Exchange PowerShell

This cmdlet is available only in on-premises Exchange.

Use the Add-ADPermission cmdlet to add permissions to an Active Directory object.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Dump-ProvisioningCache cmdlet to return a list of the cached keys and values for the specified server and Windows PowerShell application.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-ADPermission cmdlet to get permissions on an Active Directory object.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-ADServerSettings cmdlet to view the Active Directory Domain Services (AD DS) environment settings in the current Exchange Management Shell session. The Get-ADServerSettings cmdlet replaces the AdminSessionADSettings session variable that was used in Exchange Server 2007.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-ADSite cmdlet to display configuration information about one or more Active Directory sites.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-DomainController cmdlet to view a list of domain controllers that exist in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-OrganizationalUnit cmdlet to view a list of organizational units (OUs) that exist in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-Trust cmdlet to return external and forest trusts.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-UserPrincipalNamesSuffix cmdlet to view the user principal name (UPN) suffixes in the Active Directory forest. The UPN suffixes are created in Active Directory Domains and Trusts.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-ADPermission cmdlet to remove permissions from an Active Directory object.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

The Reset-ProvisioningCache cmdlet clears the Windows PowerShell provisioning cache of frequently used Active Directory objects. This cmdlet is only used for diagnostic purposes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-ADServerSettings cmdlet to manage the Active Directory Domain Services (AD DS) environment in the current Exchange Management Shell session. The Set-ADServerSettings cmdlet replaces the AdminSessionADSettings session variable that was used in Exchange Server 2007.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-ADSite cmdlet to configure the Exchange settings of Active Directory sites.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Add-AttachmentFilterEntry cmdlet to add an entry to the attachment filter list that's used by the Attachment Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Add-ContentFilterPhrase cmdlet to define custom words for the Content Filter agent. A custom word is a word or phrase that the administrator sets for the Content Filter agent to evaluate the content of an message and apply appropriate filter processing.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Add-IPAllowListEntry cmdlet to add IP Allow list entries to the IP Allow list that's used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Add-IPAllowListProvider cmdlet to create IP Allow list providers that are used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Add-IPBlockListEntry cmdlet to add IP Block list entries to the IP Block list that's used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Add-IPBlockListProvider cmdlet to create IP Block list providers that are used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Delete-QuarantineMessage cmdlet to delete quarantine messages from your cloud-based organization

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Disable-EOPProtectionPolicyRule cmdlet to turn off the Standard preset security policy or the Strict preset security policy. If your organization has Defender for Office 365, you also need to use the Disable-ATPProtectionPolicyRule cmdlet to turn off the policy.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Disable-HostedContentFilterRule cmdlet to disable spam filter rules (content filter rules) in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Disable-HostedOutboundSpamFilterRule cmdlet to disable outbound spam filter rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Disable-MalwareFilterRule cmdlet to disable malware filter rules in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Disable-ReportSubmissionRule cmdlet to disable the report submission rule in your cloud-based organization. The report submission rule identifies the reporting mailbox where user reported messages are delivered.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

The Enable-AntispamUpdates cmdlet was deprecated in Microsoft Exchange Server 2010 Service Pack 1 and is no longer used.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Enable-EOPProtectionPolicyRule cmdlet to turn on the Standard preset security policy or the Strict preset security policy. If your organization has Defender for Office 365, you also need to use the Enable-ATPProtectionPolicyRule cmdlet to turn on the policy.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Enable-HostedContentFilterRule cmdlet to enable spam filter rules (content filter rules) in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Enable-HostedOutboundSpamFilterRule cmdlet to enable outbound spam filter rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Enable-MalwareFilterRule cmdlet to enable malware filter rules in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Enable-ReportSubmissionRule cmdlet to enable the report submission rule in your cloud-based organization. The report submission rule identifies the reporting mailbox where user reported messages are delivered.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Export-QuarantineMessage cmdlet to export quarantined messages and files from your cloud-based organization. Messages are exported to .eml message files so you can open them in Outlook.

For files that were quarantined by Safe Attachments for SharePoint, OneDrive, and Microsoft Teams, the files are exported in Base64 format.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-AgentLog cmdlet to parse log files that you specify as parameters and collect raw statistics from the filtering that anti-spam agents apply during a time period that you specify.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-AggregateZapReport cmdlet to view aggregate information about zero-hour auto purge (ZAP) activity. By default, the cmdlet shows the last three days of activity, but you can specify up to ten days.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-ArcConfig cmdlet to view the list of trusted Authenticated Received Chain (ARC) sealers that are configured in the cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Get-AttachmentFilterEntry cmdlet to view the list of attachment filter entries that are used by the Attachment Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Get-AttachmentFilterListConfig cmdlet to view the configuration of the Attachment Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-BlockedConnector cmdlet to view inbound connectors that have been detected as potentially compromised. Blocked connectors are prevented from sending email.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-BlockedSenderAddress cmdlet to view users in your Microsoft 365 organization that are affected by the protection system. These users sent multiple messages that were classified as spam, so they're blocked from sending messages.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-ConfigAnalyzerPolicyRecommendation cmdlet to compare the settings in your existing security policies to the settings that are used in the Standard or Strict preset security policies. Settings that are below the recommend value are returned in the results.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-ContentFilterConfig cmdlet to view the content filter configuration for the computer on which the cmdlet is run.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-ContentFilterPhrase cmdlet to view one or all custom words that the Content Filter agent processes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-DetailZapReport cmdlet to view details about zero-hour auto purge (ZAP) activity. By default, the cmdlet shows the last three days of activity, but you can specify up to ten days.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-DkimSigningConfig cmdlet to view the DomainKeys Identified Mail (DKIM) signing policy settings for domains in a cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-EOPProtectionPolicyRule cmdlet to view rules for the built-in security features for all cloud mailboxes in preset security policies. The rules specify recipient conditions and exceptions for the protection, and also allow you to turn on and turn off the associated preset security policies.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-ExoPhishSimOverrideRule cmdlet to view non-Microsoft phishing simulation override rules that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-ExoSecOpsOverrideRule cmdlet to view SecOps mailbox override rules that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-HostedConnectionFilterPolicy cmdlet to view the settings of connection filter policies in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-HostedContentFilterPolicy cmdlet to view the settings of spam filter policies (content filter policies) in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is functional only in the cloud-based service.

Use the Get-HostedContentFilterRule cmdlet to view spam filter rules (content filter rules) in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-HostedOutboundSpamFilterPolicy cmdlet to view outbound spam filter policies in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-HostedOutboundSpamFilterRule cmdlet to view outbound spam filter rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Get-IPAllowListConfig cmdlet to view the configuration information for the IP Allow list that's used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Get-IPAllowListEntry cmdlet to view the IP address entries in the IP Allow list that's used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Get-IPAllowListProvider cmdlet to view IP Allow list providers that are used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Get-IPAllowListProvidersConfig cmdlet to view the settings that affect all IP Allow list providers that are configured on an Edge Transport server.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Get-IPBlockListConfig cmdlet to view the IP Block list configuration information that's used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Get-IPBlockListEntry cmdlet to view the IP Block list entries that are used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Get-IPBlockListProvider cmdlet to view IP Block list providers that are used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Get-IPBlockListProvidersConfig cmdlet to view the settings that affect all IP Block list providers that are configured on an Edge Transport server.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-MailboxJunkEmailConfiguration cmdlet to view the junk email settings on mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-MalwareFilteringServer cmdlet to view the Malware agent settings in the Transport service on a Mailbox server.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-MalwareFilterPolicy cmdlet to view the malware filter policies in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Enable-MalwareFilterRule cmdlet to view malware filter rules in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-PhishSimOverridePolicy cmdlet to view non-Microsoft phishing simulation override policies that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-QuarantineMessage cmdlet to view quarantined messages and files in your cloud-based organization. Files are quarantined by Safe Attachments for SharePoint, OneDrive, and Microsoft Teams.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-QuarantineMessageHeader cmdlet to view the message header of a quarantined message. The command fails if the specified message is not in quarantine.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-QuarantinePolicy cmdlet to view quarantine policies in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-RecipientFilterConfig cmdlet to view the recipient filter configuration information for the Exchange server.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-ReportSubmissionPolicy cmdlet to view the report submission policy in your cloud-based organization. The report submission policy controls most of the user reported message settings in the organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-ReportSubmissionRule cmdlet to view the report submission rule in your cloud-based organization. The report submission rule identifies the reporting mailbox where user reported messages are delivered.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-SecOpsOverridePolicy cmdlet to view SecOps mailbox override policies that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-SenderFilterConfig cmdlet to view the Sender Filter configuration information for the Exchange server.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-SenderIdConfig cmdlet to view the Sender ID configuration information for the Exchange server.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-SenderReputationConfig cmdlet to view the configuration information for sender reputation on the computer on which the command is run.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-TeamsProtectionPolicy cmdlet to view Microsoft Teams protection policies.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-TeamsProtectionPolicyRule cmdlet to view Microsoft Teams protection policy rules.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-TenantAllowBlockListItems cmdlet to view entries in the Tenant Allow/Block List in the Microsoft Defender portal.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-TenantAllowBlockListSpoofItems cmdlet to view spoofed sender entries in the Tenant Allow/Block List.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-DkimSigningConfig cmdlet to create the DomainKeys Identified Mail (DKIM) signing policy settings for domains in a cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-EOPProtectionPolicyRule cmdlet to create rules for the built-in security features for all cloud mailboxes in preset security policies. The rules specify recipient conditions and exceptions for the protection, and also allow you to turn on and turn off the associated preset security policies.

Note: Unless you manually removed a rule using the Remove-EOPProtectionPolicyRule cmdlet, we don't recommend using this cmdlet to create rules. To create the rule, you need to specify the existing individual security policies that are associated with the preset security policy. We never recommend creating these required individual security policies manually. Turning on the preset security policy for the first time in the Microsoft Defender portal automatically creates the required individual security policies, but also creates the associated rules using this cmdlet. So, if the rules already exist, you don't need to use this cmdlet to create them.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-ExoPhishSimOverrideRule cmdlet to create non-Microsoft phishing simulation override rules that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-ExoSecOpsOverrideRule cmdlet to create SecOps mailbox override rules that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-HostedContentFilterPolicy cmdlet to create spam filter policies (content filter policies) in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-HostedContentFilterRule cmdlet to create spam filter rules (content filter rules) in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-HostedOutboundSpamFilterPolicy cmdlet to create outbound spam filter policies in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-HostedOutboundSpamFilterRule cmdlet to create outbound spam filter rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the New-MalwareFilterPolicy cmdlet to create malware filter policies in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the New-MalwareFilterRule cmdlet to create malware filter rules in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-PhishSimOverridePolicy cmdlet to create non-Microsoft phishing simulation override policies that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Note: Instead of using this cmdlet to set quarantine policy permissions, we recommend using the EndUserQuarantinePermissionsValue parameter on the New-QuarantinePolicy and Set-QuarantinePolicy cmdlets.

Use the New-QuarantinePermissions cmdlet to create a variable that contains a quarantine permissions object to use with the EndUserQuarantinePermission parameter on the New-QuarantinePolicy or Set-QuarantinePolicy cmdlets in the same PowerShell session.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-QuarantinePolicy cmdlet to create quarantine policies in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-ReportSubmissionPolicy cmdlet to create the report submission policy in your cloud-based organization. The report submission policy controls most of the user reported message settings in the organization.

Note: If the policy already exists (the Get-ReportSubmissionPolicy cmdlet returns output), you can't use this cmdlet. To delete the existing policy and start over with the default settings, use the Remove-ReportSubmissionPolicy cmdlet first.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-ReportSubmissionRule cmdlet to create the report submission rule in your cloud-based organization. The report submission rule identifies the reporting mailbox where user reported messages are delivered.

Note: If the rule already exists (the Get-ReportSubmissionRule cmdlet returns output), you can't use this cmdlet. To delete the existing rule and start over, use the Remove-ReportSubmissionRule cmdlet first.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-SecOpsOverridePolicy cmdlet to create SecOps mailbox override policies that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-TeamsProtectionPolicy cmdlet to create Microsoft Teams protection policies.

Note: If the policy already exists (the Get-TeamsProtectionPolicy cmdlet returns output), you can't use this cmdlet.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-TeamsProtectionPolicyRule cmdlet to create Microsoft Teams protection policy rules.

Note: If the rule already exists (the Get-TeamsProtectionPolicyRule cmdlet returns output), you can't use this cmdlet.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-TenantAllowBlockListItems cmdlet to add entries to the Tenant Allow/Block List in the Microsoft Defender portal.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-TenantAllowBlockListSpoofItems cmdlet to create spoofed sender entries in the Tenant Allow/Block List.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Preview-QuarantineMessage cmdlet to preview the contents of quarantined messages in your cloud-based organization. This cmdlet doesn't work on files that were quarantined by Safe Attachments for SharePoint, OneDrive, and Microsoft Teams.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Release-QuarantineMessage cmdlet to release messages from quarantine in your cloud-based organization. You can release messages to all original recipients, or to specific recipients.

For files that were quarantined by Safe Attachments for SharePoint, OneDrive, and Microsoft Teams, you can unblock the files in the respective team sites and document libraries by using the Release-QuarantineMessage cmdlet so users can access, share, and download the files.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Remove-AttachmentFilterEntry cmdlet to remove an entry from the attachment filter list that's used by the Attachment Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-BlockedConnector cmdlet to unblock inbound connectors that have been detected as potentially compromised. Blocked connectors are prevented from sending email.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-BlockedSenderAddress cmdlet to unblock users in your Microsoft 365 organization that were affected by the protection system. These users sent multiple messages that were classified as spam, so they were blocked from sending messages.

Note: There's a limit to the number of times you can unblock a Microsoft 365 account. If you exceed the unblock limit for a user, you get an error, and you need to contact Microsoft Support to unblock the user.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-ContentFilterPhrase cmdlet to remove one or all custom words that the Content Filter agent processes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-DkimSigningConfig cmdlet to remove the DomainKeys Identified Mail (DKIM) signing policy settings for domains in a cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-EOPProtectionPolicyRule cmdlet to remove rules for the built-in security features for all cloud mailboxes in preset security policies. The rules specify recipient conditions and exceptions for the protection, and also allow you to turn on and turn off the associated preset security policies.

Note: Use this cmdlet to remove a rule only if you plan to immediately recreate the rule using the New-EOPProtectionPolicyRule cmdlet. The affected preset security policy can't function without a corresponding rule.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-ExoPhishSimOverrideRule cmdlet to remove non-Microsoft phishing simulation override rules that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-ExoSecOpsOverrideRule cmdlet to remove SecOps mailbox override rules that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-HostedContentFilterPolicy cmdlet to remove spam filter policies (content filter policies) from your cloud-based organization.

When a policy is removed and there are rules associated with it, the rules are not removed when the policy is removed. This is by design. If you want to remove the associated rules, you need to do this separately via the Remove-HostedContentFilterRule cmdlet.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-HostedContentFilterRule cmdlet to remove spam filter rules (content filter rules) in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-HostedOutboundSpamFilterPolicy cmdlet to remove outbound spam filter policies from your cloud-based organization.

When a policy is removed and there are rules associated with it, the rules are not removed when the policy is removed. This is by design. If you want to remove the associated rules, you need to do this separately via the Remove-HostedOutboundSpamFilterRule cmdlet.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-HostedOutboundSpamFilterRule cmdlet to remove outbound spam filter rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Remove-IPAllowListEntry cmdlet to remove IP address entries from the IP Allow list that's used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Remove-IPAllowListProvider cmdlet to remove IP Allow list providers that are used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Remove-IPBlockListEntry cmdlet to remove IP block list entries that are used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Remove-IPBlockListProvider cmdlet to remove IP Block list providers that are used by the Connection Filtering agent on Edge Transport server.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Remove-MalwareFilterPolicy cmdlet to remove malware filter policies from your organization.

When a policy is removed and there are rules associated with it, the rules are not removed when the policy is removed. This is by design. If you want to remove the associated rules, you need to do this separately via the Remove-MalwareFilterRule cmdlet.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Remove-MalwareFilterRule cmdlet to remove malware filter rules from your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-PhishSimOverridePolicy cmdlet to remove non-Microsoft phishing simulation override policies that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-QuarantinePolicy cmdlet to remove quarantine policies from your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-ReportSubmissionPolicy cmdlet to remove the report submission policy from your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-ReportSubmissionRule cmdlet to remove the report submission rule from your cloud-based organization. The report submission rule identifies the reporting mailbox where user reported messages are delivered.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-SecOpsOverridePolicy cmdlet to remove SecOps mailbox override policies that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-TenantAllowBlockListItems cmdlet to remove entries from the Tenant Allow/Block List in the Microsoft Defender portal.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-TenantAllowBlockListSpoofItems cmdlet to remove spoofed sender entries from the Tenant Allow/Block List.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Rotate-DkimSigningConfig cmdlet to rotate the public and private DomainKeys Identified Mail (DKIM) signing policy keys for domains in a cloud-based organization. This cmdlet creates new DKIM keys and uses the alternate DKIM selector.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-ArcConfig cmdlet to modify the list of trusted Authenticated Received Chain (ARC) sealers that are configured in the cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Set-AttachmentFilterListConfig cmdlet to modify the configuration of the Attachment Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-ContentFilterConfig cmdlet to modify the content filter configuration on a Mailbox server or an Edge Transport server.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-DkimSigningConfig cmdlet to modify the DomainKeys Identified Mail (DKIM) signing policy settings for domains in a cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-EOPProtectionPolicyRule cmdlet to modify rules associated with the built-in security features for all cloud mailboxes in preset security policies.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-ExoPhishSimOverrideRule cmdlet to modify non-Microsoft phishing simulation override rules that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-ExoSecOpsOverrideRule cmdlet to modify SecOps mailbox override rules that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

Tip: This cmdlet doesn't modify email addresses in the SecOps override rule. To modify the email addresses in the SecOps override rule, use the Set-SecOpsOverridePolicy cmdlet.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-HostedConnectionFilterPolicy cmdlet to modify the settings of connection filter policies in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-HostedContentFilterPolicy cmdlet to modify spam filter policies (content filter policies) in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-HostedContentFilterRule cmdlet to modify spam filter rules (content filter rules) in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-HostedOutboundSpamFilterPolicy cmdlet to modify outbound spam filter policies in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-HostedOutboundSpamFilterRule cmdlet to modify the settings of outbound spam filter rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Set-IPAllowListConfig cmdlet to modify the IP Allow list configuration that's used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Set-IPAllowListProvider cmdlet to modify IP Allow list providers that are used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Set-IPAllowListProvidersConfig cmdlet to modify the settings that affect all IP Allow list providers that are configured on an Edge Transport server.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Set-IPBlockListConfig cmdlet to modify the IP Block list configuration that's used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Set-IPBlockListProvider cmdlet to modify IP Block list providers that are used by the Connection Filtering agent on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Set-IPBlockListProvidersConfig cmdlet to modify the settings that affect all IP Block list providers that are configured on an Edge Transport server.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-MailboxJunkEmailConfiguration cmdlet to configure the junk email settings on mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-MalwareFilteringServer cmdlet to configure the Malware agent settings in the Transport service on a Mailbox server.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-MalwareFilterPolicy cmdlet to modify malware filter policies in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-MalwareFilterRule cmdlet to modify malware filter rules in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-PhishSimOverridePolicy cmdlet to modify non-Microsoft phishing simulation override policies that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Note: Instead of using this cmdlet to set quarantine policy permissions, we recommend using the EndUserQuarantinePermissionsValue parameter on the New-QuarantinePolicy and Set-QuarantinePolicy cmdlets.

Use the Set-QuarantinePermissions cmdlet to modify quarantine permissions objects that were created by the New-QuarantinePermissions and stored as a variable in the current PowerShell session. You use the variable as a value for the EndUserQuarantinePermission parameter on the New-QuarantinePolicy or Set-QuarantinePolicy cmdlets in the same PowerShell session.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-QuarantinePolicy cmdlet to modify quarantine policies in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-RecipientFilterConfig cmdlet to enable and configure the Recipient Filter agent.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-ReportSubmissionPolicy cmdlet to modify the report submission policy in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-ReportSubmissionRule cmdlet to modify the report submission rule in your cloud-based organization. The report submission rule identifies the reporting mailbox where user reported messages are delivered.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-SecOpsOverridePolicy cmdlet to modify SecOps mailbox override policies that bypass filtering. For more information, see Configure the advanced delivery policy for non-Microsoft phishing simulations and email delivery to SecOps mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-SenderFilterConfig cmdlet to modify the Sender Filter agent configuration.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-SenderIdConfig cmdlet to modify the configuration of the Sender ID agent.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-SenderReputationConfig cmdlet to modify the sender reputation configuration on Mailbox servers or Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-TeamsProtectionPolicy cmdlet to modify Microsoft Teams protection policies.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-TeamsProtectionPolicyRule cmdlet to modify Microsoft Teams protection policy rules.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-TenantAllowBlockListItems cmdlet to modify entries in the Tenant Allow/Block List in the Microsoft Defender portal.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-TenantAllowBlockListSpoofItems cmdlet to modify spoofed sender entries in the Tenant Allow/Block List.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Test-IPAllowListProvider cmdlet to test IP Allow list providers on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Test-IPBlockListProvider cmdlet to test IP Block list providers on Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Test-SenderId cmdlet to test whether a specified IP address is the legitimate sending address for a specified SMTP address.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Update-SafeList cmdlet to update the safelist aggregation data in Active Directory. Safelist aggregation data is used in the built-in anti-spam filtering in Microsoft Exchange. EdgeSync replicates safelist aggregation data to Edge Transport servers in the perimeter network.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

The Clear-TextMessagingAccount cmdlet allows a user to remove the text messaging settings from their own mailbox. An administrator can't use this cmdlet to remove the text messaging settings from another user's mailbox.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Compare-TextMessagingVerificationCode cmdlet to verify the text messaging verification code that the user specified as part of configuring text message notifications on the mailbox.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Disable-PushNotificationProxy cmdlet to disable the push notification proxy that's configured between an on-premises Microsoft Exchange organization and a Microsoft 365 organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Enable-PushNotificationProxy cmdlet to enable a push notification proxy between an on-premises Microsoft Exchange organization and a Microsoft 365 organization.

In order for event notifications to be successfully delivered, you also need to configure OAuth authentication between your on-premises Exchange organization and your Microsoft 365 organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Export-AutoDiscoverConfig cmdlet to create or update a service connection point for an Autodiscover service pointer in a target Exchange forest.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-CASMailbox cmdlet to view the Client Access settings that are configured on mailboxes.

Note: In Exchange Online PowerShell, we recommend that you use the Get-EXOCASMailbox cmdlet instead of this cmdlet. For more information, see Connect to Exchange Online PowerShell.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is functional only in the cloud-based service.

Use the Get-CASMailboxPlan cmdlet to view Client Access services (CAS) mailbox plans in cloud-based organizations.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is functional only in Exchange Server 2019 or later.

Use the Get-ClientAccessRule cmdlet to view client access rules. Client access rules help you control access to your organization based on the properties of the connection.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-ImapSettings cmdlet to view the settings of the Microsoft Exchange IMAP4 service on Exchange servers. This is the client access (frontend) IMAP4 service that clients connect to.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-MailboxCalendarConfiguration cmdlet to show the calendar settings for a specified mailbox.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-MailboxMessageConfiguration cmdlet to view the Outlook on the web settings that are applied to specific mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-MailboxRegionalConfiguration cmdlet to view the regional settings of a mailbox. You can view the date format, time format, time zone, and language of the mailbox.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-MailboxSpellingConfiguration cmdlet to retrieve the Outlook on the web spelling checker settings of a specified user. For example, users can set their dictionary language and configure the spelling checker to ignore mixed digits and words in all uppercase.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-OutlookProvider cmdlet to obtain the global settings from the AutoDiscoverConfig object under the Global Settings object in Active Directory.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-OwaMailboxPolicy cmdlet to view Outlook on the web mailbox policies in the organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-POPSettings cmdlet to view the configuration of the Microsoft Exchange POP3 service. This service exists on Exchange servers that have the Client Access server role installed and is used by POP3 clients to connect to Exchange.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-TextMessagingAccount cmdlet to view the text notification settings on mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is functional only in Exchange Server 2019 or later.

Use the New-ClientAccessRule cmdlet to create client access rules. Client access rules help you control access to your organization based on the properties of the connection.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the New-OutlookProvider cmdlet to create the AutoDiscoverConfig object and then populate the object with relevant settings.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the New-OwaMailboxPolicy cmdlet to create Outlook on the web mailbox policies.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is functional only in Exchange Server 2019 or later.

Use the Remove-ClientAccessRule cmdlet to remove client access rules. Client access rules help you control access to your organization based on the properties of the connection.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-OutlookProvider cmdlet to delete the AutoDiscoverConfig object from Active Directory.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Remove-OwaMailboxPolicy cmdlet to remove Outlook on the web mailbox policies from the organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Send-TextMessagingVerificationCode cmdlet to send a text messaging verification as part of configuring text message notifications on the mailbox.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-CASMailbox cmdlet to configure client access settings on a mailbox. For example, you can configure settings for Exchange ActiveSync, Outlook, Outlook on the web, POP3, and IMAP4.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-CASMailboxPlan cmdlet to modify Client Access services (CAS) mailbox plans in cloud-based organizations.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is functional only in Exchange Server 2019 or later.

Use the Set-ClientAccessRule cmdlet to modify existing client access rules. Client access rules help you control access to your organization based on the properties of the connection.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-ImapSettings cmdlet to modify the settings of the Microsoft Exchange IMAP4 service on Exchange servers. This service exists on Exchange servers that have the Client Access server role installed, and is used by IMAP4 clients to connect to Exchange.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-MailboxCalendarConfiguration cmdlet to modify mailbox calendar settings for Outlook on the web. This affects how the user's calendar looks and how reminders work in Outlook on the web. This also affects settings that define how meeting invitations, responses, and notifications are sent to the user.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-MailboxMessageConfiguration cmdlet to configure the Outlook on the web settings that are applied to specific mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-MailboxRegionalConfiguration cmdlet to modify the regional settings of a mailbox. You can modify the date format, time format, time zone and language of the mailbox.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-MailboxSpellingConfiguration cmdlet to modify Outlook on the web spelling checker options for a specified user. For example, you can set the dictionary language and configure the spelling checker to ignore mixed digits or words in all uppercase.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-OutlookProvider cmdlet to set specific global settings using the msExchOutlookProvider attribute on the msExchAutoDiscoverConfig object in Active Directory.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-OwaMailboxPolicy cmdlet to configure existing Outlook on the web mailbox policies.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-PopSettings cmdlet to modify the configuration of the Microsoft Exchange POP3 service. This service exists on Exchange servers that have the Client Access server role installed, and is used by POP3 clients to connect to Exchange.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

The Set-TextMessagingAccount cmdlet allows a user to configure the text messaging settings on their own mailbox. An administrator can't use this cmdlet to configure the text messaging settings on another user's mailbox.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Test-CalendarConnectivity cmdlet to verify that anonymous calendar sharing is enabled and working properly. The Calendar virtual directory is a subdirectory of the Microsoft Outlook on the web virtual directories. When you run this command without any parameters, the command tests calendar connectivity against all Outlook on the web virtual directories.

Note: This cmdlet works best in Exchange 2010. In later versions of Exchange, the functionality of this cmdlet is replaced by Managed Availability. For the best results, use the Invoke-MonitoringProbe cmdlet and specify the relevant active monitor probe instead of using this cmdlet.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is functional only in Exchange Server 2019 or later.

Use the Test-ClientAccessRule cmdlet to test how client access rules affect access to your organization. If any of the client properties you specify for this cmdlet match any client access rules, the rules are returned in the results.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Test-EcpConnectivity cmdlet to test connectivity to Exchange Control Panel (ECP) virtual directories.

Note: This cmdlet works best in Exchange 2010. In later versions of Exchange, the functionality of this cmdlet is replaced by Managed Availability. For the best results, use the Invoke-MonitoringProbe cmdlet and specify the relevant active monitor probe instead of using this cmdlet.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Test-ImapConnectivity cmdlet to verify that connectivity to the Microsoft Exchange IMAP4 service is working as expected.

Note: This cmdlet works best in Exchange 2010. In later versions of Exchange, the functionality of this cmdlet is replaced by Managed Availability. For the best results, use the Invoke-MonitoringProbe cmdlet and specify the relevant active monitor probe instead of using this cmdlet.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Test-OutlookConnectivity cmdlet to test end-to-end Microsoft Outlook client connectivity in the Microsoft Exchange organization. This includes testing for both Outlook Anywhere (RPC over HTTP) and MAPI over HTTP connections.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is functional only in Exchange Server 2010.

Use the Test-OutlookWebServices cmdlet to verify the Autodiscover service settings for Microsoft Outlook on a computer running Microsoft Exchange Server 2010 that has the Client Access server role installed.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Exchange Server 2010.

Use the Test-OwaConnectivity cmdlet to verify that Microsoft Office Outlook Web App is running as expected. The Test-OwaConnectivity cmdlet can be used to test Outlook Web App connectivity for all Microsoft Exchange Server 2010 virtual directories on a specified Client Access server for all mailboxes on servers running Exchange that are in the same Active Directory site. The Test-OwaConnectivity cmdlet can also be used to test the connectivity for an individual Exchange Outlook Web App URL.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Test-PopConnectivity cmdlet to verify that the Microsoft Exchange POP3 service is working as expected.

Note: This cmdlet works best in Exchange 2010. In later versions of Exchange, the functionality of this cmdlet is replaced by Managed Availability. For the best results, use the Invoke-MonitoringProbe cmdlet and specify the relevant active monitor probe instead of using this cmdlet.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Test-PowerShellConnectivity cmdlet to test client connectivity to Exchange remote PowerShell virtual directories.

Note: This cmdlet works best in Exchange 2010. In later versions of Exchange, the functionality of this cmdlet is replaced by Managed Availability. For the best results, use the Invoke-MonitoringProbe cmdlet and specify the relevant active monitor probe instead of using this cmdlet.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Test-WebServicesConnectivity cmdlet to test client connectivity to Exchange Web Services virtual directories.

Note: This cmdlet works best in Exchange 2010. In later versions of Exchange, the functionality of this cmdlet is replaced by Managed Availability. For the best results, use the Invoke-MonitoringProbe cmdlet and specify the relevant active monitor probe instead of using this cmdlet.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Exchange Server 2010.

Use the Disable-OutlookAnywhere cmdlet to disable Outlook Anywhere on Exchange Server 2010 Client Access servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Exchange Server 2010.

Use the Enable-OutlookAnywhere cmdlet to enable Outlook Anywhere on a computer running Microsoft Exchange Server 2010 that has the Client Access server role installed. Running the Enable-OutlookAnywhere cmdlet enables the server to accept requests from Microsoft Office Outlook 2007 and Outlook 2003 client computers from the Internet by using Outlook Anywhere, also known as RPC over HTTP.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-ActiveSyncVirtualDirectory cmdlet to view Exchange ActiveSync virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-AuthRedirect cmdlet to view OAuth redirection objects that are used for legacy Microsoft Exchange 2010 Client Access servers in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-AutodiscoverVirtualDirectory cmdlet to view Autodiscover virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-ClientAccessArray cmdlet to view legacy RPC Client Access arrays (load-balanced arrays of Client Access servers within a single Active Directory site) that exist in your Exchange organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-ClientAccessServer cmdlet to view settings that are associated with the Client Access server role.

Note: In Exchange 2013 or later, use the Get-ClientAccessService cmdlet instead. If you have scripts that use Get-ClientAccessServer, update them to use Get-ClientAccessService.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-ClientAccessService cmdlet to view settings that are associated with the Client Access server role.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-EcpVirtualDirectory cmdlet to view Exchange Control Panel (ECP) virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers. The Exchange admin center (EAC) uses the ECP virtual directories.

The ECP web management interface was introduced in Exchange Server 2010. In Exchange Server 2013 and Exchange Server 2016, the EAC virtual directories and the corresponding management cmdlets still use ECP in the name. You can use these cmdlets to manage ECP virtual directories on Exchange 2010, Exchange 2013 and Exchange 2016 servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-MapiVirtualDirectory cmdlet to view Message Application Programming Interface (MAPI) virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers. A MAPI virtual directory is used by supported versions of Microsoft Outlook to connect to mailboxes by using the MAPIHTTP protocol.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-OutlookAnywhere cmdlet to view Outlook Anywhere virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-OwaVirtualDirectory cmdlet to view Outlook on the web virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-PowerShellVirtualDirectory cmdlet to view Windows PowerShell virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-RpcClientAccess cmdlet to view the settings of the Microsoft Exchange RPC Client Access service on Exchange servers that have the Client Access server role installed. These settings affect Outlook clients that connect by using Outlook Anywhere (RPC over HTTP).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-WebServicesVirtualDirectory cmdlet to view Exchange Web Services (EWS) virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the New-ActiveSyncVirtualDirectory cmdlet to create Exchange ActiveSync virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the New-AuthRedirect cmdlet to create OAuth redirection objects that are used for legacy Microsoft Exchange 2010 Client Access servers in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the New-AutodiscoverVirtualDirectory cmdlet to create Autodiscover virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Exchange Server 2010.

Use the New-ClientAccessArray cmdlet to create an object that represents a load balanced array of Client Access servers within a single Active Directory site.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the New-EcpVirtualDirectory cmdlet to create Exchange Control Panel (ECP) virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers. This is a command that Microsoft Exchange Server Setup runs when you install Exchange in your organization. The ECP virtual directory manages the Exchange admin center.

The ECP web management interface was introduced in Exchange Server 2010. In Exchange Server 2013 and Exchange Server 2016, the EAC virtual directories and the corresponding management cmdlets still use ECP in the name. You can use these cmdlets to manage ECP virtual directories on Exchange 2010, Exchange 2013, and Exchange 2016 servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the New-MapiVirtualDirectory cmdlet to create Messaging Application Programming Interface (MAPI) virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers. A MAPI virtual directory is used by supported versions of Microsoft Outlook to connect to mailboxes by using the MAPIHTTP protocol.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the New-OwaVirtualDirectory cmdlet to create Outlook on the web virtual directories that are used in Internet Information Services on Exchange servers. Typically, you create virtual directories on Exchange servers that have the Client Access server role installed.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the New-PowerShellVirtualDirectory cmdlet to create Windows PowerShell virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Exchange Server 2010.

Use the New-RpcClientAccess cmdlet to create configuration information for the Exchange RPC Client Access service on a Client Access server. This set up task is performed by default on new installations of the Client Access server role on Microsoft Exchange Server 2010.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the New-WebServicesVirtualDirectory cmdlet to create Exchange Web Services virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers.

You can create multiple virtual directories by using this cmdlet. However, you can create only one Exchange Web Services virtual directory for each website.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-ActiveSyncVirtualDirectory cmdlet to remove existing Exchange ActiveSync virtual directories from Internet Information Services (IIS) virtual directories on Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-AuthRedirect cmdlet to remove OAuth redirection objects that are used for legacy Microsoft Exchange 2010 Client Access servers in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-AutodiscoverVirtualDirectory cmdlet to remove an existing Autodiscover virtual directory from Internet Information Services (IIS).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Exchange Server 2010.

Use the Remove-ClientAccessArray cmdlet to remove RPC Client Access arrays (load-balanced arrays of Client Access servers within a single Active Directory site).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-EcpVirtualDirectory cmdlet to remove Exchange Control Panel (ECP) virtual directories from Internet Information Services (IIS) on Microsoft Exchange servers. The ECP virtual directory manages the Exchange admin center.

The ECP web management interface was introduced in Exchange Server 2010. In Exchange Server 2013 and Exchange Server 2016, the EAC virtual directories and the corresponding management cmdlets still use ECP in the name. You can use these cmdlets to manage ECP virtual directories on Exchange 2010, Exchange 2013 and Exchange 2016 servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-MapiVirtualDirectory cmdlet to remove Message Application Programming Interface (MAPI) virtual directories from Exchange servers. A MAPI virtual directory is used by supported versions of Microsoft Outlook to connect to mailboxes by using the MAPIHTTP protocol.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-OwaVirtualDirectory cmdlet to remove Outlook on the web virtual directories from Internet Information Services (IIS) on Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-PowerShellVirtualDirectory cmdlet to remove existing Windows PowerShell virtual directories from Internet Information Services (IIS) on Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Exchange Server 2010.

Use the Remove-RpcClientAccess cmdlet to remove the configuration information that allows RPC access through the Client Access server role on Microsoft Exchange Server 2010. After you remove the configuration information, the Exchange RPC Client Access service stops and no longer starts.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-WebServicesVirtualDirectory cmdlet to remove existing Exchange Web Services virtual directories from Internet Information Services (IIS) on Microsoft Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-ActiveSyncVirtualDirectory cmdlet to modify existing Microsoft Exchange ActiveSync virtual directories that are used in Internet Information Services (IIS) on Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-AuthRedirect cmdlet to modify the existing OAuth redirection settings for Microsoft Exchange 2010 Client Access servers in your Microsoft Exchange 2013 organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-AutodiscoverVirtualDirectory cmdlet to configure Autodiscover virtual directories that are used in Internet Information Services (IIS) on Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Exchange Server 2010.

Use the Set-ClientAccessArray cmdlet to modify RPC Client Access arrays (load-balanced arrays of Client Access servers within a single Active Directory site).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-ClientAccessServer cmdlet to modify settings that are associated with the Client Access server role.

Note: In Exchange 2013 or later, use the Set-ClientAccessService cmdlet instead. If you have scripts that use Set-ClientAccessServer, update them to use Set-ClientAccessService.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-ClientAccessService cmdlet to modify settings that are associated with the Client Access server role.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-EcpVirtualDirectory cmdlet to modify Exchange Control Panel (ECP) virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers. The ECP virtual directory manages the Exchange admin center.

The ECP web management interface was introduced in Exchange Server 2010. In Exchange Server 2013 and Exchange Server 2016, the EAC virtual directories and the corresponding management cmdlets still use ECP in the name. You can use these cmdlets to manage ECP virtual directories on Exchange 2010, Exchange 2013, and Exchange 2016 servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-MapiVirtualDirectory cmdlet to modify Messaging Application Programming Interface (MAPI) virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers. A MAPI virtual directory is used by supported versions of Microsoft Outlook to connect to mailboxes by using the MAPIHTTP protocol.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-OutlookAnywhere cmdlet to modify Outlook Anywhere virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers. Outlook Anywhere uses virtual directories that contain "rpc" in the name.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-OwaVirtualDirectory cmdlet to modify existing Outlook on the web virtual directories that are used in Internet Information Services (IIS) on Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-PowerShellVirtualDirectory cmdlet to modify existing Windows PowerShell virtual directories that are used in Internet Information Services (IIS) on Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-RpcClientAccess cmdlet to modify the settings of the Microsoft Exchange RPC Client Access service on Exchange servers that have the Client Access server role installed. These settings affect Outlook clients that connect by using Outlook Anywhere (RPC over HTTP).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-WebServicesVirtualDirectory cmdlet to modify existing Exchange Web Services virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Add-DatabaseAvailabilityGroupServer cmdlet to add a Mailbox server to a database availability group (DAG). A DAG is a set of Mailbox servers that use continuous replication and managed availability to provide automatic database-level recovery from database, server, or network failures.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Add-MailboxDatabaseCopy cmdlet to create a passive copy of an existing active mailbox database.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-DatabaseAvailabilityGroup cmdlet to obtain a variety of configuration settings, status and other information about a database availability group (DAG).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-DatabaseAvailabilityGroupNetwork cmdlet to display configuration and state information for a database availability group (DAG) network.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-MailboxDatabaseCopyStatus cmdlet to view health and status information about one or more mailbox database copies.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Move-ActiveMailboxDatabase cmdlet to perform a database or server switchover.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the New-DatabaseAvailabilityGroup cmdlet to create a database availability group (DAG).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the New-DatabaseAvailabilityGroupNetwork cmdlet to create a database availability group (DAG) network.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-DatabaseAvailabilityGroup cmdlet to delete an empty database availability group (DAG). Before you can delete a DAG, you must first remove all Mailbox servers from the DAG.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-DatabaseAvailabilityGroupNetwork cmdlet to remove a database availability group (DAG) network.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-DatabaseAvailabilityGroupServer cmdlet to remove a Mailbox server from a database availability group (DAG). To remove a Mailbox server from a DAG, the Mailbox server must not host any replicated databases.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-MailboxDatabaseCopy cmdlet to remove a passive copy of a mailbox database.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Restore-DatabaseAvailabilityGroup cmdlet as part of a datacenter switchover of a database availability group (DAG).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Resume-MailboxDatabaseCopy cmdlet to unblock activation or resume log copying and replay for a passive mailbox database copy.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-DatabaseAvailabilityGroup cmdlet to configure properties of a database availability group (DAG).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-DatabaseAvailabilityGroupNetwork cmdlet to configure a network for a database availability group (DAG).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-MailboxDatabaseCopy cmdlet to configure the properties of a database copy.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Start-DatabaseAvailabilityGroup cmdlet to reincorporate one or more previously failed members of a database availability group (DAG).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Stop-DatabaseAvailabilityGroup cmdlet to mark a member of a database availability group (DAG) as failed, or to mark all DAG members in a specific Active Directory site as failed.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Suspend-MailboxDatabaseCopy cmdlet to block replication and replay activities (log copying and replay) or activation for a database configured with two or more database copies.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Test-ReplicationHealth cmdlet to check all aspects of replication and replay, or to provide status for a specific Mailbox server in a database availability group (DAG).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Update-MailboxDatabaseCopy cmdlet to seed or reseed a mailbox database copy.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Disable-AntiPhishRule cmdlet to disable antiphish rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Disable-ATPProtectionPolicyRule and Disable-EOPProtectionPolicyRule cmdlets together to turn off the Standard preset security policy or the Strict preset security policy in organizations with Microsoft Defender for Office 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Disable-SafeAttachmentRule cmdlet to disable safe attachment rules in your cloud-based organization. This cmdlet is also responsible for disabling complete Safe Attachments policies in the admin center, which consist of the safe attachment rule and the corresponding assigned safe attachment policy in PowerShell.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Disable-SafeLinksRule cmdlet to disable enabled Safe Links rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Enable-AntiPhishRule cmdlet to enable antiphish rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Enable-ATPProtectionPolicyRule and Enable-EOPProtectionPolicyRule cmdlets together to turn on the Standard preset security policy or the Strict preset security policy in organizations with Microsoft Defender for Office 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Enable-SafeAttachmentRule cmdlet to enable safe attachment rules in your cloud-based organization. This cmdlet is also responsible for disabling complete Safe Attachments policies in the admin center, which consist of the safe attachment rule and the corresponding assigned safe attachment policy in PowerShell.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Enable-SafeLinksRule cmdlet to enable disabled Safe Links rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-AntiPhishPolicy cmdlet to view antiphish policies in your cloud-based organization. This cmdlet returns results only in Exchange Online PowerShell.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-AntiPhishRule cmdlet to view antiphish rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-ATPBuiltInProtectionRule cmdlet to view the rule for the Built-in protection preset security policy that effectively provides default policies for Safe Links and Safe Attachments in Microsoft Defender for Office 365. The rule specifies exceptions to the policy.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-AtpPolicyForO365 cmdlet to view the settings for the following features in Microsoft Defender for Office 365:

• Safe Links protection for supported Office 365 apps.
• Safe Documents: Uses Microsoft Defender for Endpoint to scan documents and files that are opened in Protected View in Microsoft 365 apps for enterprise.
• Safe Attachments for SharePoint, OneDrive, and Microsoft Teams.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-ATPProtectionPolicyRule cmdlet to view rules for Microsoft Defender for Office 365 protections in preset security policies. The rules specify recipient conditions and exceptions for the protection, and also allow you to turn on and turn off the associated preset security policies.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-ATPTotalTrafficReport to view details about message traffic in your Microsoft Defender for Office 365 organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-ContentMalwareMdoAggregateReport cmdlet to view a summary detections by Safe Attachments for SharePoint, OneDrive, and Microsoft Teams in Microsoft Defender for Office 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the ContentMalwareMdoDetailReport cmdlet to view detection details by Safe Attachments for SharePoint, OneDrive, and Microsoft Teams in Microsoft Defender for Office 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-EmailTenantSettings cmdlet to view whether priority account protection is enabled or disabled in your Microsoft Defender for Office 365 organization. For more information about priority accounts, see Manage and monitor priority accounts.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-MailDetailATPReport cmdlet to list details about Microsoft Defender for Office 365 detections in your cloud-based organization for the last 10 days.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-MailTrafficATPReport cmdlet to view the results of Microsoft Defender for Office 365 detections in your cloud-based organization for the last 90 days.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-SafeAttachmentPolicy cmdlet to view safe attachment policies in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-SafeAttachmentRule cmdlet to view safe attachment rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-SafeLinksAggregateReport cmdlet to return general information about Safe Links results for the last 90 days. Yesterday is the most recent date that you can specify.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-SafeLinksDetailReport cmdlet to return detailed information about Safe Links results for the last 7 days. Yesterday is the most recent date that you can specify.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-SafeLinksPolicy cmdlet to view Safe Links policies in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-SafeLinksRule cmdlet to view Safe Links rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-SpoofIntelligenceInsight cmdlet to view spoofed senders that were allowed or blocked by spoof intelligence during the last 30 days.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-SpoofMailReport cmdlet to view information about spoofed senders in your cloud-based organization for the past 90 days. Spoofing is where the sender of the inbound message is different than the actual source of the message (for example, the sender is lila@contoso.com, but the message was sent from the email infrastructure of fabrikam.com).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-AntiPhishPolicy cmdlet to create antiphish policies in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-AntiPhishRule cmdlet to create antiphish rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Note: Don't use this cmdlet. This cmdlet is used by the system to create the one and only rule for the Built-in protection preset security policy during the creation of the organization. You can't use this cmdlet if a rule for the Built-in protection preset security policy already exists. The Remove-ATPBuiltInProtectionRule cmdlet is not available to remove rules.

Use the New-ATPBuiltInProtectionRule cmdlet to create the rule for the Built-in protection preset security policy that effectively provides default policies for Safe Links and Safe Attachments in Microsoft Defender for Office 365. The rule specifies exceptions to the policy.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-ATPProtectionPolicyRule cmdlet to create rules for Microsoft Defender for Office 365 protections in preset security policies. The rules specify recipient conditions and exceptions for the protection, and also allow you to turn on and turn off the associated preset security policies.

Note: Unless you manually removed a rule using the Remove-ATPProtectionPolicyRule cmdlet, we don't recommend using this cmdlet to create rules. To create the rule, you need to specify the existing individual security policies that are associated with the preset security policy. We never recommend creating these required individual security policies manually. Turning on the preset security policy for the first time in the Microsoft Defender portal automatically creates the required individual security policies, but also creates the associated rules using this cmdlet. So, if the rules already exist, you don't need to use this cmdlet to create them.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-SafeAttachmentPolicy cmdlet to create safe attachment policies in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-SafeAttachmentRule cmdlet to create safe attachment rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-SafeLinksPolicy cmdlet to create Safe Links policies in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-SafeLinksRule cmdlet to create Safe Links rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-AntiPhishPolicy cmdlet to remove antiphish policies from your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-AntiPhishRule cmdlet to remove antiphish rules from your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-ATPProtectionPolicyRule cmdlet to remove rules from Microsoft Defender for Office 365 protections in preset security policies. The rules specify recipient conditions and exceptions for the protection, and also allow you to turn on and turn off the associated preset security policies.

Note: Use this cmdlet to remove a rule only if you plan to immediately recreate the rule using the New-ATPProtectionPolicyRule cmdlet. The affected preset security policy doesn't function without a corresponding rule.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-SafeAttachmentPolicy cmdlet to remove safe attachment policies from your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-SafeAttachmentRule cmdlet to remove safe attachment rules from your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-SafeLinksPolicy cmdlet to remove Safe Links policies from your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-SafeLinksRule cmdlet to remove Safe Links rules from your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-AntiPhishPolicy cmdlet to modify antiphish policies in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-AntiPhishRule cmdlet to modify antiphish rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-ATPBuiltInProtectionRule cmdlet to modify the rule for the Built-in protection preset security policy that effectively provides default policies for Safe Links and Safe Attachments in Microsoft Defender for Office 365. The rule specifies exceptions to the policy.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-AtpPolicyForO365 cmdlet to modify the settings for the following features in Microsoft Defender for Office 365:

• Safe Links protection for supported Office 365 apps.
• Safe Documents: Uses Microsoft Defender for Endpoint to scan documents and files that are opened in Protected View in Microsoft 365 apps for enterprise.
• Safe Attachments for SharePoint, OneDrive, and Microsoft Teams.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-ATPProtectionPolicyRule cmdlet to modify rules that are associated with Microsoft Defender for Office 365 protections in preset security policies.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-EmailTenantSettings cmdlet to enable or disable priority account protection in your Microsoft Defender for Office 365 organization. For more information about priority accounts, see Manage and monitor priority accounts.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-SafeAttachmentPolicy cmdlet to modify safe attachment policies in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-SafeAttachmentRule cmdlet to modify safe attachment rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-SafeLinksPolicy cmdlet to modify Safe Links policies in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-SafeLinksRule cmdlet to create Safe Links rules in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Clear-ActiveSyncDevice cmdlet to delete all data from a mobile device.

Note: In Exchange 2013 or later, use the Clear-MobileDevice cmdlet instead. If you have scripts that use Clear-ActiveSyncDevice, update them to use Clear-MobileDevice.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Clear-MobileDevice cmdlet to delete all data from a mobile phone. This action is often called a remote device wipe.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Export-ActiveSyncLog cmdlet to parse the Internet Information Services (IIS) logs and return information about Microsoft Exchange ActiveSync usage, either on the screen or in an output file.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-ActiveSyncDevice cmdlet to retrieve the list of devices in your organization that have active Exchange ActiveSync partnerships.

Note: In Exchange 2013 or later, use the Get-MobileDevice cmdlet instead. If you have scripts that use Get-ActiveSyncDevice, update them to use Get-MobileDevice.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-ActiveSyncDeviceAccessRule cmdlet to retrieve an access group of Exchange mobile devices along with their access level.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-ActiveSyncDeviceAutoblockThreshold cmdlet to obtain the Autoblock settings for Microsoft Exchange ActiveSync mobile devices.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-ActiveSyncDeviceClass cmdlet to retrieve a list of ActiveSync devices that have connected to your organization. The cmdlet returns the mobile device type and model information.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-ActiveSyncDeviceStatistics cmdlet to retrieve the list of mobile devices configured to synchronize with a specified user's mailbox and return a list of statistics about the mobile devices.

Note: This cmdlet works best in Exchange 2010. In later versions of Exchange or Exchange Online, use the Get-MobileDeviceStatistics cmdlet instead. If you have scripts that use Get-ActiveSyncDeviceStatistics, update them to use Get-MobileDeviceStatistics.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-ActiveSyncMailboxPolicy cmdlet to retrieve the Mobile Device mailbox policy settings for a specific Mobile Device mailbox policy.

Note: In Exchange 2013 or later, use the Get-MobileDeviceMailboxPolicy cmdlet instead. If you have scripts that use Get-ActiveSyncMailboxPolicy, update them to use Get-MobileDeviceMailboxPolicy.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-ActiveSyncOrganizationSettings cmdlet to view the Microsoft Exchange ActiveSync settings for your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is functional only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Get-DeviceConditionalAccessPolicy cmdlet to view mobile device conditional access policies in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is functional only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Get-DeviceConditionalAccessRule cmdlet to view mobile device conditional access rules in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is functional only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Get-DeviceConfigurationPolicy cmdlet to view mobile device configuration policies in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is functional only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Get-DeviceConfigurationRule cmdlet to view mobile device configuration rules in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is functional only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Get-DevicePolicy cmdlet to view all types of Basic Mobility and Security policies in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is functional only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Get-DeviceTenantPolicy cmdlet to view your organization's mobile device tenant policy in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is functional only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Get-DeviceTenantRule cmdlet to view your organization's mobile device tenant rule in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-MobileDevice cmdlet to get the list of devices in your organization that have active partnerships.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-MobileDeviceMailboxPolicy cmdlet to retrieve the Mobile Device mailbox policy settings for a specific Mobile Device mailbox policy.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-MobileDeviceStatistics cmdlet to retrieve the list of mobile devices configured to synchronize with a specified user's mailbox and return a list of statistics about the mobile devices.

Note: In Exchange Online PowerShell, we recommend that you use the Get-EXOMobileDeviceStatistics cmdlet instead of this cmdlet. For more information, see Connect to Exchange Online PowerShell.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the New-ActiveSyncDeviceAccessRule cmdlet to define the access levels for Exchange ActiveSync devices based on the identity of the device.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the New-ActiveSyncMailboxPolicy cmdlet to create a Microsoft Mobile Device mailbox policy object.

Note: In Exchange 2013 or later, use the New-MobileDeviceMailboxPolicy cmdlet instead. If you have scripts that use New-ActiveSyncMailboxPolicy, update them to use New-MobileDeviceMailboxPolicy.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the New-DeviceConditionalAccessPolicy cmdlet to create mobile device conditional access policies in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the New-DeviceConditionalAccessRule cmdlet to create mobile device conditional access rules in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the New-DeviceConfigurationPolicy cmdlet to create mobile device configuration policies in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the New-DeviceConfigurationRule cmdlet to create mobile device configuration rules in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the New-DeviceTenantPolicy cmdlet to create your organization's mobile device tenant policy in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the New-DeviceTenantRule cmdlet to create your organization's mobile device tenant rule in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the New-MobileDeviceMailboxPolicy cmdlet to create mobile device mailbox policies.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Remove-ActiveSyncDevice cmdlet to remove mobile device partnerships that identify the devices that are configured to synchronize with user mailboxes.

Note: In Exchange 2013 or later, use the Remove-MobileDevice cmdlet instead. If you have scripts that use Remove-ActiveSyncDevice, update them to use Remove-MobileDevice.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Remove-ActiveSyncDeviceAccessRule cmdlet to remove any existing device access rule.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-ActiveSyncDeviceClass cmdlet to clean up the list of mobile devices synchronizing with Microsoft Exchange.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Remove-ActiveSyncMailboxPolicy cmdlet to remove mobile device mailbox policies.

Note: In Exchange 2013 or later, use the Remove-MobileDeviceMailboxPolicy cmdlet instead. If you have scripts that use Remove-ActiveSyncMailboxPolicy, update them to use Remove-MobileDeviceMailboxPolicy.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Remove-DeviceConditionalAccessPolicy cmdlet to remove mobile device conditional access policies from Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Remove-DeviceConditionalAccessRule cmdlet to remove mobile device conditional access rules from Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Remove-DeviceConfigurationPolicy cmdlet to remove mobile device configuration policies from Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-DeviceConfigurationRule cmdlet to remove mobile device configuration rules from Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Remove-DeviceTenantPolicy cmdlet to remove your organization's mobile device tenant policy from Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Remove-DeviceTenantRule cmdlet to remove your organization's mobile device tenant rule from Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Remove-MobileDevice cmdlet to remove mobile device partnerships that identify the devices that are configured to synchronize with user mailboxes.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Remove-MobileDeviceMailboxPolicy cmdlet to remove mobile device mailbox policies from Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-ActiveSyncDeviceAccessRule cmdlet to set the level of access for the rule.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-ActiveSyncDeviceAutoblockThreshold cmdlet to change settings for autoblocking mobile devices.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-ActiveSyncMailboxPolicy cmdlet to apply a variety of Mobile Device mailbox policy settings to a server. You can set any of the parameters by using one command.

Note: In Exchange 2013 or later, use the Set-MobileDeviceMailboxPolicy cmdlet instead. If you have scripts that use Set-ActiveSyncMailboxPolicy, update them to use Set-MobileDeviceMailboxPolicy.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-ActiveSyncOrganizationSettings cmdlet to set the Exchange ActiveSync settings for the organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Set-DeviceConditionalAccessPolicy cmdlet to modify mobile device conditional access policies in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Set-DeviceConditionalAccessRule cmdlet to modify mobile device conditional access rules in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Set-DeviceConfigurationPolicy cmdlet to modify mobile device configuration policies in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Set-DeviceConfigurationRule cmdlet to modify mobile device configuration rules in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Set-DeviceTenantPolicy cmdlet to modify your organization's mobile device tenant policy in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in Security & Compliance PowerShell. For more information, see Security & Compliance PowerShell.

Use the Set-DeviceTenantRule cmdlet to modify your organization's mobile device tenant rule in Basic Mobility and Security in Microsoft 365.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-MobileDeviceMailboxPolicy cmdlet to modify mobile device mailbox policies.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Test-ActiveSyncConnectivity cmdlet to test connectivity to Microsoft Exchange ActiveSync virtual directories.

Note: This cmdlet works best in Exchange 2010. In later versions of Exchange, the functionality of this cmdlet is replaced by Managed Availability. For the best results, use the Invoke-MonitoringProbe cmdlet and specify the relevant active monitor probe instead of using this cmdlet.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Disable-AddressListPaging cmdlet to disable Active Directory virtual list view for address lists. Virtual list view displays address lists in your organization as pages instead of loading and viewing the entire directory.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Enable-AddressListPaging cmdlet to enable Active Directory virtual list view for address lists. Virtual list view allows you to display the address lists in your organization as pages instead of loading and viewing the entire directory.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-AddressBookPolicy cmdlet to return address book policies that match the specified conditions.

In Exchange Online, this cmdlet is available only in the Address Lists role, and by default, the role isn't assigned to any role groups. To use this cmdlet, you need to add the Address Lists role to a role group (for example, to the Organization Management role group). For more information, see Add a role to a role group.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-AddressList cmdlet to view address lists.

In Exchange Online, this cmdlet is available only in the Address Lists role, and by default, the role isn't assigned to any role groups. To use this cmdlet, you need to add the Address Lists role to a role group (for example, to the Organization Management role group). For more information, see Add a role to a role group.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-DetailsTemplate cmdlet to retrieve the attributes for details templates.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-EmailAddressPolicy cmdlet to view email address policies. In Exchange Online, email address policies are available only for Microsoft 365 Groups.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-GlobalAddressList cmdlet to view a global address list (GAL) or a set of GALs.

In Exchange Online, this cmdlet is available only in the Address Lists role, and by default, the role isn't assigned to any role groups. To use this cmdlet, you need to add the Address Lists role to a role group (for example, to the Organization Management role group). For more information, see Add a role to a role group.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-OabVirtualDirectory cmdlet to view offline address book (OAB) virtual directories(OAB distribution points) that are used in Internet Information Services (IIS) on Microsoft Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-OfflineAddressBook cmdlet to view offline address books (OABs).

In Exchange Online, this cmdlet is available only in the Address Lists role, and by default, the role isn't assigned to any role groups. To use this cmdlet, you need to add the Address Lists role to a role group (for example, to the Organization Management role group). For more information, see Add a role to a role group.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Move-AddressList cmdlet to move an existing address list to a new container under the root address list.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Move-OfflineAddressBook cmdlet to designate a new server that's responsible for generating the offline address book (OAB) in Exchange Server 2010. This cmdlet isn't used on OABs in Exchange Server 2016 or Exchange Server 2013. To perform this task in Exchange 2016 or Exchange 2013, use the Set-OfflineAddressBook cmdlet with the GeneratingMailbox parameter.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the New-AddressBookPolicy cmdlet to create an address book policy. Address book policies define the global address list (GAL), offline address book (OAB), room list, and address lists shown to mailbox users who are assigned the policy.

In Exchange Online, this cmdlet is available only in the Address Lists role, and by default, the role isn't assigned to any role groups. To use this cmdlet, you need to add the Address Lists role to a role group (for example, to the Organization Management role group). For more information, see Add a role to a role group.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the New-AddressList cmdlet to create address lists and apply them to recipients.

In Exchange Online, this cmdlet is available only in the Address Lists role, and by default, the role isn't assigned to any role groups. To use this cmdlet, you need to add the Address Lists role to a role group (for example, to the Organization Management role group). For more information, see Add a role to a role group.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the New-EmailAddressPolicy cmdlet to create email address policies. In Exchange Online, email address policies are available only for Microsoft 365 Groups.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the New-GlobalAddressList cmdlet to create a global address list (GAL).

In Exchange Online, this cmdlet is available only in the Address Lists role, and by default, the role isn't assigned to any role groups. To use this cmdlet, you need to add the Address Lists role to a role group (for example, to the Organization Management role group). For more information, see Add a role to a role group.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the New-OABVirtualDirectory cmdlet to create offline address book (OAB) virtual directories that are used in Internet Information Services (IIS) on Microsoft Exchange servers. The OAB virtual directory configures the server as a web distribution point for an offline address book (OAB). Typically, you create virtual directories on Exchange servers that have the Client Access server role installed.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the New-OfflineAddressBook cmdlet to create offline address books (OABs).

In Exchange Online, this cmdlet is available only in the Address Lists role, and by default, the role isn't assigned to any role groups. To use this cmdlet, you need to add the Address Lists role to a role group (for example, to the Organization Management role group). For more information, see Add a role to a role group.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Remove-AddressBookPolicy cmdlet to delete an address book policy. You can't remove the address book policy if it's still assigned to a user's mailbox.

In Exchange Online, this cmdlet is available only in the Address Lists role, and by default, the role isn't assigned to any role groups. To use this cmdlet, you need to add the Address Lists role to a role group (for example, to the Organization Management role group). For more information, see Add a role to a role group.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Remove-AddressList cmdlet to remove existing address lists.

In Exchange Online, this cmdlet is available only in the Address Lists role, and by default, the role isn't assigned to any role groups. To use this cmdlet, you need to add the Address Lists role to a role group (for example, to the Organization Management role group). For more information, see Add a role to a role group.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Remove-EmailAddressPolicy cmdlet to remove existing email address policies and update the affected recipients. In Exchange Online, email address policies are available only for Microsoft 365 Groups.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Remove-GlobalAddressList cmdlet to remove an existing global address list (GAL).

In Exchange Online, this cmdlet is available only in the Address Lists role, and by default, the role isn't assigned to any role groups. To use this cmdlet, you need to add the Address Lists role to a role group (for example, to the Organization Management role group). For more information, see Add a role to a role group.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-OabVirtualDirectory cmdlet to remove offline address book (OAB) virtual directories from Internet Information Services (IIS) on Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Remove-OfflineAddressBook cmdlet to remove (delete) offline address books (OABs).

In Exchange Online, this cmdlet is available only in the Address Lists role, and by default, the role isn't assigned to any role groups. To use this cmdlet, you need to add the Address Lists role to a role group (for example, to the Organization Management role group). For more information, see Add a role to a role group.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Restore-DetailsTemplate cmdlet to restore the specified template to its default state.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-AddressBookPolicy cmdlet to change the settings of an address book policy.

In Exchange Online, this cmdlet is available only in the Address Lists role, and by default, the role isn't assigned to any role groups. To use this cmdlet, you need to add the Address Lists role to a role group (for example, to the Organization Management role group). For more information, see Add a role to a role group.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-AddressList cmdlet to modify existing address lists.

In Exchange Online, this cmdlet is available only in the Address Lists role, and by default, the role isn't assigned to any role groups. To use this cmdlet, you need to add the Address Lists role to a role group (for example, to the Organization Management role group). For more information, see Add a role to a role group.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-DetailsTemplate cmdlet to modify the attributes of a details template. To make changes to the details template format and layout, you need to use the Details Templates Editor in the Exchange Toolbox.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-EmailAddressPolicy cmdlet to modify email address policies. In Exchange Online, email address policies are available only for Microsoft 365 Groups.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-GlobalAddressList cmdlet to modify an existing global address list (GAL).

In Exchange Online, this cmdlet is available only in the Address Lists role, and by default, the role isn't assigned to any role groups. To use this cmdlet, you need to add the Address Lists role to a role group (for example, to the Organization Management role group). For more information, see Add a role to a role group.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-OABVirtualDirectory cmdlet to modify offline address book (OAB) virtual directories that are used in Internet Information Services (IIS) on Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-OfflineAddressBook cmdlet to modify offline address book (OAB) settings.

In Exchange Online, this cmdlet is available only in the Address Lists role, and by default, the role isn't assigned to any role groups. To use this cmdlet, you need to add the Address Lists role to a role group (for example, to the Organization Management role group). For more information, see Add a role to a role group.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Update-AddressList cmdlet to update the recipients included in address lists.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Update-EmailAddressPolicy cmdlet to apply new or updated email address policies to the affected recipients in an on-premises Exchange organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Update-GlobalAddressList cmdlet to update the recipients included in a global address list (GAL).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Update-OfflineAddressBook cmdlet to update the offline address books (OABs) used by Microsoft Outlook clients.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Add-LdapDirectory cmdlet to create LDAP directory configurations.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Enable-ExchangeCertificate cmdlet to enable an existing certificate on the Exchange server for Exchange services such as Internet Information Services (IIS), SMTP, POP, IMAP and Unified Messaging (UM). Once you enable a certificate for a service, you can't disable it.

To see the existing certificates that are used for Exchange services, use Get-ExchangeCertificate.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Export-ExchangeCertificate cmdlet to export existing certificates and pending certificate requests (also known as certificate signing requests or CSRs) from Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-DataEncryptionPolicy cmdlet to view data encryption policies in Exchange Online.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-ExchangeCertificate cmdlet to view Exchange certificates that are installed on Exchange servers. This cmdlet returns Exchange self-signed certificates, certificates that were issued by a certification authority and pending certificate requests (also known as certificate signing requests or CSRs).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-IRMConfiguration cmdlet to view the Information Rights Management (IRM) configuration in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-LdapDirectory cmdlet to view LDAP directory configurations.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-M365DataAtRestEncryptionPolicy cmdlet to view existing Microsoft 365 data-at-rest encryption policies.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-M365DataAtRestEncryptionPolicyAssignment cmdlet to view the currently assigned Microsoft 365 data-at-rest encryption policy.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-MailboxIRMAccess cmdlet to view delegate access to IRM-protected messages in other mailboxes (shared mailboxes or user mailboxes where delegates have Full Access permission).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-OMEConfiguration cmdlet to view Microsoft Purview Message Encryption configurations.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-OMEMessageStatus cmdlet to view the Microsoft Purview Message Encryption revocation status for a specific message.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-RMSTemplate cmdlet to retrieve the current list of active rights policy templates from the Active Directory Rights Management Services (AD RMS) deployment for the organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-SmimeConfig cmdlet to view the S/MIME configuration for Outlook on the web (formerly known as Outlook Web App).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Import-ExchangeCertificate cmdlet to import certificates on Exchange servers. You use this cmdlet to install certificates that were exported from other servers, and to complete pending certification requests (also known as certificate signing requests or CSRs) from certification authorities (CAs).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-DataEncryptionPolicy cmdlet to create data encryption policies in Exchange Online.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the New-ExchangeCertificate cmdlet to create and renew self-signed certificates, and to create certificate requests (also known as certificate signing requests or CSRs) for new certificates and certificate renewals from a certification authority (CA).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-M365DataAtRestEncryptionPolicy cmdlet to create a new Microsoft 365 data-at-rest encryption policy.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-OMEConfiguration cmdlet to create a Microsoft Purview Message Encryption configuration.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-ExchangeCertificate cmdlet to remove existing Exchange certificates or pending certificate requests (also known as certificate signing requests or CSRs) from Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-LdapDirectory cmdlet to remove LDAP directory configurations.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-MailboxIRMAccess cmdlet to allow (unblock) delegate access to IRM-protected messages in other mailboxes (shared mailboxes or user mailboxes where delegates have Full Access permission).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-OMEConfiguration cmdlet to remove custom Microsoft Purview Message Encryption configurations. You can't use this cmdlet to remove the default OME configuration.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-DataEncryptionPolicy cmdlet to modify data encryption policies in Exchange Online.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-IRMConfiguration cmdlet to configure Information Rights Management (IRM) features on your organization.

Configuring and using IRM features in an on-premises Exchange organization requires Active Directory Rights Management Services (AD RMS).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-LdapDirectory cmdlet to modify LDAP directory configurations.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-M365DataAtRestEncryptionPolicy cmdlet to modify Microsoft 365 data-at-rest encryption policies in Exchange Online.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-M365DataAtRestEncryptionPolicyAssignment cmdlet to assign a Microsoft 365 data-at-rest encryption policy at the tenant level.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-MailboxIRMAccess cmdlet to block delegate access to IRM-protected messages in other mailboxes (shared mailboxes or user mailboxes where delegates have Full Access permission).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-OMEConfiguration cmdlet to configure Microsoft Purview Message Encryption.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-OMEMessageRevocation cmdlet to revoke Microsoft Purview Message Encryption for a message. Revoking encryption prevents the recipient from viewing the message in the OME portal.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-RMSTemplate cmdlet to modify the properties of an existing Active Directory Rights Management Services (AD RMS) template in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-SmimeConfig cmdlet to modify the S/MIME configuration for Outlook on the web (formerly known as Outlook Web App or OWA) and new Outlook for Windows.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Test-IRMConfiguration cmdlet to test Information Rights Management (IRM) configuration and functionality.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Test-M365DataAtRestEncryptionPolicy cmdlet to test an existing Microsoft 365 data-at-rest encryption policy.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Add-FederatedDomain cmdlet to configure a secondary domain with the federated organization identifier in the federation trust for the Exchange organization.

The domains being added to the federation trust must exist as accepted domains in the Exchange organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Disable-RemoteMailbox cmdlet to remove user mailboxes from the cloud-based service but keep the associated user objects in the on-premises Active Directory.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service for an existing user in the on-premises Active Directory.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-FederatedDomainProof cmdlet to generate a cryptographically secure string for the domain used for federated sharing in your Exchange organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-FederatedOrganizationIdentifier cmdlet to retrieve the Exchange organization's federated organization identifier and related details, such as federated domains, organization contact and status.

For more information, see Federation.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-FederationInformation cmdlet to get federation information from an external Exchange organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-FederationTrust cmdlet to view the federation trust configured for the Exchange organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-HybridConfiguration cmdlet to view the hybrid configuration for the Microsoft Exchange organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

This cmdlet is deprecated and is no longer used.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-IntraOrganizationConfiguration cmdlet to view the component settings of a hybrid Exchange deployment.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-IntraOrganizationConnector cmdlet to view the settings of Intra-Organization connectors.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-OnPremisesOrganization cmdlet to retrieve settings for the OnPremisesOrganization object that is created for a hybrid deployment.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

The Get-PendingFederatedDomain cmdlet is used by the Exchange admin center to display a list of pending federated domains for the federation trust for your Exchange organization. You shouldn't use this cmdlet to attempt to manually configure a federation trust.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-RemoteMailbox cmdlet to retrieve the mail-related attributes of users in the on-premises organization that have associated mailboxes in the cloud-based service.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the New-FederationTrust cmdlet to set up a federation trust between your Exchange organization and the Microsoft Federation Gateway.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the New-HybridConfiguration cmdlet to manually create the HybridConfiguration object and manually set up a hybrid deployment between your on-premises Exchange organization and Exchange Online in Microsoft 365 for enterprises.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the New-IntraOrganizationConnector cmdlet to create an Intra-Organization connector between two on-premises Exchange forests in an organization, between an Exchange on-premises organization and an Exchange Online organization, or between two Exchange Online organizations. This connector enables feature availability and service connectivity across the organizations using a common connector and connection endpoints.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the New-OnPremisesOrganization cmdlet to create an OnPremisesOrganization object in a Microsoft 365 organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the New-RemoteMailbox cmdlet to create a mail user in the on-premises Active Directory and also create an associated mailbox in the cloud-based service.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-FederatedDomain cmdlet to remove a federated domain from the federated organization identifier in the federation trust for the Exchange organization.

If you remove a domain configured for federated sharing, federated sharing for that domain is disabled.

For more information, see Federation.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-FederationTrust cmdlet to remove an existing federation trust from an Exchange organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Remove-HybridConfiguration cmdlet to delete the HybridConfigurationActive Directory object for your on-premises Exchange organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Remove-IntraOrganizationConnector cmdlet to remove existing Intra-Organization connectors.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Remove-OnPremisesOrganization cmdlet to remove an OnPremisesOrganization object in a Microsoft 365 tenant.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Remove-RemoteMailbox cmdlet to remove a mail-enabled user in the on-premises Active Directory and the associated mailbox in the cloud-based service.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-FederatedOrganizationIdentifier cmdlet to configure the federated organization identifier for the Exchange organization.

For more details, see Federation.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-FederationTrust cmdlet to modify an existing federation trust.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-HybridConfiguration cmdlet to modify the hybrid deployment between your on-premises Exchange organization and Exchange Online in Microsoft 365 for enterprises.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Set-IntraOrganizationConnector cmdlet to modify an existing Intra-Organization connector between two on-premises Exchange forests in an organization, between an on-premises Exchange organization and an Exchange Online organization or between two Exchange Online organizations.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Set-OnPremisesOrganization cmdlet to modify the parameters of the OnPremisesOrganization object on the Microsoft 365 tenant.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

The Set-PendingFederatedDomain cmdlet is used by the Exchange admin center to configure pending domains with the federated organization identifier in the federation trust for the Exchange organization. You shouldn't use this cmdlet to attempt to manually configure a federation trust.

The domains being added to the federation trust must exist as accepted domains in the Exchange organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Set-RemoteMailbox cmdlet to modify remote mailboxes. A remote mailbox is a mail user in Active Directory that's associated with a mailbox in the cloud-based service.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Test-FederationTrust cmdlet to verify that the federation trust is properly configured and functioning as expected.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Test-FederationTrustCertificate cmdlet to check the status of certificates that are used for federation on all Exchange servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Update-HybridConfiguration cmdlet to define the credentials that are used to update the hybrid configuration object.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Update-Recipient cmdlet to add Exchange attributes to recipient objects.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Add-ResubmitRequest cmdlet to add requests to replay redundant copies of messages from Safety Net after a mailbox database recovery.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Disable-DnssecForVerifiedDomain cmdlet to disable Domain Name System Security (DNSSEC) for inbound mail to accepted domains in Exchange Online.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Disable-IPv6ForAcceptedDomain cmdlet to disable or opt-out of support for mail delivery to accepted domains in Exchange Online using IPv6.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Disable-SMTPDaneInbound cmdlet to disable SMTP DNS-based Authentication of Named Entities (DANE) for inbound mail to accepted domains in Exchange Online.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Disable-TransportAgent cmdlet to disable a transport agent.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Enable-DnssecForVerifiedDomain cmdlet to enable Domain Name System Security (DNSSEC) for inbound mail to accepted domains in Exchange Online.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Enable-IPv6ForAcceptedDomain cmdlet to enable support for mail delivery to accepted domains in Exchange Online using IPv6.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Enable-SMTPDaneInbound cmdlet to enable SMTP DNS-based Authentication of Named Entities (DANE) for inbound mail to accepted domains in Exchange Online.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Enable-TransportAgent cmdlet to enable a transport agent.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Export-Message cmdlet to copy a message from a queue on a Mailbox server or an Edge Transport server to a specified file path in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available in on-premises Exchange and in the cloud-based service. Some parameters and settings might be exclusive to one environment or the other.

Use the Get-AcceptedDomain cmdlet to view the configuration information for the accepted domains in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange.

Use the Get-AddressRewriteEntry cmdlet to view an existing address rewrite entry that rewrites sender and recipient email addresses in messages sent to or sent from your organization through an Edge Transport server.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-DeliveryAgentConnector cmdlet to retrieve information about a specific delivery agent connector in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-DnssecStatusForVerifiedDomain cmdlet to view information about Domain Name System Security (DNSSEC) for accepted domains in Exchange Online.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-EdgeSubscription cmdlet to retrieve information about Edge Subscriptions in your organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-EdgeSyncServiceConfig cmdlet to retrieve the edge synchronization services settings that control the general synchronization behavior shared by all Microsoft Exchange EdgeSync services.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-ForeignConnector cmdlet to view the configuration information for a Foreign connector in the Transport service of a Mailbox server.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-FrontEndTransportService cmdlet to view the configuration of the Front End Transport service on Exchange 2013 or later servers that have the Client Access server role installed.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-InboundConnector cmdlet to view the settings for an Inbound connector in your cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-IPv6StatusForAcceptedDomain cmdlet to view the status of support for mail delivery to accepted domains in Exchange Online using IPv6.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-MailboxTransportService cmdlet to view the configuration of the Mailbox Transport service on Exchange 2013 or later Mailbox servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-Message cmdlet to view the details of one or more messages in queues on Mailbox servers or Edge Transport servers.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-MessageTrace cmdlet to trace messages as they pass through the cloud-based organization.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in the cloud-based service.

Use the Get-MessageTraceDetail cmdlet to view the message trace event details for a specific message. These detailed results are returned less quickly than the Get-MessageTrace results.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is available only in on-premises Exchange.

Use the Get-MessageTrackingLog cmdlet to search for message delivery information stored in the message tracking log.

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.

This cmdlet is functional only in on-premises Exchange.

Use the Get-MessageTrackingReport cmdlet to return data for a specific message tracking report. This cmdlet is used by the delivery reports feature.

In Exchange Online, delivery reports are replaced by message trace (the Get-MessageTraceV2 and Get-MessageTraceDetailV2 cmdlets).

For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.