Exchange 2016 Security updates

Question

Hello. If I am just applying Exchange monthly security updates which we do using our software distribution product, not Windows update, do I still need to put the server in maintenance mode like I would have to with a CU? It seems like starting with Exchange 2013, the update process has become more complicated than with 2010. Any particular reason for this? In 2010, I simply did a switch over of all the DB's, ran security updates or installed a CU, switched back and did the other server. Done....

deleted · Answer

Deleted&nbsp;https://www.microsoft.com/en-us/download/details.aspx?id=105091&nbsp;MS recommends to restart your server before and after update. Restarting a server without putting in into maintenance mode is not the best idea.&nbsp;So first start the maintenance mode which will switch over the database copies, the restart your server, turn off antivirus software, patch it, restart again, turn on antivirus, switch off maintenance mode and finally, when you‘re in a hurry, start redistribution of the DBs.&nbsp;&nbsp;

deleted · Answer

So what happens if a server restarts on it's own. Servers do that. A bugcheck or an exception and there's an unplanned restart. My assumption is all the DB's fail over to the mailbox server and when the rebooted server comes back up, all is good. Just seems like they make you go through a lot of trouble just to patch a server. Flushing queues, stopping the cluster service etc. Guess the question is what is so different about 2013/16 than 2010 that you have to do all this. Example, MBX1 is running a bit slow and a reboot is needed. I can't just activate DB's on MBX2 and reboot the thing? I have to put it in maintenance mode first? Seem ridiculous.

deleted · Answer

Deleted&nbsp;If it seems ridiculous to you, don’t do it. Your server, your decision.

deleted · Answer

Still doesn't answer the question as to what happens in an unplanned reboot. They happen for a variety of reasons like power fails, a VM being accidently rebooted etc. There is no one there to put the server in maintenance mode. If you don't know, its OK because I haven't been able to find the answer either. Are we just to assume that everything will be OK. As I mentioned in my previous reply, my assumption is Active Manager will fail over the DB's, the Shadow Queue or Safety Net will take care of any messages, the Cluster Manager will maintain quorum as long as the witness server is available, and after the server comes back up, your only job is to re-distribute databases, or is it? Does anything else need to be done?

deleted · Answer

Deleted&nbsp;Starting the maintenance mode will prepare Exchange for a "smooth" restart. All database copies are switched, the message queues are drowned, the whole system ist set to consistent state. It won't accept any incoming connections since the DAG knows it's state. And the services are set to inactive for the next reboot. A switchover also checks for example if databases can be switched. On errors the switchover stops and an administrator has the chance to check this out. On an failover (that's what a simple reboot is) there are no checks.&nbsp;So if you just restart your system might be in an inconsistant state and services like the HealthManager have to do some work to repair your system. This might take longer until bringing the system up, depending on your hardware's performance.&nbsp;And at least if you just reboot your system all services will come back as soon as possible. Usually this ist not wanted if you patch Exchange.&nbsp;For example if you have more than 500 OUs in your organization EAC won't display any OU. You have to manually edit the ECP web.config to show more than 500. This change has to be repeated at least for every CU and IIS has to be restarted. If you restart IIS on an operating Exchange server the clients will get outages or error messages. So I'm checking my configuration changes after any update. When checked an fixed I manually switch back the server into active mode.&nbsp;If you still just restart your systems everything might go easy. I'm not quite sure if you have to switch back the databases manually or if they switch back themselves after a while.&nbsp;I assume that you don't have a support contract with Microsoft. If you have, you should consider opening a service request to make sure that you get support for any problem that'll appear while or after skipping the maintenance mode procedure.&nbsp;Best practice:&nbsp;https://learn.microsoft.com/en-us/exchange/plan-and-deploy/install-cumulative-updates?view=exchserver-2019&nbsp;(This one describes CUs but SUs might patch some files needed by Exchange so I'd handle CU &amp; SU equally):&nbsp;Quote:Best Practices[...]Reboot the server beforehand.[...]Reboot your server upon completion of the update.For exchange servers installed on database availability group, follow steps mentioned in https://learn.microsoft.com/en-us/exchange/high-availability/manage-ha/manage-dags?view=exchserver-2019#performing-maintenance-on-dag-members to put the DAG members in maintenance mode before installing the cumulative updates.Good luckWolfgang

Forum Discussion

Exchange 2016 Security updates

7 Replies

Resources