Windows Server 2016 gets its last security update in January 2027

Windows Server 2016 gets its last security update in January 2027

14 October 2026: Microsoft has told administrators that Windows Server 2016 reaches end of updates on 12 January 2027, and that the January 2027 security update will be the last one. From then on, servers still running it receive no monthly fixes for newly found flaws. The notice is a 90-day reminder posted to the Microsoft 365 Message Center, tagged as having admin impact.

Not yet independently verified. The Message Center posts were read through the mc.merill.net archive, not tenant admin centre. No ESU price or term is stated in the sources. We will update this when it can be confirmed, and remove this note.

Which editions the date covers

The date applies to every edition of Windows Server 2016: Datacenter, Essentials, MultiPoint Premium and Standard. Microsoft's lifecycle page lists the same extended end date, and shows that mainstream support for the release ended in January 2022. The 2016 release has therefore been in extended support, security fixes only, for almost five years.

Windows Server 2016 Essentials carries an extra warning. Microsoft says support for its Essentials-specific features, including Remote Web Access, ends on the same date, and that any Essentials capability that keeps working afterwards should be treated as unsupported. Containers released with Windows Server 2016 follow the same lifecycle dates, according to the lifecycle page.

What Microsoft offers instead

The vendor's recommended route is an upgrade to Windows Server 2025, the latest Long-Term Servicing Channel release. A free 180-day evaluation is available from the Microsoft Evaluation Center for teams that want to test their workloads first.

Extended Security Updates are available for Windows Server 2016 Standard and Datacenter editions for organisations that need more time. The message does not give a price or a term for the ESU programme, and it names no ESU option for Essentials or MultiPoint Premium, so anyone running those editions should ask their Microsoft reseller before assuming cover.

The Windows Server 2022 milestone passed this week

A second message, posted the same day, records that Windows Server 2022 reached the end of mainstream support on 13 October 2026. The October 2026 security update was the last mainstream update for that version. Nothing is lost on the security side: extended support includes security updates at no additional cost, and monthly updates continue through 14 October 2031.

Microsoft also says hotpatch support for Windows Server 2022 Datacenter: Azure Edition has been extended through October 2027. Servers enrolled in hotpatching keep receiving monthly security updates without a restart until then.

The date to plan around

For Windows Server 2016 the working deadline is the January 2027 update cycle, about three months after the reminder. Microsoft points administrators to its Windows Server release information, the Lifecycle FAQ for Windows Server and the Microsoft Lifecycle Policy search tool for the full dates, and to the Fixed Lifecycle Policy for the 2022 terms.

Teams with 2016 servers that cannot move before then have two choices on the record: buy ESU for Standard or Datacenter, or run the machines unpatched and unsupported. Microsoft's own wording for the second case is that devices will no longer receive protections from the latest security threats.

Sources

• Microsoft 365 Message Center: MC1507705, 90-Day Reminder: Windows Server 2016 will reach end of updates on January 12, 2027, 14 October 2026
• Microsoft 365 Message Center: MC1507704, Windows Server 2022 has reached end of mainstream support, 14 October 2026
• Microsoft Learn: Windows Server 2016 lifecycle (read 2026-10-15), 15 October 2026
• Microsoft Learn: Windows Server 2022 lifecycle (read 2026-10-15), 15 October 2026