Patching Exchange 2010 Servers

 

I Often get questions around how best to install Exchange updates or service packs. This Blog Post attempts to answer that Question.

To start with, I recommend having a Patch management Policy. A Good Patch management policy document should have the following listed:

 

1. How often should the updates / service pack be installed. ( e.g. Service Pack - once every quarter / critical updates - ASAP)

 

2. Applications which would possibly have a dependency on the Patch / Service pack. ( BB, Backup, antivirus , archiving, other 3rd party products ).

These 3rd party products should be tested for any dependencies on the Update / Service pack.

 

3. Sequence of server roles to install the Patches on.

Internet facing servers / sites should patched first

Non-internet facing should be after all internet facing sites are updated.

 

4. AV should be disabled for the time of installation.

 

5. StartDagServerMaintenance.ps1 before install & StopDagServerMaintenance.ps1 after success to disable replication & re-enable it after SP installation is complete

Additional Reading : https://technet.microsoft.com/en-us/library/bb629560.aspx

 

6. The Servers must be re-started if the installation of an update / Service pack prompts for a restart.

 

7. Tests which need to performed to validate services are up & running as expected.

 

8. Tests which need to be performed to validate the Updates / Service Pack is installed correctly.