Microsoft Pauses KB5002907 Update After Perpetual Office Licenses Deactivated
What Happened — Microsoft temporarily halted the optional KB5002907 update for Microsoft 365 Apps after multiple MSPs reported that the update deactivated, or removed, perpetual Office 2016 and Office 2019 installations, leaving devices “Unlicensed.”
Why It Matters for Trust & Control Assurance
- The incident highlights a gap in software update change‑management – a control area that continuous assurance programs must monitor, document, and evidence.
- Unintended license state changes can create audit‑ready evidence gaps and affect service‑continuity metrics that regulators and auditors scrutinize.
- Verisq’s Control Mapping capability provides a single source of truth for patch‑process controls, enabling you to capture, validate, and report on update‑related configuration changes.
Who Is Affected
- Enterprises and SMBs using perpetual Office 2016/2019 installations.
- Managed Service Providers (MSPs) that deploy updates on behalf of customers.
Recommended Actions
- Pause deployment of KB5002907 in your environment until Microsoft issues a fix.
- Conduct an inventory of Office installations and verify license status post‑update.
- Document the change‑management workflow and retain activation logs as audit evidence.
Technical Notes
- KB5002907 is an optional Windows Update targeting Microsoft 365 Apps installations older than 90 days.
- The update appears to remove and reinstall Office components; mixed‑bitness environments (32‑bit Office with 64‑bit Access Runtime) can fail, leaving the suite absent.
- Re‑entering the original product key restores activation, but the root cause is a mis‑applied update path.
Source: BleepingComputer