get-qaduser -searchroot "OU=foo,DC=domain,DC=local" -searchscope OneLevel | set-qaduser -objectAttributes @{MSExchHideFromAddressLists=$true}