I'd just add the external addresses at first, instead of changing them. That way you don't run into ugly problems with things not being where they expect to be (i.e. DNS etc).
Run the Schema update from your Exchange server, not the domain controller. As long as the user account is a member of Schema Admins & Enterprise Admins you should be fine. I don't believe you need to ...