-UnifiedGroup	Distinguished name (DN) or `$null`.

This filter requires the distinguished name or canonical distinguished name of the mail-enabled security principal (mailbox, mail user, or mail-enabled security group).

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Elizabeth Brunner").DistinguishedName), and then use the variable in the filter ("GrantSendOnBehalfTo -eq '$dn'").

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

GroupExternalMemberCount

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-UnifiedGroup	Integer

For example, Get-UnifiedGroup -Filter "GroupExternalMemberCount -gt 0".

GroupMemberCount

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-UnifiedGroup	Integer

For example, Get-UnifiedGroup -Filter "GroupMemberCount -gt 100".

GroupType

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
groupType	Get-DistributionGroup Get-Group Get-UnifiedGroup	`None` (0) `Global` (2) `DomainLocal` (4) `BuiltinLocal` (5) `Universal` (8) `SecurityEnabled` (-2147483648)

Distribution groups have the value Universal, and mail-enabled security groups have the value Universal, SecurityEnabled. You can specify multiple values separated by commas, and the order doesn't matter. For example, Get-DistributionGroup -Filter "GroupType -eq 'Universal,SecurityEnabled'" returns the same results as Get-DistributionGroup -Filter "GroupType -eq 'SecurityEnabled,Universal'".

This multivalued property returns a match only if the property equals the specified value.

Guid

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
objectGuid	Get-CASMailbox Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-SecurityPrincipal Get-UMMailbox Get-User Get-UnifiedGroup	String

For example, Get-Recipient -Filter "Guid -eq '8a68c198-be28-4a30-83e9-bffb760c65ba'".

You can find the GUIDs of recipients by running this command: Get-Recipient | Format-List Name,RecipientType,Guid.

Note that an object's GUID value is different than its Exchange GUID value.

HasActiveSyncDevicePartnership

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-CASMailbox Get-Recipient	Boolean (`$true` or `$false`)

For example, Get-Recipient -Filter 'HasActiveSyncDevicePartnership -eq $true'.

HiddenFromAddressListsEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchHideFromAddressLists	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-UnifiedGroup	Boolean (`$true` or `$false`)

For example, Get-Recipient -Filter 'HiddenFromAddressListsEnabled -eq $true'.

HiddenGroupMembershipEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
hideDLMembership	Get-UnifiedGroup	Boolean (`$true` or `$false`)

For example, Get-UnifiedGroup -Filter 'HiddenGroupMembershipEnabled -eq $true'.

HomePhone

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
homePhone	Get-Contact Get-LinkedUser Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "HomePhone -like '206*'".

Id

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
distinguishedName	Get-CASMailbox Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-UMMailbox Get-User Get-SecurityPrincipal Get-UnifiedGroup	Distinguished name (DN).

This filter requires the distinguished name or canonical distinguished name of the recipient.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Felipe Apodaca").DistinguishedName), and then use the variable in the filter ("Id -eq '$dn'").

IgnoreMissingFolderLink

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-MailPublicFolder	Boolean (`$true` or `$false`)

For example, Get-MailPublicFolder -Filter 'IgnoreMissingFolderLink -eq $true'.

ImapEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-CASMailbox	Boolean (`$true` or `$false`)

For example, Get-CASMailbox -Filter 'ImapEnabled -eq $false'.

ImmutableId

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchGenericImmutableId	Get-Mailbox Get-MailUser Get-RemoteMailbox	String or `$null`

For example, Get-Mailbox -Filter 'ImmutableId -ne $null'.

IncludeInGarbageCollection

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'IncludeInGarbageCollection -eq $true'.

Initials

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
initials	Get-Contact Get-LinkedUser Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "Initials -like 'B.'".

InPlaceHolds

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchUserHoldPolicies	Get-Mailbox Get-MailUser Get-RemoteMailbox	String

This filter requires the InPlaceHoldIdentity value of the mailbox search. For example, Get-Mailbox -Filter "InPlaceHolds -eq '9d0f81154cc64c6b923ecc0be5ced0d7'".

To find the InPlaceHoldIdentity values of mailbox searches, run this command: Get-MailboxSearch | Format-Table Name,InPlaceHoldIdentity.

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

InPlaceHoldsRaw

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-LinkedUser Get-User	String

This filter requires the InPlaceHoldIdentity value of the mailbox search. For example, Get-Mailbox -Filter "InPlaceHoldsRaw -eq '9d0f81154cc64c6b923ecc0be5ced0d7'".

To find the InPlaceHoldIdentity values of mailbox searches, run this command: Get-MailboxSearch | Format-Table Name,InPlaceHoldIdentity.

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

IsDirSynced

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchIsMSODirsynced	Get-Contact Get-DistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailUser Get-Recipient Get-RemoteMailbox Get-User Get-UnifiedGroup	Boolean (`$true` or `$false`)

For example, Get-User -Filter 'IsDirSynced -eq $true'.

IsExcludedFromServingHierarchy

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'IsExcludedFromServingHierarchy -eq $true'.

IsHierarchyReady

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'IsHierarchyReady -eq $false'.

IsHierarchySyncEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'IsHierarchySyncEnabled -eq $false'.

IsInactiveMailbox

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'IsInactiveMailbox -eq $false'.

IsLinked

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-LinkedUser Get-Mailbox Get-User	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'IsLinked -eq $true'.

IsMailboxEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'IsMailboxEnabled -eq $false'.

IsResource

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'IsResource -eq $true'.

IsSecurityPrincipal

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-LinkedUser Get-User	Boolean (`$true` or `$false`)

For example, Get-User -Filter 'IsSecurityPrincipal -eq $false'.

IsShared

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'IsShared -eq $true'.

IsSoftDeletedByDisable

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-LinkedUser Get-Mailbox Get-MailUser Get-RemoteMailbox Get-User	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'IsSoftDeletedByDisable -eq $true'.

IsSoftDeletedByRemove

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-LinkedUser Get-Mailbox Get-MailUser Get-RemoteMailbox Get-User	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'IsSoftDeletedByRemove -eq $true'.

IssueWarningQuota

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
mDBStorageQuota	Get-Mailbox Get-MailUser Get-RemoteMailbox	A byte quantified size value (for example, `300MB` or `1.5GB`), or `Unlimited`. Unqualified values are treated as bytes.

You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter "IssueWarningQuota -eq 'Unlimited'" or Get-Mailbox -Filter "IssueWarningQuota -ne 'Unlimited'".

You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: Get-Mailbox | where "$_.IssueWarningQuota -<Operator> '<Size>'". For example, Get-Mailbox | where "$_.IssueWarningQuota -lt '50GB'".

JournalArchiveAddress

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox Get-MailUser Get-RemoteMailbox	String

This property uses an SMTP email address. For example, Get-Mailbox -Filter "JournalArchiveAddress -eq 'michelle@contoso.com'".

LanguagesRaw

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchUserCulture	Get-Mailbox	String (wildcards accepted) or `$null`

This property is named Languages in the properties of a mailbox, and it contains the language preference for the mailbox in the format <ISO 639 two-letter culture code>-<ISO 3166 two-letter subculture code>. For example, United States English is en-US. For more information, see CultureInfo Class.

You can specify multiple values separated by commas, but the order matters. For example, Get-Mailbox -Filter "LanguagesRaw -eq 'en-US,es-MX'" returns different results than Get-Mailbox -Filter "LanguagesRaw -eq 'es-MX,en-US'".

For single values, this multivalued property returns a match only if the property contains the specified value.

LastExchangeChangedTime

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchLastExchangeChangedTime	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-UnifiedGroup	`$null` or a date/time value: 64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 (UTC)

For example, Get-Mailbox -Filter 'LastExchangeChangedTime -ne $null'.

LastName

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
sn	Get-Contact Get-LinkedUser Get-Recipient Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "LastName -like 'Martin*'".

LegacyExchangeDN

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
legacyExchangeDN	Get-CASMailbox Get-DistributionGroup Get-DynamicDistributionGroup Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-UMMailbox Get-User Get-UnifiedGroup	String (wildcards accepted)

For example, Get-User -Filter "LegacyExchangeDN -like 'Osca*'".

Wildcards in filters on this property are supported only in Exchange Server. In Exchange Online and Security & Compliance PowerShell, use an exact value match instead.

You can find LegacyExchangeDN values for users by running this command: Get-User | Format-List Name,LegacyExchangeDN

LitigationHoldDate

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchLitigationHoldDate	Get-Mailbox Get-MailUser Get-RemoteMailbox	`$null` or a date/time value: 64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 (UTC)

For example, Get-Mailbox -Filter "LitigationHoldDate -gt '8/13/2017'".

LitigationHoldEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox Get-MailUser Get-Recipient Get-RemoteMailbox	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'LitigationHoldEnabled -eq $true'.

LitigationHoldOwner

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchLitigationHoldOwner	Get-Mailbox Get-MailUser Get-RemoteMailbox	String (wildcards accepted) or `$null`

This property uses the user principal name of the litigation hold owner. For example, Get-Mailbox -Filter "LitigationHoldOwner -eq 'agruber@contoso.com'".

MailboxContainerGUID

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMailboxContainerGuid	Get-Mailbox Get-MailUser Get-RemoteMailbox	String or `$null`

For example, Get-Mailbox -Filter 'MailboxContainerGUID -ne $null'.

MailboxMoveBatchName

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMailboxMoveBatchName	Get-Mailbox Get-MailUser Get-Recipient Get-RemoteMailbox	String (wildcards accepted) or `$null`

This property includes the name of the migration batch. For example, Get-Mailbox -Filter "MailboxMoveBatchName -like 'LocalMove 01*'".

You can find the names of migration batches by running the Get-MigrationBatch command. Note that migration batches that you create in the Exchange admin center use the naming convention MigrationService:<MigrationBatchName>.

MailboxMoveFlags

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMailboxMoveFlags	Get-Mailbox Get-MailUser Get-Recipient Get-RemoteMailbox	For valid values, see the description of the Flags parameter in Get-MoveRequest.

For example, Get-Mailbox -Filter "MailboxMoveFlags -ne 'None'".

You can specify multiple values separated by commas, and the order doesn't matter. For example, Get-Recipient -Filter "MailboxMoveFlags -eq 'IntraOrg,Pull'" returns the same results as Get-Recipient -Filter "MailboxMoveFlags -eq 'Pull,IntraOrg'".

This multivalued property returns a match only if the property equals the specified value.

MailboxMoveRemoteHostName

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMailboxMoveRemoteHostName	Get-Mailbox Get-MailUser Get-Recipient Get-RemoteMailbox	String or `$null`

For example, Get-Mailbox -Filter "MailboxMoveRemoteHostName -eq 'mail.contoso.com'".

MailboxMoveSourceMDB

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMailboxMoveSourceMDBLink	Get-Mailbox Get-MailUser Get-Recipient Get-RemoteMailbox	Distinguished name (DN) or `$null`.

This filter requires the distinguished name of the source mailbox database.

MailboxMoveStatus

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMailboxMoveStatus	Get-Mailbox Get-MailUser Get-Recipient Get-RemoteMailbox	For valid values, see the description of the MoveStatus parameter in Get-MoveRequest.

For example, Get-Mailbox -Filter "MailboxMoveStatus -eq 'Completed'".

MailboxMoveTargetMDB

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMailboxMoveTargetMDBLink	Get-Mailbox Get-MailUser Get-Recipient Get-RemoteMailbox	Distinguished name (DN) or `$null`.

This filter requires the distinguished name of the target mailbox database.

MailboxPlan

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchParentPlanLink	Get-Mailbox	Distinguished name (DN).

Mailbox plans correspond to Microsoft 365 license types. The availability of license plans is determined by the selections that you make when you enroll your domain.

Friendly identifier values like name don't work in the filter.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-MailboxPlan "ExchangeOnlineEnterprise").DistinguishedName), and then use the variable in the filter ("MailboxPlan -eq '$dn'").

MailboxRelease

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMailboxRelease	Get-Mailbox Get-MailUser Get-Recipient Get-RemoteMailbox Get-User	`None` `E14` `E15` `$null`

For example, Get-Recipient -Filter "MailboxRelease -eq 'E15'".

MailTipTranslations

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchSenderHintTranslations	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-UnifiedGroup	String (wildcards accepted) or `$null`

When you use this property in a filter, you need to account for the leading and trailing HTML tags. For example, Get-DistributionGroup -Filter "MailTipTranslations -like 'is not monitored.*'".

ManagedBy

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
managedBy	Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-Recipient Get-UnifiedGroup	Distinguished name (DN) or `$null`.

This filter requires the distinguished name or canonical distinguished name of the group owner (a mail-enabled security principal, which is a mailbox, mail user, or mail-enabled security group).

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Gabriela Laureano").DistinguishedName), and then use the variable in the filter ("ManagedBy -eq '$dn'").

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

ManagedFolderMailboxPolicy

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMailboxTemplateLink	Get-Mailbox Get-Recipient	Distinguished name (DN) or `$null`.

Managed folder mailbox policies aren't available in Exchange 2013 or later.

For example, Get-Mailbox -Filter 'ManagedFolderMailboxPolicy -eq $null'.

This filter requires the distinguished name of the managed folder mailbox policy.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-ManagedFolderMailboxPolicy "MFM Inbox Policy").DistinguishedName), and then use the variable in the filter ("ManagedFolderMailboxPolicy -eq '$dn'").

Manager

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
manager	Get-Contact Get-LinkedUser Get-Recipient Get-User	Distinguished name (DN) or `$null`.

This filter requires the distinguished name or canonical distinguished name of the manager (a mailbox or mail user).

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Hyun-Ae Rim").DistinguishedName), and then use the variable in the filter ("Manager -eq '$dn'").

MAPIEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-CASMailbox	Boolean (`$true` or `$false`)

For example, Get-CASMailbox -Filter 'MAPIEnabled -eq $false'.

MasterAccountSid

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMasterAccountSid	Get-Mailbox Get-LinkedUser Get-Recipient Get-SecurityPrincipal Get-User	String or `$null`

For example, Get-Mailbox -Filter "MasterAccountSid -eq 'S-1-5-10'".

This value is blank ( $null) for mailboxes with associated user accounts, and S-1-5-10 (Self) for mailboxes without associated user accounts (for example, shared mailboxes, resource mailboxes, discovery search mailboxes, arbitration mailboxes, and public folder mailboxes).

MaxBlockedSenders

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMaxBlockedSenders	Get-Mailbox	Integer or `$null`

For example, Get-Mailbox -Filter "MaxBlockedSenders -gt 0".

MaxReceiveSize

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
delivContLength	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-UnifiedGroup	A byte quantified size value (for example, `75MB`), or `Unlimited`. Unqualified values are treated as bytes.

You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter "MaxReceiveSize -eq 'Unlimited'" or Get-Mailbox -Filter "MaxReceiveSize -ne 'Unlimited'".

You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: Get-Mailbox | where "$_.MaxReceiveSize -<Operator> '<Size>'". For example, Get-Mailbox | where "$_.MaxReceiveSize -gt '50GB'".

MaxSafeSenders

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMaxSafeSenders	Get-Mailbox	Integer or `$null`

For example, Get-Mailbox -Filter "MaxSafeSenders -gt 0".

MaxSendSize

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
submissionContLength	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-UnifiedGroup	A byte quantified size value (for example, `75MB`), or `Unlimited`. Unqualified values are treated as bytes.

You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter "MaxSendSize -eq 'Unlimited'" or Get-Mailbox -Filter "MaxSendSize -ne 'Unlimited'".

MemberDepartRestriction

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchGroupDepartRestriction	Get-DistributionGroup	`Closed` (0) `Open` (1) `ApprovalRequired` (2)

For example, Get-DistributionGroup -Filter "MemberDepartRestriction -eq 'ApprovalRequired'".

MemberJoinRestriction

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchGroupJoinRestriction	Get-DistributionGroup	`Closed` (0) `Open` (1) `ApprovalRequired` (2)

For example, Get-DistributionGroup -Filter "MemberJoinRestriction -eq 'ApprovalRequired'".

MemberOfGroup

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
memberOf	Get-CASMailbox Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-SecurityPrincipal Get-UMMailbox Get-User	Distinguished name (DN) or `$null`.

This filter requires the distinguished name or canonical distinguished name of the distribution group or mail-enabled security group.

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

Members

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
member	Get-DistributionGroup Get-Group Get-Recipient	Distinguished name (DN) or `$null`.

This filter requires the distinguished name or canonical distinguished name of the group member.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Jacob Berger").DistinguishedName), and then use the variable in the filter ("Members -eq '$dn'").

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

MobilePhone

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
mobile	Get-Contact Get-LinkedUser Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "MobilePhone -like '555*'".

ModeratedBy

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchModeratedByLink	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-UnifiedGroup	Distinguished name (DN).

This filter requires the distinguished name or canonical distinguished name of the group moderator (a mail-enabled security principal, which is a mailbox, mail-user, or mail-enabled security group).

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Joanne Schwarz").DistinguishedName), and then use the variable in the filter ("ModeratedBy -eq '$dn'").

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

ModerationEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchEnableModeration	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-UnifiedGroup	Boolean (`$true` or `$false`)

For example, Get-DistributionGroup -Filter 'ModerationEnabled -eq $true'.

Name

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
name	Get-CASMailbox Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-SecurityPrincipal Get-UMMailbox Get-User Get-UnifiedGroup	String (wildcards accepted)

For example, Get-User -Filter "Name -like 'Laura*'".

NetID

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-LinkedUser Get-Mailbox Get-User	String

This property is populated for Exchange Online mailboxes in hybrid environments. A sample value is 1003BFFD9A0CFA03.

For example, Get-User -Filter 'NetId -ne $null'.

Notes

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
info	Get-Contact Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Recipient Get-User Get-UnifiedGroup	String (wildcards accepted) or `$null`

For example, Get-User -Filter "Notes -like 'Events Team*'".

ObjectCategory

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
objectCategory	Get-CASMailbox Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-SecurityPrincipal Get-UMMailbox Get-User Get-UnifiedGroup	String

This filter requires the canonical distinguished name of the object. The value uses the syntax <domain>/Configuration/Schema/<Type>.

Valid <Type> values are:

Person for mailboxes, mail users, and mail contacts
Group for distribution groups, mail-enabled security groups, and Microsoft 365 Groups
ms-Exch-Public-Folder for mail-enabled public folders
ms-Exch-Dynamic-Distribution-List for dynamic distribution groups

For example, Get-Recipient -Filter "ObjectCategory -eq 'contoso.com/Configuration/Schema/Group'".

ObjectClass

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
objectClass	Get-CASMailbox Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-SecurityPrincipal Get-UMMailbox Get-User Get-UnifiedGroup	String

The value of this property is top, person, organizationalPerson, user for mailboxes and mail users, top, person, organizationalPerson, contact for mail contacts, top, group for distribution groups, mail-enabled security groups and Microsoft 365 Groups, msExchDynamicDistributionList for dynamic distribution groups and top, publicFolder for mail-enabled public folders

For example, Get-Recipient -Filter "ObjectClass -eq 'Contact'".

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

Office

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
physicalDeliveryOfficeName	Get-Contact Get-LinkedUser Get-Mailbox Get-Recipient Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "Office -like '22*'".

OfflineAddressBook

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchUseOAB	Get-Mailbox	Distinguished name (DN) or `$null`.

This filter requires the distinguished name of the offline address book.

OnPremisesObjectId

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-MailPublicFolder	String or `$null`

For example, Get-MailPublicFolder -Filter 'OnPremisesObjectId -ne $null'.

OperatorNumber

Applicable:

Exchange Server^*
Exchange Online
Security & Compliance

^* Get-UMMailbox is available only in Exchange Server 2016 and earlier. Unified Messaging was removed in Exchange Server 2019.

LDAP display name	Cmdlets	Value
msExchUMOperatorNumber	Get-UMMailbox	String (wildcards accepted) or `$null`

For example, Get-UMMailbox -Filter "OperatorNumber -eq 5".

OtherFax

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
otherFacsimileTelephoneNumber	Get-Contact Get-LinkedUser Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "OtherFax -like '206*'".

OtherHomePhone

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
otherHomePhone	Get-Contact Get-LinkedUser Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "OtherHomePhone -like '206*'".

OtherTelephone

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
otherTelephone	Get-Contact Get-LinkedUser Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "OtherTelephone -like '206*'".

OWAEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-CASMailbox	Boolean (`$true` or `$false`)

The filter operates backwards. For example, Get-CASMailbox -Filter 'OWAEnabled -eq $true' returns mailboxes where the OWAEnabled property is False, and Get-CASMailbox -Filter 'OWAEnabled -eq $false' returns mailboxes where the OWAEnabled property is True

OWAforDevicesEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchOmaAdminWirelessEnable	Get-CASMailbox	Boolean (`$true` or `$false`)

For example, Get-CASMailbox -Filter 'OWAForDevicesEnabled -eq $true'.

OWAMailboxPolicy

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchOWAPolicy	Get-CASMailbox Get-Recipient	Distinguished name (DN) or `$null`.

This filter requires the distinguished name of the Outlook on the web mailbox policy (formerly known as an Outlook Web App mailbox policy).

To use a friendly value, store the DN in a variable (for example, $dn = (Get-OwaMailboxPolicy "Default").DistinguishedName), and then use the variable in the filter ("OWAMailboxPolicy -eq '$dn'").

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
pager	Get-Contact Get-LinkedUser Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "Pager -like '206*'".

PersistedCapabilities

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox Get-MailUser Get-RemoteMailbox	String

Typically, the value of this property something other than $null (blank) for Microsoft 365 accounts and mailboxes. For more information about the valid property values, see Capability enumeration.

For example, Get-Mailbox -Filter 'PersistedCapabilities -ne $null'.

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

Phone

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
telephoneNumber	Get-Contact Get-LinkedUser Get-Recipient Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "Phone -like '206*'".

PhoneProviderId

Applicable:

Exchange Server^*
Exchange Online
Security & Compliance

^* Get-UMMailbox is available only in Exchange Server 2016 and earlier. Unified Messaging was removed in Exchange Server 2019.

LDAP display name	Cmdlets	Value
msExchUMPhoneProvider	Get-UMMailbox	String (wildcards accepted) or `$null`

For example, Get-UMMailbox -Filter "PhoneProviderId -like '206*'".

PhoneticDisplayName

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msDS-PhoneticDisplayName	Get-Contact Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-MailPublicFolder Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "PhoneticDisplayName -like 'Lila*'".

PoliciesExcluded

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchPoliciesExcluded	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-UnifiedGroup	String or `$null`

For example, Get-Recipient -Filter 'PoliciesExcluded -ne $null'.

PoliciesIncluded

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchPoliciesIncluded	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-UnifiedGroup	String or `$null`

For example, Get-Recipient -Filter 'PoliciesIncluded -eq $null'.

PopEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-CASMailbox	Boolean (`$true` or `$false`)

For example, Get-CASMailbox -Filter 'POPEnabled -eq $false'.

PostalCode

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
postalCode	Get-Contact Get-LinkedUser Get-Recipient Get-User	String (wildcards accepted) or `$null`

For example, Get-Recipient -Filter "PostalCode -eq 90210".

PostOfficeBox

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
postOfficeBox	Get-Contact Get-LinkedUser Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "PostOfficeBox -like '555*'".

PreviousRecipientTypeDetails

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchPreviousRecipientTypeDetails	Get-LinkedUser Get-User	String or `$null`

For valid values, see the description of the RecipientTypeDetails parameter in Get-Recipient.

For example, Get-User -Filter "PreviousRecipientTypeDetails -eq 'UserMailbox'".

PrimarySmtpAddress

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-CASMailbox Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-UMMailbox Get-UnifiedGroup	String (wildcards accepted)

Don't use the PrimarySmtpAddress property; use the EmailAddresses property instead. Any filter that uses the PrimarySmtpAddress property also searches values in the EmailAddresses property. For example, if a mailbox has the primary email address dario@contoso.com, and the additional proxy addresses dario2@contoso.com and dario3@contoso.com, all of the following filters return that mailbox in the result: "PrimarySmtpAddress -eq 'dario@contoso.com'", "PrimarySmtpAddress -eq 'dario2@contoso.com'", or "PrimarySmtpAddress -eq 'dario3@contoso.com'".

ProhibitSendQuota

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
mDBOverQuotaLimit	Get-Mailbox Get-MailUser Get-RemoteMailbox	A byte quantified size value (for example, `300MB` or `1.5GB`), or `Unlimited`. Unqualified values are treated as bytes.

You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter "ProhibitSendQuota -eq 'Unlimited'" or Get-Mailbox -Filter "ProhibitSendQuota -ne 'Unlimited'".

You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: Get-Mailbox | where "$_.ProhibitSendQuota -<Operator> '<Size>'". For example, Get-Mailbox | where "$_.ProhibitSendQuota -lt '70GB'".

ProhibitSendReceiveQuota

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
mDBOverHardQuotaLimit	Get-Mailbox Get-MailUser Get-RemoteMailbox	A byte quantified size value (for example, `300MB` or `1.5GB`), or `Unlimited`. Unqualified values are treated as bytes.

You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter "ProhibitSendReceiveQuota -eq 'Unlimited'" or Get-Mailbox -Filter "ProhibitSendReceiveQuota -ne 'Unlimited'".

You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: Get-Mailbox | where "$_.ProhibitSendReceiveQuota -<Operator> '<Size>'". For example, Get-Mailbox | where "$_.ProhibitSendReceiveQuota -lt '70GB'".

ProtocolSettings

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
protocolSettings	Get-Mailbox Get-MailUser Get-RemoteMailbox	String (wildcards accepted) or `$null`

The default value of this property on mailboxes is RemotePowerShell§1. This property is populated with additional values when you use Set-CASMailbox to disable protocols (for example, POP3 or IMAP4).

For example, Get-Mailbox -Filter "ProtocolSettings -like 'POP3*'".

PublicFolderContacts

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
pFContacts	Get-MailPublicFolder	Distinguished name (DN) or `$null`.

This property is displayed as Contacts in the results of the command Get-MailPublicFolder -Identity <PublicFolderIdentity> | Format-List, but you need to use the property name PublicFolderContacts in the filter.

This filter requires the distinguished name or canonical distinguished name of the public folder contact.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Kathleen Reiter").DistinguishedName), and then use the variable in the filter ("PublicFolderContacts -eq '$dn'").

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

QueryBaseDN

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchQueryBaseDN	Get-Mailbox	String or `$null`

This property was used in Exchange 2007 global address list segregation to specify a location in Active Directory. This feature was replaced by address book policies in Exchange 2010 Service Pack 2, so the value of this property should always be blank ( $null).

For example, Get-Mailbox -Filter 'QueryBaseDN -ne $null'.

RecipientContainer

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchDynamicDLBaseDN	Get-DynamicDistributionGroup	Distinguished name (DN) or `$null`.

This filter requires the distinguished name or canonical distinguished name of the organizational unit or container in Active Directory.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-OrganizationalUnit "contoso.com/Users").DistinguishedName), and then use the variable in the filter ("RecipientContainer -eq '$dn'").

RecipientLimits

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchRecipLimit	Get-Mailbox Get-MailUser Get-RemoteMailbox	Integer or `Unlimited`

For example, Get-Mailbox -Filter "RecipientLimits -ne 'Unlimited'".

RecipientType

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-SecurityPrincipal Get-User Get-UnifiedGroup	`DynamicDistributionGroup` `MailContact` `MailNonUniversalGroup` `MailUniversalDistributionGroup` `MailUniversalSecurityGroup` `MailUser` `PublicFolder` `UserMailbox`

For example, Get-Recipient -Filter "RecipientType -eq 'MailContact'".

RecipientTypeDetails

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-SecurityPrincipal Get-User Get-UnifiedGroup	String

For valid values, see the description of the RecipientTypeDetails parameter in Get-Recipient.

For example, Get-Recipient -Filter "RecipientTypeDetails -eq 'SharedMailbox'".

RecoverableItemsQuota

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchDumpsterQuota	Get-Mailbox Get-MailUser Get-RemoteMailbox	A byte quantified size value (for example, `300MB` or `1.5GB`), or `Unlimited`. Unqualified values are treated as bytes.

You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter "RecoverableItemsQuota -eq 'Unlimited'" or Get-Mailbox -Filter "RecoverableItemsQuota -ne 'Unlimited'".

You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: Get-Mailbox | where "$_.RecoverableItemsQuota -<Operator> '<Size>'. For example, Get-Mailbox | where "$_.RecoverableItemsQuota -gt '35GB'".

RecoverableItemsWarningQuota

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchDumpsterWarningQuota	Get-Mailbox Get-MailUser Get-RemoteMailbox	A byte quantified size value (for example, `300MB` or `1.5GB`), or `Unlimited`. Unqualified values are treated as bytes.

You can only use the Filter parameter to look for the value Unlimited for this property. For example, Get-Mailbox -Filter "RecoverableItemsWarningQuota -eq 'Unlimited'" or Get-Mailbox -Filter "RecoverableItemsWarningQuota -ne 'Unlimited'".

You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: Get-Mailbox | where "$_.RecoverableItemsWarningQuota -<Operator> '<Size>'". For example, Get-Mailbox | where "$_.RecoverableItemsWarningQuota -gt '25GB'".

RejectMessagesFrom

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
unauthOrig	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-UnifiedGroup	Distinguished name (DN) or `$null`.

This filter requires the distinguished name of the individual recipient (a mailbox, mail user, or mail contact).

To use a friendly value, store the DN in a variable (for example, $dn = (Get-Recipient "Mai Fujito").DistinguishedName), and then use the variable in the filter ("RejectMessagesFrom -eq '$dn'").

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

RejectMessagesFromDLMembers

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
dLMemRejectPerms	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-UnifiedGroup	Distinguished name (DN) or `$null`.

This filter requires the distinguished name or canonical distinguished name of the group (a distribution group, mail-enabled security group, or dynamic distribution group).

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

RemoteAccountPolicy

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchSyncAccountsPolicyDN	Get-Mailbox	String or `$null`

This filter requires the distinguished name of the remote account policy. For example, Get-Mailbox -Filter "RemoteAccountPolicy -eq 'CN=Contoso Remote Account Policy,CN=Remote Accounts Policies Container,CN=Contoso Corporation,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com'".

RemotePowerShellEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-User	Boolean (`$true` or `$false`)

For example, Get-User -Filter 'RemotePowerShellEnabled -eq $false'.

RemoteRecipientType

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchRemoteRecipientType	Get-Mailbox Get-RemoteMailbox	`None` (0) `ProvisionMailbox` (1) `ProvisionArchive` (2) `Migrated` (4) `DeprovisionMailbox` (8) `DeprovisionArchive` (16) `RoomMailbox` (32) `EquipmentMailbox` (64) `SharedMailbox` (96) `TeamMailbox` (128) `$null`

For example, Get-RemoteMailbox -Filter "RemoteRecipientType -eq 'ProvisionMailbox'".

ReportToManagerEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
reportToOwner	Get-DistributionGroup Get-DynamicDistributionGroup Get-UnifiedGroup	Boolean (`$true` or `$false`)

For example, Get-DistributionGroup -Filter 'ReportToManagerEnabled -eq $true'.

ReportToOriginatorEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
reportToOriginator	Get-DistributionGroup Get-DynamicDistributionGroup Get-UnifiedGroup	Boolean (`$true` or `$false`)

For example, Get-DistributionGroup -Filter 'ReportToOriginatorEnabled -eq $false'.

RequireAllSendersAreAuthenticated

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchRequireAuthToSendTo	Get-DistributionGroup Get-DynamicDistributionGroup Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-SecurityPrincipal	Boolean (`$true` or `$false`)

This property is displayed as RequireSenderAuthenticationEnabled in the results of the command Get-<RecipientType> -Identity <RecipientIdentity> | Format-List, but you need to use the property name RequireAllSendersAreAuthenticated in the filter. For example, Get-DistributionGroup -Filter 'RequireAllSendersAreAuthenticated -eq $false'.

ResourceBehaviorOptions

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-UnifiedGroup	`AllowOnlyMembersToPost` `CalendarMemberReadOnly` `ConnectorsEnabled` `HideGroupInOutlook` `NotebookForLearningCommunitiesEnabled` `ReportToOriginator` `SharePointReadonlyForMembers` `SubscriptionEnabled` `SubscribeMembersToCalendarEvents` `SubscribeMembersToCalendarEventsDisabled` `SubscribeNewGroupMembers` `WelcomeEmailDisabled` `WelcomeEmailEnabled` `$null`

For example, Get-UnifiedGroup -Filter "ResourceBehaviorOptions -eq 'CalendarMemberReadOnly'"

ResourceCapacity

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchResourceCapacity	Get-Mailbox	Integer or `$null`

For example, Get-Mailbox -Filter "ResourceCapacity -gt 15"

ResourceCustom

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox	String

You create custom resource properties by using the Set-ResourceConfig cmdlet. For example, Set-ResourceConfig -ResourcePropertySchema Room/Whiteboard,Equipment/Van. After you create the properties, you can assign them to room or equipment mailboxes. For example, Set-Mailbox -Identity "Conference Room 1" -ResourceCustom Whiteboard.

When you search for values, use the custom resource property that's assigned to the room or equipment mailbox. For example, Get-Mailbox -Filter "ResourceCustom -eq 'Whiteboard'".

ResourceProvisioningOptions

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-UnifiedGroup	`Team` or `$null`

For example, Get-UnifiedGroup -Filter "ResourceProvisioningOptions -eq 'Team'"

ResourceType

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox Get-Recipient	`Room` (0) or `Equipment` (1)

For example, Get-Mailbox -Filter "ResourceType -eq 'Equipment'"

RetainDeletedItemsFor

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
garbageCollPeriod	Get-Mailbox Get-MailUser Get-RemoteMailbox	A time span value: dd.hh:mm:ss where dd = days, hh = hours, mm = minutes, and ss = seconds.

You can't use the Filter parameter to look for time span values for this property. Instead, use this syntax: Get-Mailbox | where "$_.RetainDeletedItemsFor -<Operator> '<TimeSpan>'". For example, Get-Mailbox | where "$_.RetainDeletedItemsFor -gt '14.00:00:00'".

RetentionComment

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchRetentionComment	Get-Mailbox Get-MailUser Get-RemoteMailbox	String (wildcards accepted) or `$null`

For example, Get-Mailbox -Filter "RetentionComment -like '7 years*'"

RetentionPolicy

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox Get-Recipient	Distinguished name (DN) or `$null`.

This filter requires the distinguished name of the retention policy.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-RetentionPolicy "Default MRM Policy").DistinguishedName), and then use the variable in the filter ("RetentionPolicy -eq '$dn'").

RetentionUrl

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchRetentionURL	Get-Mailbox Get-MailUser Get-RemoteMailbox	String (wildcards accepted) or `$null`

For example, Get-Mailbox -Filter "RetentionUrl -like 'https://intranet.contoso.com/*'"

RoleAssignmentPolicy

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchRBACPolicyLink	Get-Mailbox	Distinguished name (DN) (wildcards accepted) or `$null`.

This filter requires the distinguished name of the role assignment policy in Exchange Online.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-RoleAssignmentPolicy "Default Role Assignment Policy").DistinguishedName), and then use the variable in the filter ("RoleAssignmentPolicy -eq '$dn'").

RulesQuota

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMDBRulesQuota	Get-Mailbox	A byte quantified size value (for example, `50B` or `128KB`). Unqualified values are treated as bytes.

You can't use the Filter parameter to look for size values of this property. Instead, use this syntax: Get-Mailbox | where "$_.RulesQuota -<Operator> '<Size>'". For example, Get-Mailbox | where "$_.RulesQuota -lt '256KB'".

SafeRecipientsHash

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchSafeRecipientsHash	Get-Recipient	Blank ( `$null`) or a hashed value.

Realistically, you can only use this value to filter on blank or non-blank values. For example, Get-Recipient -Filter 'SafeRecipientsHash -ne $null'.

SafeSendersHash

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchSafeSendersHash	Get-Recipient	Blank ( `$null`) or a hashed value.

Realistically, you can only use this value to filter on blank or non-blank values. For example, Get-Recipient -Filter 'SafeSendersHash -ne $null'.

SamAccountName

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
SamAccountName	Get-CASMailbox Get-DistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailUser Get-Recipient Get-RemoteMailbox Get-UMMailbox Get-User	String (wildcards accepted) or `$null`

For example, Get-Recipient -Filter "SamAccountName -like 'laura*'"

SCLDeleteThresholdInt

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMessageHygieneSCLDeleteThreshold	Get-Mailbox	-2147483648 (SCL value 0), -2147483647 (SCL value 1), -2147483646 (SCL value 2), -2147483645 (SCL value 3), -2147483644 (SCL value 4), -2147483643 (SCL value 5), -2147483642 (SCL value 6), -2147483641 (SCL value 7), -2147483640 (SCL value 8), -2147483639 (SCL value 9) or `$null`

This property is displayed as SCLDeleteThreshold in the results of the command Get-Mailbox -Identity <MailboxIdentity> | Format-List, but you need to use the property name SCLDeleteThresholdInt in the filter. For example, Get-Mailbox -Filter "SCLDeleteThresholdInt -ge -2147483640".

SCLJunkThresholdInt

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMessageHygieneSCLJunkThreshold	Get-Mailbox	-2147483648 (SCL value 0), -2147483647 (SCL value 1), -2147483646 (SCL value 2), -2147483645 (SCL value 3), -2147483644 (SCL value 4), -2147483643 (SCL value 5), -2147483642 (SCL value 6), -2147483641 (SCL value 7), -2147483640 (SCL value 8), -2147483639 (SCL value 9) or `$null`

This property is displayed as SCLJunkThreshold in the results of the command Get-Mailbox -Identity <MailboxIdentity> | Format-List, but you need to use the property name SCLJunkThresholdInt in the filter. For example, Get-Mailbox -Filter "SCLJunkThresholdInt -ge -2147483645".

SCLQuarantineThresholdInt

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMessageHygieneSCLQuarantineThreshold	Get-Mailbox	-2147483648 (SCL value 0), -2147483647 (SCL value 1), -2147483646 (SCL value 2), -2147483645 (SCL value 3), -2147483644 (SCL value 4), -2147483643 (SCL value 5), -2147483642 (SCL value 6), -2147483641 (SCL value 7), -2147483640 (SCL value 8), -2147483639 (SCL value 9) or `$null`

This property is displayed as SCLQuarantineThreshold in the results of the command Get-Mailbox -Identity <MailboxIdentity> | Format-List, but you need to use the property name SCLQuarantineThresholdInt in the filter. For example, Get-Mailbox -Filter "SCLQuarantineThresholdInt -ge -2147483643".

SCLRejectThresholdInt

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchMessageHygieneSCLRejectThreshold	Get-Mailbox	-2147483648 (SCL value 0), -2147483647 (SCL value 1), -2147483646 (SCL value 2), -2147483645 (SCL value 3), -2147483644 (SCL value 4), -2147483643 (SCL value 5), -2147483642 (SCL value 6), -2147483641 (SCL value 7), -2147483640 (SCL value 8), -2147483639 (SCL value 9) or `$null`

This property is displayed as SCLRejectThreshold in the results of the command Get-Mailbox -Identity <MailboxIdentity> | Format-List, but you need to use the property name SCLRejectThresholdInt in the filter. For example, Get-Mailbox -Filter "SCLRejectThresholdInt -ge -2147483641".

SendOofMessageToOriginatorEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
oOFReplyToOriginator	Get-DistributionGroup Get-DynamicDistributionGroup Get-UnifiedGroup	Boolean (`$true` or `$false`)

For example, Get-DistributionGroup -Filter 'SendOofMessageToOriginatorEnabled -eq $true'.

ServerLegacyDN

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchHomeServerName	Get-CASMailbox Get-Mailbox Get-Recipient Get-UMMailbox	String (wildcards accepted) or `$null`

For example, Get-Mailbox -Filter "ServerLegacyDN -like 'Mailbox01'".

This is an example of a complete ServerLegacyDN value: /o=Contoso Corporation/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Mailbox01.

ServerName

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-CASMailbox Get-Mailbox Get-Recipient Get-UMMailbox	String

For example, Get-Recipient -Filter "ServerName -eq 'Mailbox01'".

SharingPolicy

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchSharingPolicyLink	Get-Mailbox Get-Recipient	Distinguished name (DN) or `$null`.

This filter requires the distinguished name of the sharing policy.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-SharingPolicy "Custom Sharing Policy").DistinguishedName), and then use the variable in the filter ("SharingPolicy -eq '$dn'").

Note

For the default assignment of the default sharing policy (named Default Sharing Policy) to a mailbox, the value of the SharingPolicy property is blank ($null).

Sid

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
objectSid	Get-Group Get-LinkedUser Get-SecurityPrincipal Get-User	String

For example, Get-User -Filter "Sid -eq 's-1-5-21-3628364307-1600040346-819251021-2603'".

SidHistory

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
SIDHistory	Get-Group Get-LinkedUser Get-User	String or `$null`

For example, Get-User -Filter "SidHistory -eq 's-1-5-21-3628364307-1600040346-819251021-2603'".

Filtering by the $null value on this property is supported only in Exchange Server. In Exchange Online and Security & Compliance PowerShell, use an exact value match instead.

SimpleDisplayName

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
displayNamePrintable	Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "SimpleDisplayName -like 'lila*'".

SingleItemRecoveryEnabled

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox Get-MailUser Get-RemoteMailbox	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'SingleItemRecoveryEnabled -eq $true'.

SKUAssigned

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-LinkedUser Get-Mailbox Get-MailUser Get-Recipient Get-User	Boolean (`$true` or `$false`) or `$null`.

For example, Get-User -Filter 'SKUAssigned -eq $true'.

SourceAnchor

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox	String (wildcards accepted) or `$null`

For example, Get-Mailbox -Filter 'SourceAnchor -ne $null'.

StateOrProvince

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
st	Get-Contact Get-LinkedUser Get-Recipient Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "StateOrProvince -like 'Carolina*'".

StreetAddress

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
streetAddress	Get-Contact Get-LinkedUser Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "StreetAddress -like '36th Ave NE*'".

StsRefreshTokensValidFrom

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchStsRefreshTokensValidFrom	Get-LinkedUser Get-Mailbox Get-MailUser Get-RemoteMailbox Get-User	`$null` or a date/time value: 64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 (UTC)

For example, Get-User -Filter "StsRefreshTokensValidFrom -gt '8/1/2017'".

TelephoneAssistant

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
telephoneAssistant	Get-Contact Get-LinkedUser Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "TelephoneAssistant -like '206*'".

ThrottlingPolicy

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchThrottlingPolicyDN	Get-Mailbox	Distinguished name (DN) or `$null`.

This filter requires the distinguished name of the throttling policy.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-ThrottlingPolicy "Custom Throttling Policy").DistinguishedName), and then use the variable in the filter ("ThrottlingPolicy -eq '$dn'").

Title

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
title	Get-Contact Get-LinkedUser Get-Recipient Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "Title -eq 'Dr.'".

UMAddresses

Applicable:

Exchange Server (Exchange 2016 or earlier. Unified Messaging was removed in Exchange 2019)
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchUMAddresses	Get-UMMailbox	String (wildcards accepted) or `$null`

For example, Get-UMMailbox -Filter "UMAddresses -like 'EUM:*'".

UMCallingLineIds

Applicable:

Exchange Server (Exchange 2016 or earlier. Unified Messaging was removed in Exchange 2019)
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchUMCallingLineIds	Get-Contact Get-LinkedUser Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "UMCallingLineIds -like '123*'".

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

UMDtmfMap

Applicable:

Exchange Server (Exchange 2016 or earlier. Unified Messaging was removed in Exchange 2019)
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchUMDtmfMap	Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-UMMailbox Get-User	String (wildcards accepted) or `$null`

For example, Get-Mailbox -Filter "UMDtmfMap -like '26297*'".

Although this property is multi-valued, the filter returns a match if the property contains the specified value.

UMEnabled

Applicable:

Exchange Server (Exchange 2016 or earlier. Unified Messaging was removed in Exchange 2019)
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-Mailbox Get-Recipient Get-UMMailbox	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'UMEnabled -eq $true'.

UMMailboxPolicy

Applicable:

Exchange Server (Exchange 2016 or earlier. Unified Messaging was removed in Exchange 2019)
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchUMTemplateLink	Get-Recipient Get-UMMailbox	Distinguished name (DN) or `$null`.

This filter requires the distinguished name of the UM mailbox policy.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-UMMailboxPolicy "Contoso Default Policy").DistinguishedName), and then use the variable in the filter ("UMMailboxPolicy -eq '$dn'").

UMRecipientDialPlanId

Applicable:

Exchange Server (Exchange 2016 or earlier. Unified Messaging was removed in Exchange 2019)
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchUMRecipientDialPlanLink	Get-Recipient	Distinguished name (DN) or `$null`.

This filter requires the distinguished name of the UM dial plan.

To use a friendly value, store the DN in a variable (for example, $dn = (Get-UMDialPlan "Contoso Dial Plan").DistinguishedName), and then use the variable in the filter ("UMRecipientDialPlanId -eq '$dn'").

UpgradeRequest

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-User	`None` (0) `TenantUpgrade` (1) `PrestageUpgrade` (2) `CancelPrestageUpgrade` (3) `PilotUpgrade` (4) `TenantUpgradeDryRun` (5)

For example, Get-User -Filter "UpgradeRequest -ne 'None'".

UpgradeStatus

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-User	`None` (0) `NotStarted` (1) `InProgress` (2) `Warning` (3) `Error` (4) `Cancelled` (5) `Complete` (6) `ForceComplete` (7)

For example, Get-User -Filter "UpgradeStatus -ne 'None'".

UsageLocation

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchUsageLocation	Get-Mailbox Get-MailUser Get-Recipient	String

This filter requires the ISO 3166-1 country name (for example, United States), or two-letter country code (for example US) for the user in Microsoft 365. For more information, see Country Codes - ISO 3166.

For example, Get-Recipient -Filter 'UsageLocation -eq "US"'.

UseDatabaseQuotaDefaults

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
mDBUseDefaults	Get-Mailbox	Boolean (`$true` or `$false`)

For example, Get-Mailbox -Filter 'UseDatabaseQuotaDefaults -eq $false'.

UserAccountControl

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
userAccountControl	Get-LinkedUser Get-User	`AccountDisabled` `DoNotExpirePassword` `NormalAccount`

For example, Get-User -Filter "UserAccountControl -eq 'NormalAccount'".

You can specify multiple values separated by commas, but the order matters. For example, Get-User -Filter "UserAccountControl -eq 'AccountDisabled,NormalAccount'" returns different results than Get-User -Filter "UserAccountControl -eq 'NormalAccount,AccountDisabled'".

This multivalued property returns a match only if the property equals the specified value.

UserPrincipalName

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
userPrincipalName	Get-LinkedUser Get-Mailbox Get-MailUser Get-RemoteMailbox Get-User	String (wildcards accepted)

For example, Get-User -Filter "UserPrincipalName -like 'julia@*'".

VoiceMailSettings

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchUCVoiceMailSettings	Get-Contact Get-LinkedUser Get-User	String (wildcards accepted) or `$null`

Valid values for this property are:

ExchangeHostedVoiceMail=0
ExchangeHostedVoiceMail=1
CsHostedVoiceMail=0
CsHostedVoiceMail=1

For example, Get-User -Filter 'VoiceMailSettings -ne $null'.

In Exchange Online, this property holds a legacy hosted voicemail value and is typically blank, so filtering on this property usually returns no results.

WebPage

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
wWWHomePage	Get-Contact Get-LinkedUser Get-User	String (wildcards accepted) or `$null`

For example, Get-User -Filter "WebPage -like 'https://intranet.contoso.com/*'".

WhenChanged

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
WhenChanged	Get-CASMailbox Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-SecurityPrincipal Get-UMMailbox Get-User Get-UnifiedGroup	A date/time value: 64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 (UTC)

For example, Get-Recipient -Filter "WhenChanged -gt '8/1/2017 2:00:00 PM'".

WhenChangedUTC

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-CASMailbox Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-SecurityPrincipal Get-UMMailbox Get-User Get-UnifiedGroup	A date/time value: 64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 (UTC)

For example, Get-Recipient -Filter "WhenChangedUTC -gt '8/1/2017 2:00:00 PM'".

WhenCreated

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
whenCreated	Get-CASMailbox Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-SecurityPrincipal Get-UMMailbox Get-User Get-UnifiedGroup	A date/time value: 64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 (UTC)

For example, Get-Recipient -Filter "WhenCreated -gt '8/1/2017 2:00:00 PM'".

WhenCreatedUTC

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
n/a	Get-CASMailbox Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-Recipient Get-RemoteMailbox Get-SecurityPrincipal Get-UMMailbox Get-User Get-UnifiedGroup	A date/time value: 64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 (UTC)

For example, Get-Recipient -Filter "WhenCreatedUTC -gt '8/1/2017 2:00:00 PM'".

WhenMailboxCreated

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchWhenMailboxCreated	Get-Mailbox Get-MailUser Get-Recipient Get-RemoteMailbox	A date/time value: 64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 (UTC)

For example, Get-Recipient -Filter "WhenMailboxCreated -gt '8/1/2017 2:00:00 PM'".

WhenSoftDeleted

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchWhenSoftDeletedTime	Get-LinkedUser Get-Mailbox Get-MailUser Get-RemoteMailbox Get-User Get-UnifiedGroup	A date/time value: 64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 (UTC)

This filter requires the SoftDeleted switch in the command for mailboxes.

For example, Get-Mailbox -SoftDeletedMailbox -Filter "WhenSoftDeleted -gt '8/1/2017 2:00:00 PM'".

WindowsEmailAddress

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
mail	Get-Contact Get-DistributionGroup Get-DynamicDistributionGroup Get-Group Get-LinkedUser Get-Mailbox Get-MailContact Get-MailPublicFolder Get-MailUser Get-RemoteMailbox Get-User	String (wildcards accepted) or `$null`

For example, Get-Mailbox -Filter "WindowsEmailAddress -like '@fabrikam.com*'".

WindowsLiveID

Applicable:

Exchange Server
Exchange Online
Security & Compliance

LDAP display name	Cmdlets	Value
msExchWindowsLiveID	Get-LinkedUser Get-Mailbox Get-MailUser Get-Recipient Get-User	String (wildcards accepted) or `$null`

For example, Get-Mailbox -Filter "WindowsLiveID -like '*@fabrikam.onmicrosoft.com'".

For more information

Exchange 2007 was the first version of Exchange that required OPATH filters instead of LDAP filters. For more information about converting LDAP filters to OPATH filters, see the Microsoft Exchange Team Blog article, Need help converting your LDAP filters to OPATH?.

Feedback

Was this page helpful?

Last updated on 2026-06-19