Because .970 lacks some later servicing stack updates, you may need to manually download and install the latest Servicing Stack Update (SSU) before newer cumulative updates will succeed.
Improved the Host Network Service (HNS) to better support overlay network drivers. This was critical for connecting containers across multiple hosts using Docker Engine in Swarm Mode.
For organizations looking to deploy Windows Server 2016 Build 14393.970, Microsoft provides several installation options: Windows Server 2016 Build 14393.970 En-US April 2017
In 2017, Nano Server was still a primary deployment option for host and guest VMs, though later versions shifted it to a container-only role.
The infamous CVE-2017-0199 was address in an out-of-band update after April Patch Tuesday, meaning early adopters of 14393.970 before April 20, 2017, were still vulnerable. Because
The April 2017 update cycle focused on stabilizing core infrastructure and addressing critical vulnerabilities. Security Hardening
Thus, is effectively the original Server 2016 with all cumulative updates applied up through April 2017. This is not a fresh feature update but a hardened, patched version of the RTM. For organizations looking to deploy Windows Server 2016
Windows Server 2016 Build 14393.970, released in April 2017, represents a critical point in the early lifecycle of Microsoft's cloud-ready operating system