Best practices to patch an Active Ad Connect Server with its 2019 SQL server

Question

Best practices to patch an Active Ad Connect Server with its 2019 SQL server

Danish Anwar 21

Hello,

I have a setup of Active - Staging AD connect servers both AD connect servers running latest AD connect versions on windows server 2019 and they have there dedicated 2019 SQL server for database.

Now one pair (adconnect + SQL) is Active and other pair in staging mode working fine.

When it comes to monthly windows patches what is the best practices to patch AdConnect and SQL server.

Will be an issue with servers got patched automatically via WSUS and rebooted as per there schedule, But keeping in mind they are active servers will be an issue in terms of any data loss or possible DB corruption?

Can someone help me with MS best practices to patch Adconnect and SQL servers in such scenario.

Answer 1

Andy David - MVP 114.7K MVP

We do this all the time - and no issues. If you want to manually update the staging server , then make it "production" and update the other server, you can of course do that, but we do this in real time automatically, (patching the server and the SQL server) and have never encountered issues. the AADConnect Server may lose temporary contact with the SQL server but it regains it.
If not, restart the AADConnect service afterwards.

Danish Anwar 21 Reputation points

2022-08-23T14:53:53.82+00:00

Hi Andy,

Thanks for quick response.
So If I understand correctly I can let WSUS reboot Adconnect server and its SQL server as per WSUS schedule.
I was afraid because for example if adconnect is writing something in SQL database then for example either SQL server or Adconnect server got rebooted by WSUS. So will it lead to possible data corruption in DB or simply post reboot it will resume writing data in SQL database from where it left.

Thanks in advance!
Danish
Andy David - MVP 114.7K Reputation points MVP

2022-08-23T16:33:31.253+00:00

I have never seen any corruption issues and we have been doing this for years (updating automatically).
If the sync stops while syncing for any reason ( SQL server not avail, networking , server reboot, etc...)
AADConnect will start over at the next interval. In the event it doesnt, a service restart on the AADConnect server gets things going again. Its very resilient.

Best practices to patch an Active Ad Connect Server with its 2019 SQL server

0 additional answers

Activity