• About WordPress
    • WordPress.org
    • Documentation
    • Learn WordPress
    • Support
    • Feedback
Skip to content
May 26, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Watchtower
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Vulnerability Report
Light/Dark Button
  • Home
  • Technique
  • How to Perform Reboot on DAG Mailbox during Business Hours?
  • Technique

How to Perform Reboot on DAG Mailbox during Business Hours?

Ddos July 16, 2021 6 minutes read
12

Exchange Server provides high availability and disaster recovery using Database Availability Group (DAG). This provides replication of databases, and you can also balance out databases to multiple servers. With the Database Availability Group, you will always have an active copy while the other nodes will have a passive copy. If the active server has any issues, the next candidate will serve as the active copy of the database, if the database is in full sync and there are no issues.

The number of servers depends on your choice but the minimum nodes can be three. The reason behind it is that for a cluster to remain active, you will need half plus one. So, in a cluster of 3 nodes, you need to have two servers always up. This will ensure that the voting majority sticks and the services are healthy. In the case of a three-node cluster, there is no need to have three Exchange Servers as you can have two Exchange Servers and a file share witness which will be used as the third node.

Like any server in the infrastructure, an Exchange Server needs to be updated with the Windows patches as well as the Exchange Server patches. In this article, we will be discussing the process of how to reboot the servers without impacting the user.

One would need to reboot a server during office hours, apart from Windows patches and Exchange Server patches, due to the following reasons:

  • Emergency patching and vulnerability notices from Microsoft and other vendors
  • Hardware upgrades, replacement, and maintenance
  • Hardware failure and other issues, like power failure
  • Testing of failover procedures. Having a failover and high availability in place requires the implementation of testing and simulations. It is important to have these included in the business annual procedures to ensure that if something happens, the business continuity is ensured.

In a normal environment, if the main server fails, all the passive databases on the secondary server will become active and the changeover is seamless to the users. Hence, it can be done during office hours.

Here are the steps:

Step 1: Set the main server on maintenance mode

Firstly, you need to make a failover to the secondary server and set the main server on maintenance mode.

To put a server in maintenance mode, you need to run the PowerShell command as given below.

Set-ServerComponentState -Identity <ExchangeServerName> -Component HubTransport -State Draining -Requester Maintenance

This will drain all the pending messages and put the server in maintenance mode.

Step 2: Redirect messages and queued message to the secondary server

The next step is to redirect messages and queued message to the secondary server. For this, you need to use the Redirect-Message PowerShell command (as given below) using the target as the full FQDN of the server.

Redirect-Message -Server <currentservername> -Target <newservernameFQDN>

Since this is a cluster, you also need to pause the server in the cluster. It is to be noted that you just pause it and not evict the server as this would cause several issues. To do so, use the Suspend-ClusterNode PowerShell command as given below.

Suspend-ClusterNode <computername>

This will just pause the node in the cluster.

Step 3: Disable the database automatic activation

The next step is to disable the database automatic activation. At this stage, the process will set the databases on the server as passive and will change the passive databases as active on the second node. This process is not immediate. It may take a few minutes until the move is fully operational. For this, you need to use the Set-MailboxServer PowerShell command as given below.

Set-MailboxServer <computername> -DatabaseCopyActivationDisableAndMoveNow $true

Set the server to prevent the database from getting active automatically. This can be done by using the below command.

Set-MailboxServer <computername> -DatabaseCopyAutoActivationPolicy blocked

This will ensure that all databases on the source server are dismounted. If any of the mailboxes are still mounted, then you need to perform a manual switchover using the below given PowerShell command.

Move-ActiveMailboxDatabase -Server <CurrentActiveServer> -ActivateOnServer <NewServer>

To verify that all databases are not mounted on the main server, you need to run the below command.

Get-MailboxDatabaseCopyStatus -Server <currentdatabaseserver> | Where {$_.Status -eq “Mounted”}

Step 4: Checking the transport queue

After the main databases have been moved, you need to make sure that all queues are empty by checking the transport queue. All queues must be empty since you will be disabling the server components on the server in question. Any emails which are still pending after the next step will be delayed in their delivery until the server is set online again. To check the queues, you can use the Get-Queue command.

Step 5: Put the server in maintenance mode

The last step is to put the server in maintenance mode. This can be done by using the below command.

Set-ServerComponentState <servername> -Component ServerWideOffline -State Inactive -Requester Maintenance

At this stage, with all the users working on the secondary server and the main server is in maintenance mode, you can go ahead and restart, install Windows Updates/Exchange Updates, or upgrade the hardware or replace it.

During the update process or any server changes, there could be issues with the server. For example, when you will be doing the reverse to put the server out of maintenance mode, the database will not replicate or not mount. Hardware and update issues might hinder the health of the server which can damage or corrupt the transaction logs and the database on the server. Apart from these issues, there is also the human element. You may skip a step to put the server in maintenance mode.

In such cases, you need to make sure that you have the right tools in hand. The best recovery tool is Stellar Repair for Exchange. This tool guarantees recovery from any Exchange Server database version – healthy or not. You can export all or specific mailboxes to PST and other formats. You can also export directly to a live Exchange Server database or Office 365.

You will never know when disaster will strike. Therefore, it’s always best to have in hand the right companion app that can help to restore the services with the least impact on the users and business.

Share this article:

Facebook Post LinkedIn Telegram

No related posts.

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚑

Get notified instantly when a Proof of Concept (PoC) exploit is published.

πŸ”

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

πŸ“Š

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

πŸ”΄ Live Critical Threats

  • CVE-2026-7374CVSS 9.9
    A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an...
  • CVE-2026-9543CVSS 9.8
    A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the...
  • CVE-2026-42773CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
  • CVE-2026-42774CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
  • CVE-2026-9478CVSS 9.8
    A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the...
  • CVE-2026-9477CVSS 9.8
    A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. This issue...
  • CVE-2026-9476CVSS 9.8
    A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the...
  • CVE-2026-9475CVSS 9.8
    A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This affects the function...
  • CVE-2026-9458CVSS 9.8
    A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is...
  • CVE-2026-9457CVSS 9.8
    A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. The affected element is...
Powered by CVE WATCHTOWER

Recent Zero-Day Vulnerabilities

  • Exploited in the Wild: Critical OWA Spoofing Flaw (CVE-2026-42897) Hits On-Premises Exchange Servers
  • Exploited in the Wild: Maximum CVSS 10 SD-WAN Flaw (CVE-2026-20182) Grants Admin Control
  • Exploited in the Wild: Critical 9.8 CVSS RCE Hits Canon GUARDIANWALL MailSuite
  • Exploit Code Released: Public PoC Dumps for Windows BitLocker Bypass and SYSTEM Elevation Zero-Days
  • Exploited in the Wild: “Dirty Frag” Linux Vulnerability Grants Instant Root Access
  • Under Active Attack: Ivanti EPMM Zero-Day Exploited in the Wild via Harvested Admin Credentials
Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • Disclaimer
    • Privacy Policy
    • DMCA NOTICE
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    Copyright Daily CyberSecurity Β© All rights reserved.