Microsoft announced today that Windows Extended Protection will be enabled by default on servers running Exchange Server 2019 starting this fall after installing the 2023 H2 Cumulative Update (CU14).

Microsoft recommends doing the following, depending on what security update you have installed:

  • Aug 2022 SU or later and EP enabled: Install CU14 (no special steps needed).
  • Aug 2022 SU or later, but EP not yet enabled: Install CU14 with the default of ‘Enable EP’ left on.
  • Exchange Server version earlier than the Aug 2022 SU: “We send you thoughts and prayers, and very strong but gentle guidance to update your servers to the latest SU immediately.”