Windows Server
Windows Server 2016 end of life: your options before 12 January 2027
Windows Server 2016 reaches end of life (the end of extended support) on 12 January 2027. If you still run 2016 servers, here are your realistic options, and how to choose between them in the time left.
When is Windows Server 2016 end of life?
| Milestone | Date |
|---|---|
| Windows Server 2016 mainstream support ended | 11 January 2022 |
| Windows Server 2016 extended support ends | 12 January 2027 |
| ESU billing for on-premises servers (via Azure Arc) begins | 13 January 2027 |
| Maximum ESU coverage | Up to three years after end of support (January 2030) |
Option 1: Upgrade Windows Server 2016 to 2022 or 2025
Upgrade the operating system on your existing servers to Windows Server 2022 or 2025, either in place or by building new servers and moving the roles across.
Good fit when: the hardware is less than about four years old, the applications are supported on newer Windows versions, and you're happy to keep running your own infrastructure.
Watch out for: older line-of-business applications that aren't supported on newer Windows versions, and hardware that will itself need replacing within a couple of years. You'll also need new Windows Server licences if your current licences don't cover the newer version.
Option 2: Buy Extended Security Updates on-premises
Keep the servers where they are and pay Microsoft for up to three more years of critical and important security updates.
Good fit when: a specific application can't be upgraded or moved yet, and you need a short bridge.
Watch out for: ESUs are a cost, not a fix. They require Software Assurance, are billed through Azure Arc, and only buy time. The hardware still ages.
Option 3: Migrate to Azure
Move Windows Server 2016 servers to Azure virtual machines with Azure Migrate. In Azure, eligible Windows Server 2016 VMs receive Extended Security Updates at no additional cost.
Good fit when: the servers are on ageing hardware, you have other servers to move anyway, or you want to stop running a server room.
Why it's often the best option:
- It solves both the patching and the hardware problem in one project.
- You can upgrade the OS later in Azure, taking a snapshot first so you can roll back.
- Azure Hybrid Benefit lets you reuse Windows Server licences with Software Assurance.
- Eligible projects may qualify for Microsoft funding.
Option 4: Replace with SaaS or retire
Some 2016 servers are running workloads that no longer need a server, such as an old intranet, a file share that belongs in SharePoint, or a print server. Retiring or replacing them is the cheapest option of all.
Does Windows Server 2016 end of life affect Cyber Essentials?
It can. Cyber Essentials expects software in scope to be licensed, supported and receiving security updates. A Windows Server 2016 machine with no Extended Security Updates after 12 January 2027 is unsupported, so plan to upgrade, migrate, cover it with ESUs or take it out of scope before your next assessment. Check the current requirements with your certification body, because they are updated regularly.
How to choose: a quick decision guide
| If… | Then… |
|---|---|
| Hardware is under ~4 years old and apps support newer Windows | Upgrade in place |
| One stubborn app can't move or upgrade yet | ESUs for that server only, plus a plan |
| Hardware is ageing, or you have several servers to deal with | Migrate to Azure |
| The workload is obsolete or available as SaaS | Retire or replace |
What to do this month
- List every Windows Server 2016 instance, including VMs, physical servers and appliances built on Windows.
- Note what each one does, who owns it and what depends on it.
- Check your licensing, specifically whether you have Software Assurance (needed for ESUs and Azure Hybrid Benefit).
- Pick a route per server using the table above.
- Get help if time is short. A focused Azure rehost can be done in weeks.
Our Windows Server migration service is built for exactly this deadline.
Planning a migration? Get a free assessment covering scope, ballpark cost and funding eligibility.
Get my free assessmentFrequently asked questions
Is Windows Server 2016 still supported?
Yes, until 12 January 2027. Mainstream support ended on 11 January 2022, so Windows Server 2016 is currently in extended support, which means security updates only. After 12 January 2027 it is end of life, and the only way to keep receiving security updates is Extended Security Updates, bought through Azure Arc for on-premises servers or included for eligible servers running in Azure.
What happens if I keep running Windows Server 2016 after 12 January 2027?
The servers will keep working, but they won't receive security updates unless you're enrolled in Extended Security Updates. New vulnerabilities will stay unpatched, which increases cyber risk and can affect cyber insurance, Cyber Essentials certification and customer security assessments.
How much do Windows Server 2016 Extended Security Updates cost?
On-premises ESUs for Windows Server 2016 are sold through Azure Arc on a pay-as-you-go basis and require Software Assurance. Pricing is per core and has historically increased each year of ESU coverage. In Azure, ESUs for eligible Windows Server VMs are included at no additional cost.
Can I upgrade Windows Server 2016 straight to 2025?
Microsoft supports in-place upgrades from Windows Server 2016 to 2025 for many scenarios, but application compatibility is the real constraint. Test each line-of-business application first, or migrate to Azure and upgrade there with a snapshot to fall back to.
Is it too late to migrate before January 2027?
Not for most small-to-mid-sized estates, but time is tight. If a full migration won't finish in time, move the 2016 servers to Azure first (rehost) to get ESUs, then upgrade or modernise afterwards.