Is Any Server in Your Business Running an Operating System That’s About to Stop Being Patched?
Windows 10 End of Life has understandably got a lot of attention. What’s had less airtime is that several versions of Windows Server, the operating system quietly running email, files, and business-critical applications behind the scenes, are heading toward their own support deadlines around the same time, some considerably sooner than businesses expect.
Why This Isn’t One Single Deadline
Unlike Windows 10, which has one well-known cut-off, Windows Server support runs across several different versions, each on its own timeline. A business could easily be running two or three different server versions across its infrastructure, each facing a different deadline, without anyone having mapped that out in one place.
Windows Server 2012 and 2012 R2: The Most Urgent
These versions left mainstream support on 9 October 2018, then moved into extended support, which itself ended on 10 October 2023. Since then, they’ve only kept receiving security patches through a paid Extended Security Updates programme, and that programme runs out completely on 13 October 2026, the same date as the Windows 10 consumer ESU deadline originally carried. After that date, there is no further extension available at all, any business still running Server 2012 or 2012 R2 will be on a genuinely unsupported, unpatched operating system.
Windows Server 2016: The Next One Along
Windows Server 2016 left mainstream support on 11 January 2022 and has been in its extended support phase since, still receiving free security updates. That extended support runs out on 12 January 2027. As things stand, Microsoft has not announced an Extended Security Updates programme for Server 2016 beyond that date, so after 12 January 2027, businesses still running it should expect no further security patches at all unless Microsoft announces an ESU option closer to the date.
Windows Server 2019: Not Urgent Yet, But Worth Having on the Radar
Windows Server 2019 left mainstream support on 9 January 2024 and remains in extended support, with free security updates continuing until 9 January 2029. No immediate action is needed, but it’s worth factoring into any longer-term infrastructure planning.
Windows Server 2022: A Servicing Change, Not an End-of-Support Cliff
Windows Server 2022 moves from mainstream to extended support on 13 October 2026, the same date as the 2012/2012 R2 cut-off, which can make it look more urgent than it actually is. This is not an end-of-support event: extended support means it continues receiving free security updates through to 14 October 2031, Microsoft simply stops adding new features or taking non-security requests. It’s a good natural prompt to start planning ahead, not an urgent migration trigger on its own.
Windows Server 2025: The Current Full-Support Version
For any new server deployments, or businesses actively planning a migration, Windows Server 2025 is the current Long-Term Servicing Channel release, with mainstream support running until October 2029 and the longest runway of any version ahead of it.
Why Running an Unsupported Server Is a Bigger Risk Than an Unsupported Laptop
A server typically holds or provides access to considerably more business-critical data and systems than any single laptop, email, file storage, line-of-business applications, sometimes an entire company’s infrastructure. An unpatched vulnerability on a server is a door left open into whatever that server holds or connects to, not just one person’s individual device.
Why This Also Matters for Cyber Insurance and Compliance
Much like with Windows 10, cyber insurance applications and Cyber Essentials assessments both expect supported, patchable systems as standard. A server quietly running an end-of-life operating system is exactly the kind of gap that surfaces awkwardly during an insurance renewal or a compliance check, often at a worse moment than if it had been addressed proactively through ongoing patch management.
What Businesses Should Actually Do Now
Identify exactly which version of Windows Server every physical or virtual server in the business is running, since this is often genuinely unclear without checking. Map each one against its actual deadline, since “Windows Server” isn’t one single answer. Prioritise migration planning around Server 2012/2012 R2 first, given the imminent October 2026 cut-off, followed by Server 2016 ahead of January 2027. And budget and plan the migration itself properly, since moving a server often involves more dependencies, testing, and careful planning than replacing an individual laptop.
Why Acting Now Beats Waiting
Server migrations typically involve more planning, testing, and coordination than a straightforward laptop upgrade, application compatibility, data migration, and minimising disruption to whatever depends on that server. Starting now allows a properly planned, tested migration. Waiting until close to the deadline risks a rushed, higher-risk move under real time pressure.
How AOIT Networks Approaches It
We are helping partners map exactly which Windows Server versions are running across their infrastructure, and build a realistic, prioritised device and server migration planning effort ahead of these deadlines, rather than discovering an unsupported server the hard way.
If you are not sure which version of Windows Server your business is currently running, or what your options are, we are happy to check and talk through a plan.
Got Questions About Your IT?
Questions about your setup? Wondering if there's a better way to do things? We're always happy to have a no-pressure conversation about your IT needs.
No sales pitch. No obligation. Just straightforward advice from people who genuinely care about getting it right.
