

We recommend that you update all on-premises Exchange Servers with the April 2021 security updates using your usual update process. Is there a specific order of installation for the April 2021 security updates? No, Exchange 2010 is not affected by the vulnerabilities fixed in the April 2021 security updates.


Is there no update for Exchange Server 2010? The best way to be prepared for new updates is to keep your environment current. You should expect us to continue releasing updates for Exchange Server in the future. We are always looking for ways to make Exchange Server more secure. Microsoft regularly releases Exchange Server security updates on ‘patch Tuesday’. Why are there security updates two months in a row? Servers or workstations running only Microsoft Exchange Management Tools (no Exchange services) do not need to apply these updates.
#Microsoft office updates and ask woody install
Please note that if March EOMT is ran after April updates are installed, it will mistakenly mention that systems are possibly vulnerable (As EOMT is not aware of April updates).ĭo I need to install the updates on ‘Exchange Management Tools only’ workstations? You should update your servers as soon as possible. Therefore, running March 2021 security tools and scripts will not mitigate the vulnerabilities fixed in April 2021. The vulnerabilities fixed in the April 2021 updates are different from those we fixed before. We strongly recommend that you keep your environments current.Ĭan we use March 2021 mitigation scripts (like EOMT) as a temporary solution? There are 47 unsupported CUs for the affected versions of Exchange Server, and it is not sustainable to release updates for all of them.

You should update your Exchange Servers to supported CUs and then install the SUs. In March, we took unprecedented steps and released SUs for unsupported CUs because there were active exploits in the wild. No, we have no plans to release the April 2021 security updates for older or unsupported CUs. Is Microsoft planning to release April 2021 security updates for older (unsupported) versions of Exchange CUs? msp file, but instead run the install from an elevated CMD prompt. If you are installing an update manually, do not double-click on the. Customers who installed the March 2021 security updates for supported CUs can install the April 2021 security updates and be protected against the vulnerabilities that were disclosed during both months. Yes, our security updates are cumulative. You do not need to re-run the Hybrid Configuration Wizard (HCW) after applying updates.ĭo the April 2021 security updates contain the March 2021 security updates for Exchange Server? While Exchange Online customers are already protected, the April 2021 security updates do need to be applied to your on-premises Exchange Server, even if it is used only for management purposes. My organization is in Hybrid mode with Exchange Online. If you encounter errors during or after installation, see Repair failed installations of Exchange Cumulative and Security updates. Make sure to follow the ExchangeUpdateWizard instructions and best practices for installation of updates carefully, including when to install using elevated command prompt. If you encounter errors during or after installation of Exchange Server updates Then click the “Tell me the steps” button, to get directions for your environment. Go to and choose your currently running CU and your target CU. Running this script will tell you if any of your Exchange Servers are behind on updates (CUs and SUs). Use the Exchange Server Health Checker script, which can be downloaded from GitHub (use the latest release), to inventory your servers. More details about specific CVEs can be found in Security Update Guide (filter on Exchange Server under Product Family). Exchange Online customers are already protected and do not need to take any action.įor additional information, please see the Microsoft Security Response Center (MSRC) blog. These vulnerabilities affect Microsoft Exchange Server. Although we are not aware of any active exploits in the wild, our recommendation is to install these updates immediately to protect your environment. Vulnerabilities addressed in the April 2021 security updates were responsibly reported to Microsoft by a security partner. msp from elevated command prompt (see Known Issues in update KB article). IMPORTANT: If manually installing security updates, you must install. These updates are available for the following specific builds of Exchange Server: Microsoft has released security updates for vulnerabilities found in:
