Microsoft has announced that Windows Server 2016 will reach the end of extended support on January 12, 2027, after which the operating system will no longer receive regular monthly security updates.
Originally unveiled at Microsoft's Ignite conference in September 2016, Windows Server 2016 became generally available on October 12, 2016. The operating system reached the end of mainstream support in January 2022, while its extended support period is now approaching its final months.
According to Microsoft, the January 2027 security update will be the last one available for Windows Server 2016. After that date, systems running the operating system will no longer receive monthly security updates designed to protect against emerging security threats.
The end of support applies to all editions of Windows Server 2016, including Datacenter, Essentials, MultiPoint Premium, and Standard. Microsoft will also discontinue support for Windows Server 2016 Essentials features, including Remote Web Access and other related functionality.
Microsoft Recommends Upgrading to Windows Server 2025
With the support deadline approaching, Microsoft is encouraging IT administrators to plan their migration to Windows Server 2025 to maintain security coverage and ongoing product support.
Released in November 2024, Windows Server 2025 is Microsoft's latest Long-Term Servicing Channel (LTSC) release. The company provides a longer support lifecycle for this version, with mainstream support scheduled to end in November 2029 and extended support continuing until November 14, 2034.
Organizations that want to evaluate the new platform before deploying it in production can download a free 180-day trial through the Microsoft Evaluation Center.
IT teams should review their existing Windows Server deployments, identify applications and services that depend on Windows Server 2016, and establish an upgrade plan before the deadline. Continuing to run unsupported systems without an appropriate security strategy could increase exposure to vulnerabilities and other cybersecurity risks.
Administrators can consult Microsoft's official Windows Lifecycle documentation for further details about product support dates and upgrade options.
Why This Matters for Cybersecurity
The end of security updates can create additional risks for organizations that continue to rely on Windows Server 2016. Newly discovered vulnerabilities may remain unpatched, increasing the potential for exploitation, unauthorized access, and disruption to business operations.
Organizations should begin assessing their infrastructure now, test application compatibility with newer server versions, and schedule migrations well ahead of the January 2027 deadline. Where immediate migration is not possible, administrators should evaluate available support options and implement appropriate compensating security controls.
