How update Windows server release 1607 to current 1903 or 1809?

Question

We are migrating to Windows Defender but noticed the Attack surface rules minimum requirement for server 2016 is 1809. Most of our 2016 servers are 1607. Whats the best way to upgrade the version?

Answer 1

Hello

Upgrading your Windows Server 2016 from release 1607 to 1809 or 1903 involves a few steps. Here’s a general guide:

 

Backup your data: Always ensure you have a complete backup of your data before starting an upgrade process.

 

Check for updates: Before starting the upgrade, check for updates on your current version (1607) and install them. This can help prevent compatibility issues.

 

Download the new version: You’ll need to download the ISO file for the version you want to upgrade to (either 1809 or 1903). You can usually find these on the Microsoft website.

 

Perform an in-place upgrade: Once you have the ISO file, you can perform an in-place upgrade. This process keeps your files and apps intact. You’ll need to mount the ISO file, then run the setup.exe file. Follow the prompts, making sure to select ‘Keep personal files and apps’ when given the option.

 

[Perform an in-place upgrade of Windows Server | Microsoft Learn](https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fwindows-server%2Fget-started%2Fperform-in-place-upgrade&data=05%7C02%7Cwesleyl%40wicresoft.com%7Ca15dd692a03d4073947808dc47c241b7%7Cb2ae8dd9097749768706861b488b1512%7C0%7C0%7C638464146875729652%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=FB8RaPLynE1wOni6%2BvYrDm0cfT7dQhgqdQ%2F5SyAOAJc%3D&reserved=0"原始 URL: https://learn.microsoft.com/en-us/windows-server/get-started/perform-in-place-upgrade。如果你信任此链接, 请单击或点击。")

 

There are two servicing models for Windows Server - a Long Term Servicing Channel (LTSC) and a Semi-Annual Channel (SAC). The LTSC releases (like 1607 and 1809) are major versions that are supported for a long time and receive security updates but don’t get many feature updates. The SAC releases (like 1903) get new features but have a shorter support period. As 1809 and 1903 are two different servicing channels, they cannot be upgraded in place.

 

Regarding the Attack Surface Reduction (ASR) rules in Windows Defender, the minimum Windows Server build is indeed version 1809. If you’re using Windows Server 2016, you’ll need to be onboarded using the instructions in Onboard Windows servers for this feature to work.