This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 12%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
Hi, I have Exchange Server 2016 that is currently on CU 20 and I would like to upgrade it to the latest CU 23. We are in Hybrid and on prem is primarily used for SMTP relay and initial on boarding of users/mailboxes that are then migrated to O365. I am looking for upgrading on Prem exchange in hybrid mode process. There is lots of documentation but that relates to on prem only upgraded. Anything different that I would need to do for Hyrbid environment.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(262.40000000000003, 35%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EXQ%3C/text%3E%3C/svg%3E)
Just checking in to see if above information was helpful.
If the issue has been resolved, please mark the helpful replies as answers.
If the answer is helpful please click on ACCEPT ANSWER as it could help other members of the Microsoft Q&A community who have similar questions and are looking for solutions.
Nope, its really the same.
You are pretty far behind so its important to catch up ASAP.
first prep the forest: (You can skip this step if this is a single domain AD forest)
Then run setup and upgrade to CU23:
Then upgrade to the lastest security updates:
Then enable Exchange Extended Protection:
Thanks Andy. I read at couple of places to use the MyTenantOrganizationConfig.xml switch, do you know if this is needed for Hybrid setp.
Setup.exe /PrepareAD /TenantOrganizationConfig MyTenantOrganizationConfig.xml /IAcceptExchangeServerLicenseTerms
Nope not needed! The org name already exists so no need to add that switch I should add that I have never had to use that switch.
See:
If you run into this issue, then follow those instructions
Hi Andy, so we did the upgrade this past weekend and it went well. Just took longer than expected. We are now on Exchange 2016 CU23 Apr24HU. We ran the March 2024 SU and then the April Hotfix. I did run exchange health checker, and it is still complaining about the below:
Security Vulnerability
CVE-2022-24516, CVE-2022-21979, CVE-2022-21980, CVE-2022-24477, CVE-2022-30134, CVE-2024-21410 (Why it is referring to 2022 updates?) Any idea what needs to happen here?
Extended Protection is not configured (I ran prerequisites, and it was failing so decided to leave it for now.)
Hi, Mohsauga
From your description, I understand that you are experiencing a security vulnerability.
Because Microsoft Exchange Server 2016 Cumulative Update 23 was released on April 20, 2022, a security vulnerability in CVE-2022 is expected.
Considering that you have installed the latest fix, but the fix may not cover all vulnerabilities, it is recommended that you observe for a while for simplicity. If the security issue persists, you can still install the fix. More information can be found Security Update Guide - Microsoft
In addition, you could still try the following suggestions:
1.Reboot after system update.
2.Updated health check to detect the latest fixes.
If my answer is helpful to you, please mark it as the answer so that other users can refer to it. Thank you for your support and understanding.