{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026/", "item": { "id": "https://update.dsesecurity.com/updates/windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026/", "slug": "windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026", "url": "https://update.dsesecurity.com/updates/windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026.md", "json": "https://update.dsesecurity.com/api/v1/posts/windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026/" }, "title": "Windows Server 2012 and 2012 R2 Extended Security Updates ended October 13, 2026: retire or isolate what is left", "summary": "Microsoft’s ESU FAQ lists Windows Server 2012 and 2012 R2 extended support ending October 10, 2023 and Extended Security Update Year 3 ending October 13, 2026. ESUs provide Critical and Important updates for up to three years after extended support ends, so servers still on these versions no longer have an ESU year to buy.", "format": { "slug": "briefing", "name": "Briefing" }, "priority": { "slug": "important", "name": "Important" }, "featured": false, "image": { "theme": "managed-it", "label": "Managed IT operations", "alt": "A controlled technology lifecycle progressing from assessment to approved production.", "card_url": "https://update.dsesecurity.com/assets/editorial/managed-it-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/managed-it-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "cybersecurity", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-10-19T00:27:35+00:00", "modified_at": "2026-10-19T01:55:05+00:00", "reviewed_on": "2026-10-19", "reading_minutes": 2, "word_count": 327, "potentially_affected": "Organizations still running Windows Server 2012 or 2012 R2, including servers that host access control, video, accounting or line-of-business software, and the providers who manage them.", "dse_recommendation": "DSE recommends retiring every remaining Windows Server 2012 and 2012 R2 server, and isolating any that cannot be retired yet as unpatched systems.", "primary_source": { "name": "Microsoft Learn — Lifecycle FAQ: Extended Security Updates", "url": "https://learn.microsoft.com/en-us/lifecycle/faq/extended-security-updates", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Microsoft’s ESU FAQ lists Windows Server 2012 and 2012 R2 extended support ending October 10, 2023 and Extended Security Update Year 3 ending October 13, 2026. ESUs provide Critical and Important updates for up to three years after extended support ends, so servers still on these versions no longer have an ESU year to buy.

\n

Source facts

\n

Microsoft’s Extended Security Updates FAQ lists Windows Server 2012/R2 with end of extended support on October 10, 2023, and ESU Year 1, Year 2 and Year 3 ending October 8, 2024, October 14, 2025 and October 13, 2026, covering Critical and Important updates. It says ESUs include Critical and Important security updates for up to three years after a product’s end of extended support, do not extend the product’s lifecycle, and do not provide technical support beyond the original timeline.

\n

The Windows Server 2012 R2 lifecycle page shows the Fixed Lifecycle Policy for the Datacenter, Essentials, Foundation and Standard editions, lists ESU Year 3 ending 10/14/2026 at 6:59:59 AM Pacific Time, and notes that Microsoft Edge version 109 was the last version supported on Windows Server 2012 and 2012 R2. Microsoft’s list of products ending support in 2026 includes Windows Server 2012 and 2012 R2 Extended Security Update Year 3 on October 13, 2026.

\n

Applicability

\n

Use this for any Windows Server 2012 or 2012 R2 installation, physical or virtual. Some embedded products have their own ESU terms through their device makers; check those separately.

\n

DSE recommendation

\n

DSE recommends retiring every remaining Windows Server 2012 and 2012 R2 server, and isolating any that cannot be retired yet as unpatched systems. Move roles and applications to a supported Windows Server version, confirm each vendor supports the target, remove internet access and inbound connections from anything left behind, and replace the outdated Edge browser on any server where staff still browse.

\n

Verification

\n

Run an inventory query for the 2012 and 2012 R2 operating system versions across all domains and hypervisors, track each server to retirement, and review firewall rules for any server still waiting.

\n

Official references

\n

Microsoft Learn — Lifecycle FAQ: Extended Security Updates. Microsoft Lifecycle — Windows Server 2012 R2. Microsoft Lifecycle — Ending Support in 2026. Reviewed October 19, 2026.

", "content_text": "Microsoft’s ESU FAQ lists Windows Server 2012 and 2012 R2 extended support ending October 10, 2023 and Extended Security Update Year 3 ending October 13, 2026. ESUs provide Critical and Important updates for up to three years after extended support ends, so servers still on these versions no longer have an ESU year to buy.\nSource facts\nMicrosoft’s Extended Security Updates FAQ lists Windows Server 2012/R2 with end of extended support on October 10, 2023, and ESU Year 1, Year 2 and Year 3 ending October 8, 2024, October 14, 2025 and October 13, 2026, covering Critical and Important updates. It says ESUs include Critical and Important security updates for up to three years after a product’s end of extended support, do not extend the product’s lifecycle, and do not provide technical support beyond the original timeline.\nThe Windows Server 2012 R2 lifecycle page shows the Fixed Lifecycle Policy for the Datacenter, Essentials, Foundation and Standard editions, lists ESU Year 3 ending 10/14/2026 at 6:59:59 AM Pacific Time, and notes that Microsoft Edge version 109 was the last version supported on Windows Server 2012 and 2012 R2. Microsoft’s list of products ending support in 2026 includes Windows Server 2012 and 2012 R2 Extended Security Update Year 3 on October 13, 2026.\nApplicability\nUse this for any Windows Server 2012 or 2012 R2 installation, physical or virtual. Some embedded products have their own ESU terms through their device makers; check those separately.\nDSE recommendation\nDSE recommends retiring every remaining Windows Server 2012 and 2012 R2 server, and isolating any that cannot be retired yet as unpatched systems. Move roles and applications to a supported Windows Server version, confirm each vendor supports the target, remove internet access and inbound connections from anything left behind, and replace the outdated Edge browser on any server where staff still browse.\nVerification\nRun an inventory query for the 2012 and 2012 R2 operating system versions across all domains and hypervisors, track each server to retirement, and review firewall rules for any server still waiting.\nOfficial references\nMicrosoft Learn — Lifecycle FAQ: Extended Security Updates. Microsoft Lifecycle — Windows Server 2012 R2. Microsoft Lifecycle — Ending Support in 2026. Reviewed October 19, 2026.", "content_markdown": "Microsoft’s ESU FAQ lists Windows Server 2012 and 2012 R2 extended support ending October 10, 2023 and Extended Security Update Year 3 ending October 13, 2026. ESUs provide Critical and Important updates for up to three years after extended support ends, so servers still on these versions no longer have an ESU year to buy.\n\n## Source facts\n\nMicrosoft’s [Extended Security Updates FAQ](https://learn.microsoft.com/en-us/lifecycle/faq/extended-security-updates) lists Windows Server 2012/R2 with end of extended support on October 10, 2023, and ESU Year 1, Year 2 and Year 3 ending October 8, 2024, October 14, 2025 and October 13, 2026, covering Critical and Important updates. It says ESUs include Critical and Important security updates for up to three years after a product’s end of extended support, do not extend the product’s lifecycle, and do not provide technical support beyond the original timeline.\n\nThe [Windows Server 2012 R2 lifecycle page](https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2012-r2) shows the Fixed Lifecycle Policy for the Datacenter, Essentials, Foundation and Standard editions, lists ESU Year 3 ending 10/14/2026 at 6:59:59 AM Pacific Time, and notes that Microsoft Edge version 109 was the last version supported on Windows Server 2012 and 2012 R2. Microsoft’s [list of products ending support in 2026](https://learn.microsoft.com/en-us/lifecycle/end-of-support/end-of-support-2026) includes Windows Server 2012 and 2012 R2 Extended Security Update Year 3 on October 13, 2026.\n\n## Applicability\n\nUse this for any Windows Server 2012 or 2012 R2 installation, physical or virtual. Some embedded products have their own ESU terms through their device makers; check those separately.\n\n## DSE recommendation\n\nDSE recommends retiring every remaining Windows Server 2012 and 2012 R2 server, and isolating any that cannot be retired yet as unpatched systems. Move roles and applications to a supported Windows Server version, confirm each vendor supports the target, remove internet access and inbound connections from anything left behind, and replace the outdated Edge browser on any server where staff still browse.\n\n## Verification\n\nRun an inventory query for the 2012 and 2012 R2 operating system versions across all domains and hypervisors, track each server to retirement, and review firewall rules for any server still waiting.\n\n## Official references\n\n[Microsoft Learn — Lifecycle FAQ: Extended Security Updates](https://learn.microsoft.com/en-us/lifecycle/faq/extended-security-updates). [Microsoft Lifecycle — Windows Server 2012 R2](https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2012-r2). [Microsoft Lifecycle — Ending Support in 2026](https://learn.microsoft.com/en-us/lifecycle/end-of-support/end-of-support-2026). Reviewed October 19, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026/", "url": "https://update.dsesecurity.com/updates/windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-10-19" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Windows Server 2012 and 2012 R2 Extended Security Updates ended October 13, 2026: retire or isolate what is left", "item": "https://update.dsesecurity.com/updates/windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026/#article", "identifier": "https://update.dsesecurity.com/updates/windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026/", "url": "https://update.dsesecurity.com/updates/windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026/", "headline": "Windows Server 2012 and 2012 R2 Extended Security Updates ended October 13, 2026: retire or isolate what is left", "description": "Microsoft’s ESU FAQ lists Windows Server 2012 and 2012 R2 extended support ending October 10, 2023 and Extended Security Update Year 3 ending October…", "abstract": "Microsoft’s ESU FAQ lists Windows Server 2012 and 2012 R2 extended support ending October 10, 2023 and Extended Security Update Year 3 ending October 13, 2026. ESUs provide Critical and Important updates for up to three years after extended support ends, so servers still on these versions no longer have an ESU year to buy.", "articleBody": "Microsoft’s ESU FAQ lists Windows Server 2012 and 2012 R2 extended support ending October 10, 2023 and Extended Security Update Year 3 ending October 13, 2026. ESUs provide Critical and Important updates for up to three years after extended support ends, so servers still on these versions no longer have an ESU year to buy.\nSource facts\nMicrosoft’s Extended Security Updates FAQ lists Windows Server 2012/R2 with end of extended support on October 10, 2023, and ESU Year 1, Year 2 and Year 3 ending October 8, 2024, October 14, 2025 and October 13, 2026, covering Critical and Important updates. It says ESUs include Critical and Important security updates for up to three years after a product’s end of extended support, do not extend the product’s lifecycle, and do not provide technical support beyond the original timeline.\nThe Windows Server 2012 R2 lifecycle page shows the Fixed Lifecycle Policy for the Datacenter, Essentials, Foundation and Standard editions, lists ESU Year 3 ending 10/14/2026 at 6:59:59 AM Pacific Time, and notes that Microsoft Edge version 109 was the last version supported on Windows Server 2012 and 2012 R2. Microsoft’s list of products ending support in 2026 includes Windows Server 2012 and 2012 R2 Extended Security Update Year 3 on October 13, 2026.\nApplicability\nUse this for any Windows Server 2012 or 2012 R2 installation, physical or virtual. Some embedded products have their own ESU terms through their device makers; check those separately.\nDSE recommendation\nDSE recommends retiring every remaining Windows Server 2012 and 2012 R2 server, and isolating any that cannot be retired yet as unpatched systems. Move roles and applications to a supported Windows Server version, confirm each vendor supports the target, remove internet access and inbound connections from anything left behind, and replace the outdated Edge browser on any server where staff still browse.\nVerification\nRun an inventory query for the 2012 and 2012 R2 operating system versions across all domains and hypervisors, track each server to retirement, and review firewall rules for any server still waiting.\nOfficial references\nMicrosoft Learn — Lifecycle FAQ: Extended Security Updates. Microsoft Lifecycle — Windows Server 2012 R2. Microsoft Lifecycle — Ending Support in 2026. Reviewed October 19, 2026.", "datePublished": "2026-10-19T00:27:35+00:00", "dateModified": "2026-10-19T01:55:05+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Windows Server 2012 and 2012 R2 Extended Security Updates ended October 13, 2026: retire or isolate what is left" }, "articleSection": [ "Cybersecurity", "IT" ], "keywords": [ "Cybersecurity", "IT", "Briefing", "Important priority" ], "genre": "Briefing", "about": [ { "@type": "Thing", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 327, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Microsoft Learn — Lifecycle FAQ: Extended Security Updates", "url": "https://learn.microsoft.com/en-us/lifecycle/faq/extended-security-updates" } } ] } }