Patching Order, Proxy and ADFS RRS feed

  • Question

  • Hi,

    Is there a best practice for the order MS patches are applied to the ADFS and ADFS proxy servers? We've got 2 of each both in the same farm.



    Thursday, June 23, 2016 12:06 AM


  • Hi!

    I would generally recommend to patch the ADFS-Proxys first!
    The reason is simply because they are located on an external network/DMZ which means they are exposed to public/internet in a different way then the internal ADFS-servers.

    Other considerations might be how the users are using the federation service, if you have more internal logins then externals etc.
    Otherwise I do not know if there is any specific order as long as you have a redundant solution in place.

    • Marked as answer by Robert.S.T Thursday, June 23, 2016 7:26 PM
    Thursday, June 23, 2016 8:31 AM