Windows Server 2016 end of support lands on January 12, 2027, and after that day Microsoft stops shipping security patches for it. If you run a 2016 server, you have about 77 days to upgrade, move it, or pay for extra coverage.
Here are the key facts at a glance:
- Last free security updates: January 12, 2027 (Pacific time).
- Who is affected: every Windows Server 2016 edition, including Standard, Datacenter and Essentials.
- Paid ESUs can cover up to three more years, according to Microsoft’s lifecycle notice.
- Microsoft’s suggested upgrade target is Windows Server 2025.
That list is the short version, and it hides one awkward detail: Microsoft had not set Windows Server 2016 ESU pricing in the sources I found. The rest of this post covers what actually changes, and what to do first.
What Windows Server 2016 end of support actually means
Your servers will not stop working on January 13. They will keep booting, serving files and running apps like they do today.
What stops is the flow of fixes. Microsoft’s own lifecycle page lists the extended end date as January 13, 2027 at 6:59 UTC, which is the evening of January 12 in Redmond. Mainstream support already ended back in January 2022.
Any flaw found after that date stays open on your machine. Attackers love that, because a single unpatched server can be a way into the rest of your network.
If you patch other server software on a schedule, our look at the Oracle October 2026 CPU patches shows how fast those fix lists grow in a single quarter.
Your four options, side by side
Here is how the choices compare, so you can match each server to a plan.
| Option | Cost | Best for |
|---|---|---|
| Upgrade to Windows Server 2025 | New license, plus migration time | Servers you plan to keep for years |
| Move the workload to Azure | VM cost; Microsoft has given free ESUs to Azure-hosted servers before | Apps that can run in a cloud VM |
| Paid ESUs through Azure Arc | Pay as you go; no price confirmed yet | Servers that cannot move before January |
| Do nothing | Free, until a new flaw appears | Nothing. Avoid this one. |
The right answer is usually a mix. Move the easy workloads first, then decide what to do with the stubborn ones.
Can you buy Extended Security Updates for Windows Server 2016?
Yes, in some form, but the details are still thin. A Microsoft notice covered by heise says buyers can get monthly security updates for up to three more years, and that Windows Server 2016 pricing had not been set when it was published.
Some reports say ESUs are also available through Azure Arc on a pay-as-you-go basis. ThreatCluster, which aggregates a 4Sysops report, puts the Arc launch at August 2026 and says patches would run until January 2030. I could not find a price in any source, so treat that as unconfirmed until you see it on a Microsoft page.
One number floating around is $61 per year. That figure belongs to Windows 10 Enterprise LTSB 2016, not to Windows Server 2016. Don’t put it in a budget.
ESUs only include Critical and Important security fixes. You get no new features and no general support, so they are a bridge, not a plan.
A simple plan for the next 77 days
Start with a list. You cannot decide anything until you know what is running where.
- Inventory every server on 2016, including old VMs and test boxes nobody remembers.
- Mark each one as retire, migrate, or keep for now.
- Test your key apps on Windows Server 2025 in a lab copy.
- Book the migration windows before the holiday freeze, not after it.
The inventory step matters most, because forgotten servers are the ones that get breached. Servers facing the internet, like remote desktop hosts and web servers, should move first.
If your desktops are also changing, our guide to the Windows 11 October 2026 update covers what is new on the client side.
What if you cannot finish in time?
Be honest about the servers that will miss the deadline. Put them behind a firewall, remove internet access, and limit who can log in.
Then add monitoring so you notice odd behavior fast. This does not replace patches, but it shrinks the target while you finish the move or arrange ESU coverage.
Frequently Asked Questions
When does Windows Server 2016 support end?
Extended support ends on January 12, 2027 in Pacific time. Microsoft’s lifecycle table shows the exact cutoff as 6:59 UTC on January 13.
Will my Windows Server 2016 machines stop working?
No. They keep running, but they stop getting security patches, so new flaws stay unfixed.
What should I upgrade Windows Server 2016 to?
Microsoft recommends Windows Server 2025. Check that your apps and drivers support it before you commit.
How much do Windows Server 2016 ESUs cost?
I could not find an official price. Ask your Microsoft partner or check Microsoft’s ESU pages before you plan around any number.
Is it safe to keep an old server offline from the internet?
It lowers the risk a lot, but it is not safe forever. Attackers can still reach it from inside your network.
My take
Don’t wait for ESU pricing to make your decision. Upgrade or migrate what you can by the end of the year, and keep paid coverage only for the few servers that truly cannot move. Seventy-seven days sounds like plenty, but app testing always takes longer than you think.
Leave a Reply