Run Microsoft’s Exchange Server Health Checker on every on-premises Exchange server, then compare each server’s complete build and detected security update with Microsoft’s current build table. Also check product support and update eligibility, review Health Checker findings, and verify Extended Protection and Exchange Emergency Mitigation status. These checks help identify known gaps; only your server’s actual inventory and configuration can establish whether it is exposed.
1. Check every server’s full Exchange build
Use Microsoft’s Exchange Server Health Checker on each server, not just one server per organization. In the Exchange Information section, note the Build Number and Exchange IU or Security Hotfix Detected. Microsoft recommends this method for verifying the installed build and security hotfix details. [Microsoft build numbers and release dates]
The Exchange Management Shell command Get-ExchangeServer | Format-List Name,Edition,AdminDisplayVersion can help inventory servers and show their CU version, but it does not necessarily confirm an installed Security Update (SU) or Hotfix Update (HU). Use Health Checker, or confirm the Exsetup.exe file version, when checking the complete update level.
2. Compare the result with Microsoft’s current build table
Use the product-specific section of Microsoft’s Exchange build and release table. Match the full build number, product generation, release and published date. Confirm that the server has the latest security update applicable to its product and update path—not merely the expected cumulative update (CU).
Recommended Free Tools
#1 Best Overall
- More Secured Server Mounting Setup: RM-CI-T14 by Rackmount.IT IU rack mount kits have dedicated slots to safely install compatible Cisco Meraki models, including Cisco Meraki MX68, MX68W, MX68CW, and MX75.
- Improves Cable Management: All console ports of the Cisco Meraki appliance are brought to the front for easy access and user convenience — all while preventing overheating with custom-made cut-outs.
- Straightforward Installation Process: Mounting your appliance to a 19 inch shelf only takes 2-5 mins. as our network tray kits have everything a user needs — bolts, hex keys, zip ties, port labels, cables, and an assembly guide.
- Suitable for Any Type of Business: Our 1U rack shelf kits are designed to fit your appliance in 19-inch network rack shelves, making them ideal for small business owners, large corporations, and government agencies looking to improve their cloud management and network connectivity.
- Passionate for Smart Design and Customization: Rackmount.IT offers innovative solutions to common user needs by producing high-quality custom rack mounted shelf with excellent features that support major desktop appliance manufacturers.
The table changes when Microsoft releases updates, so check it at the time of assessment. For example, the table lists Exchange Server Subscription Edition (SE) RTM Sep26SU as build 15.2.2562.49, released September 8, 2026. That example is not a universal target: compare each server against the latest applicable entry for its product and eligibility.
3. Determine whether the product can still receive security updates
As of October 4, 2026, Exchange Server 2016 and Exchange Server 2019 have been out of support since October 14, 2025. Microsoft says customers enrolled in the Exchange 2016/2019 Extended Security Update (ESU) program are eligible for security updates beginning in December 2025 and later. Customers not enrolled in ESU should migrate to Exchange Server Subscription Edition to keep receiving the latest security updates. Check the organization’s actual ESU enrollment rather than assuming an older server can receive a current fix. [Microsoft Exchange Server 2016 and 2019 end-of-support announcement]
Rank #2
- Universal Compatibility: 19" Wide, Take 1U Space, Fits standard 19-inch network cabinets and server racks for seamless integration. Supported Models: SonicWall TZ570, SonicWall TZ670 and similar size small networking gear that does not have a native rack mount.
- Hinged Design: The both sides hinged design allows easy access to network connections at the rear of the device.
- Sturdy Construction: Crafted from high-quality steel, this 1U rack mount shelf offers robust support for your SonicWall desktop firewall or similar size devices.
- Space-Saving: Compact 1U Hinged Server Rack Shelf optimizes available rack space while securely mounting your firewall or some items similar in size to a Sonicwall.
- Hassle-Free Installation: No assembly required. Simple assembly ensures quick setup and deployment of your network security solution. Including M6 screws and cage nuts for mounting.
Use Microsoft’s Exchange Server supportability matrix to check supported operating systems and configuration compatibility as well as product lifecycle. A build comparison alone does not establish that the product, operating system and configuration are all supported.
4. Act on Health Checker findings and recheck
Review all Health Checker results, including findings about missing CUs, SUs, HUs and required manual actions. Follow Microsoft’s update guidance for the specific product and release, then rerun Health Checker: some updates require additional actions after installation. Keep Windows updated as well; Microsoft notes that operating-system vulnerabilities can contribute to an attack chain. [Microsoft Exchange build and release guidance]
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallRank #3
- Designed for SonicWall TZ570 and TZ670 firewalls
- Mounts appliance securely into standard 19-inch racks
- Ensures professional and organized cable routing
- Includes mounting hardware for quick installation
- Perfect for network closets, server rooms, or data centers
5. Verify Extended Protection
Check Health Checker’s Extended Protection prerequisite findings and confirm that the setting is configured according to the instructions for your Exchange version. Microsoft warns that disabling Extended Protection leaves Exchange vulnerable to known vulnerabilities. Exchange Server 2019 CU14 and later enables Extended Protection by default during setup; older supported versions have their own prerequisites and instructions. Do not apply an older-version procedure to a different product generation. [Microsoft Exchange Server Extended Protection guidance]
6. Check Exchange Emergency Mitigation status
Exchange Emergency Mitigation (EM) can automatically apply mitigations for some known threats actively exploited in the wild. The service requires outbound connectivity to Microsoft’s Office Config Service. Review whether the service is operating and whether it has applied a mitigation relevant to the server. A mitigation is temporary, not the security update that fixes the vulnerability: Microsoft says, “Each mitigation is a temporary, interim fix until you can apply the Security Update that fixes the vulnerability.” [Microsoft Exchange Emergency Mitigation Service documentation]
Rank #4
- 4x Intel i210 Gigabit LAN - Equipped with 4 genuine Intel i210-AT Gigabit ports for superior throughput, low CPU usage, and maximum stability. Perfect for standard rackmount soft routers, hardware firewalls, and VPN gateways.
- 1U Rackmount Chassis with Ears - Designed in a standard 1U rackmount form factor (440 x 127 x 44mm), shipping complete with rackmounting ears for seamless installation into standard 19-inch server racks and cabinets.
- Active Cooling with Internal Fan - Unlike mini cases, this 1U rack appliance features an integrated motherboard cooling fan, delivering continuous airflow to ensure optimal system temperatures during 24/7 heavy enterprise workloads.
- mSATA Storage & DDR3 Support - Powered by the efficient Intel J1900 Quad-Core CPU. Supports 1x DDR3L RAM (Up to 8GB), 1x mSATA SSD and 1x 2.5 inch SATA SSD/HDD. Includes 1x VGA and 4x USB.
- Auto-Start Jumper & Server Ready - Features an onboard Auto-Start Jumper for automatic power-on after an electrical outage. Ideal for remote server rooms, fully compatible with major firewall, Linux, and routing systems.
Record the assessment server by server
For a useful exposure review, keep a record for every server that includes:
- Server name, Exchange product generation and full build number.
- Detected IU or security hotfix, and the latest applicable update shown in Microsoft’s build table.
- Support and ESU status, where relevant.
- Health Checker findings and any required manual actions.
- Extended Protection status and EM service or mitigation findings.
This process identifies known update and configuration gaps; it does not certify a server as safe or prove whether an attacker has accessed it. Exposure depends on the actual build, update eligibility, configuration and findings for the specific server.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesQuick Recap
Best Value
- More Secured Server Mounting Setup: RM-SW-T10 by Rackmount.IT IU rack mount kits have dedicated slots to safely install compatible SonicWall firewall appliance models, including SonicWall TZ270, TZ370, and TZ470
- Improves Cable Management: With the provided CAT6 cables, pre-installed RJ45 couplers, and custom-made cut-outs, all console ports are brought to the front for easy access and user convenience — all while preventing overheating.
- Straightforward Installation Process: Mounting your appliance to a 19 inch shelf only takes 2-5 mins. as our network tray kits have everything a user needs — bolts, hex keys, zip ties, port labels, cables, and an assembly guide.
- Suitable for Any Type of Business: Our 1U rack shelf kits are designed to fit your appliance in 19-inch network rack shelves, making them ideal for small business owners, large corporations, and government agencies looking to improve their cloud management and network connectivity.
- Passionate for Smart Design and Customization: Rackmount.IT offers innovative solutions to common user needs by producing high-quality custom rack mounted shelf with excellent features that support major desktop appliance manufacturers.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
