How to manually download KB4052623 for installation on Windows 2016 Server

Question

I am working on a pilot to move our Windows servers to MS Defender. Our Windows Servers are behind on Windows Updates by few months. We do a project to remediate this issue underway.

As part of onboarding a Windows 2016 server to MS Defender, you need to install an installation package (md4ws.msi) from security.microsoft.com. This package requires installation of KB4052623. Since I am unable to run Windows Update to download this update (KB4052623), I cannot deploy the installation package.

I have gone to https://www.catalog.update.microsoft.com/Search.aspx?q=KB4052623 to look for the offline install file but when you click on the download button for 1st option ( Update for Microsoft Defender Antivirus antimalware platform - KB4052623 (Version 4.18.2203.5) ), you get a list of 3 exe and 3 cab files. I have downloaded all 6 files. I have looked at the file properties | details for each of the exe files to figure out the file for amd64 ( updateplatform_4ca3e501a402a6d913024fdb532c0750152ffb12.exe ).

However, when I execute updateplatform_4ca3e501a402a6d913024fdb532c0750152ffb12.exe and run it as an administrator, the update extracts some files in %temp% and then nothing happens.

On a separate Windows 2016 VM where I am able to run Windows Update, I can run the installation package (md4ws.msi) without any issues. So basically, I need to install KB4052623 on my Windows 2016 server to resolve my issue.

Any suggestions?

Answer 1

Maybe its already there?

Get-MpComputerStatus  

Answer 2

Hi there,

First, you need to confirm that the KB update is applicable to your server. As you have tried to manually download and install it the most possible reason for the update to fail is it might not be applicable to you.

You can also try to get the update by using Powershell.

-Open PowerShell and use the following command, which requires Administrator permissions:

Install-Module -Name PSWindowsUpdate -RequiredVersion 2.1.1.2`
-Confirm that you want to install the cmdlet by typing Y.
-After the installation finishes, type get-windowsupdate to see a list of all available updates.
-If you can see the KB number select it and install it.

---------------------------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer–

Answer 3

Hi
You can try the following to apply the update.
cd %ProgramFiles%\Windows Defender
MpCmdRun.exe -removedefinitions -dynamicsignatures
MpCmdRun.exe -SignatureUpdate

Plz check & share if it's resolved?
I have applied the same on one of my 2016 server, but it was also having an existing AV, after that it's successfully onboarded to Azure security portal as well. OR You can check the following MS article for Manually downloading it

https://www.microsoft.com/en-us/wdsi/defenderupdates

Regards,

Answer 4

Might try the MMPC option mentioned here.
https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-server-endpoints?view=o365-worldwide#prerequisites-for-windows-server-2016

Answer 5

Looks similar to what I find. I'd try installing the latest SSU
https://www.catalog.update.microsoft.com/Search.aspx?q=KB5014026

followed by the latest cumulative update.
https://www.catalog.update.microsoft.com/Search.aspx?q=KB5014702