Microsoft has not extended ordinary support for every old Windows release under one blanket program. Instead, separate Extended Security Updates (ESU) plans provide limited security updates for eligible systems after their normal support ends. As of August 18, 2026, the most urgent deadline is Windows Server 2012 and 2012 R2, whose final ESU coverage ends October 13, 2026.
Which products have ESU coverage, and when does it end?
These dates refer to distinct products and programs; eligibility and purchasing terms depend on edition, customer type, licensing channel and deployment model.
| Product | Normal support status | ESU coverage or milestone |
|---|---|---|
| Windows 10, version 22H2 | Standard support ended October 14, 2025. | Microsoft’s consumer-facing page describes protection through October 12, 2027. Its lifecycle table lists Year 1 through October 13, 2026, Year 2 through October 12, 2027, and Year 3 through October 10, 2028; the third year is not established as available on the same terms to every customer. Microsoft Windows 10 ESU; Microsoft ESU lifecycle FAQ. |
| Windows Server 2012 and 2012 R2 | Extended support ended October 10, 2023. | Year 3, the final documented ESU year, ends October 13, 2026. Microsoft Windows Server ESU overview. |
| Windows 10 Enterprise LTSB 2016 | Support ends in October 2026. | It has a separate lifecycle and ESU case; do not assume the Windows 10 22H2 enrollment rules or dates apply. Microsoft configuration support matrix. |
| Windows Server 2016 | Extended support ends January 11, 2027, according to Microsoft’s Server ESU page. | ESU is a separate upcoming offering after that deadline. A Microsoft Azure Local announcement describes the end as January 2027 and discusses new-offering pricing changes beginning April 1, 2026. Microsoft Windows Server ESU; Microsoft Azure Arc Blog. |
Microsoft pages sometimes label an end date differently because one refers to the last day of coverage and another to the transition after it. Use the date and terms in the applicable product and licensing entry rather than treating all dates as interchangeable.
What an ESU purchase actually provides
ESU is a restricted bridge, not a return to normal support. For Windows 10 and Server 2012/R2, Microsoft describes coverage as critical and important security updates. It does not generally bring new features, routine non-security improvements, unlimited technical support, third-party software compatibility guarantees, or ongoing mainstream or extended support. Microsoft characterizes ESU as a last-resort option for customers that must continue running an older product. Microsoft ESU lifecycle FAQ.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →#1 Best Overall
Even when ESU updates are installed, they cannot eliminate risk from unpatched applications, insecure configuration, unsupported hardware, or vulnerabilities outside the updates Microsoft supplies.
Windows 10: who qualifies and what the dates mean
Check for version 22H2
The main Windows 10 ESU program requires Windows 10 version 22H2. Consumer devices and commercial installations have different enrollment and purchasing routes; edition, geography, account type, and device-management status may affect eligibility. LTSC/LTSB and embedded editions have separate lifecycle or OEM arrangements. Microsoft Windows 10 ESU eligibility.
Microsoft’s commercial documentation lists Year 1 Windows 10 ESU at $61 per device for organizations purchasing through Volume Licensing. This is not a universal retail price: confirm the edition, region, year, agreement, and purchasing channel with Microsoft or the organization’s licensing provider. The program is structured annually. Microsoft Windows 10 ESU.
Rank #2
- Ideal for Gifting
- Ideal for a bookworm
- Compact for travelling
Understand the difference between consumer and organizational coverage
Microsoft’s current consumer page promotes protection through October 12, 2027. The lifecycle FAQ separately lists a third ESU year through October 10, 2028. These are different program tracks, not evidence that every household or company can enroll for three years on identical terms. A Microsoft end-of-support page still showing October 13, 2026 may reflect older or differently framed information; check the current ESU page and the terms for the specific enrollment route. Microsoft Windows end-of-support page.
Recommended Free Tools
Check a PC’s release and enrollment
- Open Settings > System > About and check Windows specifications. Confirm the device runs version 22H2.
- Open Settings > Update & Security > Windows Update, install available updates, and restart if prompted.
- Use Microsoft’s Windows 10 ESU enrollment flow and confirm whether the consumer or organizational route applies.
- Verify that enrollment is shown as active before assuming the device receives ESU protection.
Microsoft 365 Apps support is separate from Windows support. Microsoft has said that Microsoft 365 Apps on Windows 10 PCs may continue receiving security updates beyond the operating system’s deadline; this does not extend Windows kernel support or replace Windows ESU. Microsoft’s Windows 10 transition guidance.
Windows Server 2012 and 2012 R2: the final ESU year
Server 2012 and 2012 R2 are already beyond extended support. Their documented three-year ESU schedule runs from Year 1 through October 8, 2024, Year 2 through October 14, 2025, and Year 3 through October 13, 2026. The October 2026 date is the end of the current ESU period, not the start of another ordinary support phase. Coverage and eligible editions—including Standard, Datacenter and specified Embedded editions—depend on Microsoft’s licensing rules. Microsoft ESU lifecycle FAQ.
Eligible workloads running in Azure can receive ESUs without a separate ESU charge, but Azure VM compute and related infrastructure remain billable. Moving a workload to Azure is not automatically cheaper than upgrading or replacing it on premises; compare compute, storage, networking, backup, security and management costs. Microsoft Windows Server ESU overview.
Azure Arc can enable ESU billing and management for eligible servers that remain outside Azure. It requires an Azure account and connectivity, and creates an Azure-billed service relationship; it is not a free-update entitlement. Microsoft notes that machines onboarded after support ends may incur billing for missed coverage, and entitlement or activation steps still apply. Microsoft Azure Arc ESU billing.
Server administrator checklist
- Inventory all Server 2012 and 2012 R2 machines, record editions and activation status, and identify whether each is in Azure, on premises, another hosted cloud, or connected to Azure Arc.
- Choose the applicable purchasing route—such as Volume Licensing, Cloud Solution Provider, Azure Arc-enabled ESU, or eligible Azure migration—and verify entitlement for each machine.
- Install Microsoft-required licensing preparation packages and servicing prerequisites, then install and activate the applicable ESU key or subscription.
- Confirm required servicing stack updates and monthly security updates are present. Microsoft documented a Server 2012 servicing stack update in March 2026. Microsoft KB5079234.
- Test update delivery on a representative workload, then set a migration deadline before ESU ends.
If updates are missing
- Confirm the machine runs an eligible edition and that licensing preparation is installed.
- Check that the ESU product key was activated or that the subscription is associated with the machine.
- For Arc-managed servers, verify Arc connectivity and the ESU billing/entitlement status.
- Check servicing stack prerequisites and whether a long-offline machine has created billing or entitlement complications.
- Review WSUS compatibility and update-scan procedures. Microsoft has documented WSUS-related changes affecting Server 2012/R2 ESU environments, including Windows Server 2025 infrastructure. Microsoft WSUS guidance.
Windows Server 2016 and Windows 10 LTSB 2016 are separate cases
Windows Server 2016 reaches the end of extended support in January 2027. Microsoft’s Server ESU page gives January 11, 2027; its Azure Local announcement describes the milestone as January 2027. Do not apply Server 2012/R2’s October 2026 final date or its existing pricing assumptions to Server 2016. Microsoft Windows Server ESU.
Rank #4
Microsoft announced a more consistent pricing model for new ESU offerings beginning April 1, 2026, affecting Server 2016 and Windows 10 Enterprise LTSB 2016. The announcement does not change the existing Windows Server 2012/R2 or Windows 10 version 22H2 ESU offerings. For certain server products, Microsoft’s lifecycle FAQ describes on-premises and hosted pricing as 100% of the full license price annually in each ESU year; the underlying license price and terms vary by product and agreement. Microsoft Azure Arc Blog; Microsoft ESU lifecycle FAQ.
Windows 10 Enterprise LTSB 2016 reaches end of support in October 2026. Other long-term servicing releases have their own dates: Microsoft’s configuration matrix lists Windows 10 LTSC 2021 through January 2027 and LTSC 2019 through January 2029. These releases are common in specialized environments where frequent feature changes are undesirable, so check the exact release and applicable licensing channel rather than using the 22H2 consumer schedule. Microsoft configuration support matrix.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Choose a bridge or a migration based on the workload
ESU is reasonable when
- A business-critical application cannot yet be upgraded and needs a short, funded transition window.
- Regulatory validation or workload testing makes an immediate change impractical.
- A Windows 10 PC cannot be replaced immediately, or an older server must remain online while a migration is completed.
- The organization has a named owner, a migration budget and a firm end date for the legacy system.
Upgrade or replace when
- A Windows 10 device meets Windows 11 requirements and is used for ordinary productivity.
- ESU costs approach the cost of suitable replacement hardware, or the endpoint lacks modern security capabilities.
- A server application, driver or management tool can be validated on a supported Windows Server release.
Windows 11 eligibility depends on hardware requirements, including supported processors and security features. Microsoft’s Windows 11 page is the place to check current requirements. Microsoft Windows 11.
Best Value
- It can be a gift option
- Comes with secure packaging
- Helpful in various ways
Consider cloud options only after comparing full operating costs
Azure migration may suit workloads that can move to virtual machines or be modernized, while Azure Arc is intended for management and ESU billing when eligible servers stay outside Azure. Windows 365 can provide cloud PCs for users who do not need a conventional local endpoint, but connectivity, offline needs, peripherals and recurring per-user costs matter. Microsoft identifies Windows 365 among its Windows 10 transition options. Azure migration; Windows 365; Microsoft transition guidance.
There is no reliable universal cost comparison: calculate ESU for the remaining bridge, hardware or server licensing, application remediation and testing, Azure or Windows 365 recurring charges, migration labor, downtime and the risk of delaying. Azure infrastructure is not free merely because an eligible workload avoids a separate ESU fee. Security monitoring tools such as Microsoft Defender for Cloud can complement patching, but they do not substitute for operating-system updates.
Quick Recap
What to do next by role
Home Windows 10 users
- Check that the PC is on version 22H2, then verify eligibility and active enrollment through Microsoft’s consumer ESU route.
- If the device meets Windows 11 requirements, plan an upgrade; if it does not, budget for replacement or treat ESU as a temporary bridge.
Small businesses and schools
- Inventory Windows 10 editions and versions, identify which devices need organizational ESU, and confirm channel-specific pricing before buying.
- Set replacement or upgrade dates rather than renewing ESU by default.
Server and enterprise administrators
- Prioritize Server 2012/R2 systems because their final ESU date is October 13, 2026; validate entitlement, update servicing and migration capacity now.
- Track Server 2016 and LTSB 2016 separately, with licensing-channel confirmation for the newer ESU offerings.
- For regulated or specialist workloads, document the risk acceptance, compensating controls and accountable migration owner; ESU does not guarantee application-vendor support.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
