How to check your Exchange Server version

Exchange Server gets its own updates, separate from Windows. Which one is for your server depends on the version (Subscription Edition, 2019 or 2016) and, for Exchange Server 2019, on the cumulative update (CU) installed: CU14 and CU15 each get their own security update every month.

The quickest way: Exchange Management Shell

On an Exchange server, open the Exchange Management Shell and run:

> Get-Command ExSetup.exe | ForEach-Object { $_.FileVersionInfo }

ProductVersion is the build of the server, security and hotfix updates included, for example 15.02.1748.051. The command prints version numbers only, nothing about your mailboxes or users.

Get-ExchangeServer | Format-List Name, Edition, AdminDisplayVersion shows the cumulative update of every server of the organization, but not the security updates installed on top of it. Microsoft's Exchange Server Health Checker shows both, with the name of the latest update installed.

Which version and cumulative update is it?

A lower build in the same line means that the latest security update is not installed yet.

Security updates and hotfix updates

• Security updates (SU) fix vulnerabilities and come out on Patch Tuesday, not every month.
• Hotfix updates (HU) bring fixes beyond security, and sometimes new features, on other days.

Both install on top of a cumulative update and include the previous ones.

End of support

Since the end of support, Microsoft releases the security updates of Exchange Server 2019 and 2016 only to organizations enrolled in the paid Extended Security Update (ESU) program: they are not on Microsoft Update. The others should move to Exchange Server Subscription Edition.