Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

Universal DiscoveryContent Pack 28.00 (CP28)

Use > Discovery Modules > Enterprise Applications > Microsoft Exchange Server by PowerShell Discovery > How to Configure the Active Directory Side

How to Configure the Active Directory Side

Some Exchange PowerShell command-lets need to perform AD LookUps. AD servers (starting from Win 2003) do not allow Anonymous lookups while the impersonalization is still applied. This results in various errors while trying to run the Exchange/AD-related command-lets remotely.

This task includes the following steps:

Configure delegation on the Active Directory side
To enable remote calls of such command-lets, you must configure the Delegation on the Active Directory side.
1. Log on to the domain controller using an administrator account.
2. Select Start > Programs > Administrative Tools > Active Directory Users and Computers.
3. Select you domain's, Users folder.
4. Right-click the user account that is to be delegated, and click Properties.
5. In the Account tab, under the Account options, make sure that the Account is sensitive and cannot be delegated option is NOT selected.
6. Click OK.
Allow required servers to perform the delegated requests
Confirm that the server process account is trusted for delegation if the server process runs under a Windows user account:
1. In the Active Directory Users and Computers > Users folder, right-click the user account that is used to run the server process that will impersonate the client, and click Properties.
2. In the Account tab, under the Account options, select the Account is trusted for delegation option.
Confirm that the server process account is trusted for delegation for the server process
1. In Active Directory Users and Computers, right-click Computers, and click Properties.
2. Right-click the server computer (where the process that impersonates the client will be running), and click Properties.
3. On the General page, select Trust computer for delegation.
4. Select Use any authentication protocol.
5. Click Add and select the required processes.
6. If only the Kerberos protocol is used, select the Trust this computer for delegation to any service or Use Kerberos only.
  
  Note If the Kerberos authentication is used and the connection is performed from outside of the destination domain, Trust Domain must be configured on the target AD.

Send Help Center feedback