This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(64, 85%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMW%3C/text%3E%3C/svg%3E)
I have 3 Exchange servers 2016 CU17 in the environment. I am about to update one of the server to CU 19 and then install the KB5000871. My question is, before installing the CU 19, normally I will do a Windows Update to make my server up-to-date. So during the Windows Update, will it download the KB5000871 and install? If yes, do I still need to install it manually again after I install CU 19?
Perhaps anyone could advise on this. Or can I just skip the Windows Update and straight to the CU 19 installation? Although I know this is not recommended by Microsoft but just wondering if it will cause any issues.
Thank you.
It wont be in Windows Update and since there is no patch for CU17, it couldnt be installed anyway since it wouldnt apply
I always apply Windows Updates first,
then reboot
Then the CU with an elevated prompt
then reboot
Then install 5000871 with an elevated prompt
Reboot
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYS%3C/text%3E%3C/svg%3E)
Hi @MarcusWong-9726,
Although according to the update in KB5000871, an additional series of security updates are being produced by Microsoft for older CUs which include Exchange 2016 CU17, these update packages are only a temporary measure and are available only through the Microsoft Download Center (not on Microsoft Update). Therefore, KB5000871 won't be installed during the Windows Update.
That being said, for your current scenario, it's suggested to follow the recommended path below, that is, installing the latest supported CU (CU19) and then apply the applicable SUs:
Reference: March 2021 Exchange Server Security Updates for older Cumulative Updates of Exchange Server.
Furthermore, the official blog below contains information and resources that can help you plan your updates, troubleshoot problems, and help you with mitigations, investigation, and remediation of the vulnerabilities, hopefully you can find it helpful:
Released: March 2021 Exchange Server Security Updates
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Hi,
One of the servers have been patched successfully and no issues were encountered. Thanks for the assistance.
Thanks.