Customer Guidance for Reported Zero-day Vulnerabilities in Microsoft Exchange Server

Thank you, Microsoft for the information. Here is what we are running that might help the rest (appcmd or powershell):

Disclaimer: Please use it at your own risk.

appcmd

appcmd.exe set config "Default Web Site/Autodiscover" -section:system.webServer/rewrite/rules /[name='RequestBlockingRule1'].match.url:".*"  
appcmd.exe set config "Default Web Site/Autodiscover" -section:system.webServer/rewrite/rules /+"[name='RequestBlockingRule1'].conditions.[input='{REQUEST_URI}',pattern='.*autodiscover\.json.*\@.*Powershell.*']" 
appcmd.exe set config "Default Web Site/Autodiscover" -section:system.webServer/rewrite/rules /[name='RequestBlockingRule1'].action.statusCode:"403" /[name='RequestBlockingRule1'].action.statusReason:"Forbidden: Access is denied." /[name='RequestBlockingRule1'].action.statusDescription:"You do not have permission to view this directory or page using the credentials that you supplied."  
appcmd.exe set config "Default Web Site/Autodiscover" -section:system.webServer/rewrite/rules /[name='RequestBlockingRule1'].patternSyntax:"ECMAScript" /[name='RequestBlockingRule1'].stopProcessing:"True"  

Powershell

$IIS_Autodiscover_path = 'MACHINE/WEBROOT/APPHOST/Default Web Site/Autodiscover'

Add-WebConfigurationProperty -pspath $IIS_Autodiscover_path  -filter "system.webServer/rewrite/rules" -name "." -value @{name='zerodaysep22';patternSyntax='ECMAScript';stopProcessing='True'}
Set-WebConfigurationProperty -pspath $IIS_Autodiscover_path  -filter "system.webServer/rewrite/rules/rule[@name='zerodaysep22']/match" -name "url" -value ".*"
Add-WebConfigurationProperty -pspath $IIS_Autodiscover_path  -filter "system.webServer/rewrite/rules/rule[@name='zerodaysep22']/conditions" -name "." -value @{input='{REQUEST_URI}';pattern='.*autodiscover\.json.*\@.*Powershell.*'}
Set-WebConfigurationProperty -pspath $IIS_Autodiscover_path  -filter "system.webServer/rewrite/rules/rule[@name='zerodaysep22']/action" -name "type" -value "CustomResponse"
Set-WebConfigurationProperty -pspath $IIS_Autodiscover_path  -filter "system.webServer/rewrite/rules/rule[@name='zerodaysep22']/action" -name "statusCode" -value 403
Set-WebConfigurationProperty -pspath $IIS_Autodiscover_path  -filter "system.webServer/rewrite/rules/rule[@name='zerodaysep22']/action" -name "statusReason" -value "Forbidden: Access is denied."
Set-WebConfigurationProperty -pspath $IIS_Autodiscover_path  -filter "system.webServer/rewrite/rules/rule[@name='zerodaysep22']/action" -name "statusDescription" -value "You do not have permission to view this directory or page using the credentials that you supplied."