Forum Discussion

sebastianj1981's avatar
sebastianj1981
Copper Contributor
Jun 22, 2024

Windows Server 2012R2 patching

Hello Team,

We have in our company some old servers - Windows Server 2012R2. We don't have ESU.
Now we need to rebuild some of them and install only security patches.

I don't want to install all single security patches and my patching strategy is:
1. Install cumulative patch KB2919355 and some other patches according to the KB below:

https://www.microsoft.com/en-us/download/details.aspx?id=42334


2. Install the latest SSU(As we don't have ESU the latest SSU is from september 2023):
KB5030329 2023-09 Servicing Stack Update for Windows Server 2012 R2 for x64-based Systems


3. Install below patches(We don't have ESU so the latest patches are from September and October):
KB5031419 2023-10 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems
KB5031407 2023-10 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems
KB5031355 2023-10 Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 for x64-based systems
KB5029915 2023-09 Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 R2 for x64
KB5031008 2023-10 Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 R2 for x64

And now I have 2 questions:
1. Is this patching strategy correct?
2. If I install KB5031419 2023-10 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems do I still need to install KB5031407 2023-10 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems or this patch i already included in Rollup?

No RepliesBe the first to reply

Resources