Do You Need to Rerun the Hybrid Configuration Wizard After an Exchange CU?
Question details
An administrator is inquiring whether it is necessary to rerun the Hybrid Configuration Wizard (HCW) after applying a Cumulative Update (CU) and Security Update to an Exchange Server.

- Product
- Microsoft Exchange Server
- Device & OS
- not provided
- Scenario
- Updating Exchange Server with a Cumulative Update (e.g., CU20) and a security patch in an existing hybrid environment.
- Observed behavior
- The administrator needs to know the post-update best practices to ensure the hybrid environment remains stable, functional, and properly configured.
Verify that your Exchange Server backup is up-to-date and that your Active Directory synchronization with Microsoft 365 is functioning properly before making changes to hybrid settings.
Guidelines for Rerunning HCW After Exchange Updates
Understand the scenarios where rerunning the Hybrid Configuration Wizard is recommended versus when it is strictly required to maintain mail flow.
Applying a routine Cumulative Update (CU) or Security Update to an on-premises Exchange Server does not automatically break or overwrite your hybrid configuration. In most standard update procedures, your existing mail flow, free/busy sharing, and mailbox migration capabilities will continue to operate normally without rerunning the wizard.
If you strictly installed an Exchange Cumulative Update (such as CU20) or a standard security patch without altering the underlying server architecture, rerunning the Hybrid Configuration Wizard is generally not required to maintain baseline functionality.
Even though it is not strictly mandatory, Microsoft highly recommends rerunning the HCW after a CU installation. This ensures that any new hybrid features, updated Exchange configuration schemas, or bug fixes introduced in the CU are fully integrated into your Microsoft 365 tenant and on-premises environment.
You must rerun the wizard immediately if your update process also involved changing hybrid domains, renewing or replacing SSL/TLS certificates, modifying mail flow topology, or adjusting local Exchange virtual directory configurations.

Boost Your Productivity with WPS Office
While managing complex Exchange Server updates requires specialized IT tools, your everyday office tasks shouldn't be complicated. WPS Office provides a free, lightweight, and highly compatible alternative to Microsoft Office, ensuring seamless productivity for you and your organization.
- 1. Download the Installer: Visit the official WPS Office website and click the Free Download button.
- 2. Install the Software: Run the downloaded installer and follow the simple on-screen instructions to set up the suite on your device.
- 3. Open Your Office Documents: Launch WPS Office and immediately start opening, editing, and saving your existing Microsoft Office files seamlessly.

Frequently Asked Questions
Does updating an Exchange Server overwrite my current hybrid settings?
No, a standard Cumulative Update or Security Update does not overwrite your existing hybrid configuration. However, rerunning the Hybrid Configuration Wizard can optimize settings based on the new update's capabilities.
Where can I download the latest Hybrid Configuration Wizard?
The most recent version of the Hybrid Configuration Wizard can be downloaded directly from the Exchange admin center (EAC) in your Microsoft 365 tenant under the Hybrid tab.
What happens if I change my Exchange certificate without rerunning the HCW?
If you update or renew the SSL/TLS certificate used for hybrid mail flow and fail to rerun the HCW, secure mail routing between your on-premises Exchange servers and Exchange Online will likely fail, causing message delivery issues.




