This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 46%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK%3C/text%3E%3C/svg%3E)
I have a Windows 2016 Core Server running as a Certificate Authority server, how can I patch it with the latest Windows update?
I tried to use sconfig option "6" but the returned msg is that (pls see below), I am wondering if the Core Server has no Windows Update feature installed, but when I run get-hotfix in Powershell, I saw three hot fix were applied during initial installation. The guy who managed this server was left company, I want to patch this server in order to make sure all my server fulfill the requirement of KB5014754.
If anyone can help?
Searching for all applicable updates...
List of applicable items on the machine:
There are no applicable updates.
Press return to continue...
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Looks like it hasn't been patched since late 2019. I'd suggest manual downloading / installing the latest SSU
https://www.catalog.update.microsoft.com/Search.aspx?q=KB5023788
followed by the latest cumulative update.
https://www.catalog.update.microsoft.com/Search.aspx?q=KB5023697
-
--please don't forget to upvote and Accept as answer if the reply is helpful--
Just checking if there's any progress or updates?
--please don't forget to upvote and Accept as answer if the reply is helpful--
Hi;
I got this info after issue Get-ComputerInfo
PS C:\Windows\System32> Get-ComputerInfo
WindowsBuildLabEx : 14393.3297.amd64fre.rs1_release_1.191001-1045
WindowsCurrentVersion : 6.3
WindowsEditionId : ServerStandard
WindowsInstallationType : Server Core
WindowsInstallDateFromRegistry : 11/4/2019 6:02:39 PM
WindowsProductId : 00377-70646-61668-AA447
WindowsProductName : Windows Server 2016 Standard
WindowsRegisteredOrganization :
WindowsRegisteredOwner : Windows User
WindowsSystemRoot : C:\Windows
BiosCharacteristics : {4, 7, 8, 9...}
BiosBIOSVersion : {INTEL - 6040000, PhoenixBIOS 4.0 Release 6.0 }
BiosBuildNumber :
BiosCaption : PhoenixBIOS 4.0 Release 6.0
BiosCodeSet :
BiosCurrentLanguage :
BiosDescription : PhoenixBIOS 4.0 Release 6.0
BiosEmbeddedControllerMajorVersion : 0
BiosEmbeddedControllerMinorVersion : 0
BiosFirmwareType : Bios
BiosIdentificationCode :
BiosInstallableLanguages :
BiosInstallDate :
BiosLanguageEdition :
BiosListOfLanguages :
BiosManufacturer : Phoenix Technologies LTD
BiosName : PhoenixBIOS 4.0 Release 6.0
BiosOtherTargetOS :
BiosPrimaryBIOS : True
BiosReleaseDate : 4/4/2016 5:00:00 PM
BiosSeralNumber : VMware-56 4d bf 57 af 85 7b f7-52 76 10 11 d9 c4 85 44
BiosSMBIOSBIOSVersion : 6.00
BiosSMBIOSMajorVersion : 2
BiosSMBIOSMinorVersion : 7
BiosSMBIOSPresent : True
BiosSoftwareElementState : Running
BiosStatus : OK
BiosSystemBiosMajorVersion : 4
BiosSystemBiosMinorVersion : 6
BiosTargetOperatingSystem : 0
BiosVersion : INTEL - 6040000
CsAdminPasswordStatus : Enabled
CsAutomaticManagedPagefile : True
CsAutomaticResetBootOption : True
CsAutomaticResetCapability : True
CsBootOptionOnLimit : DoNotReboot
CsBootOptionOnWatchDog : DoNotReboot
CsBootROMSupported : True
CsBootStatus : {0, 0, 0, 0...}
CsBootupState : Normal boot
CsCaption : CompanyCA01
CsChassisBootupState : Safe
CsChassisSKUNumber :
CsCurrentTimeZone : -420
CsDaylightInEffect : True
CsDescription : AT/AT COMPATIBLE
CsDNSHostName : CompanyCA01
CsDomain : mycompany.com
CsDomainRole : MemberServer
CsEnableDaylightSavingsTime : True
CsFrontPanelResetStatus : Unknown
CsHypervisorPresent : True
CsInfraredSupported : False
CsInitialLoadInfo :
CsInstallDate :
CsKeyboardPasswordStatus : Unknown
CsLastLoadInfo :
CsManufacturer : VMware, Inc.
CsModel : VMware Virtual Platform
CsName : CompanyCA01
CsNetworkAdapters : {Ethernet0 2}
CsNetworkServerModeEnabled : True
CsNumberOfLogicalProcessors : 2
CsNumberOfProcessors : 2
CsProcessors : {Intel(R) Xeon(R) CPU E5-2650 v2 @ 2.60GHz, Intel(R) Xeon(R)
CPU E5-2650 v2 @ 2.60GHz}
CsOEMStringArray : {[MS_VM_CERT/SHA1/27d66596a61c48dd3dc7216fd715126e33f59ae7],
Welcome to the Virtual Machine}
CsPartOfDomain : True
CsPauseAfterReset : 3932100000
CsPCSystemType : Desktop
CsPCSystemTypeEx : Desktop
CsPowerManagementCapabilities :
CsPowerManagementSupported :
CsPowerOnPasswordStatus : Disabled
CsPowerState : Unknown
CsPowerSupplyState : Safe
CsPrimaryOwnerContact :
CsPrimaryOwnerName : Windows User
CsResetCapability : Other
CsResetCount : -1
CsResetLimit : -1
CsRoles : {LM_Workstation, LM_Server, SQLServer, NT...}
CsStatus : OK
CsSupportContactDescription :
CsSystemFamily :
CsSystemSKUNumber :
CsSystemType : x64-based PC
CsThermalState : Safe
CsTotalPhysicalMemory : 8589463552
CsPhyicallyInstalledMemory :
CsUserName :
CsWakeUpType : PowerSwitch
CsWorkgroup :
OsName : Microsoft Windows Server 2016 Standard
OsType : WINNT
OsOperatingSystemSKU : StandardServerEdition
OsVersion : 10.0.14393
OsCSDVersion :
OsBuildNumber : 14393
OsHotFixes : {KB4049065, KB4521858, KB4519979}
OsBootDevice : \Device\HarddiskVolume1
OsSystemDevice : \Device\HarddiskVolume2
OsSystemDirectory : C:\Windows\system32
OsSystemDrive : C:
OsWindowsDirectory : C:\Windows
OsCountryCode : 1
OsCurrentTimeZone : -420
OsLocaleID : 0409
OsLocale : en-US
OsLocalDateTime : 3/19/2023 7:47:44 PM
OsLastBootUpTime : 3/19/2023 9:29:51 AM
OsUptime : 10:17:53.1424372
OsBuildType : Multiprocessor Free
OsCodeSet : 1252
OsDataExecutionPreventionAvailable : True
OsDataExecutionPrevention32BitApplications : True
OsDataExecutionPreventionDrivers : True
OsDataExecutionPreventionSupportPolicy : OptOut
OsDebug : False
OsDistributed : False
OsEncryptionLevel : 256
OsForegroundApplicationBoost : Maximum
OsTotalVisibleMemorySize : 8388148
OsFreePhysicalMemory : 7027584
OsTotalVirtualMemorySize : 9698868
OsFreeVirtualMemory : 8236144
OsInUseVirtualMemory : 1462724
OsTotalSwapSpaceSize :
OsSizeStoredInPagingFiles : 1310720
OsFreeSpaceInPagingFiles : 1310720
OsPagingFiles : {C:\pagefile.sys}
OsHardwareAbstractionLayer : 10.0.14393.3297
OsInstallDate : 11/4/2019 10:02:39 AM
OsManufacturer : Microsoft Corporation
OsMaxNumberOfProcesses : 4294967295
OsMaxProcessMemorySize : 137438953344
OsMuiLanguages : {en-US}
OsNumberOfLicensedUsers : 0
OsNumberOfProcesses : 50
OsNumberOfUsers : 4
OsOrganization :
OsArchitecture : 64-bit
OsLanguage : en-US
OsProductSuites : {TerminalServices, TerminalServicesSingleSession}
OsOtherTypeDescription :
OsPAEEnabled :
OsPortableOperatingSystem : False
OsPrimary : True
OsProductType : Server
OsRegisteredUser : Windows User
OsSerialNumber : 00377-70646-61668-AA447
OsServicePackMajorVersion : 0
OsServicePackMinorVersion : 0
OsStatus : OK
OsSuites : {TerminalServices, TerminalServicesSingleSession}
OsServerLevel : ServerCore
KeyboardLayout : en-US
TimeZone : (UTC-08:00) Pacific Time (US & Canada)
LogonServer : \\CompanyDC01
PowerPlatformRole : Desktop
HyperVisorPresent : True
HyperVRequirementDataExecutionPreventionAvailable :
HyperVRequirementSecondLevelAddressTranslation :
HyperVRequirementVirtualizationFirmwareEnabled :
HyperVRequirementVMMonitorModeExtensions :
DeviceGuardSmartStatus : Off
DeviceGuardRequiredSecurityProperties :
DeviceGuardAvailableSecurityProperties :
DeviceGuardSecurityServicesConfigured :
DeviceGuardSecurityServicesRunning :
DeviceGuardCodeIntegrityPolicyEnforcementStatus :
DeviceGuardUserModeCodeIntegrityPolicyEnforcementStatus :
Thanks!
Try to use option 6 from SConfig to download but nothing happen.
Also tried to follow the step here https://www.youtube.com/watch?app=desktop&v=POVDlY-4ISg to download the update but I cannot run the Install-Module command from my Core server. How can I do it?
PS C:\Users\administrator.NBICA> Install-Module -Name PSWindowsUpdate
PackageManagement\Install-Package : No match was found for the specified search criteria and module name
'PSWindowsUpdate'. Try Get-PSRepository to see all available registered module repositories.
At C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSModule.psm1:1772 char:21
+ ... $null = PackageManagement\Install-Package @PSBoundParameters
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : ObjectNotFound: (Microsoft.Power....InstallPackage:InstallPackage) [Install-Package], Ex
ception
+ FullyQualifiedErrorId : NoMatchFoundForCriteria,Microsoft.PowerShell.PackageManage
Finally, I found the issue. The problem was the Windows update service was disabled, after I ran these two commands, I can use Sconfig with option 6 to search windows update.
Enable the Service --> sc config wuauserv start= auto
Start the Service -- net start wuauserv
Microsoft (R) Windows Script Host Version 5.812
Copyright (C) Microsoft Corporation. All rights reserved.
Search for for (A)ll updates or (R)ecommended updates only? r
Searching for recommended updates...
List of applicable items on the machine:
1> Update for Windows Defender Antivirus antimalware platform - KB4052623 (Version 4.18.2001.10)
2> 2023-03 Servicing Stack Update for Windows Server 2016 for x64-based Systems (KB5023788)
3> Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.385.553.0)
Select an option:
(A)ll updates, (N)o updates or (S)elect a single update?
Glad to hear, please don't forget to close up the thread here by marking answer.