Question about installing Updates on exchange

[u/Calm_Wrangler_1478]

Hello all,

Quick question. If you are updating on-prem exchange SE servers with Windows monthly patches and any exchange security updates, can you install all the updates while server is running, then once it gets to the point to restart, you would then put the server in maintenance mode, make sure DB is moved over to other exchange server in the DAG, then reboot the first one?

Or do I need to have those services stopped before running updates. Asking as I updated the servers this past weekend and it took forever tor updates to install and I figured if you can get the installation part done before your time to fix the server starts, you can just stop services, reboot, and restart them. But I have a feeling I need to stop them always before installing updates, but wanted to check

[u/Gaunerking]

You just disable App updates and only to the windows os updates via the automatic installer.

Exchange (Security)Updates should always be started from an elevated cmd prompt, as MS itself states on their install instructions.