How can I patch a Windows Server 2016 Core Server ?

Question

I have a Windows 2016 Core Server running as a Certificate Authority server, how can I patch it with the latest Windows update?

I tried to use sconfig option "6" but the returned msg is that (pls see below), I am wondering if the Core Server has no Windows Update feature installed, but when I run get-hotfix in Powershell, I saw three hot fix were applied during initial installation. The guy who managed this server was left company, I want to patch this server in order to make sure all my server fulfill the requirement of KB5014754.

https://support.microsoft.com/en-us/topic/kb5014754-certificate-based-authentication-changes-on-windows-domain-controllers-ad2c23b0-15d8-4340-a468-4d4f3b188f16#bkmk_certmap

If anyone can help?

Searching for all applicable updates...

List of applicable items on the machine:

There are no applicable updates.

Press return to continue...

Answer 1

Looks like it hasn't been patched since late 2019. I'd suggest manual downloading / installing the latest SSU

https://www.catalog.update.microsoft.com/Search.aspx?q=KB5023788

followed by the latest cumulative update.

https://www.catalog.update.microsoft.com/Search.aspx?q=KB5023697

-

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

What is the current build number?

Answer 3

Hello;

this is my server build number. Also when I looked at the event viewer of my DC server, I found a warning in regards to my certification mapping on a client who is using wifi with NPS.

OS Name: Microsoft Windows Server 2016 Standard

OS Version: 10.0.14393 N/A Build 14393

Warning on DC

The Key Distribution Center (KDC) encountered a user certificate that was valid but could not be mapped to a user in a secure way (such as via explicit mapping, key trust mapping, or a SID). Such certificates should either be replaced or mapped directly to the user via explicit mapping. See https://go.microsoft.com/fwlink/?linkid=2189925 to learn more.



  User: PC1987$

  Certificate Subject: @@@CN=LAPTOP1987, CN=Computers, DC=mycompany, DC=ca

  Certificate Issuer: MYDOMAIN-CertificateAuthority

  Certificate Serial Number: 490000614782CBCC36D1AD11EE000000006147

  Certificate Thumbprint: 3CCF315AEC41321F0E8D338A995845B09FD675

Answer 4

C:>winver

'winver' is not recognized as an internal or external command,

operable program or batch file.

Also, tried to run with Powershell

Answer 5

OS Name:                   Microsoft Windows Server 2016 Standard
OS Version:                10.0.14393 N/A Build 14393
OS Manufacturer:           Microsoft Corporation
OS Configuration:          Member Server
OS Build Type:             Multiprocessor Free
Registered Owner:          Windows User
Registered Organization:
Product ID:                00377-70646-61668-AA447
Original Install Date:     11/4/2019, 10:02:39 AM
System Boot Time:          3/19/2023, 9:29:51 AM
System Manufacturer:       VMware, Inc.
System Model:              VMware Virtual Platform
System Type:               x64-based PC
Processor(s):              2 Processor(s) Installed.
                           [01]: Intel64 Family 6 Model 58 Stepping 0 GenuineIntel ~2600 Mhz
                           [02]: Intel64 Family 6 Model 58 Stepping 0 GenuineIntel ~2600 Mhz
BIOS Version:              Phoenix Technologies LTD 6.00, 4/5/2016
Windows Directory:         C:\Windows
System Directory:          C:\Windows\system32
Boot Device:               \Device\HarddiskVolume1
System Locale:             en-us;English (United States)
Input Locale:              en-us;English (United States)
Time Zone:                 (UTC-08:00) Pacific Time (US & Canada)
Total Physical Memory:     8,192 MB
Available Physical Memory: 6,905 MB
Virtual Memory: Max Size:  9,472 MB
Virtual Memory: Available: 8,098 MB
Virtual Memory: In Use:    1,374 MB
Page File Location(s):     C:\pagefile.sys
Domain:                    mycompany
Logon Server:              \\DC1
Hotfix(s):                 3 Hotfix(s) Installed.
                           [01]: KB4049065
                           [02]: KB4521858
                           [03]: KB4519979
Network Card(s):           1 NIC(s) Installed.
                           [01]: vmxnet3 Ethernet Adapter
                                 Connection Name: Ethernet0 2
                                 DHCP Enabled:    No
                                 IP address(es)
                                 [01]: 192.168.11.11
                                 [02]: fe80::700f:628f:cb93:71e3
Hyper-V Requirements:      A hypervisor has been detected. Features required for Hyper-V will not be displayed.