02 8987 4501  ·  0406 340 856
Google Reviews
IT Lifecycle

The server in the cupboard stops getting security updates on 12 January.

Published 12 November 2026

Windows Server 2016 reaches end of support on 12 January 2027. The server keeps running, which is exactly why this gets ignored, and then someone works out in March that the box holding the practice database has not had a security patch since Christmas. You have eight weeks to decide what happens, and for a lot of small practices the fallback everyone assumes exists is not actually available.

Why IT Service Centre
Since 2004Two decades supporting Sydney businesses
2-hour responseDuring business hours, sooner for urgent issues
One partnerSupport, security, networks and cloud, together

What stops on 12 January

Security updates. Windows Server 2016 gets one last monthly update that day and then nothing further, along with bug fixes and any technical support from Microsoft. Mainstream support ended back in January 2022, so this is the end of the extended stretch rather than the start of the problem.

What does not stop is the server. It boots on 13 January exactly as it did on the 12th, the practice software opens, the files are where they were. That is the trap. Nothing visibly breaks, so nothing feels urgent, and the machine quietly becomes the softest target on your network while everyone gets on with their day.

Why it lands harder on a clinic than on an office

Most of the small on-premises servers we still look after in Sydney are not file servers. They are running a practice management system, an imaging database, a document management platform or a line-of-business application that the whole business sits on top of.

That changes the problem. You are not deciding whether to upgrade Windows, you are deciding whether your software vendor supports the version you upgrade to. Some will have certified the newer server release already. Some will not have, and will tell you to wait. A few will use the opportunity to tell you their own product version is also out of support and you need to pay to move that too.

So the first call is not to us or to Microsoft. It is to whoever makes the software that runs your business, asking which server versions they currently support and whether anything in your licence changes if you move. Get the answer in writing. That answer sets your timeline, and until you have it everything else is guesswork.

The Extended Security Updates option, and why it may not be yours

Microsoft offers Extended Security Updates for Server 2016, delivered through Azure Arc, running up to three years and covering critical and important security fixes only. On paper it is the comfortable answer: pay, carry on, deal with it later.

There are three things in the detail that catch small businesses out.

You need active Software Assurance or a qualifying subscription licence to buy ESU at all. Plenty of small practices bought their server as a one-off with the hardware years ago and have never had Software Assurance. If that is you, the bridge everyone assumes exists is not there, and January is a hard stop rather than a soft one.

The licensing has a floor. ESU is sold per two-core pack with a sixteen-core minimum on a physical server, so the four-core box under the reception desk is billed as though it had sixteen cores. At the directional list prices Microsoft has published for year one, a Standard edition server lands somewhere around a thousand US dollars for the first year before anyone converts it or adds a reseller margin. It is not the few hundred dollars people expect.

And the years are cumulative. You cannot skip year one and buy year two, which is the same structure that makes the Windows 10 program expensive, and we wrote about how that plays out on the desktop side last month. Deferring does not save money, it just moves a larger bill further out.

The three real choices

Upgrade the operating system. An in-place upgrade from 2016 to Server 2025 is supported for non-clustered servers, and on hardware that is only a few years old it is the straightforward path. On a server bought in 2017 it usually is not, because the hardware is due anyway and you would be putting a new operating system on a disk that is running out of life.

Replace the server. New hardware, current operating system, a clean build and your data moved across. More money up front, less risk, and you stop having this conversation every few years about a machine that is already past its useful life.

Stop having a server. For a good number of practices the honest answer in 2027 is that the server exists because it existed in 2017. If the practice software now runs hosted, if the files could live in SharePoint, and if the only other thing the box does is print queues and a backup, then the upgrade is the moment to ask whether to replace it at all. That is not true for everyone, and anything with imaging or a large local database usually still wants a server on site.

What to do in the next eight weeks

Find out what you actually have. Which server, which edition, how many cores, how old the hardware is, and whether there is Software Assurance on it. Most people do not know the answer to the last two and both decide what your options are.

Ask your software vendor which server versions they support, in writing.

Then pick a path and book it in, because January and February are the worst months to be arranging this. Suppliers are closed or short-staffed, your own team is on leave, and a server migration that needs a weekend is competing with everyone else who left it until the deadline.

If you are not sure which of the three choices fits, that is a short conversation rather than a project. We would rather tell you the in-place upgrade is fine and charge you for an afternoon than sell you hardware you did not need.

And the one after this

Windows Server 2019 reaches end of support in January 2029. If you are buying new hardware now, that date is worth knowing, because a 2019 licence someone has sitting on a shelf is already two years into a five-year countdown.

Still have a server on site?

Let us tell you which of the three it is.

We will check what you are running, what your software vendor supports and whether you even have the licensing to buy ESU, then tell you straight whether to upgrade, replace or retire it.

Start a conversation