Exchange Emergency Mitigation Service Check
Exchange Emergency Mitigation Server also known as
EM was introduced with the
Exchange Server 2019 Cumulative Update 11 and
Exchange Server 2016 Cumulative Update 22.
The Exchange Emergency Mitigation service helps to keep your Exchange Servers secure by applying mitigations to address any potential threats against your servers. It uses the cloud-based
Office Config Service (OCS) to check for and download available mitigations and to send diagnostic data to Microsoft.
The EM service runs as a Windows service on an Exchange Mailbox server. The EM service will be installed automatically on servers with the Mailbox role. The EM service will not be installed on Edge Transport servers.
The use of the EM service is optional. If you do not want Microsoft to automatically apply mitigations to your Exchange servers, you can disable the feature.
This check performs the following testings to highlight the configuration state of the EEMS:
- Shows if the EEMS is enabled or not on Organizational level
- Shows if the EEMS is enabled or not on Server level
Windows Service Check
MSExchangeMitigationWindows service startup type should be:
MSExchangeMitigationWindows service status should be:
Pattern Service Check
- We validate if we can reach the OCS which is used to serve the latest mitigations
- OCS Mitigation Service url:
- Shows which mitigations are currently being applied
- Shows which mitigations are currently being blocked
Diagnostic Data Check
- Shows if the service is configured to provide diagnostic data to Microsoft or not
Included in HTML Report?
New security feature in September 2021 Cumulative Update for Exchange Server
Released: September 2021 Quarterly Exchange Updates
Addressing Your Feedback on the Exchange Emergency Mitigation Service
Exchange Emergency Mitigation (EM) service
Mitigations Cloud endpoint is not reachable