Extended Protection Warning Displayed in Exchange Management Console and Exchange Management Shell After Installing RU2 for Exchange 2007 SP3


Symptoms


After installing Rollup Update 2 for Exchange 2007 Service Pack 3 on a machine running Windows Server 2008 R2, Administrators may receive the following warning when launching the Exchange Management Console (EMC) or when running get-OWAVirtualDirectory or get-OABVirtualDirectory commands in the Exchange Management Shell (EMS):

Get-OWAVirtualDirectory: Exended protection has not been enabled. Install the operating system update specified in KB968389 on server "xxx.xxx.com" and try again. ........

Get-OabVirtualDirectory: Exended protection has not been enabled. Install the operating system update specified in KB968389 on server "xxx.xxx.com" and try again. ........

Cause


During initialization of EMC, or running get-OWAVirtualDirectory or get-OABVirtualDirectory commands, channel binding is used to create a COM object to manage one or more Metabases on remote servers. This error messages occur when a firewall is turned on and the COM call fails to create the object.

Resolution


To resolve this issue, install the following update rollup:
2602324 Description of Update Rollup 5 for Exchange Server 2007 Service Pack 3

Status


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.