DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PC×
Skip to content
World desk3 min

How to Check Whether an On-Premises Exchange Server Is Exposed to Known Vulnerabilities

Check every on-premises Exchange server with Microsoft Health Checker, compare its full build with the release table, and verify support, Extended Protection and mitigation status.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Run Microsoft’s Exchange Server Health Checker on every on-premises Exchange server, then compare each server’s full build and detected security update with Microsoft’s current build table. Also verify support and update eligibility, review Health Checker findings and Extended Protection, and check Exchange Emergency Mitigation status. A version string alone cannot establish whether a server is patched or exposed.

1. Inventory every Exchange server and check its full build

Run Microsoft’s Exchange Server Health Checker against every server in the organization. Microsoft recommends the script for verifying Exchange builds. In its Exchange Information section, check Build Number and Exchange IU or Security Hotfix Detected.

As an Amazon Associate I earn from qualifying purchases.

The command Get-ExchangeServer | Format-List Name,Edition,AdminDisplayVersion is useful for inventorying server names, editions, and cumulative update (CU) versions, but its output does not necessarily confirm which security update (SU) or hotfix (HU) is installed. For the complete update level, use Health Checker or verify the Exsetup.exe file version. Record the result for each server rather than assuming that servers in the same organization have identical patch levels.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

2. Compare the build with Microsoft’s release table

Use Microsoft’s Exchange Server build numbers and release dates page. Find the section for the server’s product generation and compare the complete build number—not just the CU—with the published build, release, and date. Determine whether the installed build includes the latest security update applicable to that server.

#1 Best Overall
Cisco Meraki Firewall Appliance Rack Mount - 1U Server Rack Shelf with Easy Access Front Network Connections, Properly Vented, Customized 19 Inch Rack - RM-CI-T14 by Rackmount.IT
  • More Secured Server Mounting Setup: RM-CI-T14 by Rackmount.IT IU rack mount kits have dedicated slots to safely install compatible Cisco Meraki models, including Cisco Meraki MX68, MX68W, MX68CW, and MX75.
  • Improves Cable Management: All console ports of the Cisco Meraki appliance are brought to the front for easy access and user convenience — all while preventing overheating with custom-made cut-outs.
  • Straightforward Installation Process: Mounting your appliance to a 19 inch shelf only takes 2-5 mins. as our network tray kits have everything a user needs — bolts, hex keys, zip ties, port labels, cables, and an assembly guide.
  • Suitable for Any Type of Business: Our 1U rack shelf kits are designed to fit your appliance in 19-inch network rack shelves, making them ideal for small business owners, large corporations, and government agencies looking to improve their cloud management and network connectivity.
  • Passionate for Smart Design and Customization: Rackmount.IT offers innovative solutions to common user needs by producing high-quality custom rack mounted shelf with excellent features that support major desktop appliance manufacturers.

For example, Microsoft lists Exchange Server Subscription Edition (SE) RTM Sep26SU as build 15.2.2562.49, released September 8, 2026. That is a dated entry in a table that changes as releases arrive, not a universal target for other Exchange generations. Use the current product-specific entry when checking a server.

3. Establish whether the server can still receive security updates

A server can have a recognizable build and still be outside the normal support path. Microsoft lists October 14, 2025, as the end-of-support date for Exchange Server 2016 and 2019. As of October 4, 2026, Microsoft says customers enrolled in the Exchange 2016/2019 Extended Security Update (ESU) program are eligible for security updates released from December 2025 onward. Organizations not enrolled should migrate to Exchange Server Subscription Edition to keep receiving the latest security updates.

Rank #2
Sale
JINGCHENGMEI Mini Rack Mount for SonicWall Firewall TZ570 TZ670,1U Hinged
  • Universal Compatibility: 19" Wide, Take 1U Space, Fits standard 19-inch network cabinets and server racks for seamless integration. Supported Models: SonicWall TZ570, SonicWall TZ670 and similar size small networking gear that does not have a native rack mount.
  • Hinged Design: The both sides hinged design allows easy access to network connections at the rear of the device.
  • Sturdy Construction: Crafted from high-quality steel, this 1U rack mount shelf offers robust support for your SonicWall desktop firewall or similar size devices.
  • Space-Saving: Compact 1U Hinged Server Rack Shelf optimizes available rack space while securely mounting your firewall or some items similar in size to a Sonicwall.
  • Hassle-Free Installation: No assembly required. Simple assembly ensures quick setup and deployment of your network security solution. Including M6 screws and cage nuts for mounting.

Confirm the organization’s actual ESU enrollment and the server’s exact installed build before calling an Exchange 2016 or 2019 installation current. Check Microsoft’s Exchange Server lifecycle FAQ for the applicable lifecycle and ESU details; a listed update is not proof that a particular server is eligible for or has installed it.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

4. Review Health Checker findings and complete required actions

Health Checker can identify servers behind on CUs or SUs and flag manual actions. Follow the update guidance for the specific Exchange product and release, then run the script again: some releases require additional steps after installation. Review and resolve its findings instead of treating the build number as the only security check.

Rank #3
SonicWall Rackmount Kit – Compatible with TZ670 / TZ570 | Secure and Professional Firewall Installation (02-SSC-3112)
  • Designed for SonicWall TZ570 and TZ670 firewalls
  • Mounts appliance securely into standard 19-inch racks
  • Ensures professional and organized cable routing
  • Includes mounting hardware for quick installation
  • Perfect for network closets, server rooms, or data centers

Keep the Windows operating system patched as well. Microsoft notes that operating-system vulnerabilities can contribute to an attack chain against Exchange, so an up-to-date Exchange build does not by itself establish that the host is secure. Use Microsoft’s Exchange Server supportability matrix to check operating-system and configuration compatibility.

5. Verify Extended Protection

Check Health Checker’s Extended Protection prerequisites and configuration findings, and compare the configuration with Microsoft’s guidance for the server’s product generation. Microsoft warns that disabling Extended Protection leaves Exchange vulnerable to known vulnerabilities.

Rank #4
Qotom Mini PC 1U Rack J1900 4X Intel i210 LAN VGA 8GB/128GB
  • 4x Intel i210 Gigabit LAN - Equipped with 4 genuine Intel i210-AT Gigabit ports for superior throughput, low CPU usage, and maximum stability. Perfect for standard rackmount soft routers, hardware firewalls, and VPN gateways.
  • 1U Rackmount Chassis with Ears - Designed in a standard 1U rackmount form factor (440 x 127 x 44mm), shipping complete with rackmounting ears for seamless installation into standard 19-inch server racks and cabinets.
  • Active Cooling with Internal Fan - Unlike mini cases, this 1U rack appliance features an integrated motherboard cooling fan, delivering continuous airflow to ensure optimal system temperatures during 24/7 heavy enterprise workloads.
  • mSATA Storage & DDR3 Support - Powered by the efficient Intel J1900 Quad-Core CPU. Supports 1x DDR3L RAM (Up to 8GB), 1x mSATA SSD and 1x 2.5 inch SATA SSD/HDD. Includes 1x VGA and 4x USB.
  • Auto-Start Jumper & Server Ready - Features an onboard Auto-Start Jumper for automatic power-on after an electrical outage. Ideal for remote server rooms, fully compatible with major firewall, Linux, and routing systems.

Exchange Server 2019 CU14 and later enables Extended Protection by default during setup. Older supported versions have separate prerequisites and instructions; do not apply an older-version procedure indiscriminately to a different product generation. Follow Microsoft’s Extended Protection guidance for the applicable version before changing settings.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

6. Check Exchange Emergency Mitigation status—but do not treat it as patching

The Exchange Emergency Mitigation (EM) service can automatically apply mitigations for certain known threats that are actively exploited in the wild. It needs outbound connectivity to Microsoft’s Office Config Service. Check the service’s status and connectivity as part of the review, but do not count a mitigation as a substitute for installing the security update that fixes the vulnerability.

Best Value
Rackmount.IT RM-SW-T10 Rack Mount Kit for SonicWall TZ270, TZ370, and TZ470 Firewalls – 1U, Front Ports, Black Steel (RM-SW-T10)
  • More Secured Server Mounting Setup: RM-SW-T10 by Rackmount.IT IU rack mount kits have dedicated slots to safely install compatible SonicWall firewall appliance models, including SonicWall TZ270, TZ370, and TZ470
  • Improves Cable Management: With the provided CAT6 cables, pre-installed RJ45 couplers, and custom-made cut-outs, all console ports are brought to the front for easy access and user convenience — all while preventing overheating.
  • Straightforward Installation Process: Mounting your appliance to a 19 inch shelf only takes 2-5 mins. as our network tray kits have everything a user needs — bolts, hex keys, zip ties, port labels, cables, and an assembly guide.
  • Suitable for Any Type of Business: Our 1U rack shelf kits are designed to fit your appliance in 19-inch network rack shelves, making them ideal for small business owners, large corporations, and government agencies looking to improve their cloud management and network connectivity.
  • Passionate for Smart Design and Customization: Rackmount.IT offers innovative solutions to common user needs by producing high-quality custom rack mounted shelf with excellent features that support major desktop appliance manufacturers.

Microsoft describes each mitigation as “a temporary, interim fix until you can apply the Security Update that fixes the vulnerability.” Review the Exchange Emergency Mitigation Service documentation for how the service works and its requirements.

What the checks can—and cannot—tell you

These steps let an administrator identify the installed build, compare it with Microsoft’s published releases, assess update eligibility, and spot configuration or manual-action findings. They do not establish exposure for a server that has not been checked. A defensible conclusion depends on the organization’s complete server inventory, each server’s full build and installed updates, support or ESU status, Extended Protection settings, and the relevant Health Checker findings.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.