Exchange 2019 CU14 (aka 2023 H2 Cumulative update)

[psydii]

This update looks like it (intentionally) breaks Exchange 2013/2016 integration.

 

https://techcommunity.microsoft.com/t5/exchange-team-blog/coming-soon-enabling-extended-protection-on-exchange-server-by/ba-p/3911849

 

“Today, we wanted to let you know that starting with the 2023 H2 Cumulative Update (CU) for Exchange Server 2019 (aka CU14), EP(https://learn.microsoft.com/en-us/iis/configuration/system.webserver/security/authentication/windowsauthentication/extendedprotection/) will be enabled by default when CU14 (or later) is installed. Exchange Server 2019 is currently in Mainstream Support and is the only version that still gets CUs.”

 

 

“If you are running a version of Exchange Server earlier than the Aug 2022 SU, we send you thoughts and prayers, and very strong but gentle guidance to update your servers to the latest SU immediately. The minimum SU for EP is from Aug 2022. This is not a typo. That’s more than a year ago. Seriously, why are you not updating your servers? If you don’t update them, eventually you won’t be able to send email into Microsoft 365 or Exchange Online. And no one wants that. We don’t. We just want you to keep your servers updated.”

 

“You can continue to use our EP script to evaluate your organization’s readiness and enable or disable EP. Our recommendation is to enable EP.”

 

Remember 2013 doesn’t even get security updates at this point!

 

But then again who is running on prem? Cloud all the way!

[3s-gtech]

I still run 2016 onsite for Salamander integration and for management tasks, as well as some internal service mail flow. I’m hoping that I can completely retire this in 2025 when Exchange 2016 goes EoL. 2019’s system requirements are so vast that I never bothered with it.

[FN-GM]

I still run 2016 onsite for Salamander integration and for management tasks, as well as some internal service mail flow. I’m hoping that I can completely retire this in 2025 when Exchange 2016 goes EoL. 2019’s system requirements are so vast that I never bothered with it.

 

You can install the Exchange 2019 management tools without actually installing the Exchange 2019 server. This will allow you to managed office 365 synced accounts on premise.

 

Personally I do it directly in AD and skip out any local exchange components.

[3s-gtech]

Yeah I have that on our SIMS TPC, but there are some legacy hang-ons on our Exchange server. They’ll be wound down over the next two years.