Home » Highlight » SharePoint 2016 update: how to apply the latest patches

SharePoint 2016 update: how to apply the latest patches

As of the 11th of June 2019 Microsoft released a new security update for Microsoft SharePoint Server 2016. This article shows the steps on how to simply deploy Microsoft SharePoint 2016 update. Currently there are 3 methods supported:

  1. Microsoft Update
  2. Microsoft Update Catalog
  3. Microsoft Download Center

This article refers to the first method. The entire process is straight forward. It is just a matter of enabling the Microsoft Update engine to search for other Microsoft products when updating Windows. Whereas this method makes it easy to automatically download and apply for the latest SharePoint 2016 Updates offers less control on how to install the patches itself. In general SharePoint updates require a staging and install phase. This is all prior to the actual configuration of the SharePoint Update. The good news is Microsoft made it very easy as the only additional step after installing the update is to run the main SharePoint Product Configuration Wizard or “PSConfigGUI.exe”. Default location for this one is:

“C:\Program Files\Common Files\microsoft shared\Web Server Extensions\16\BIN\psconfigui.exe”

What’s included in the SharePoint 2016 update as of June 2019?

This update as per KB 4464594 article includes the following fixes and improvements:

Next part of the article show the steps to install SharePoint 2016 updates. Before proceeding it is strongly advised to have a working backup of the entire SharePoint Application. Also Permissions for the account running the SharePoint update are crucial. This account should have:

  • SecurityAdmin fixed server role on the SQL Server instance
  • db_owner fixed database role on all databases that are to be updated
  • Local Administrator on the SharePoint server(s) to run the Microsoft PowerShell cmdlets

How to install SharePoint 2016 update

On the Windows Server(s) where the SharePoint components are running (Central Admin, Web Servers, App Servers) the first step is to enable the option to obtain updates for all Microsoft products installed. At this point at the next run the Microsoft Update will include the SharePoint Server ones and other components mainly dependencies like .NET, SQL and other popular libraries depending on installation.

domalab.com SharePoint 2016 Update

In the meantime by browsing the SharePoint Central Administration Portal > Upgrade and Migration section the link to verify the current status for the major components in the SharePoint Farm.

domalab.com SharePoint 2016 Update

The Manage Patch Status shows the current version and the install status for each component. It is possible to break down by Farm and Servers. In this case as a test deployment all components sit on the same Server.

This is useful for Production environments with 2 or even 3 Tiers deployments. The update process needs to be repeated on all Servers (Web and App).

From the Microsoft Update the latest SharePoint 2016 Update is now visible. Everything is now ready to install the patches.

domalab.com SharePoint 2016 Update

At the completion and visiting again the Patch Status in the Central Admin it shows the latest SharePoint 2016 Update installed.

domalab.com SharePoint 2016 Update

Next step is to validate the latest update by running the SharePoint Product configuration wizard.

domalab.com SharePoint 2016 Update

The wizard will automatically stop the IIS and SharePoint services before proceeding with the configuration update.

The process is fairly quick are re-runs the 10 stages as the first time configuration install and update the necessary components.

domalab.com SharePoint 2016 Update

The wizard now displays configuration completed successfully for the selected SharePoint Farm / ConfigDB.

domalab.com SharePoint 2016 Update

A final look at the Central Admin to confirm Patch Status.

domalab.com SharePoint 2016 Update

What if the SharePoint Farm is a 2 or 3 Tiers deployment? The following shows the steps sequence (from Microsoft article):

  1. Notify users that the farm will not be available during the update.
  2. Remove all web servers
  3. Run the update to install on the Application server that hosts Central Administration
  4. Run the update on all other Application servers that host Search components. Do not run the SharePoint Products Configuration Wizard on these servers at this time.
  5. Review the upgrade log files to verify that all the application servers were updated successfully. The upgrade log file and the upgrade error log file are located at %COMMONPROGRAMFILES%\Microsoft Shared\Web server extensions\16\LOGS.
  6. Log on to the first Web Server.
  7. Run the update on the Web Server.
  8. Run the update on the remaining Web Servers
  9. Review the upgrade log files to verify that all the Web Servers were updated successfully.
  10. Run the SharePoint Products Configuration Wizard on the Central Administration server. This will upgrade the configuration database and upgrade each content database.
  11. Run the SharePoint Products Configuration Wizard on the other App Servers.
  12. Run the SharePoint Products Configuration Wizard on the first Web Server.
  13. Repeat the preceding step for each remaining Web Server.
  14. Verify update completion and success.
  15. Add the remaining Web Servers to the Central Admin.
  16. Notify users that the farm is available.

Illustrates how you take each front-end web server offline, patch it and bring back online. Run SharePoint Products Configuration Wizard on each application server, and then run SharePoint Products Configuration Wizard on each front-end web server.


About the author

Michele Domanico

Passionate about Virtualization, Storage, Data Availability and Software Defined Data Center technologies. The aim of Domalab.com is sharing with the Community the knowledge and experience gained with customers, industry leaders and like minded peers. Always open to constructive feedback and new challenges.

Add Comment

Click here to post a comment

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Subscribe to Blog via Email

Enter your email address to subscribe to this blog and receive notifications of new posts by email.

Browse articles

September 2023

Articles by Category


error: Content is protected !!
%d bloggers like this: