Search
  • For Individuals
      « Back
    • Windows Data Recovery

      Recovers lost or deleted Office documents, emails, presentations & multimedia files.

      Free Standard Professional Premium

    • Mac Data Recovery

      Recovers deleted files, photos, videos etc. on Mac.

      Free Standard Professional Premium

    • Photo Recovery

      Recover photos, videos, & audio files from all cameras and storage on Windows.

      Free Standard Professional Premium

    • Video Repair
    • Photo Repair
    • iPhone Data Recovery
  • For Business
      « Back
    • Email Repair & Converter

      Repair for Exchange Converter for EDB Converter for OST Converter for NSF Converter for OST MBOX Repair for Outlook

    • Database & File Repair

      Repair for MS SQL Repair for Access Repair for QuickBooks Software Repair for Excel Extractor for Windows Backup Repair for MySQL

    • Data Recovery & Erasure

      Data Recovery Professional Data Recovery Technician Mac Recovery for Technician Virtual Machine Recovery File Erasure Software Mobile Erasure Drive Erasure File Eraser Software File Eraser Software for Mac

    • Toolkit

      Exchange Toolkit Outlook Toolkit File Repair Toolkit MS SQL Toolkit Data Recovery Toolkit

    • Forensic

      Email Forensic Exchange Auditor Log Analyzer for MySQL Log Analyzer for MS SQL

  • Store
  • Partners
  • Services
  • Offers
  • Support

 

  • For Individuals
    DIY software for anyone who works with data.

    Windows Data Recovery Recovers lost or deleted Office documents, emails, presentations & multimedia files

    Free Standard Professional Premium

    Mac Data Recovery Especially for Mac users to recover deleted documents and multimedia files from macOS

    Free Standard Professional Premium

    Video Repair Windows Mac Repair multiple corrupt videos in one go. Supports MP4, MOV & other formats.

    StandardPremium

    Photo Recovery Windows Mac Recover photos, videos, & audio files from all cameras and storage on Windows.

    Standard Professional Premium

    iPhone Data Recovery Windows Mac Recover deleted photos, videos, contacts, messages etc. directly from iPhone & iPad

    Recover Erase Toolkit

    Photo Repair Windows Mac Repair multiple corrupt photos in one go. Supports JPEG & other formats.

    Standard Professional Premium


  • For Business
    • Email Repair
    • Email Converter
    • File Repair
    • Data Recovery & Erasure
    • Toolkit
    • Forensic

    Exchange Repair Repair corrupt EDB file & export mailboxes to Live Exchange or Office 365

    Outlook PST Repair Repair corrupt PST & recover all mailbox items including deleted emails & contacts

    OLM Repair Repair Outlook for Mac (OLM) 2011 & 2016 backup files & recover all mailbox items

    Exchange Toolkit Repair EDB & Exchange backup file to restore mailboxes, convert OST to PST, & convert EDB to PST

    Active Directory Repair Repair corrupt Active Directory database (Ntds.dit file) & extract all objects in original form

    EDB to PST Convert online & offline EDB file & extract all mailbox items including Public Folders in PST

    OST to PST Convert inaccessible OST file & extract all mailbox items including deleted emails in PST

    NSF to PST Convert IBM Notes NSF file & export all mailbox items including emails & attachments to PST

    MBOX to PST Convert MBOX file of Thunderbird, Entourage & other clients, & export mailbox data to PST

    OLM to PST Convert Outlook for Mac Data File (OLM) & export all mailbox data to PST in original form

    GroupWise to PST Convert GroupWise mail & export all mailbox items - emails, attachments, etc. - to PST

    EML to PST Convert Windows Live Mail (EML) file & export mailbox data - emails, attachments, etc. - to PST

    Office 365 to PST Connect to Office 365 account & export mailbox data to PST and various other formats

    DBX to PST Convert Outlook Express (DBX) file & export all mailbox data - emails, attachments, etc. - to PST

    SQL Repair Repair corrupt .mdf & .ndf files and recover all database components in original form

    Access Repair Repair corrupt .ACCDB and .MDB files & recover all records & objects in a new database

    QuickBooks Repair Repair corrupt QuickBooks® data file & recover all file components in original form

    MySQL Repair Repair MyISAM & InnoDB tables and recover all objects - keys, views, tables, triggers, etc.

    Excel Repair Repair corrupt Excel (.XLS & .XLSX) files and recover tables, charts, chart sheet, etc.

    BKF Repair Repair corrupt backup (BKF, ZIP, VHDX and .FD) files and restore complete data

    Database Converter Interconvert MS SQL, MySQL, SQLite, and SQL Anywhere database files

    PowerPoint Repair Repair corrupt PPT files and restore tables, header, footer, & charts, etc. like new

    File Repair Toolkit Repair corrupt Excel, PowerPoint, Word & PDF files & restore data to original form

    Data Recovery Windows Mac Recover lost or deleted data from HDD, SSD, external USB drive, RAID & more.

    Technician Toolkit

    Tape Data Recovery Retrives data from all types and capacities of tape drives including LTO 1, LTO 2, LTO 3, & others.

    Virtual Machine Recovery Recover documents, multimedia files, and database files from any virtual machine

    File Erasure Permanently wipe files and folders, and erase traces of apps and Internet activity.

    Standard Corporate

    Mobile Erasure Certified and permanent data erasure software for iPhones, iPads, & Android devices

    Drive Erasure Certified and permanent data erasure software for HDD, SSD, & other storage media Windows Mac

    Exchange Toolkit 5-in-1 software toolkit to recover Exchange database, convert EDB to PST, convert OST to PST, restore Exchange backup, and reset Windows Server password.

    Outlook Toolkit Comprehensive software suite to repair PST files, merge PST files, eliminate duplicate emails, compact PST files, and recover lost or forgotten Outlook passwords.

    File Repair Toolkit Powerful file repair utility to fix corrupt Word, PowerPoint, and Excel documents created in Microsoft Office. It also repairs corrupt PDF files and recovers all objects.

    MS SQL Toolkit 5-in-1 software toolkit to repair corrupt SQL database, restore database from corrupt backup, reset database password, analyze SQL logs, & interconvert databases.

    Data Recovery Toolkit Software helps to recovers deleted data from Windows, Mac and Linux storage devices. Also supports recovery from RAIDs & Virtual Drives.

    Email Forensic Advanced email forensic solution for cyber experts to audit, analyze, or investigate emails & gather evidences.

    Exchange Auditor Exchange Server monitoring solution to automate audits, scans and generate reports ìn real-time.

    Log Analyzer for MySQL Analyze forensic details of MySQL server database log files such as Redo, General Query, and Binary Log.

    Log Analyzer for MS SQL Track & analyze MS SQL Server database transactions log files.

    STELLAR EMAIL FORENSIC

    Advanced email forensic tool to analyze and collect the mailbox data of email clients

    Learn More arrow


    All Products

    All Products

    All Products

    All Products

  • Our Partners
  • Lab Services
  • Trending Searches

    Data Recovery

    Photo Recovery

    Video Repair

    iPhone Data Recovery

    File Erasure Software

    Exchange Repair

    OST to PST

    PST Repair

    Raid Recovery

    MS SQL Repair

  • English Deutsch Français Nederlands Italiano Español 日本語 简体中文
  • Support
Exchange Server 5 minute read

How to Install Security Update on Exchange Server 2016 CU22

Published on November 23rd, 2021
Ravi Singh
Written By
Ravi Singh
Shaun Hardneck
Approved By
Shaun Hardneck

Summary: Exchange Server 2016 Cumulative Update 22 or CU22 was released in September 2021, introducing Microsoft Exchange Emergency Mitigation Service, a built-in version of the EOMT tool to mitigate risks and newer threats. With this release, the pre-requisites for upgrading the Exchange Server to CU22 or later have changed. In this blog, we have discussed steps to install the Exchange Server 2016 CU22 update and November 2021 Security Update by following Microsoft's recommendations.

How to Install Security Update on Exchange Server 2016 CU22

Microsoft has released critical security updates to patch a remote code execution vulnerability CVE-2021-42321 found in Exchange 2016 (CU22) and 2019 (CU10, CU11, CU21). The November 2021 security updates are available for the following Exchange Server builds,

  • Exchange Server 2013 CU23
  • Exchange Server 2016 CU21 and CU22
  • Exchange Server 2019 CU10 and CU11

The vulnerability affects the on-premises Exchange Servers, including Hybrid Exchange. If your organization is running on earlier CU, we recommend you upgrade to the latest CU immediately to patch your server and continue receiving the latest Security Updates.

However, some users who upgraded to Exchange Server 2016 CU22 and installed the security patches released for CU22 reported failed installation issues. In such cases, you can’t roll back to the previous version and require to set up a new server if the problem is not fixed.

In this blog, we have discussed steps to install the CU22 and November 2021 security updates on Exchange Server 2016 correctly and avoid post-install issues or failed update scenarios that can render the server unusable.

Contents

  • Steps to Install Exchange 2016 Server Updates
  • Conclusion

Steps to Install Exchange 2016 Server Updates

To install Cumulative Update 22 (CU22) and November 2021 Security Updates on your Exchange Server 2016, follow these steps,

Step 1: Download the Exchange Server CU22 Build

You can directly upgrade to CU22 from RTM or CU1 build. But before downloading the CU22 build, check your current CU by running the following command in Exchange Management Shell

Get-ExchangeServer | fl Name,Edition,AdminDisplayVersion

Then visit this page to download the Exchange Server 2016 CU22 update and mount the downloaded ISO.

Step 2: Prepare Server for Upgrade

To install Exchange Server CU22 correctly and prevent issues after upgrading, install the pre-requisites and prepare the server for CU22 upgrade.

  • Install .NET 4.8 framework

    Download and install .NET 4.8 framework on your Exchange Server 2016.

    • Install IIS URL Rewrite Module 2.1

      Starting September 2021, Exchange Server 2016 CU22 requires the IIS URL Rewrite module for Microsoft Exchange Emergency Mitigation Service. Download and install the IIS URL Rewrite Module v2.1 on your Exchange Server 2016. Reboot the server after installing the IIS URL Rewrite module.

      • Prepare the Schema

        To prepare the Schema, open Command Prompt as administrator and navigate the mount location using the ‘cd’ command. For instance, cd F:

        Then run the following command to prepare the Schema,

        \Setup.exe /IAcceptExchangeServerLicenseTerms_DiagnosticDataOff /PrepareSchema

        • Prepare Active Directory

        To prepare Active Directory for CU22 upgrade, run the following command in elevated Command prompt window,

        \Setup.exe /IAcceptExchangeServerLicenseTerms_DiagnosticDataOff /PrepareAD

        • Prepare All Domains

        To prepare all domains, run the following command in Command Prompt as administrator,

        \Setup.exe /IAcceptExchangeServerLicenseTerms_DiagnosticDataOff /PrepareAllDomains

        Reboot the server.

        Step 3: Put the Exchange Server in Maintenance Mode

        To put your Exchange Server 2016 into maintenance mode for CU22 upgrade, run the following commands in Exchange Management Shell as administrator,

        Set-ServerComponentState -Identity “ServerName” -Component HubTransport -State Draining -Requester Maintenance

        The command sets the HubTransport component in the draining state.

        Set-ServerComponentState “ServerName” -Component ServerWideOffline -State Inactive -Requester Maintenance

        The command puts the server into maintenance mode. To verify the server is in maintenance mode, run the following command,

        Get-ServerComponentState “ServerName” | Select Component, State

        Step 4: Install Exchange Server 2016 CU22

        Now you are ready to install and upgrade the Exchange Server 2016 to CU22 build. You can launch the Setup.exe from the mount location to upgrade using the graphical user interface (GUI).

        You may also use elevated Command Prompt window to install the CU22 in unattended mode using the following command,

        <MountDriveLetter>\setup.exe /m:upgrade /IAcceptExchangeServerLicenseTerms_DiagnosticDataON

        For instance,

        F:\ setup.exe /m:upgrade /IAcceptExchangeServerLicenseTerms_DiagnosticDataON

        After the installation, remove the server from maintenance mode using the following command,

        Set-ServerComponentState “ServerName” –Component ServerWideOffline –State Active –Requester Maintenance

        Run following command in EMS to verify the server is out of maintenance mode,

        Get-ServerComponentState

        Then restart the server and install the November 2021 Security Updates.

        Step 5: Install November 2021 Security Updates to CU22

        Download the November 2021 Security Updates released for Exchange Server 2016 CU22 build and follow these steps to install them,

        • Open the Command Prompt as administrator and navigate to the location using the ‘cd’ command where security updates are downloaded. For instance,

        cd C:\Users\Administrator\Downloads\

        • Then run following command to start installing the security updates,

        .\UpdateFileName.msp

        Or .\Exchange2016-KB5007409-x64-en.msp

        • Click ‘Open‘ and then follow the wizard to install the security updates.

        Step 6: Run HealthChecker Script

        HealthChecker.ps1 is a PowerShell script that helps you identify issues and vulnerabilities on your server. It helps you check the server’s health and patch your server against the new threat by providing detailed information. To run the HealthChecker.ps1 script, download the PowerShell script and then follow these steps,

        • Open Command Prompt as administrator
        • Run the following command,

        .\HealthChecker.ps1 –BuildHtmlServersReport

        •  This creates an HTML report at the same location where the script is located. Open the HTML report to check the server’s health. Fix the issues and patch the vulnerabilities if found.

        Conclusion

        Before installing Exchange Server Security and Cumulative Updates, check the pre-requisites and Known issues listed on the KB pages. Also, install the builds on a test Exchange Server machine. It will help you identify and fix issues before deploying them to the production server.

        However, if the update fails, it can render the server unusable and require setting up a new Exchange Server. This can lead to extended downtime, especially when you don’t have a backup. In such cases, you can rely on Exchange recovery software, such as Stellar Repair for Exchange, to recover mailboxes from failed servers and export them to your newly set up Exchange Server directly. If you have any questions or need more help related to updating or recovering failed Exchange Server, leave a comment down below.

        About The Author

        Ravi Singh

        Ravi Singh is a Senior Writer at Stellar®. He is an expert Tech Explainer, IoT enthusiast, and a passionate nerd with over 6 years of experience in technical writing. He writes about Data Recovery, File Repair, Email Migration, Linux, Windows, Mac, and DIY Tech. Ravi spends most of his weekends working with IoT devices and playing games on the Xbox. He is also a solo traveler who loves hiking and exploring new trails.

        Best Selling Products

        Stellar Repair for Exchange

        Software recommended by MVPs & Administr

        Read More

        Stellar Toolkit for Exchange

        5-in-1 suite of specialized tools, highl

        Read More

        Stellar Converter for EDB

        Stellar Converter for EDB is a professio

        Read More

        Stellar Converter for OST

        Powerful software trusted by Microsoft M

        Read More

        1 comment

        1. David says:
          March 3, 2022 at 3:44 am

          When installing Exchange 2016 CU22 security updates, do I need to install all of the preceding update as well?
          I have E2016 CU22, if I install CU22 SU3 do I need to install CU22 SU1 and CU22 SU2 as well ?

          Reply

        Leave a comment Cancel reply

        Your email address will not be published. Required fields are marked *

          −  6  =  1

        Table of Contents    

        1. Steps to Install Exchange 2016 Server Updates
        2. Conclusion

        Categories

        Related Posts

        Hackers Deploying IceApple Exploitation Framework on Hacked Exchange Servers
        Exchange Server

        Hackers Deploy IceApple Post-Exploitation Framework on Hacked Exchange Servers

        Stellar Author Ravi Singh May 16, 2022 Read More
        Hive Ransomware Affiliate Targeting Microsoft Exchange Servers
        Exchange Server

        Hive Ransomware Affiliate Targeting Microsoft Exchange Servers

        Stellar Author Ravi Singh April 25, 2022 Read More
        How to Disable Circular Logging in Exchange Server
        Exchange Server

        How to Disable Circular Logging in Exchange Server

        Stellar Author Ravi Singh April 22, 2022 Read More

        Stellar Official Website

        Stellar Data Recovery Inc.
        48 Bridge Street Metuchen,
        New Jersey 08840,
        United States

        ALSO AVAILABLE AT

        About

        • About us
        • Career
        • ISMS Policy
        • Privacy Policy
        • Terms of Use
        • License Policy
        • Refund Policy
        • End User License Agreement

        RESOURCES

        • Blog
        • Articles
        • Product Videos
        • Knowledge Base
        • Case Studies
        • Whitepapers
        • Software Catalog

        NEWS & EVENTS

        • News
        • Events

        PARTNERS

        • Affiliates
        • Resellers
        • Distributors

        Useful Links

        • Contact Us
        • Support
        • Special Offers
        • Student Discounts
        • Awards & Reviews
        • Downloads
        • Store
        • Sitemap
        Follow Us

        Stellar & Stellar Data Recovery are Registered Trademarks of Stellar Information Technology Pvt. Ltd. © Copyright 2022 Stellar Information Technology Pvt. Ltd. All Trademarks Acknowledged.

        DMCA.com Protection Status
        We use cookies on this website. By using this site, you agree that we may store and access cookies on your device Read More Got it!