Hi @JOE TAM,
Welcome to Q&A!
The /DoNotEnableEP parameter is associated with the Windows Extended Protection (EP) feature. For detailed information, refer to: Exchange Server support for Windows Extended Protection | Microsoft Learn.
If your servers are not yet prepared for EP, please use the parameter to opt out of EP on servers that do not meet the prerequisites. Failure to do so may result in broken functionality after installing the Cumulative Update (CU).
The prerequisites for enabling EP on Exchange Server include:
- Exchange Server Health Checker script or the new PrerequisitesCheckOnly parameter in our ExchangeExtendedProtectionManagement.ps1 script.
- Prerequisites for enabling Extended Protection on Exchange server
The best practice is to enable the EP during the installation. So, if your organization meet the prerequisites above, please do not use the /DoNotEnableEP parameter.
For further details, please read this document: Released: 2024 H1 Cumulative Update for Exchange Server | Microsoft Community Hub.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation](https://aka.ms/msftqanotifications)) to enable e-mail notifications if you want to receive the related email notification for this thread.