Released: 2024 H1 Cumulative Update for Exchange Server

np1982 there are several requirements that must be fulfilled before Extended Protection can be turned on (for example, a proper and unique TLS configuration is required on all of your Exchange servers). There is some manual effort needed as we Health Checker can't validate all of the scenarios (for example, if you do SSL offloading on your Load Balancer or if you use different certificates). We can't therefore provide you with an easy Organization is ready for EP: true/false output in Health Checker.

I recommend you to run the Health Checker script and validate the output (for example, TLS configuration) with what we have listed in the Extended Protection prerequisites documentation (which you can find here: https://learn.microsoft.com/en-us/exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-extended-protection?view=exchserver-2019#prerequisites-for-enabling-extended-protection-on-exchange-server).