IMPORTANT As of January 10, 2023, Microsoft no longer provides security updates or technical support for Windows 7 Service Pack 1 (SP1). For customers who need additional time to upgrade and modernize their devices running Windows Server 2008 R2 on Azure, we offer one additional year of Extended Security Updates on Azure only, beginning on February 14, 2023 and ending on January 9, 2024. This also applies to Azure Stack HCI, Azure Stack Hub, and other Azure products.

We recommend that you upgrade to a later version of Windows Server.

Upgrade to Windows 10: FAQ Learn more about upgrading Windows Server

Summary

This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) makes sure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates.

REMINDER Windows Server 2008 R2, Windows Embedded Standard 7, and Windows Embedded POS Ready 7 have reached the end of mainstream support and are now in extended security update (ESU) support. Windows Thin PC has reached the end of mainstream support; however, ESU support is not available.

As of July 2020, optional non-security releases for this operating system are no longer offered. Operating systems in extended support have only cumulative monthly security updates.

Verify that you have installed the required updates in the How to get this update section before installing this update.

Windows Server 2008 R2 Extended Security Updates third and final year of ESU ended on January 10, 2023. Many customers are taking advantage of Azures commitment to security and compliance and have moved to Azure to protect their Windows Server 2008 R2 workloads with free Extended Security Updates.

For customers who need additional time to upgrade and modernize their devices running Windows Server 2008 R2 on Azure, we offer one additional year of Extended Security Updates on Azure only, beginning February 14, 2023 and ending on January 9, 2024. This also applies to Azure Stack HCI, Azure Stack Hub, and other Azure products.

Customers who get the additional fourth year of free extended security updates (ESUs) must follow the procedures in KB4522133 to continue receiving security updates after extended support ended on January 10, 2023. For more information about ESU and which editions are supported, see KB4497181.

The steps to install, activate, and deploy ESUs remain the same. For more information, see Obtaining Extended Security Updates for eligible Windows devices for the Volume Licensing process. For embedded devices, contact your original equipment manufacturer (OEM). For more information, see the ESU blog.

NOTE For information about the various types of Windows updates, such as critical, security, driver, service packs, and so on, please see the following article. To view other notes and messages, see the Windows 7 and Windows Server 2008 R2 update history home page.

How to get this update

Before installing this update

IMPORTANT Customers who have purchased the Extended Security Update (ESU) for on-premises versions of these operating systems must follow the procedures in KB4522133 to continue receiving security updates. Extended support ended as follows:

  • For Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1, extended support ended on January 14, 2020.

For more information about ESU and which editions are supported, see KB4497181.

Prerequisites 

You must install the updates listed below and restart your device before installing the latest Rollup. Installing these updates improves the reliability of the update process and mitigates potential issues while installing the Rollup and applying Microsoft security fixes.

  1. The March 12, 2019 servicing stack update (SSU) (KB4490628). To get the standalone package for this SSU, search for it in the Microsoft Update Catalog. This update is required to install updates that are only SHA-2 signed.

  2. The latest SHA-2 update (KB4474419) released September 10, 2019. If you are using Windows Update, the latest SHA-2 update will be offered to you automatically. This update is required to install updates that are only SHA-2 signed. For more information on SHA-2 updates, see 2019 SHA-2 Code Signing Support requirement for Windows and WSUS.

  3. To get this security update, you must reinstall the "Extended Security Updates (ESU) Licensing Preparation Package" (KB4538483) or the "Update for the Extended Security Updates (ESU) Licensing Preparation Package" (KB4575903) even if you previously installed the ESU key. The ESU licensing preparation package will be offered to you from WSUS. To get the standalone package for ESU licensing preparation package, search for it in the Microsoft Update Catalog.

After you install the items above, we strongly recommend that you install the latest SSU. If you are using Windows Update, the latest SSU will be offered to you automatically if you are an ESU customer. To get the standalone package for the latest SSU, search for it in the Microsoft Update Catalog. For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

Install this update

Release Channel

Available

Next Step

Windows Update and Microsoft Update

Yes

This update is available through Windows Update. It will be downloaded and installed automatically. 

Microsoft Update Catalog

Yes

To get the standalone package for this update, go to the Microsoft Update Catalog website.

Windows Server Update Services (WSUS)

Yes

This update will automatically sync with WSUS if you configure Products and Classifications as follows:

Product: Windows Server 2008 R2

Classification: Security Updates

Restart information

You do not have to restart your device after you apply this update.

Removal information

Servicing stack updates (SSUs) make changes to how updates are installed and cannot be uninstalled from the device.

Update replacement information 

This update replaces the previously released update KB5017397.

File Information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

Note: The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

File name

File version

Date

Time

File size

mofinstall.dll

6.1.7601.26614

12-Jun-23

22:02

59,392

esscli.dll

6.1.7601.26614

12-Jun-23

22:02

266,240

mofd.dll

6.1.7601.26614

12-Jun-23

22:02

193,536

repdrvfs.dll

6.1.7601.26614

12-Jun-23

22:02

302,080

fastprox.dll

6.1.7601.26614

12-Jun-23

22:02

606,720

wbemcomn.dll

6.1.7601.26614

12-Jun-23

22:02

363,520

wbemcore.dll

6.1.7601.26614

12-Jun-23

22:02

774,656

wmiutils.dll

6.1.7601.26614

12-Jun-23

22:02

85,504

wbemprox.dll

6.1.7601.26614

12-Jun-23

22:02

29,184

xmllite.dll

1.3.1001.0

12-Jun-23

22:02

180,736

wdscore.dll

6.1.7601.26614

12-Jun-23

22:02

190,464

CntrtextInstaller.dll

6.1.7601.26614

12-Jun-23

22:02

143,872

drvstore.dll

6.1.7601.26614

12-Jun-23

22:02

324,096

dpx.dll

6.1.7601.26614

12-Jun-23

22:02

257,024

msdelta.dll

6.1.7601.26614

12-Jun-23

22:02

305,664

mspatcha.dll

6.1.7601.26614

12-Jun-23

22:02

35,328

PkgMgr.exe

6.1.7601.26614

12-Jun-23

20:47

209,920

cmiv2.dll

6.1.7601.26614

12-Jun-23

22:02

2,046,464

cmitrust.dll

6.1.7601.26614

12-Jun-23

22:02

297,472

locdrv.dll

6.1.7601.26614

12-Jun-23

22:02

228,352

WcmTypes.xsd

Not versioned

12-Jun-23

18:36

1,047

helpcins.dll

6.1.7601.26614

12-Jun-23

22:02

105,472

OEMHelpIns.dll

6.1.7601.26614

12-Jun-23

22:02

151,552

apds.dll

6.1.7601.26614

12-Jun-23

22:02

1,799,168

apss.dll

6.1.7601.26614

12-Jun-23

22:02

201,216

apircl.dll

6.1.7601.26614

12-Jun-23

22:02

223,744

CbsMsg.dll

6.1.7601.26614

12-Jun-23

20:47

28,672

CbsCore.dll

6.1.7601.26614

12-Jun-23

22:02

846,336

DrUpdate.dll

6.1.7601.26614

12-Jun-23

22:02

174,080

wrpint.dll

6.1.7601.26614

12-Jun-23

20:46

54,272

wcp.dll

6.1.7601.26614

12-Jun-23

22:02

1,912,832

cmiadapter.dll

6.1.7601.26614

12-Jun-23

22:02

120,832

smiengine.dll

6.1.7601.26614

12-Jun-23

22:02

697,856

smipi.dll

6.1.7601.26614

12-Jun-23

22:02

98,816

GlobalInstallOrder.xml

Not versioned

12-Jun-23

18:33

1,977,464

poqexec.exe

6.1.7601.26614

12-Jun-23

20:47

123,904

x86_installed

Not versioned

12-Jun-23

18:33

9

SvcIni.exe

6.1.7601.26614

12-Jun-23

20:47

16,384

wmicmiplugin.dll

6.1.7601.26614

12-Jun-23

22:02

351,744

ExtendedSecurityUpdatesAI.dll

6.1.7601.26614

12-Jun-23

20:47

141,312

File name

File version

Date

Time

File size

mofinstall.dll

6.1.7601.26614

13-Jun-23

16:32

76,800

esscli.dll

6.1.7601.26614

13-Jun-23

16:32

440,320

mofd.dll

6.1.7601.26614

13-Jun-23

16:32

280,064

repdrvfs.dll

6.1.7601.26614

13-Jun-23

16:32

454,144

fastprox.dll

6.1.7601.26614

13-Jun-23

16:32

909,824

wbemcomn.dll

6.1.7601.26614

13-Jun-23

16:32

529,920

wbemcore.dll

6.1.7601.26614

13-Jun-23

16:32

1,220,096

wmiutils.dll

6.1.7601.26614

13-Jun-23

16:32

137,216

wbemprox.dll

6.1.7601.26614

13-Jun-23

16:32

43,520

xmllite.dll

1.3.1001.0

13-Jun-23

16:32

198,656

wdscore.dll

6.1.7601.26614

13-Jun-23

16:32

271,872

CntrtextInstaller.dll

6.1.7601.26614

13-Jun-23

16:32

171,008

drvstore.dll

6.1.7601.26614

13-Jun-23

16:32

423,936

dpx.dll

6.1.7601.26614

13-Jun-23

16:32

399,872

msdelta.dll

6.1.7601.26614

13-Jun-23

16:32

452,096

mspatcha.dll

6.1.7601.26614

13-Jun-23

16:32

46,592

PkgMgr.exe

6.1.7601.26614

12-Jun-23

20:48

199,168

cmiv2.dll

6.1.7601.26614

13-Jun-23

16:32

3,749,888

cmitrust.dll

6.1.7601.26614

13-Jun-23

16:32

479,232

locdrv.dll

6.1.7601.26614

13-Jun-23

16:32

370,176

WcmTypes.xsd

Not versioned

31-Mar-23

18:07

1,047

helpcins.dll

6.1.7601.26614

13-Jun-23

16:32

142,336

OEMHelpIns.dll

6.1.7601.26614

13-Jun-23

16:32

222,720

apds.dll

6.1.7601.26614

13-Jun-23

16:32

2,174,464

apss.dll

6.1.7601.26614

13-Jun-23

16:32

235,520

apircl.dll

6.1.7601.26614

13-Jun-23

16:32

276,992

CbsMsg.dll

6.1.7601.26614

13-Jun-23

16:32

28,672

CbsCore.dll

6.1.7601.26614

13-Jun-23

16:32

977,408

DrUpdate.dll

6.1.7601.26614

13-Jun-23

16:32

204,288

wrpint.dll

6.1.7601.26614

13-Jun-23

16:32

60,928

wcp.dll

6.1.7601.26614

13-Jun-23

16:32

2,762,752

cmiadapter.dll

6.1.7601.26614

13-Jun-23

16:32

125,952

smiengine.dll

6.1.7601.26614

13-Jun-23

16:32

934,400

smipi.dll

6.1.7601.26614

13-Jun-23

16:32

104,448

GlobalInstallOrder.xml

Not versioned

30-Mar-23

11:23

1,977,464

poqexec.exe

6.1.7601.26614

12-Jun-23

20:48

142,336

amd64_installed

Not versioned

31-Mar-23

18:05

9

SvcIni.exe

6.1.7601.26614

12-Jun-23

20:48

17,920

wmicmiplugin.dll

6.1.7601.26614

13-Jun-23

16:32

525,824

ExtendedSecurityUpdatesAI.dll

6.1.7601.26614

12-Jun-23

20:48

179,712

mofinstall.dll

6.1.7601.26614

12-Jun-23

22:02

59,392

esscli.dll

6.1.7601.26614

12-Jun-23

22:02

266,240

mofd.dll

6.1.7601.26614

12-Jun-23

22:02

193,536

repdrvfs.dll

6.1.7601.26614

12-Jun-23

22:02

302,080

fastprox.dll

6.1.7601.26614

12-Jun-23

22:02

606,720

wbemcomn.dll

6.1.7601.26614

12-Jun-23

22:02

363,520

wbemcore.dll

6.1.7601.26614

12-Jun-23

22:02

774,656

wmiutils.dll

6.1.7601.26614

12-Jun-23

22:02

85,504

wbemprox.dll

6.1.7601.26614

12-Jun-23

22:02

29,184

xmllite.dll

1.3.1001.0

12-Jun-23

22:02

180,736

wdscore.dll

6.1.7601.26614

12-Jun-23

22:02

190,464

CntrtextInstaller.dll

6.1.7601.26614

12-Jun-23

22:02

143,872

drvstore.dll

6.1.7601.26614

12-Jun-23

22:02

324,096

dpx.dll

6.1.7601.26614

12-Jun-23

22:02

257,024

msdelta.dll

6.1.7601.26614

12-Jun-23

22:02

305,664

mspatcha.dll

6.1.7601.26614

12-Jun-23

22:02

35,328

PkgMgr.exe

6.1.7601.26614

12-Jun-23

20:47

209,920

cmiv2.dll

6.1.7601.26614

12-Jun-23

22:02

2,046,464

cmitrust.dll

6.1.7601.26614

12-Jun-23

22:02

297,472

locdrv.dll

6.1.7601.26614

12-Jun-23

22:02

228,352

WcmTypes.xsd

Not versioned

12-Jun-23

18:36

1,047

helpcins.dll

6.1.7601.26614

12-Jun-23

22:02

105,472

OEMHelpIns.dll

6.1.7601.26614

12-Jun-23

22:02

151,552

apds.dll

6.1.7601.26614

12-Jun-23

22:02

1,799,168

apss.dll

6.1.7601.26614

12-Jun-23

22:02

201,216

apircl.dll

6.1.7601.26614

12-Jun-23

22:02

223,744

CbsMsg.dll

6.1.7601.26614

12-Jun-23

20:47

28,672

CbsCore.dll

6.1.7601.26614

12-Jun-23

22:02

846,336

DrUpdate.dll

6.1.7601.26614

12-Jun-23

22:02

174,080

wrpint.dll

6.1.7601.26614

12-Jun-23

20:46

54,272

wcp.dll

6.1.7601.26614

12-Jun-23

22:02

1,912,832

cmiadapter.dll

6.1.7601.26614

12-Jun-23

22:02

120,832

smiengine.dll

6.1.7601.26614

12-Jun-23

22:02

697,856

smipi.dll

6.1.7601.26614

12-Jun-23

22:02

98,816

GlobalInstallOrder.xml

Not versioned

12-Jun-23

18:33

1,977,464

poqexec.exe

6.1.7601.26614

12-Jun-23

20:47

123,904

x86_installed

Not versioned

12-Jun-23

18:33

9

SvcIni.exe

6.1.7601.26614

12-Jun-23

20:47

16,384

wmicmiplugin.dll

6.1.7601.26614

12-Jun-23

22:02

351,744

ExtendedSecurityUpdatesAI.dll

6.1.7601.26614

12-Jun-23

20:47

141,312

References

For information on SSUs, see the following articles:

Learn about the standard terminology that is used to describe Microsoft software updates.

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.