What you need to know
Microsoft’s ESU FAQ lists Windows Server 2012 and 2012 R2 extended support ending October 10, 2023 and Extended Security Update Year 3 ending October 13, 2026. ESUs provide Critical and Important updates for up to three years after extended support ends, so servers still on these versions no longer have an ESU year to buy.
Potentially affected
Organizations still running Windows Server 2012 or 2012 R2, including servers that host access control, video, accounting or line-of-business software, and the providers who manage them.
DSE recommendation
DSE recommends retiring every remaining Windows Server 2012 and 2012 R2 server, and isolating any that cannot be retired yet as unpatched systems.
Microsoft’s ESU FAQ lists Windows Server 2012 and 2012 R2 extended support ending October 10, 2023 and Extended Security Update Year 3 ending October 13, 2026. ESUs provide Critical and Important updates for up to three years after extended support ends, so servers still on these versions no longer have an ESU year to buy.
Source facts
Microsoft’s Extended Security Updates FAQ lists Windows Server 2012/R2 with end of extended support on October 10, 2023, and ESU Year 1, Year 2 and Year 3 ending October 8, 2024, October 14, 2025 and October 13, 2026, covering Critical and Important updates. It says ESUs include Critical and Important security updates for up to three years after a product’s end of extended support, do not extend the product’s lifecycle, and do not provide technical support beyond the original timeline.
The Windows Server 2012 R2 lifecycle page shows the Fixed Lifecycle Policy for the Datacenter, Essentials, Foundation and Standard editions, lists ESU Year 3 ending 10/14/2026 at 6:59:59 AM Pacific Time, and notes that Microsoft Edge version 109 was the last version supported on Windows Server 2012 and 2012 R2. Microsoft’s list of products ending support in 2026 includes Windows Server 2012 and 2012 R2 Extended Security Update Year 3 on October 13, 2026.
Applicability
Use this for any Windows Server 2012 or 2012 R2 installation, physical or virtual. Some embedded products have their own ESU terms through their device makers; check those separately.
DSE recommendation
DSE recommends retiring every remaining Windows Server 2012 and 2012 R2 server, and isolating any that cannot be retired yet as unpatched systems. Move roles and applications to a supported Windows Server version, confirm each vendor supports the target, remove internet access and inbound connections from anything left behind, and replace the outdated Edge browser on any server where staff still browse.
Verification
Run an inventory query for the 2012 and 2012 R2 operating system versions across all domains and hypervisors, track each server to retirement, and review firewall rules for any server still waiting.
Official references
Microsoft Learn — Lifecycle FAQ: Extended Security Updates. Microsoft Lifecycle — Windows Server 2012 R2. Microsoft Lifecycle — Ending Support in 2026. Reviewed October 19, 2026.
Review the official source
Microsoft Learn — Lifecycle FAQ: Extended Security Updates · Verified October 19, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE