It’s Game Over for Windows Server 2012. Is Your Business Ready?

Introduction

In the world of technology, change is really the only constant.

As the business world adapts to new technologies, it’s crucial to keep your systems updated and secure. Why? Because cybercriminals are adapting to those new technologies, too.

Microsoft is no stranger to this cycle. In a process which began way back in 2018, the tech giant will finally be pulling the plug on support for Windows Server 2012 and Windows Server 2012 R2 on October 10^th, 2023.

If you’re still running either of these platforms, now’s the time to act – because running server software without the reassurance provided by security patches could spell cybersecurity disaster.

Here’s what you need to know.

What’s changing in October 2023?

As explained in the most recent update from May, as of October 10^th, 2023, Windows Server 2012 and 2012 R2 will no longer receive “security updates, non-security updates, bug fixes, technical support, or online technical content updates” from Microsoft.  

In practical terms, this means that any new vulnerabilities or issues that arise after this date will not be addressed by Microsoft, potentially leaving systems running these versions exposed to cyber threats.  

And, believe us, there are people out there who will be racing to find vulnerabilities in these systems and exploit them as soon as they can.  

So, what can businesses do?

If you’re still using Windows Server 2012 or 2012 R2, you have a few different options to ensure your systems remain secure.  

• Migrate to Azure. It’ll come as no surprise that Microsoft encourages all organisations to migrate their applications and databases to Azure, their cloud-based server solutions. By taking this option, Microsoft offers a variety of cost-saving incentives, including hybrid migration programs which can help you modernise your infrastructure with minimal disruption. They’ll also cover the cost of the Extended Security Updates for Server 2012 – more on these in a moment.
• Upgrade on-premises to Windows Server 2022. The next option is ideal if you’re looking to keep your servers strictly “on-prem”. By upgrading to Windows Server 2022 provides, you’ll get all of the benefits the latest version provides: security, hybrid infrastructure, and a variety of application modernisation capabilities, and much more. Be sure to ask your Get Support account manager for the full rundown of features available with Windows Server 2022.
• Deploy Extended Security Updates (ESUs) on-premises: If you’re unwilling or unable to meet the October deadline, and you have Software Assurance or subscription licenses under an enterprise agreement enrolment, you’ll be given the option to buy Extended Security Updates, or ESUs. These will provide three more years of security updates for Windows Server 2012 and 2012 R2 – at a cost.  

What are Extended Security Updates (ESUs)? 

Extended Security Updates, also known as ESUs, are Microsoft’s lifeline for businesses which can’t immediately upgrade to the latest server versions.  

ESUs provide up to three years of additional security updates – in this case until October 13^th, 2026, renewable on an annual basis – ensuring that systems remain protected even after the end of extended support.  

While ESUs can provide some security against the inevitable exploits which will be found for these platforms, it’s strongly recommended that organisations still running Windows Server 2012 or 2012 R2 give serious thought to either migrating to the cloud or upgrading to Server 2022.  

Not sure which option to choose? Need more details on ESUs or the Azure migration process? Your Get Support account manager is here to help.