Disabling Extended Protection on a virtual directory after enabled

Question

I enabled extended protection on my 2019 exchange server. I now have to disable extended protection on the EWS virtual directory. I have an application that connects using EWS and now it cannot connect. My question is: Since EP is enabled on the server, how do I disable it on the EWS directory? Was told that I could manually do it, but not recommended. Thank you.

Answer 1

Hello @mara2021,

Welcome to the Microsoft forum for technical support.

Based on your description, I suggest that you can use the following format of the command in the Exchange Management Shell to disable the extended protection of the EWS virtual directory:

Set-WebServicesVirtualDirectory -Identity "EWS (Default Web Site)" -ExtendedProtectionTokenChecking None -ExtendedProtectionFlags None -ExtendedProtectionSPNList $null

Remember to replace "EWS (Default Web Site)" with the actual name of your EWS virtual directory if it's different. You can use the ‘Get-WebServicesVirtualDirectory’ cmdlet to list the EWS virtual directories and their settings if you're unsure of the name.

However, before disabling it, I recommend that you make a backup copy of your important information so that it can be restored in case of any unforeseen circumstances.

Please feel free to contact me if you have any queries.

Best,

Jake Zhang