Share via

Disabling Extended Protection on a virtual directory after enabled

mara2021 1,056 Reputation points
2024-05-17T11:39:08.9733333+00:00

I enabled extended protection on my 2019 exchange server. I now have to disable extended protection on the EWS virtual directory. I have an application that connects using EWS and now it cannot connect. My question is: Since EP is enabled on the server, how do I disable it on the EWS directory? Was told that I could manually do it, but not recommended. Thank you.

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,520 questions
Internet Information Services
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,413 questions
Microsoft Exchange Hybrid Management
Microsoft Exchange Hybrid Management
Microsoft Exchange: Microsoft messaging and collaboration software.Hybrid Management: Organizing, handling, directing or controlling hybrid deployments.
1,931 questions
0 comments
Accepted answer
  1. Jake Zhang-MSFT 1,840 Reputation points Microsoft Vendor
    2024-05-20T07:44:20.3266667+00:00

    Hello @mara2021,

    Welcome to the Microsoft forum for technical support.

    Based on your description, I suggest that you can use the following format of the command in the Exchange Management Shell to disable the extended protection of the EWS virtual directory:

    Set-WebServicesVirtualDirectory -Identity "EWS (Default Web Site)" -ExtendedProtectionTokenChecking None -ExtendedProtectionFlags None -ExtendedProtectionSPNList $null

    Remember to replace "EWS (Default Web Site)" with the actual name of your EWS virtual directory if it's different. You can use the ‘Get-WebServicesVirtualDirectory’ cmdlet to list the EWS virtual directories and their settings if you're unsure of the name.

    However, before disabling it, I recommend that you make a backup copy of your important information so that it can be restored in case of any unforeseen circumstances.

    Please feel free to contact me if you have any queries.

    Best,

    Jake Zhang

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest