DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run Scan×
Skip to content
World desk5 min

What Exchange Server Administrators Should Know About Security Updates and Cumulative Updates

A practical guide to selecting Exchange Server cumulative and security updates, preparing for CU maintenance, verifying server builds, and checking support status.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Choose an Exchange update by the server’s installed version and cumulative update (CU), then verify the installed build and any required follow-up actions with Microsoft Exchange Server Health Checker. A CU is a full Exchange installation; a security update (SU) is tied to a particular CU. Exchange Server 2016 and 2019 reached end of support on October 14, 2025, so their later security-update eligibility depends on enrollment in Microsoft’s Extended Security Update (ESU) program.

CU or SU: which update does your server need?

A cumulative update replaces the Exchange installation with a full installation that includes changes from earlier CUs. You do not need to install every earlier CU—or the original RTM release—before installing a later CU. An SU addresses security issues and applies to a specific Exchange release and CU baseline.

As an Amazon Associate I earn from qualifying purchases.

Update What it does How to choose it
CU Full Exchange installation containing changes from earlier CUs; may include fixes, features, or deprecations. Use the CU intended for your Exchange release and deployment. You can move directly to the latest applicable CU without installing the intervening CUs.
SU Security fixes for a particular Exchange release and CU. First identify the installed CU, then use an SU published for that baseline. Later SUs for the same CU include security fixes from earlier SUs for it.

As a result, if you skipped earlier SUs but remain on the same CU, you generally install the latest applicable SU rather than every SU in sequence. Moving to a different CU changes the baseline: check for the SU published for the new CU instead of assuming an SU for the old CU applies.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Check support status before planning maintenance

Exchange Server 2016 and Exchange Server 2019 reached end of support on October 14, 2025. Microsoft says organizations enrolled in ESU are eligible for the December 2025 and later security updates for those versions. If your organization is not enrolled, Microsoft directs you to migrate to Exchange Server Subscription Edition (SE) to continue receiving the latest security updates. Confirm ESU enrollment rather than assuming that a 2016 or 2019 server remains on the normal update stream.

#1 Best Overall
Forvencer Server Book, 2 Zipper Pocket, Server Books for Waitress
  • Upgraded Two Zipper Pockets: Forvencer server books feature two secure zipper pockets for better organization of coins, cash, and receipts, ensuring that everything you collect has a safe and secure place
  • Smart Storage & Quick Access: Designed with 8 multi-functional compartments, the right side includes a guest receipt pad, while the left has a money pocket, ticket pocket, and credit card slot. Two small clear pockets store bills, receipts, and other visible items. A stitched pen loop ensures you always have your favorite pen ready
  • High-quality & Easy to Clean: Crafted from high-quality PU leather with heavy-duty stitching, this server book is built to last. It resists tears, scratches, and its waterproof surface makes cleaning easy with just a damp cloth or a non-chlorine sanitizer
  • Perfect Fit for Your Apron: Measuring 5” x 8”, this compact organizer is slightly smaller than other models, making it ideal for bending or sitting while carrying in your server apron. It holds everything a waitress needs—a place for everything
  • What's Included: This server organizer comes with multiple open and zippered pockets to store money, receipts, tips, etc. Clear sleeves are perfect for keeping menus or special lists while serving. Available in a variety of colors, allowing you to express yourself even when in uniform

Microsoft’s update guidance lists Exchange 2019 CU15 and Exchange 2016 CU23 as the latest CUs for those products. These products’ end-of-support status still applies; a latest CU is not the same as a supported product or a guarantee of SU eligibility.

For dated build context, Microsoft’s build table lists Exchange Server SE RTM, released July 1, 2025, as build 15.2.2562.17, and Exchange Server SE RTM Sep26SU, released September 8, 2026, as build 15.2.2562.49. These are dated examples, not a standing declaration of the latest build: check Microsoft’s current release and build information before selecting an update.

Plan a CU installation safely

CU maintenance changes a full Exchange installation, so use a runbook appropriate to your server configuration and topology. Microsoft recommends these preparations:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Test the installation in a non-production environment.
  • Make and test backups of Active Directory and Exchange before starting.
  • Record customizations so you can restore or reapply them as needed. Exchange 2019 CU13 and later back up and restore common configuration files, but that does not replace reviewing your own customizations or Microsoft’s current preservation guidance.
  • Restart the server before and after the installation.
  • For a database availability group (DAG), place each affected member into maintenance mode using the procedures for that DAG before installing the CU.
  • If you use command-line Setup, run it from an elevated command prompt.

Use the intended CU media

Mount the ISO for the CU you intend to install and run Exchange Setup. Setup’s “Connect to the Internet and check for updates” option looks for updates to the Exchange version being installed; it does not find newer CUs. Selecting that option therefore does not replace choosing the intended CU media.

Install the CU-specific security update

After confirming the server’s Exchange release and CU, select an SU published for that exact baseline and follow its release-specific installation instructions. Do not uninstall an earlier SU merely to install a newer SU for the same CU: Microsoft says the later SU includes the earlier security fixes. If you install a new CU, check separately for the applicable SU for that CU.

After an SU, run Health Checker and review its results for manual actions or other follow-up. The applicable package and any required manual steps depend on the release and update; do not treat an SU as a substitute for following its own instructions.

Rank #3
Server Book with Zipper Pocket and Magnetic Closure Server Booklet Waitress Book Serving Book with Money Pocket Waitstaff Organizer Fit Server Apron Waiter Book Wallet High Volume Pocket
  • [Large Capacity & Apron-Friendly] Measuring an oversized 4.7 x 9 inches, this larger server book provides extra room for taller receipts, guest checks, and menus while still fitting perfectly into standard restaurant aprons. (Note: apron and guest check pads are not included.)
  • [Secure Magnetic & Zipper Pockets] Features a powerful magnetic closure pocket to securely hold large amounts of cash flat, alongside a heavy-duty zippered pocket to keep coins from falling out. Perfect for keeping your bills, receipts, change, and credit cards safely locked away during a hectic shift.
  • [Classic Black & White Polka Dot Design] Crafted from high-quality, soft PU faux leather, this server book features a timeless black background accented by retro-chic white polka dots. It brings a touch of modern fashion to your workday, brightening your uniform while matching any restaurant dress code.
  • [Professional Craftsmanship & Durability] Built to withstand the grueling, fast-paced demands of the food service industry. Engineered with reinforced seams and meticulous stitching that won't fray, this lightweight organizer offers a polished, high-end look that stands up to daily wear and tear.
  • [The Ultimate Shift Organizer] The perfect shift companion for busy waitstaff, servers, and bartenders. Whether you are holding cash, writing down orders, or tracking daily food and wine specials, this stylish book keeps you organized, fast, and efficient under pressure.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Verify the installed build and update state

Use Exchange Server Health Checker as the primary per-server check. Review the report’s build number and the “Exchange IU or Security Hotfix Detected” information. Microsoft recommends running the script to identify missing CUs, SUs, or manual actions, and running it again after an SU.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Other checks provide useful details but have limits:

  • Get-Command Exsetup.exe | ForEach-Object {$_.FileVersionInfo} displays version information for the installed Exchange executable.
  • Get-ExchangeServer | Format-List Name,Edition,AdminDisplayVersion reports the CU version through AdminDisplayVersion; it does not confirm whether a later SU or hotfix (HU) is installed.

Use the build and security-hotfix information in Health Checker—not AdminDisplayVersion alone—to assess the update state.

Rank #4
CoBak Server Book with 5 Pockets
  • 5 Pockets & 1 Pen Hook: Keep essentials neatly organized with 5 pockets for cash, cards, receipts, and guest checks, plus a pen holder for easy access.
  • Perfect Size for Aprons: Compact 5”x7” size fits comfortably in aprons without poking or bulging. Expandable design ensures easy handling, helping you stay professional and efficient.
  • Durable & Easy to Clean: Made from premium, cruelty-free PU leather that’s water-resistant and scratch-proof. Easy to clean, ensuring it stays looking great through busy shifts.
  • Stay Organized on the Go: Designed to keep everything securely in place, this server book helps you stay organized even during the busiest shifts, so you can focus on providing great service.
  • High Quality at an Affordable Price: A well-crafted server organizer that offers premium quality at a reasonable price, trusted by waitstaff for everyday use.

Use fleet monitoring as an overview

The Microsoft 365 admin center’s Software updates (Preview) page, on its Exchange tab, reports counts of servers needing CUs, needing SUs, or out of support. It does not identify which individual servers are behind by one or more builds. Use its counts to spot fleet-level concerns, then check the affected servers individually with Health Checker and build checks to make an actionable update inventory.

Respond to a failed update by matching the symptom

Exchange update failures do not all share one safe repair. Microsoft’s “Fix failed Exchange Server updates” guidance includes targeted help for Setup requests for missing Exchange Server media and for HTTP 500 errors in Outlook on the web or the Exchange admin center after an update. Match the remediation to the actual symptom; for installation errors, Microsoft also points administrators to SetupAssist, and its FAQ directs them to a separate guide for failed CU or SU installations.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Understand the release cadence and support window

Microsoft describes a delivery model of one to two CUs a year. Its FAQ gives general H1/H2 targets around March and September, while noting that quality can move dates; these are targets, not guaranteed release dates. Security or time-zone updates are issued as needed. Microsoft says they can typically apply to the latest CU and the immediately previous CU, but applicability must be checked against the specific release.

Microsoft’s update FAQ describes different SU support windows: during mainstream support, relevant security fixes are provided for the two latest CUs; during extended support, the FAQ describes SUs for the latest CU. Release and support status can change, and Exchange 2016 and 2019 are now out of support unless the applicable ESU arrangement covers them. Check the current release and support information for the server’s version before committing to a maintenance plan.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.