Unable to install KB5063877 on a Win2k19 server

Question

Unable to install KB5063877 on a Win2k19 server. Pre-requisite patch KB5005112 of KB5063877 is already installed but still getting the message that this patch is not applicable. Appreciate if any guidance can be shared to trace back the required patch so we can deploy the patch KB5063877.

Source Description HotFixID InstalledBy InstalledOn

---

xxxxx Security Update KB5005112 NT AUTHORITY\SYSTEM 9/26/2021 12:00:00 AM

Answer 1

Hello,

The error you are seeing with KB5063877 being reported as “not applicable” despite KB5005112 already installed usually indicates that either the servicing stack or a prerequisite cumulative update is missing, or that the patch in question targets a different baseline build than the one your Windows Server 2019 instance is currently on. Microsoft updates for Server 2019 are cumulative, and each monthly rollup supersedes previous ones. KB5005112 was a 2021 security update, but KB5063877 is a much newer patch and requires the system to be on a supported servicing baseline before it can apply.

The first diagnostic step is to check the OS build with winver or systeminfo and compare it against the “Applies to” section of KB5063877 in the Microsoft Update Catalog. If your server is behind on cumulative updates, the installer will reject the patch as not applicable even if an older prerequisite is present. You should also confirm that the latest Servicing Stack Update (SSU) is installed, since SSUs are mandatory before any new cumulative security update can be applied. Run dism /online /get-packages and look for the most recent SSU package; if it is missing, install it manually from the Update Catalog.

If the build level is correct and the SSU is present, but the patch still fails, it is often because KB5063877 has already been superseded by a newer cumulative update. In that case, Windows Update will not apply it manually, and you need to install the latest cumulative update for Server 2019 instead of the standalone KB.

In short, trace back by verifying the current OS build, checking the SSU version, and comparing against the prerequisites listed in the KB5063877 documentation. If the build is older than the baseline required, bring the server up to date with the latest cumulative update package rather than trying to apply KB5063877 directly. That will ensure the patch content is included and the system remains supported.

I hope you've found something useful here. If it helps you get more insight into the issue, it's appreciated to accept the answer. Should you have more questions, feel free to leave a message. Have a nice day!

Domic Vo.