The issue seems to be that Microsoft has started to reuse KB#s for updates across different channels, meaning update KB 5044284 (the update in question) can be a Security update for Windows (Desktop) 11, and be an optional OS upgrade for Windows (Server) 2022, just shaeing the same name.

Because that’s obviously a wonderful idea with no potential downsides.

That appears to be what happened here, but additionally a mistake was made and the Server patch was labelled with the details (that it’s just a security update) for the Desktop one.

Also doesn’t help that Microsoft only has one documentation page for any given update number, and the one for this one only lists the details of the desktop update.

Rip to those admins who woke up to a fleet of untested unlicensed servers

clap clap “Oh, good. My slow-clap processor made it into this thing.”

Maybe Microsoft will be giving a discount on the licenses to the affected people