Brain,
So since security updates are only released for N and N-1 code, then by default we can't run Exchange code older than that. We cannot present to our management that we have no ability to deal with security updates. Therefore in order to run Exchange in-house,
we are now limited to the current version and one version back. We're forced to upgrade everything at least twice a year if not sooner. This appears to be the only way to be in "best practice".
I'm still very much confused as to what we need to do in order to be successful. It seems like we are being offered a catch-22. We either deal with no security updates or we are forced to update to buggy and unproven (remember, MS isn't even testing this
code now themselves) code base?
If you are not familiar with the TechNet issue, please let me enlighten you. Over 9300 admins have signed this petition. You should read the comments as it will affect all of Microsoft's Exchange administrators.
https://www.change.org/petitions/continue-technet-or-create-an-affordable-alternative-to-msdn
Thanks