Windows Server 2012R2 patching
Hello Team, We have in our company some old servers - Windows Server 2012R2. We don't have ESU. Now we need to rebuild some of them and install only security patches. I don't want to install all single security patches and my patching strategy is: 1. Install cumulative patch KB2919355 and some other patches according to the KB below: https://www.microsoft.com/en-us/download/details.aspx?id=42334 2. Install the latest SSU(As we don't have ESU the latest SSU is from september 2023): KB5030329 2023-09 Servicing Stack Update for Windows Server 2012 R2 for x64-based Systems 3. Install below patches(We don't have ESU so the latest patches are from September and October): KB5031419 2023-10 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems KB5031407 2023-10 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems KB5031355 2023-10 Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 for x64-based systems KB5029915 2023-09 Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 R2 for x64 KB5031008 2023-10 Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 R2 for x64 And now I have 2 questions: 1. Is this patching strategy correct? 2. If I install KB5031419 2023-10 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems do I still need to install KB5031407 2023-10 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems or this patch i already included in Rollup?
