Released: March 2021 Exchange Server Security Updates

We finished installing the zero day patch in our environment, but noticed that for a few installs, it said the Microsoft Exchange Active Directory Topology was running (after disabling the services).  Looking at the service, it appears the order of disabling / stopping the services in the Zero day patch is opposite of the process in a rollup where the service is disabled, then stopped.  In the zero day patch, all of the services are stopped completely before disabling the services.  Watching this happen, I saw the topology service stopped, then more services stopped down the line, then the services were disabled.  The patch then proceeded and mentioned the topology service was running.  Viewing the services, you could see the service disabled, but running.  On the next install, I saw the topology service stopped, then automatically restart before all the services were stopped down the line.  I suggest keeping the services mmc open during the install to keep an eye on the services because of this and stop the topology service if it starts after it is stopped initially.