Exchange 2016 CU9 to CU20 step by step update install

Prezidentj33 121 Reputation points
2021-06-23T20:47:33.7+00:00

Hello,

Have only done smaller CU increments and have not done a CU where I need to /prepareschema or anything. Looking for steps to update from CU9 to CU20. I have the ISO for CU20 downloaded just looking for needed things to do for update. Just running a hybrid server so we don't use mailboxes on prem as we use O365 for mailboxes. If it needs higher version of .net can this be installed on install or will I have to install that separately?

Has anyone ran into an issue where you updated AD schema with CU update and it messed up the domain?

Any help would be welcomed.

Thank you!

Exchange | Hybrid management
0 comments No comments
{count} votes

Accepted answer
  1. Andy David - MVP 157.8K Reputation points MVP Volunteer Moderator
    2021-06-23T20:59:17.667+00:00

    Updating the schema wont break the forest or anything. :) Exchange Schema updates are very safe.

    Here are the steps you need to follow:

    Follow these steps, rebooting after EACH step and running from an ELEVATED PROMPT.

    https://learn.microsoft.com/en-us/exchange/plan-and-deploy/prepare-ad-and-domains?view=exchserver-2016

    Install .net 4.8:
    https://learn.microsoft.com/en-us/exchange/plan-and-deploy/supportability-matrix?view=exchserver-2019#microsoft-net-framework

    Run each step separately: ( not absolutely required in a single forest architecture. I always recommend it though. )
    Otherwise run setup and these steps will be done automatically if you have the correct perms:
    https://learn.microsoft.com/en-us/exchange/plan-and-deploy/prepare-ad-and-domains?view=exchserver-2016
    Setup.exe /IAcceptExchangeServerLicenseTerms /PrepareSchema
    Setup.exe /IAcceptExchangeServerLicenseTerms /PrepareAD
    Setup.exe /IAcceptExchangeServerLicenseTerms /PrepareAllDomains

    Then install CU20:
    https://techcommunity.microsoft.com/t5/exchange-team-blog/released-march-2021-quarterly-exchange-updates/ba-p/2205283

    then install the post CU20 security patch

    https://techcommunity.microsoft.com/t5/exchange-team-blog/released-may-2021-exchange-server-security-updates/ba-p/2335209

    Ensure you install only using an elevated prompt for all instances. CUs, security patch and .net upgrade.
    https://learn.microsoft.com/en-us/exchange/plan-and-deploy/install-cumulative-updates?view=exchserver-2019

    If you run into any errors:
    https://learn.microsoft.com/en-us/exchange/troubleshoot/client-connectivity/exchange-security-update-issues

    1 person found this answer helpful.
    0 comments No comments

4 additional answers

Sort by: Most helpful
  1. Prezidentj33 121 Reputation points
    2021-06-23T22:14:05.76+00:00

    @Andy David - MVP Thank you! So essentially install .NET 4.8. Mount the ISO, run setup.exe as administrator (right click "run as administrator").
    It should take care of all necessary things on it's own per your instructions. We have a smaller AD setup so nothing super complex.

    If my acct has necessary permissions in domain there shouldn't be any issues with install etc?

    After CU 20 is installed then run CU20 sec patch and run same way with run as admin and then we should be good?


  2. Eric Yin-MSFT 4,396 Reputation points
    2021-06-24T01:45:50.787+00:00

    Hi,
    .NET should be installed separately: https://download.visualstudio.microsoft.com/download/pr/014120d7-d689-4305-befd-3cb711108212/0fd66638cde16859462a6243a4629a50/ndp48-x86-x64-allos-enu.exe

    Preparing steps might fail for various reasons but it won't break exisiting AD, for any issues during preparing/installation, you should check the Exchange setuplog under C:\ExchangeSetupLogs, better post the newest install attempt with personal information covered.


    If an Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

  3. Prezidentj33 121 Reputation points
    2021-06-24T21:43:45.113+00:00

    @Andy David - MVP Quick question. I am attempting to run setup.exe now for CU20. I did run as admin but it came back with nothing but errors saying account used isn't part of schema admins etc and can't contact domain etc etc. My account has schema admins and exchange admins rights etc. Or is running as "administrator" not using my acct but rather local administrator to run the install? Keep in mind this is a hybrid server and does not have any mailboxes on it. Based off of this error I will have to run separate commands to prepare domain etc.

    In the exchangesetuplog file - see below

    Evaluated [Setting:AdInitError] [HasException:False] [Value:"Setup encountered a problem while validating the state of Active Directory: Exchange organization-level objects have not been created, and setup cannot create them because the local computer is not in the same domain and site as the schema master. Run setup with the /prepareAD parameter on a computer in the domain Domain1 and site Somewhere, and wait for replication to complete. See the Exchange setup log for more information on this error."] [ParentValue:"<NULL>"] [Thread:10] [Duration:00:00:00]

    0 comments No comments

  4. Prezidentj33 121 Reputation points
    2021-06-28T16:41:15.163+00:00

    @Andy David - MVP Since I have master/child domain it seems I need to run exchange setup on schema master using setup.exe /IAcceptExchangeServerLicenseTerms /prepareAD /OrganizationName:”OrgName” and that should take care of that part. Then I can continue and run setup.exe on our hybrid exchange server and should be good ? I should have mentioned that in the beginning but wasn't sure what I was going to run into with this.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.