Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027.
Windows Server 2016 was released in September 2016 at Microsoft's annual Ignite conference and reached general availability one month later, on October 12, 2016
It reached the end of mainstream support in January 2022, and extended support will end in roughly three months, on January 12.
"The January 2027 Windows security update will be the last update available for this version. After this date, devices running Windows Server 2016 will no longer receive monthly security updates containing protections from the latest security threats," Microsoft said in a message center update.
"This end of updates in 2027 applies to all editions of Windows Server 2016: Datacenter, Essentials, MultiPoint Premium and Standard."
On the same date, Microsoft will also stop support for all Windows Server 2016 Essentials features, including Remote Web Access and related Essentials-specific functionality.
Admins advised to switch to Windows Server 2025
Before Windows Server 2016 reaches the end of support, Microsoft advised IT administrators to upgrade to Windows Server 2025, which started rolling out to Windows Insiders in January 2024 and reached general availability in November 2024.
"To help keep your environment protected and supported, plan to upgrade to Windows Server 2025," the company added.
Windows Server 2025 is the latest Long-Term Servicing Channel (LTSC) release for Windows Server. According to Microsoft's lifecycle platform, it will reach the end of mainstream support in November 2029 and receive an additional five years of extended support until November 14, 2034.
Those who want to test Windows Server 2025 before deployment can get a free 180-day Windows Server 2025 trial via the Microsoft Evaluation Center.
More information about Windows servicing dates is available on the Windows Lifecycle FAQ page or via the Lifecycle Policy search tool.
Earlier this month, Microsoft also announced that systems running Windows 11 24H2 Home and Pro editions stopped receiving security and non-security preview updates and advised customers to upgrade to Windows 11 26H2 (also known as the Windows 11 2026 Update).
Once attackers have valid credentials, only 37% of their actions are blocked
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.