Searching the Help
To search for information in the Help, type a word or phrase in the Search box. When you enter a group of words, OR is inferred. You can use Boolean operators to refine your search.
Results returned are case insensitive. However, results ranking takes case into account and assigns higher scores to case matches. Therefore, a search for "cats" followed by a search for "Cats" would return the same number of Help topics, but the order in which the topics are listed would be different.
Search for | Example | Results |
---|---|---|
A single word | cat
|
Topics that contain the word "cat". You will also find its grammatical variations, such as "cats". |
A phrase. You can specify that the search results contain a specific phrase. |
"cat food" (quotation marks) |
Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase. |
Search for | Operator | Example |
---|---|---|
Two or more words in the same topic |
|
|
Either word in a topic |
|
|
Topics that do not contain a specific word or phrase |
|
|
Topics that contain one string and do not contain another | ^ (caret) |
cat ^ mouse
|
A combination of search types | ( ) parentheses |
|
How to Configure the Active Directory Side
Some Exchange PowerShell command-lets need to perform AD LookUps. AD servers (starting from Win 2003) do not allow Anonymous lookups while the impersonalization is still applied. This results in various errors while trying to run the Exchange/AD-related command-lets remotely.
This task includes the following steps:
-
Configure delegation on the Active Directory side
To enable remote calls of such command-lets, you must configure the Delegation on the Active Directory side.
-
Log on to the domain controller using an administrator account.
-
Select Start > Programs > Administrative Tools > Active Directory Users and Computers.
-
Select you domain's, Users folder.
-
Right-click the user account that is to be delegated, and click Properties.
-
In the Account tab, under the Account options, make sure that the Account is sensitive and cannot be delegated option is NOT selected.
-
Click OK.
-
-
Allow required servers to perform the delegated requests
Confirm that the server process account is trusted for delegation if the server process runs under a Windows user account:
-
In the Active Directory Users and Computers > Users folder, right-click the user account that is used to run the server process that will impersonate the client, and click Properties.
-
In the Account tab, under the Account options, select the Account is trusted for delegation option.
-
-
Confirm that the server process account is trusted for delegation for the server process
-
In Active Directory Users and Computers, right-click Computers, and click Properties.
-
Right-click the server computer (where the process that impersonates the client will be running), and click Properties.
-
On the General page, select Trust computer for delegation.
-
Select Use any authentication protocol.
-
Click Add and select the required processes.
-
If only the Kerberos protocol is used, select the Trust this computer for delegation to any service or Use Kerberos only.
Note If the Kerberos authentication is used and the connection is performed from outside of the destination domain, Trust Domain must be configured on the target AD.
-