[This topic's current status is: Content Complete.]

Applies to: Exchange Server 2010 Topic Last Modified: 2009-08-12

Use the Enable-AntispamUpdates cmdlet to determine the type of Microsoft Forefront Protection 2010 for Exchange Server anti-spam updates that are retrieved and to set the mode by which the anti-spam updates are retrieved on a computer that has the Edge Transport server role or the Hub Transport server role installed. 

Enable-AntispamUpdates [-Identity <ServerIdParameter>] [-Confirm [<SwitchParameter>]] [-DomainController <Fqdn>] [-IPReputationUpdatesEnabled <$true | $false>] [-MicrosoftUpdate <NotConfigured | RequestDisabled | RequestNotifyDownload | RequestNotifyInstall | RequestScheduled | Configured>] [-SpamSignatureUpdatesEnabled <$true | $false>] [-UpdateMode <Disabled | Manual | Automatic>] [-WhatIf [<SwitchParameter>]]

Parameter Required Type Description




The Confirm switch causes the command to pause processing and requires you to acknowledge what the command will do before processing continues. You don't have to specify a value with the Confirm switch.




The DomainController parameter specifies the fully qualified domain name (FQDN) of the domain controller that writes this configuration change to Active Directory. The DomainController parameter isn't supported on the Edge Transport server role. The Edge Transport server role writes only to the Active Directory Lightweight Directory Services (AD LDS) instance.




The Identity parameter specifies the server that retrieves the Exchange anti-spam updates from Microsoft Update.




The IPReputationUpdatesEnabled parameter specifies whether IP Reputation Service updates are retrieved. The default value is $false. If this parameter is set to $true, the UpdateMode parameter must be set to Automatic.




The MicrosoftUpdate parameter enables the opt-in status for Microsoft Update and configures the Automatic Updates functionality for the updates. You can use one of the following values:

  • RequestDisabled   This value disables Automatic Updates.
  • RequestNotifyDownload   With this value, Automatic Updates notifies you when new updates are ready for download.
  • RequestNotifyInstall   With this value, Automatic Updates downloads updates and notifies you when they're available for installation.
  • RequestScheduled   This value sets download and installation of updates according to the configuration of Automatic Updates on the computer.

To set a schedule for Automatic Updates schedule, see Microsoft Update.




The SpamSignatureUpdatesEnabled parameter specifies whether spam signature updates are retrieved. The default value is $false. If this parameter is set to $true, the UpdateMode parameter must be set to Automatic.




The UpdateMode parameter specifies the mode by which the anti-spam updates are retrieved. You can use one of the following values:

  • Manual   This value requires updates to be retrieved manually. This is the default value.
  • Disabled   This value prevents updates from being retrieved.
  • Automatic   This value is required to retrieve spam signature updates or IP Reputation Service updates.




The WhatIf switch instructs the command to simulate the actions that it would take on the object. By using the WhatIf switch, you can view what changes would occur without having to apply any of those changes. You don't have to specify a value with the WhatIf switch.

The Enable-AntispamUpdates cmdlet controls the types of anti-spam updates that are downloaded. This cmdlet also controls whether the anti-spam updates are downloaded automatically or require you to manually retrieve the updates using Microsoft Update. For more information about Microsoft Update, see Microsoft Update. For more information about configuring anti-spam updates, see Configure Anti-Spam Automatic Updates.

To take advantage of spam signature updates and IP Reputation Service updates, you must set the UpdateMode parameter to Automatic.

You need to be assigned permissions before you can run this cmdlet. Although all parameters for this cmdlet are listed in this topic, you may not have access to some parameters if they're not included in the permissions assigned to you. To see what permissions you need, see the "Anti-spam updates" entry in the Transport Permissions topic.

This example accomplishes the following:

  • Enables the server SERVER01 to automatically retrieve anti-spam updates.
  • Configures the anti-spam updates to include spam signature updates and IP Reputation Service updates.
Enable-AntispamUpdates -Identity SERVER01 -IPReputationUpdatesEnabled $true -UpdateMode Automatic -SpamSignatureUpdatesEnabled $true