We help IT Professionals succeed at work.

Automatically patching Exchange Server with minimal downtime using WSUS 3.0 ?

Senior IT System Engineer
Senior IT System Engineer asked
on
Hi All,

How can I perform automated Exchange Server 2010 patching with just using WSUS 3.0 ?

Scope: I just need to deploy Windows Update to all of my Exchange Servers after hours without reboot every 2 monthly, but I just have WSUS 3.0 configured in my AD domain, no SCCM.

How can I schedule and configure it so that when the updates applied after hours, the Exchange Server email flow still works without problem.

Or does the Exchange Server 2010 must be manually patched cannot be automated ?
Comment
Watch Question

Peter HutchisonSenior Network Systems Specialist
Commented:
Yes, you can apply Exchange cumulative updates (not service packs) to Exchange by approving them in WSUS and then using GPOs to specify how and when to apply the updates. Ideally I would set it during the night e.g. 1am to minimise disruption.
Will SzymkowskiSenior Solution Architect
Most Valuable Expert 2015
Top Expert 2015
Commented:
Automatically patching Exchange Server
Personally I would not be doing this. Because of business impact I would not scheuled this automaticallly, and do them manually. As stated Services Packs are not available through Windows Updates however, when you install RU's on an Exchange server, you should be doing them in correct order (CAS, HUB, MBX) and should be monitored to ensure it completes successfully.

You will also note that when you are installing RU's all services are stopped on the Exchange servers so scheulding these manually will allow you to notify lines of business that Exchange will be unavailable for 1-2 hours depending on the RU.

Even though RU's services restart after the update has been applied it is also recommened to ensure that you reboot the server as well once completed.

So I would still recommend doing these manually. There are not a lot of RU's and they only come out to correct featues in Exchange so something like this does not happen often. So really no need to do this procedue manually IMO.

Will.

Author

Commented:
Thanks All,

But what in looking for is the Exchange server OS Windows update not the Service Pack or the CU.

Does the Windows Update deployment for The Operating system where the Exchange Server is running can cause outage to the Exchange server services ?

The reboot will be done manually in sequence it the Windows Update deployment will be simultaneously.
Senior Solution Architect
Most Valuable Expert 2015
Top Expert 2015
Commented:
Even with Windows Security updates for Domain Controllers and Exchange servers I would be doing these manually. Have them download the updates from the WSUS server but install manually. Depending what updates you are applying it could affect Windows which might negatively affect Exchange. After patches are applied they should be rebooted asap.

Will.

Author

Commented:
Thanks !