Microsoft has officially ended the Extended Security Update (ESU) program for Windows Server 2012 and 2012 R2 as of October 13, 2026. These systems ceased receiving regular extended support on October 10, 2023, with the subsequent three-year ESU period providing only critical or important security patches without new features or design changes.
The company warns that organizations continuing to run these legacy versions in production environments now face increased security and compliance risks. Without ongoing support, these servers become significantly harder to maintain. Microsoft advises administrators to audit their data centers, edge devices, and cloud environments to identify all remaining instances of these operating systems.
To facilitate the transition, Microsoft suggests several migration paths, including upgrading to supported versions, moving workloads to Azure, or adopting hybrid models. For local deployments, users can migrate data to new servers or perform in-place upgrades. Notably, Windows Server 2025 now supports direct upgrades across up to four versions, such as moving from 2012 R2 to 2025.
While previous ESU customers managed updates via Azure Arc, and Azure-based users previously received free updates, these options have now expired. Microsoft recommends that businesses prioritize their migration strategy based on business criticality and risk levels, coordinating directly with their account teams or partners to ensure a smooth transition away from the unsupported software.
