In April, we released an update to the Management tools in Exchange Server 2019 that enables organizations that use Azure AD Connect and sync their Active Directory to manage Exchange recipients with...
Updated Aug 15, 2023
Version 7.0
Blog Post
In the FAQ section you write:
"If we run CleanupActiveDirectoryEMT.ps1, will it be possible to install an Exchange server again?
Yes. CleanupActiveDirectoryEMT.ps1 removes security groups, Exchange containers, and system mailboxes so that these can’t be misused by attackers in the event of a compromise. If you need an Exchange server later, you need to Prepare Active Directory and then install Exchange Server 2019. ..."
This seems quite the opposite of what is written on https://learn.microsoft.com/en-us/exchange/manage-hybrid-exchange-recipients-with-management-tools#active-directory-clean-up, where there is a big warning saying:
"This step can't be undone. Proceed only if you never want to run Exchange Server again. ..."
This makes a big difference in terms of security, as you write yourself.
So what is true? Please clarify!