Oh, I understand
Install the update, then run:
You can download the script here:
https://microsoft.github.io/CSS-Exchange/Security/ExchangeExtendedProtectionManagement/
Substitute your Exchange Server the for names in the example.
I would reboot it again after that.
.\ExchangeExtendedProtectionManagement.ps1 -DisableExtendedProtection -ExchangeServerNames ExchServer1, ExchServer2