Commands › Exchange Online
Set-IPAllowListConfig
This cmdlet is available or effective only on Edge Transport servers in on-premises Exchange. Use the Set-IPAllowListConfig cmdlet to modify the IP Allow list configuration that's used by the Connection Filtering agent on Edge Transport servers.
Quick start script
# Set-IPAllowListConfig — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org
# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-IPAllowListConfig
$before | Format-List
# 3. Make the change (dry run first)
Set-IPAllowListConfig -WhatIf
Set-IPAllowListConfig
# 4. Verify and diff
$after = Get-IPAllowListConfig
Compare-Object ($before | Out-String) ($after | Out-String)Syntax
Set-IPAllowListConfig [-Confirm]
[-DomainController <Fqdn>]
[-Enabled <Boolean>]
[-ExternalMailEnabled <Boolean>]
[-InternalMailEnabled <Boolean>]
[-WhatIf]
[<CommonParameters>]Parameters (6)
| Parameter | Type | Required | What it controls |
|---|---|---|---|
| -Confirm | SwitchParameter | The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on whether the cmdlet requires confirmation before proceeding. | |
| -DomainController | Fqdn | The DomainController parameter specifies the domain controller that's used by this cmdlet to read data from or write data to Active Directory. You identify the domain controller by its fully qualified domain name... | |
| -Enabled | Boolean | The Enabled parameter specifies whether the IP Allow list is used for content filtering. Valid input for this parameter is $true or $false. The default value is $true. By default, the IP Allow list is used for... | |
| -ExternalMailEnabled | Boolean | The ExternalMailEnabled parameter specifies whether messages from connections outside of the Exchange organization are evaluated by the IP Allow list. Valid input for this parameter is $true or $false. The default... | |
| -InternalMailEnabled | Boolean | The InternalMailEnabled parameter specifies whether messages from connections inside the Exchange organization are evaluated by the IP Allow list. Valid input for this parameter is $true or $false. The default value... | |
| -WhatIf | SwitchParameter | The WhatIf switch shows what the command does without making any changes. You don't need to specify a value with this switch. |
Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.