Updates for SharePoint Server 2016 (March 2022 CU)

A new cumulative update (March 2022 CU) has been released for SharePoint Server 2016.

This CU includes both Feature Pack 2, available since the September CU (September 2017 CU), and the earlier Feature Pack 1.

SP Build:
16.0.5290.1000 (Language independent CU)

SharePoint 2016 CU – KB articles describing the CU:

  • KB 5002176 – March 2022 Update for SharePoint Server 2016 (language independent)
  • No new language-dependent package was released for this CU. Use the latest available language CU: KB 5002118 (January 2022 CU).

SharePoint Server 2016 CU – CU download links:

After installation, remember to run the SharePoint 2016 Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

  1. language independent components (core CU for this release)
  2. language-dependent components (latest available language CU: KB 5002118, January 2022 CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server 2016 farm, you must reinstall the language-dependent update afterwards.

Remember to keep Distributed Cache updated as well as SharePoint. See How to update Distributed Cache correctly (in Czech).

Note for this CU:

SharePoint Enterprise Server 2016 must already be installed. This update is distributed for manual download and installation only; a computer restart is not required.

The Appinv.aspx page is blocked in an iframe for security reasons. A farm administrator can permit trusted domains, one per invocation, with the following commands; wildcard domains such as *.contoso.com are also supported:

add-pssnapin *
$f=get-spfarm
$f.AddGenericAllowedListValue("AllowIframeAppAuthorizePageDomains","<enable domain name>")
$f.update()

If adding the list value fails because it already exists under the farm, use AllowIframeAppAuthorizePageDomains2 instead of AllowIframeAppAuthorizePageDomains in the AddGenericAllowedListValue call and ensure the March 2022 SharePoint Server updates are installed.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server 2016

The language-independent package KB 5002176 includes this SharePoint fix:

  • Fixes an issue where certain edge cases prevent the AllowIframeAppAuthorizePageDomains setting from taking effect. See KB5005546.

Fixes for other components (requirements are stated with each fix):

  • KB 5002176 also strengthens security in Project Server 2016.

Komentáře