No Further ESU Extension for Exchange 2016 and 2019: Microsoft Confirms Support Will End
Microsoft has confirmed that it will not grant any further extensions to the Extended Security Update (ESU) program for Exchange Server 2016 and Exchange Server 2019. With the conclusion of October 2026, the Redmond giant will definitively stop distributing security patches for both platforms. This announcement necessitates that IT administrators plan for the upgrade or migration of their systems before the final deadline, after which machines still in operation will no longer receive fixes for identified vulnerabilities.
The intervention clarifies a support plan that has undergone several adjustments over time. The original end-of-support date for the 2016 and 2019 editions was set for October 2025, after the two versions completed their main support phase in October 2020 and January 2024, respectively. In April 2026, the company introduced a six-month extension by creating the Period 2 ESU program, with a deadline set for October 2026. Responding to numerous requests from clients about a possible further extension, the Exchange Server team clarified via blog that the current timeframe represents the ultimate limit and will not be subject to further extensions, even for organizations that have already subscribed to the Period 2 plan.
Mandatory Migration from Outdated Systems and What Happens for Cloud Environments
For environments based on Exchange Server 2019, the official guideline indicates the preferred path is the in-place upgrade to Exchange Server Subscription Edition, also known as Exchange SE. This procedure allows maintaining the existing infrastructure without having to face a complete migration of data, with operational modes entirely overlapping with those required for the installation of a standard Cumulative Update (CU). Before proceeding, the manufacturer recommends a careful analysis of hardware requirements, the underlying operating system, and the licensing model to avoid installation incompatibilities.
The situation is different for those still managing installations of Exchange Server 2016 or the older Exchange Server 2013, a version whose operational life has long ended. On these systems, a direct in-place upgrade to Exchange SE is not possible. Administrators will need to complete an environment migration, planning, if necessary, an intermediate transition to Exchange 2019 depending on the existing network topology. This operation requires preliminary mapping of email boxes, connectors, linked applications, and hybrid setups. As an alternative to maintaining on-premises servers, global administrators can lead the transition to the cloud by migrating mail to Exchange Online, accessible as a standalone service or integrated within Microsoft 365 and Office 365 licenses.
As the deadline approaches in October 2026, unsupported servers will continue to operate, but the lack of patches will expose business systems to constant cybersecurity risks. This lifecycle update is the result of a timeline that sees the approach of the end of main support for Windows Server 2022 and Windows 10 LTSB 2016, in addition to the imminent transition to extended support for the Home and Pro editions of Windows 11 24H2. On the consumer client front, the company recently extended the free ESU program for Windows 10 by one year, bringing security coverage until October 2027.