search

microsoft / CSS-Exchange

Exchange Server support tools and scripts
MIT License
1.21k stars 332 forks source link

Extended Protection - Add SuppressExtendedProtection registry key check and Fix Get-OutlookAnywhere check #2033

Closed dpaulson45 closed 6 days ago

dpaulson45 commented 4 months ago

Is your request related to a problem? Please describe.

Found out about this key: https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/authentication-fails-non-windows-ntlm-kerberos-server

We need to check for this key, if it is set, we need to block configuring Exchange for EP, as it will break the environment.

Also need to block configuring EP if an already configured EP server, that we aren't currently configuring, has SSLOffloading set to true. This was reported by a customer.

Additional context NA

dpaulson45 commented 6 days ago

Issue didn't auto close since we merged this into a branch that wasn't main.