Summary
Microsoft will end support for Windows Server 2016 on January 12, 2027, after which the operating system will no longer receive security updates, bug fixes, or technical support. Systems that remain on Windows Server 2016 after this date may be exposed to security risks and may fall out of compliance with Dartmouth’s Information Security Policy, so system owners should begin planning to migrate, replace, or decommission these servers.
Body
What the Microsoft Announcement Means
Microsoft has announced it will end support for Windows Server 2016 on January 12, 2027. After this date, servers running Windows Server 2016 will no longer receive security updates, bug fixes, or technical support from Microsoft.
Systems that continue running Windows Server 2016 after support ends will remain operational, but they will no longer receive vendor security patches. This increases exposure to security vulnerabilities and operational risk over time.
Why Windows Server 2016 End-of-Life Matters
A server running an unsupported operating system may continue to function normally for some time. However, once vendor support ends, newly discovered vulnerabilities will no longer be patched by Microsoft.
Over time, this increases the likelihood that the system could be compromised or experience compatibility issues with other supported software and services.
No more security updates
Microsoft regularly releases security updates for supported operating systems to address newly discovered vulnerabilities. These updates are a critical component of maintaining the security of systems connected to institutional networks.
January 12, 2027 marks the end of security updates and patches provided by Microsoft for Windows Server 2016. After this date, any vulnerabilities discovered in the operating system will remain unpatched.
Because operating system lifecycles are publicly documented, unsupported platforms are often specifically targeted by attackers once security updates stop.
Dartmouth Information Security Policy requires system owners and operators to maintain vendor-supported software and apply security updates in a timely manner. Systems running operating systems that are no longer supported by the vendor may be considered out of compliance with this policy.
Begin Preparing Now
What are my options?
- If your server supports a third-party application, contact the application vendor to determine whether a hosted or vendor-managed solution is available.
- If the server is no longer required, you may submit a request to decommission it.
- If the application will continue to require a server, Infrastructure Services strongly recommends deploying a new server running a currently supported version of Windows Server and migrating the application and data to that system.
- Server Request
- Review the current use of the Windows Server 2016 system and document application dependencies.
- Confirm with your application vendor which current Windows Server versions are supported.
- Request a new server build through Infrastructure Services.
- Install the application on the new server and migrate the data from the existing system.
- After migration is complete, the Windows Server 2016 system should be decommissioned.
In-place operating system upgrades are not recommended for most production systems due to the increased risk of application incompatibility, configuration drift, and recovery challenges.
Need help determining the right path?
If you are unsure how to proceed, you can request a consultation with an Infrastructure Services engineer to review your system and discuss migration options.
General Infrastructure Request