Thanks for the great blog and comments.
I am planning to install this update this week, I have found that we have an expired OAuth certificate. Not sure what it is used for, but as it has been expired for 2 years already I assume that it was not really necessary. I do not want to end up in the OWA/ECP error 500, so I was wondering if it would be a good idea to Publish a new certificate first and then start the update. Or will it conflict / stop publishing when I start the update directly after the publish commands?
My plan for a standalone Exchange 2013:
1. Publish new certificate and restart AppPools & IIS.
2. Wait about 15 minutes.
3. Run Windows Update to install KB5004778
4. Run the Schema Update
Does this make any sense?