Exchange Broke, and the Exchange Update Wasn't the Culprit
Patch Tuesday landed on October 13, and on some on-premises deployments the fallout still hasn't stopped: Outlook on the web refusing sign-ins, mail sitting unsent in the Outbox, delivery queues swelling through the day. The Application log fills with a brutal-sounding error, MapiExceptionMdbOffline, logged as event ID 1006, which reads like a mailbox database coming apart. Except Microsoft's own Exchange Team took pains to point out that this month's breakage is not caused by the Exchange security update released the same week. It's caused by the Windows Server updates underneath Exchange.
The affected combination is specific: Exchange Server 2016, 2019, or Subscription Edition running on Windows Server 2019 or later, with instability surfacing some time after certain October servicing KBs go in. The symptoms aren't one clean failure mode you can unit-test against. Some shops see OWA errors, some see mail crawling toward a full stall, and some report DAG members struggling to reach quorum — a cluster quietly drifting toward degraded availability rather than throwing a flag you'd catch in a staging window. A server reboot buys temporary relief; Microsoft has published a workaround and a note in its Windows release health dashboard. The operational lesson stings a bit: most Exchange admins gate their change window around the Exchange update itself, read its known-issues list, test in a lab, then roll out. The thing that actually broke mail was the OS layer below the product everyone tested. Release health for Windows Server is now part of the Exchange change review, not somebody else's problem — which matters doubly for on-prem mail in a place like the Philippines, where a queue that stalls during business hours is indistinguishable from a company that stopped functioning.
The uncomfortable part is how quietly this kind of failure arrives. A queue growing a little each hour, a DAG member one vote shy of quorum — by the time anyone notices, the patch window is closed and remediation happens live, in front of users. My own leaning: treat an OS patch on a mail server host as an application change event, and watch queue depth and DAG health for a day or two after Windows Server servicing, not just the morning after the Exchange update. How strict is your change window, honestly — when you patch a server, do you treat the operating system update and the application running on it as one change, or two?

Sources
Comments
Post a Comment