20,218 questions
the Windows Server 2012 and 2012 R2 ESU program will only include Monthly Rollup packages; Security Only update packages will not be provided.
Why can I download Security Only Quality Update for Windows Server 2012 R2 when its EOL
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(294.40000000000003, 88%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Andreas
1,331
Reputation points
Hi,
We have onsite servers that are Windows Server 2012 R2 Std in a local domain, not connected to the internett. These have allways been updated with SCCM.
As we know Windows Server 2012 R2 has EOL in October 2023 as long as you dont pay for extended support.
So when we now use SCCM, these machines does not get any update offcourse, and automatically get status green=ok.
We have installed Microsoft Defender for Endpoint on these machines recently, and noticed in the Azure Security Console, Missing KBs. And here we can see "November 2023 Security Updates". Then I search on the same KB5032249 https://www.catalog.update.microsoft.com/ and were able to download and install it. Why is that ?
I thought I was not able to download any security updates for Windows Server 2012 R2 now ? I can also see there is a December patch KB5031407 that I guess I can also download and install sucessfully.
What am I missing here ? :)
Thanks for any reply
/R
Andreas
Windows for business | Windows Server | User experience | Other
Microsoft System Center | Other
1,089 questions
Accepted answer
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(51.2, 83%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
abbodi86 4,036 Reputation points2024-01-09T09:12:42.3533333+00:00 -
Andreas 1,331 Reputation points
2024-01-09T15:02:13.66+00:00 Hi @abbodi86 and @AllenLiu-MSFT
Maybe I'm not explaining myself correctly.
Windows Server 2012 R2 is EOL, Microsoft is ending free updates, bug fixes, and technical support. Why can I still manully download it ? https://support.microsoft.com/en-us/topic/december-12-2023-kb5033420-monthly-rollup-fcb2ed87-527d-4313-ae01-0c43af80c545
Does microsoft expect you to NOT manually download it if you have not paid for Extended Security Update (ESU) ?
Sorry for my difficulty in understanding
/R
Andreas
-
abbodi86 4,036 Reputation points
2024-01-09T18:03:24.5+00:00 ESU updates had been downloadable for Windows 7 / Server 2008
but you can't install them (fail and revert after restart)
why do want to prevent users from trying :) -
Andreas 1,331 Reputation points
2024-01-10T06:51:17.8566667+00:00 Hi @abbodi86
Then I understand, thanks for making things clear.
Just to test, we downloaded November 14, 2023—KB5032249 (Monthly Rollup) and run this on a Windows Server 2012 R2, and like you said, it installed, but then rolled back.
But one thing we noticed, in the controll panel > installed updates we got this update below. That was strange, any good explanation for this ?
/R
Andreas
-
AllenLiu-MSFT 49,316 Reputation points Microsoft External Staff2024-01-10T07:33:33.2666667+00:00 KB5030269 is 2023-09 Security Monthly Quality Rollup for Windows Server 2012 R2.
-
Andreas 1,331 Reputation points
2024-01-10T07:48:07.19+00:00 That I know, but is that bundeled inside KB5032249 ? Since we did not manually install KB5030269 ? And if yes, I thing that this is strange since we already have installed Septermber og October patches. Are there like changes i November that suddenly also should count on the September patch
-
abbodi86 4,036 Reputation points
2024-01-10T18:23:13.15+00:00 No, but when the failed Rollup rolled back, the current installed Rollup got reconfigured, hence new date shown
Sign in to comment -
1 additional answer
Sort by: Most helpful
-
AllenLiu-MSFT 49,316 Reputation points Microsoft External Staff
2024-01-09T02:52:31.0133333+00:00 Hi, @Andreas
Thank you for posting in Microsoft Q&A forum.
The reason you were able to download and install the November 2023 and December 2023 security updates for Windows Server 2012 R2 is likely due to the availability of Extended Security Updates (ESUs).
ESUs are available for free in Azure or need to be purchased for on-premises deployments and provide security updates for up to three years after the end of support date.
For the reference:
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".
-
Andreas 1,331 Reputation points
2024-01-09T06:49:32.2433333+00:00 Thanks for your reply, but that does not answer my question :)
I know there are free in Azure, but these machines are located on-prem.
- The updates were downloaded from https://www.catalog.update.microsoft.com/ and installed manually, is that illegal then ?
- If a company buy Extended Security Updates (ESUs), will the SCCM system "know" this by the serialnumber and then be able to download it automatically like earlier ? Since now it shows no update manually ?
Thanks for any reply.
/R
Andreas
Sign in to comment -