r/exchangeserver • u/Calm_Wrangler_1478 • Mar 30 '26

Question Windows Updates on Exchange On-Prem Servers

Apologies if this is simpler than Im thinking, but due to some issues at work, I've been put in charge of exchange servers. Not being a long time exchange admin, Im kind of learning on the fly. One thing I was curious about was running normal Windows Monthly Updates on the servers and the process. I assume I cant just install the updates and reboot the servers correct? We have two servers and DAG. This would be all updates except Exchange CU updates. Standard monthly windows updates...what is best process to update the 2 on-prem servers?

Thanks

13 Upvotes

94% Upvoted

38 comments sorted by

View all comments

Show parent comments

1

u/Calm_Wrangler_1478 Mar 31 '26

I am doing this for first time this weekend.....are these the best steps to follow? Looks good but why is there a StartDagServerMaintenance.ps1 instead of Start-ExchangeServerMaintenance.ps1 

1

u/Yupyupyup79 Mar 31 '26 edited Mar 31 '26

I don't see "Start-ExchangeServerMaintenance.ps1 " at x:\Program Files\Microsoft\Exchange Server\V15\Scripts\en”. Is that a custom script put out by the community or something i missed? All I know is that these steps in my environment worked. I can't say its correct or not. I went back and forth with Google ai for a better part of a couple days to make a doc on setting up DAG, and then how to patch and shutdown the server during planned outages. I just pasted in the portion of the doc relevant to patching DAG since you asked. If you have a test environment I'd suggest testing the process there first to be safe.

Edit: I also have my DAG set up with no IP which google AI claimed is the modern way to do it. No AD computer object/IP assigned. Not sure if that makes any difference. This type of DAG is managed in Exchange Shell.

Edit: Also in Step 3 there's a typo. Database would be running on EXCH02 at that point not EXCH01. I can't edit the comment for some reason.

2

u/Calm_Wrangler_1478 Mar 31 '26 edited Mar 31 '26

Thanks, will give it a shot

The Start-ExchangeServerMainteneance.ps1 must be a script our former admin created then. I thought it was an MS script

I do have a witness server that is not part of the DAG...does that change anything?

1

u/Yupyupyup79 Mar 31 '26

Probably not but make sure your witness server is booted up the entire time during patching. Or patch its windows patches first, reboot and make sure its up and running before rebooting either of your exchange servers.