Microsoft has confirmed that Windows Server 2016 will receive its final security update in January 2027, with support ending on 12 January. Organisations still running it need to plan a migration, particularly if they rely on Essentials features such as Remote Web Access.
Microsoft AI Watch analysis
What happened
Microsoft’s notice, quoted in a report by GHacks, says the January 2027 security update will be the last for every Windows Server 2016 edition, including Datacenter, Essentials, MultiPoint Premium and Standard. Servers will continue to run after the deadline, but they will no longer receive monthly security updates.
The same date also ends support for Windows Server 2016 Essentials features. GHacks identifies Remote Web Access as one that small businesses may need to replace. Microsoft names Windows Server 2025 as the upgrade target.
Why it matters
A server that still boots is not necessarily a server that is safe to keep exposed. After the final update, newly discovered vulnerabilities will not be addressed through routine monthly security updates for this version. That makes the deadline a planning issue, not merely a date to circle after the festive season.
For administrators, the first useful step is to inventory physical and virtual machines still running Windows Server 2016, then identify any Essentials features that need an alternative. GHacks says Microsoft offers a free 180-day evaluation of Windows Server 2025, which organisations can use to test workloads before scheduling migrations.
Our read
This is a clear, practical deadline for anyone responsible for ageing server estates. Start with the inventory and test the workloads that matter; “it still runs” is a poor security plan, however reassuring the uptime dashboard looks.
What to watch
- Whether Microsoft publishes further migration guidance for organisations using Essentials features.
- How administrators handle workloads that cannot move to Windows Server 2025 before the deadline.
- Whether Microsoft announces any paid extended-security option for Windows Server 2016; the cited report says the notice does not mention one.
Discussion spark: Should organisations prioritise moving to Windows Server 2025 before the deadline, or is a paid extended-security option a reasonable bridge for workloads that cannot be migrated in time?
Sources and evidence
- Source update (26 October 2026, 17:45 UTC)
not affiliated with or endorsed by Microsoft