# Windows Server 2012 and 2012 R2 Extended Security Updates ended October 13, 2026: retire or isolate what is left > Microsoft’s ESU FAQ lists Windows Server 2012 and 2012 R2 extended support ending October 10, 2023 and Extended Security Update Year 3 ending October 13, 2026. ESUs provide Critical and Important updates for up to three years after extended support ends, so servers still on these versions no longer have an ESU year to buy. - Canonical URL: https://update.dsesecurity.com/updates/windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026/ - Publisher: Detection Systems & Engineering (DSE Security) - Author: DSE Security Editorial Team - Published: 2026-10-19T00:27:35+00:00 - Modified: 2026-10-19T01:55:05+00:00 - Last reviewed by DSE: 2026-10-19 - Resource type: Briefing - DSE priority: Important - Topics: Cybersecurity, IT - Reading time: 2 minutes ## What you need to know Microsoft’s ESU FAQ lists Windows Server 2012 and 2012 R2 extended support ending October 10, 2023 and Extended Security Update Year 3 ending October 13, 2026. ESUs provide Critical and Important updates for up to three years after extended support ends, so servers still on these versions no longer have an ESU year to buy. ## Potentially affected Organizations still running Windows Server 2012 or 2012 R2, including servers that host access control, video, accounting or line-of-business software, and the providers who manage them. ## DSE recommendation DSE recommends retiring every remaining Windows Server 2012 and 2012 R2 server, and isolating any that cannot be retired yet as unpatched systems. ## Article Microsoft’s ESU FAQ lists Windows Server 2012 and 2012 R2 extended support ending October 10, 2023 and Extended Security Update Year 3 ending October 13, 2026. ESUs provide Critical and Important updates for up to three years after extended support ends, so servers still on these versions no longer have an ESU year to buy. ## Source facts Microsoft’s [Extended Security Updates FAQ](https://learn.microsoft.com/en-us/lifecycle/faq/extended-security-updates) lists Windows Server 2012/R2 with end of extended support on October 10, 2023, and ESU Year 1, Year 2 and Year 3 ending October 8, 2024, October 14, 2025 and October 13, 2026, covering Critical and Important updates. It says ESUs include Critical and Important security updates for up to three years after a product’s end of extended support, do not extend the product’s lifecycle, and do not provide technical support beyond the original timeline. The [Windows Server 2012 R2 lifecycle page](https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2012-r2) shows the Fixed Lifecycle Policy for the Datacenter, Essentials, Foundation and Standard editions, lists ESU Year 3 ending 10/14/2026 at 6:59:59 AM Pacific Time, and notes that Microsoft Edge version 109 was the last version supported on Windows Server 2012 and 2012 R2. Microsoft’s [list of products ending support in 2026](https://learn.microsoft.com/en-us/lifecycle/end-of-support/end-of-support-2026) includes Windows Server 2012 and 2012 R2 Extended Security Update Year 3 on October 13, 2026. ## Applicability Use this for any Windows Server 2012 or 2012 R2 installation, physical or virtual. Some embedded products have their own ESU terms through their device makers; check those separately. ## DSE recommendation DSE recommends retiring every remaining Windows Server 2012 and 2012 R2 server, and isolating any that cannot be retired yet as unpatched systems. Move roles and applications to a supported Windows Server version, confirm each vendor supports the target, remove internet access and inbound connections from anything left behind, and replace the outdated Edge browser on any server where staff still browse. ## Verification Run an inventory query for the 2012 and 2012 R2 operating system versions across all domains and hypervisors, track each server to retirement, and review firewall rules for any server still waiting. ## Official references [Microsoft Learn — Lifecycle FAQ: Extended Security Updates](https://learn.microsoft.com/en-us/lifecycle/faq/extended-security-updates). [Microsoft Lifecycle — Windows Server 2012 R2](https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2012-r2). [Microsoft Lifecycle — Ending Support in 2026](https://learn.microsoft.com/en-us/lifecycle/end-of-support/end-of-support-2026). Reviewed October 19, 2026. ## Primary reference - Name: Microsoft Learn — Lifecycle FAQ: Extended Security Updates - Authority: Microsoft Learn - URL: https://learn.microsoft.com/en-us/lifecycle/faq/extended-security-updates - Source publication date: Not stated by the source ## Citation and use Preferred citation: “Windows Server 2012 and 2012 R2 Extended Security Updates ended October 13, 2026: retire or isolate what is left,” DSE Security, https://update.dsesecurity.com/updates/windows-server-2012-r2-extended-security-updates-year-3-ended-october-2026/ Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/ Usage and citation policy: https://update.dsesecurity.com/usage/ Copyright © 2026 Detection Systems & Engineering. All rights reserved.