Hello Team,

We have in our company some old servers – Windows Server 2012R2. We don’t have ESU.
Now we need to rebuild some of them and install only security patches.

I don’t want to install all single security patches and my patching strategy is:
1. Install cumulative patch KB2919355 and some other patches according to the KB below:

https://www.microsoft.com/en-us/download/details.aspx?id=42334

2. Install the latest SSU(As we don’t have ESU the latest SSU is from september 2023):
KB5030329 2023-09 Servicing Stack Update for Windows Server 2012 R2 for x64-based Systems

3. Install below patches(We don’t have ESU so the latest patches are from September and October):
KB5031419 2023-10 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems
KB5031407 2023-10 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems
KB5031355 2023-10 Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 for x64-based systems
KB5029915 2023-09 Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 R2 for x64
KB5031008 2023-10 Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 R2 for x64

And now I have 2 questions:
1. Is this patching strategy correct?
2. If I install KB5031419 2023-10 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems do I still need to install KB5031407 2023-10 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems or this patch i already included in Rollup?

​Hello Team,We have in our company some old servers – Windows Server 2012R2. We don’t have ESU.Now we need to rebuild some of them and install only security patches.I don’t want to install all single security patches and my patching strategy is:1. Install cumulative patch KB2919355 and some other patches according to the KB below:https://www.microsoft.com/en-us/download/details.aspx?id=423342. Install the latest SSU(As we don’t have ESU the latest SSU is from september 2023):KB5030329 2023-09 Servicing Stack Update for Windows Server 2012 R2 for x64-based Systems3. Install below patches(We don’t have ESU so the latest patches are from September and October):KB5031419 2023-10 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based SystemsKB5031407 2023-10 Security Only Quality Update for Windows Server 2012 R2 for x64-based SystemsKB5031355 2023-10 Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 for x64-based systemsKB5029915 2023-09 Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 R2 for x64KB5031008 2023-10 Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 R2 for x64And now I have 2 questions:1. Is this patching strategy correct?2. If I install KB5031419 2023-10 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems do I still need to install KB5031407 2023-10 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems or this patch i already included in Rollup?  Read More

​