Just wanted to briefly report here on some unexpected/inconsistent behavior related to the following combination:
- Exchange 2019 ManagementTools only -Role
- CleanupActiveDirectoryEMT.ps1 script
- Exchange (CU-)updates
The main problem was outlined a few weeks ago under https://techcommunity.microsoft.com/t5/exchange-team-blog/removing-your-last-exchange-server-faq/bc-p/3789250 and can be summarized like this: any execution of setup.exe requires a "prepared AD", which in some way "conflicts" with the execution of the CleanupActiveDirectoryEMT.ps1 script.
What we didn't realize until now (but we could have thought of it) is the fact that each CU actually means re-running setup.exe.
So how is this supposed to be handled in a medium to long-term scenario with ManagementTools-only and the requirement to install regular (CU-)updates?
Each time prepare the AD (manually in our case because of security tiering concept), then install the CU and then run the CleanupScript again?