Home › Research › Windows Server End of Life Dates and Statistics (2026)
Research data
Windows Server end-of-life and ESU dates for every version from 2003 to 2025, how many servers still run each one, and what staying or moving costs. 2026.
Sources: Microsoft (2026, 2024); The Register; Techzine; Cybersecurity and Infrastructure Security Agency; Spiceworks; Uptime Institute; IDC
A server that still works is the hardest machine in the building to retire. It runs the line-of-business application nobody wants to reinstall, the file shares everyone depends on and the database that was migrated once, badly, in a previous decade. Microsoft's calendar does not wait: Windows Server 2012 and 2012 R2 left even paid security updates in October 2026, Windows Server 2022 left mainstream support the same day, and Windows Server 2016 reaches the end of its support in January 2027. This page collects what the calendar says, from Microsoft's own lifecycle pages, together with what the audits found still running at each deadline, what an unsupported server is exposed to, what Extended Security Updates cost, how many businesses still keep servers on their own premises, and what leaving an old server takes and costs.
Windows Server 2016 reaches the end of extended support on 12 January 2027, 90 days after 14 October 2026 (Microsoft).

| Version | End of extended support |
|---|---|
| Windows Server 2003 | 14 July 2015 |
| Windows Server 2003 R2 | 14 July 2015 |
| Windows Server 2008 | 14 January 2020 |
| Windows Server 2008 R2 | 14 January 2020 |
| Windows Server 2012 | 10 October 2023 |
| Windows Server 2012 R2 | 10 October 2023 |
| Windows Server 2016 | 12 January 2027 |
| Windows Server 2019 | 9 January 2029 |
| Windows Server 2022 | 14 October 2031 |
| Windows Server 2025 | 14 November 2034 |
Sources: Microsoft (2022-2026)
Windows Server 2016 reaches the end of extended support on 12 January 2027, after mainstream support ended on 11 January 2022 (Microsoft, 2024).
Microsoft publishes a fixed lifecycle for every Windows Server release: years of mainstream support, years of extended support, and for some versions paid Extended Security Updates after that. The dates below come from the lifecycle page for each release. The aggregator sites that rank for these searches copy them, sometimes a day off, and leave out the ESU years and what they cost.
| Version | End of extended support | Scope |
|---|---|---|
| Windows Server 2003 | 14 July 2015 | Windows Server 2003, all editions (Datacenter, Enterprise, Standard and Web editions (32-bit, x64 and Itanium)) · Worldwide · 2015-07-14 |
| Windows Server 2003 R2 | 14 July 2015 | Windows Server 2003 R2, all editions (Datacenter, Enterprise and Standard editions (32-bit and x64)) · Worldwide · 2015-07-14 |
| Windows Server 2008 | 14 January 2020 | Windows Server 2008, all editions (Datacenter, Enterprise, Standard, Web, Foundation and Itanium editions (with and without Hyper-V)) · Worldwide · 2020-01-14 |
| Windows Server 2008 R2 | 14 January 2020 | Windows Server 2008 R2, all editions (Datacenter, Enterprise, HPC, Itanium, Standard and Web editions) · Worldwide · 2020-01-14 |
| Windows Server 2012 | 10 October 2023 | Windows Server 2012, all editions (Datacenter, Essentials, External Connector, Embedded, Foundation and Standard editions) · Worldwide · 2023-10-10 |
| Windows Server 2012 R2 | 10 October 2023 | Windows Server 2012 R2, all editions (Datacenter, Essentials, Embedded, Foundation and Standard editions) · Worldwide · 2023-10-10 |
| Windows Server 2016 | 12 January 2027 | Windows Server 2016, all editions (Datacenter, Essentials, MultiPoint Premium and Standard editions) · Worldwide · 2027-01-12 |
| Windows Server 2019 | 9 January 2029 | Windows Server 2019, all editions (Datacenter, Essentials and Standard editions) · Worldwide · 2029-01-09 |
| Windows Server 2022 | 14 October 2031 | Windows Server 2022, all editions (Datacenter, Datacenter: Azure Edition, Essentials and Standard editions) · Worldwide · 2031-10-14 |
| Windows Server 2025 | 14 November 2034 | Windows Server 2025, all editions (Datacenter, Datacenter: Azure Edition, Essentials and Standard editions) · Worldwide · 2034-11-14 |
| Version | End of mainstream support | Scope |
|---|---|---|
| Windows Server 2003 | 13 July 2010 | Windows Server 2003, all editions (Datacenter, Enterprise, Standard and Web editions (32-bit, x64 and Itanium)) · Worldwide · 2010-07-13 |
| Windows Server 2003 R2 | 13 July 2010 | Windows Server 2003 R2, all editions (Datacenter, Enterprise and Standard editions (32-bit and x64)) · Worldwide · 2010-07-13 |
| Windows Server 2008 | 13 January 2015 | Windows Server 2008, all editions (Datacenter, Enterprise, Standard, Web, Foundation and Itanium editions (with and without Hyper-V)) · Worldwide · 2015-01-13 |
| Windows Server 2008 R2 | 13 January 2015 | Windows Server 2008 R2, all editions (Datacenter, Enterprise, HPC, Itanium, Standard and Web editions) · Worldwide · 2015-01-13 |
| Windows Server 2012 | 9 October 2018 | Windows Server 2012, all editions (Datacenter, Essentials, External Connector, Embedded, Foundation and Standard editions) · Worldwide · 2018-10-09 |
| Windows Server 2012 R2 | 9 October 2018 | Windows Server 2012 R2, all editions (Datacenter, Essentials, Embedded, Foundation and Standard editions) · Worldwide · 2018-10-09 |
| Windows Server 2016 | 11 January 2022 | Windows Server 2016, all editions (Datacenter, Essentials, MultiPoint Premium and Standard editions) · Worldwide · 2022-01-11 |
| Windows Server 2019 | 9 January 2024 | Windows Server 2019, all editions (Datacenter, Essentials and Standard editions) · Worldwide · 2024-01-09 |
| Windows Server 2022 | 13 October 2026 | Windows Server 2022, all editions (Datacenter, Datacenter: Azure Edition, Essentials and Standard editions) · Worldwide · 2026-10-13 |
| Windows Server 2025 | 13 November 2029 | Windows Server 2025, all editions (Datacenter, Datacenter: Azure Edition, Essentials and Standard editions) · Worldwide · 2029-11-13 |
| Version | Released | Scope |
|---|---|---|
| Windows Server 2003 | 28 May 2003 | Windows Server 2003, all editions (Datacenter, Enterprise, Standard and Web editions (32-bit, x64 and Itanium)) · Worldwide · 2003-05-28 |
| Windows Server 2003 R2 | 5 March 2006 | Windows Server 2003 R2, all editions (Datacenter, Enterprise and Standard editions (32-bit and x64)) · Worldwide · 2006-03-05 |
| Windows Server 2008 | 6 May 2008 | Windows Server 2008, all editions (Datacenter, Enterprise, Standard, Web, Foundation and Itanium editions (with and without Hyper-V)) · Worldwide · 2008-05-06 |
| Windows Server 2008 R2 | 22 October 2009 | Windows Server 2008 R2, all editions (Datacenter, Enterprise, HPC, Itanium, Standard and Web editions) · Worldwide · 2009-10-22 |
| Windows Server 2012 | 30 October 2012 | Windows Server 2012, all editions (Datacenter, Essentials, External Connector, Embedded, Foundation and Standard editions) · Worldwide · 2012-10-30 |
| Windows Server 2012 R2 | 25 November 2013 | Windows Server 2012 R2, all editions (Datacenter, Essentials, Embedded, Foundation and Standard editions) · Worldwide · 2013-11-25 |
| Windows Server 2016 | 15 October 2016 | Windows Server 2016, all editions (Datacenter, Essentials, MultiPoint Premium and Standard editions) · Worldwide · 2016-10-15 |
| Windows Server 2019 | 13 November 2018 | Windows Server 2019, all editions (Datacenter, Essentials and Standard editions) · Worldwide · 2018-11-13 |
| Windows Server 2022 | 18 August 2021 | Windows Server 2022, all editions (Datacenter, Datacenter: Azure Edition, Essentials and Standard editions) · Worldwide · 2021-08-18 |
| Windows Server 2025 | 1 November 2024 | Windows Server 2025, all editions (Datacenter, Datacenter: Azure Edition, Essentials and Standard editions) · Worldwide · 2024-11-01 |
| Programme and milestone | Date or term | Scope |
|---|---|---|
| Windows Server 2008 and 2008 R2: last ESU year outside Azure ended | 10 January 2023 | Windows Server 2008 R2 with Extended Security Updates · Worldwide · 2023-01-10 |
| Windows Server 2008 R2: ESU years in all, the fourth on Azure only | 4 years | Windows Server 2008 R2 with Extended Security Updates · Worldwide · 2020-01-14 to 2024-01-09 |
| Windows Server 2008 and 2008 R2: extra year, Azure only | +1 year on Azure | Microsoft's ESU terms for Windows Server 2008 and 2008 R2 (documentation) · Worldwide · 2023-01 to 2024-01 |
| Windows Server 2012 and 2012 R2: paid ESU years after October 2023 | 3 years | Microsoft's Extended Security Update terms for Windows Server 2012 and 2012 R2 (documentation) · Worldwide · 2023-10-10 to 2026-10-13 |
| Windows Server 2012 and 2012 R2: yearly ESU windows | 3 windows | Microsoft's ESU availability table (documentation) · Worldwide · 2023-10-10 to 2026-10-13 |
| Windows Server 2012 and 2012 R2: last paid ESU year ended | 13 October 2026 | Windows Server 2012 and 2012 R2 with Extended Security Updates · Worldwide · 2026-10-13 |
| Windows Server 2012: Azure Arc ESU licences deactivated | 14 October 2026 (00:00 UTC) | Windows Server 2012 and 2012 R2 servers enrolled in ESUs enabled by Azure Arc · Worldwide · 2026-10-14 |
| Windows Server 2016: ESU announced | 25 February 2026 | Windows Server 2016 customers (Microsoft announcement) · Worldwide · 2026-02-25 |
| Windows Server 2016: ESU term through Azure Arc | 3 years (through 2030) | Windows Server 2016 Standard and Datacenter servers enrolled in ESUs enabled by Azure Arc · Worldwide · 2027-01-13 to 2030-01 |
| Windows Server 2016: ESU enrolment opened and billing starts | 3 August 2026 (enrolment), 13 January 2027 (billing) | Windows Server 2016 servers enrolled in ESUs enabled by Azure Arc · Worldwide · 2026-08-03 |
| Any Long-Term Servicing Channel release: minimum support before ESU | 10 years | Microsoft's Windows Server lifecycle policy (documentation) · Worldwide · 2025 |
| Version or interval | Years or days | Scope |
|---|---|---|
| Windows Server 2003: release to end of extended support | 12.1 years | Windows Server 2003 (Microsoft lifecycle dates) · Worldwide · 2003-05-28 to 2015-07-14 |
| Windows Server 2003 R2: release to end of extended support | 9.4 years | Windows Server 2003 R2 (Microsoft lifecycle dates) · Worldwide · 2006-03-05 to 2015-07-14 |
| Windows Server 2008: release to end of extended support | 11.7 years | Windows Server 2008 (Microsoft lifecycle dates) · Worldwide · 2008-05-06 to 2020-01-14 |
| Windows Server 2008 R2: release to end of extended support | 10.2 years | Windows Server 2008 R2 (Microsoft lifecycle dates) · Worldwide · 2009-10-22 to 2020-01-14 |
| Windows Server 2012: release to end of extended support | 10.9 years | Windows Server 2012 (Microsoft lifecycle dates) · Worldwide · 2012-10-30 to 2023-10-10 |
| Windows Server 2012 R2: release to end of extended support | 9.9 years | Windows Server 2012 R2 (Microsoft lifecycle dates) · Worldwide · 2013-11-25 to 2023-10-10 |
| Windows Server 2016: release to end of extended support | 10.2 years | Windows Server 2016 (Microsoft lifecycle dates) · Worldwide · 2016-10-15 to 2027-01-12 |
| Windows Server 2019: release to end of extended support | 10.2 years | Windows Server 2019 (Microsoft lifecycle dates) · Worldwide · 2018-11-13 to 2029-01-09 |
| Windows Server 2022: release to end of extended support | 10.2 years | Windows Server 2022 (Microsoft lifecycle dates) · Worldwide · 2021-08-18 to 2031-10-14 |
| Windows Server 2025: release to end of extended support | 10.0 years | Windows Server 2025 (Microsoft lifecycle dates) · Worldwide · 2024-11-01 to 2034-11-14 |
| Windows Server 2012 R2: release to end of paid ESU | 4,705 days | Windows Server 2012 R2 (Microsoft lifecycle dates) · Worldwide · 2013-11-25 to 2026-10-13 |
| Since Windows Server 2012's ESU ended, at 14 October 2026 | 1 day | Windows Server 2012 and 2012 R2 (Microsoft lifecycle dates) · Worldwide · 2026-10-14 |
| To Windows Server 2016's end of support, from 14 October 2026 | 90 days | Windows Server 2016 (Microsoft lifecycle dates) · Worldwide · 2026-10-14 to 2027-01-12 |
| Version and milestone | Date or term | Scope |
|---|---|---|
| SQL Server 2008: end of extended support | 9 July 2019 | SQL Server 2008, all editions · Worldwide · 2019-07-09 |
| SQL Server 2008 R2: end of extended support | 9 July 2019 | SQL Server 2008 R2, all editions · Worldwide · 2019-07-09 |
| SQL Server 2008 and 2008 R2: ESU years, the fourth on Azure only | 4 years | SQL Server 2008 and 2008 R2 with Extended Security Updates · Worldwide · 2019-07-09 to 2023-07-11 |
| SQL Server 2012: end of extended support | 12 July 2022 | SQL Server 2012, all editions · Worldwide · 2022-07-12 |
| SQL Server 2012: ESU ended | 8 July 2025 | SQL Server 2012 with Extended Security Updates · Worldwide · 2025-07-08 |
| SQL Server 2014: end of extended support | 9 July 2024 | SQL Server 2014, all editions · Worldwide · 2024-07-09 |
| SQL Server 2014: ESU ends | 12 July 2027 | SQL Server 2014 with Extended Security Updates · Worldwide · 2027-07-12 |
| SQL Server 2016: end of extended support | 14 July 2026 | SQL Server 2016, all editions · Worldwide · 2026-07-14 |
| SQL Server 2016: ESU started | 14 July 2026 | SQL Server 2016 with Extended Security Updates · Worldwide · 2026-07-14 |
| SQL Server 2017: end of extended support | 12 October 2027 | SQL Server 2017, all editions · Worldwide · 2027-10-12 |
| SQL Server 2019: end of extended support | 8 January 2030 | SQL Server 2019, all editions · Worldwide · 2030-01-08 |
| SQL Server 2022: end of extended support | 11 January 2033 | SQL Server 2022, all editions · Worldwide · 2033-01-11 |
| Site, version and milestone | Date the site gives | Scope |
|---|---|---|
| Innov8: Windows Server 2016, end of extended support | 11 January 2027 (Microsoft: 12 January 2027) | Windows Server lifecycle dates as listed by a UK Sage reseller's end-of-life page · Worldwide · 2027-01-11 |
| Block64: Windows Server 2016, end of extended support | 11 January 2027 (Microsoft: 12 January 2027) | Windows Server 2016 end-of-support date as printed by an IT-asset-discovery vendor's blog · Worldwide · 2027-01-11 |
| Bluesource: Windows Server 2016, end of extended support | 13 January 2027 (Microsoft: 12 January 2027) | Windows Server 2016 end-of-support date as printed by a Microsoft licensing partner's blog · Worldwide · 2027-01-13 |
| WPS Office: Windows Server 2016, end of extended support | 14 July 2026 (Microsoft: 12 January 2027) | Windows Server 2016 end-of-support date as printed by a software vendor's blog · Worldwide · 2026-07-14 |
| Petri: Windows Server 2016, end of extended support (typo) | 12 January 2017 (Microsoft: 12 January 2027) | Windows Server 2016 end-of-support date as printed by trade press · Worldwide · 2017-01-12 |
| Itechtics: Windows Server 2016, release | 16 October 2016 (Microsoft: 15 October 2016) | Windows Server lifecycle dates as listed by a dates aggregator · Worldwide · 2016-10-16 |
| Itechtics: Windows Server 2012 R2, release | 13 November 2013 (Microsoft: 25 November 2013) | Windows Server lifecycle dates as listed by a dates aggregator · Worldwide · 2013-11-13 |
| Itechtics: Windows Server 2012 R2, end of extended support | 13 October 2026 (Microsoft: 10 October 2023) | Windows Server lifecycle dates as listed by a dates aggregator · Worldwide · 2026-10-13 |
| Innov8: Windows Server 2025, end of mainstream support | 9 October 2029 (Microsoft: 13 November 2029) | Windows Server lifecycle dates as listed by a UK Sage reseller's end-of-life page · Worldwide · 2029-10-09 |
| Itechtics: Windows Server 2025, end of mainstream support | 9 October 2029 (Microsoft: 13 November 2029) | Windows Server lifecycle dates as listed by a dates aggregator · Worldwide · 2029-10-09 |
| Innov8: Windows Server 2025, end of extended support | 9 October 2034 (Microsoft: 14 November 2034) | Windows Server lifecycle dates as listed by a UK Sage reseller's end-of-life page · Worldwide · 2034-10-09 |
| Itechtics: Windows Server 2025, end of extended support | 10 October 2034 (Microsoft: 14 November 2034) | Windows Server lifecycle dates as listed by a dates aggregator · Worldwide · 2034-10-10 |
Sources: Microsoft (2021-2026); Innov8 Technology; Block64; Bluesource; WPS Office; Petri; Itechtics; endoflife.date; endoflife.ai; Jimber; Raff Technologies; Lansweeper

| Version | Observations |
|---|---|
| Windows Server 2008 | 469,300 |
| Windows Server 2012 | 920,444 |
| Windows Server 2016 | 81,580 |
| Windows Server 2019 | 5,607 |
| Windows Server 2022 | 140 |
Sources: Techzine; Spiceworks; The Register (2026, 2024); Smart Profile; Bitsight (2026); Redmond Channel Partner; Redmond Magazine
20.9% of 1.3 million Windows Server instances inventoried by Lansweeper at more than 35,000 organisations were still running Windows Server 2012 or 2012 R2 five weeks before its 10 October 2023 end of support (Lansweeper data via Techzine, 2023).
Nobody counts every server. What exists are audits of the servers that asset-management tools can see, surveys of IT departments, and scans of what answers on the internet. Each measures a different population, which is why every share below is named with its own.
| Audit and measure | Figure | Scope |
|---|---|---|
| September 2023: Windows Server instances still on 2012 or 2012 R2 | 20.9% | 1.3 million Windows Server instances at more than 35,000 organisations inventoried by Lansweeper's IT asset-management software (vendor scan data, reported by Techzine with the chart caption 'Source: Lansweeper') · Worldwide (Lansweeper customer base) · 2023-09 |
| September 2023: already on an unsupported version | 6.7% | 1.3 million Windows Server instances at more than 35,000 organisations inventoried by Lansweeper's IT asset-management software (vendor scan data, reported by Techzine with the chart caption 'Source: Lansweeper') · Worldwide (Lansweeper customer base) · 2023-09 |
| September 2023: outside support after 10 October 2023 without ESU (derived) | 27.7% | 1.3 million Windows Server instances at more than 35,000 organisations inventoried by Lansweeper's IT asset-management software (vendor scan data, reported by Techzine with the chart caption 'Source: Lansweeper') · Worldwide (Lansweeper customer base) · 2023-09 |
| September 2023: instances in the sample | 1.3 million | 1.3 million Windows Server instances at more than 35,000 organisations inventoried by Lansweeper's IT asset-management software (vendor scan data, reported by Techzine with the chart caption 'Source: Lansweeper') · Worldwide (Lansweeper customer base) · 2023-09 |
| March 2026: servers on Windows Server 2016 | 20.3% | Servers monitored by Lansweeper's asset-discovery platform at its customers (vendor telemetry; the article gives no instance count or date of extraction) · Worldwide (Lansweeper customer base) · 2026-03 |
| Version and date | Share of instances | Scope |
|---|---|---|
| SQL Server 2019, June 2024 | 44% | Just over one million SQL Server instances scanned by Lansweeper's agents in its customer base (vendor scan data, reported by The Register from an interview with Lansweeper's chief strategy officer Roel Decneut) · Worldwide (Lansweeper customer base) · 2024-06 |
| SQL Server 2017, June 2024 | 13.5% | Just over one million SQL Server instances scanned by Lansweeper's agents in its customer base (vendor scan data, reported by The Register from an interview with Lansweeper's chief strategy officer Roel Decneut) · Worldwide (Lansweeper customer base) · 2024-06 |
| SQL Server 2014, June 2024 | 12% | Just over one million SQL Server instances scanned by Lansweeper's agents in its customer base (vendor scan data, reported by The Register from an interview with Lansweeper's chief strategy officer Roel Decneut) · Worldwide (Lansweeper customer base) · 2024-06 |
| SQL Server 2012, June 2024 | 9% | Just over one million SQL Server instances scanned by Lansweeper's agents in its customer base (vendor scan data, reported by The Register from an interview with Lansweeper's chief strategy officer Roel Decneut) · Worldwide (Lansweeper customer base) · 2024-06 |
| SQL Server 2008, June 2024 | under 8% | Just over one million SQL Server instances scanned by Lansweeper's agents in its customer base (vendor scan data, reported by The Register from an interview with Lansweeper's chief strategy officer Roel Decneut) · Worldwide (Lansweeper customer base) · 2024-06 |
| Past support, June 2024 | 19.8% | Just over one million SQL Server instances scanned by Lansweeper's agents in its customer base (vendor scan data, reported by The Register from an interview with Lansweeper's chief strategy officer Roel Decneut) · Worldwide (Lansweeper customer base) · 2024-06 |
| Past support once SQL Server 2014 left, July 2024 | 32% | Just over one million SQL Server instances scanned by Lansweeper's agents in its customer base (vendor scan data, reported by The Register from an interview with Lansweeper's chief strategy officer Roel Decneut) · Worldwide (Lansweeper customer base) · 2024-07 |
| Instances in the June 2024 sample | just over 1 million | Just over one million SQL Server instances scanned by Lansweeper's agents in its customer base (vendor scan data, reported by The Register from an interview with Lansweeper's chief strategy officer Roel Decneut) · Worldwide (Lansweeper customer base) · 2024-06 |
| SQL Server 2014, 2026 | 17% | SQL Server instances in Lansweeper's customer inventories (vendor scan data; sample size not stated on the page) · Worldwide (Lansweeper customer base) · 2026-06 |

| Measure | Share | Scope |
|---|---|---|
| Organisations with Windows Server 2008, November 2015 | 80% | Organisations in the Spiceworks network (anonymised, aggregated usage data from Spiceworks' free inventory software), share with at least one instance of each server OS ('penetration rate'), November 2015 · Worldwide (Spiceworks network, mostly small and mid-sized businesses) · 2015-11 |
| November 2015 | 59% | Organisations in the Spiceworks network (anonymised, aggregated usage data from Spiceworks' free inventory software), share with at least one instance of each server OS ('penetration rate'), November 2015 · Worldwide (Spiceworks network, mostly small and mid-sized businesses) · 2015-11 |
| Organisations with Windows Server 2012, November 2015 | 48% | Organisations in the Spiceworks network (anonymised, aggregated usage data from Spiceworks' free inventory software), share with at least one instance of each server OS ('penetration rate'), November 2015 · Worldwide (Spiceworks network, mostly small and mid-sized businesses) · 2015-11 |
| Organisations with a Linux server, November 2015 | 30% | Organisations in the Spiceworks network (anonymised, aggregated usage data from Spiceworks' free inventory software), share with at least one instance of each server OS ('penetration rate'), November 2015 · Worldwide (Spiceworks network, mostly small and mid-sized businesses) · 2015-11 |
| Organisations with Windows Server 2000, November 2015 | 9% | Organisations in the Spiceworks network (anonymised, aggregated usage data from Spiceworks' free inventory software), share with at least one instance of each server OS ('penetration rate'), November 2015 · Worldwide (Spiceworks network, mostly small and mid-sized businesses) · 2015-11 |
| Servers and VMs on Windows Server, mid-2016 | 87.7% | Physical servers and virtual machines in the Spiceworks network (organisations running Spiceworks' free inventory software, mostly on-premises), by server operating system · Worldwide (Spiceworks network, mostly small and mid-sized businesses) · 2016-06 |
| Servers and VMs on Windows Server 2008, June 2016 | 45.4% | Physical servers and virtual machines, and the organisations running them, in Spiceworks' anonymised network inventory data, June 2016 (mostly on-premises, skewed to small and mid-sized businesses) · Worldwide (Spiceworks network, mostly on-premises) · 2016-06 |
| Servers and VMs on Windows Server 2012, June 2016 | 23.6% | Physical servers and virtual machines, and the organisations running them, in Spiceworks' anonymised network inventory data, June 2016 (mostly on-premises, skewed to small and mid-sized businesses) · Worldwide (Spiceworks network, mostly on-premises) · 2016-06 |
| Servers and VMs on Windows Server 2003, June 2016 | 17.9% | Physical servers and virtual machines, and the organisations running them, in Spiceworks' anonymised network inventory data, June 2016 (mostly on-premises, skewed to small and mid-sized businesses) · Worldwide (Spiceworks network, mostly on-premises) · 2016-06 |
| Servers and VMs on Linux, mid-2016 | 11.7% | Physical servers and virtual machines in the Spiceworks network (organisations running Spiceworks' free inventory software, mostly on-premises), by server operating system · Worldwide (Spiceworks network, mostly small and mid-sized businesses) · 2016-06 |
| Servers and VMs on Windows Server 2000, mid-2016 | 0.9% | Physical servers and virtual machines in the Spiceworks network (organisations running Spiceworks' free inventory software, mostly on-premises), by server operating system · Worldwide (Spiceworks network, mostly small and mid-sized businesses) · 2016-06 |

| Version | Observations |
|---|---|
| Windows Server 2008 | 469,300 |
| Windows Server 2012 | 920,444 |
| Windows Server 2016 | 81,580 |
| Windows Server 2019 | 5,607 |
| Windows Server 2022 | 140 |

| Country | Observations | Scope |
|---|---|---|
| United States | 239,107 | Software observations on the public-facing internet by Bitsight's Groma scanning engine over the prior 30 days, each identified by an address, port and domain name (so one host with several domains or ports counts more than once); shown on 2026-10-14 · United States · 2026-10-14 |
| China | 134,044 | Software observations on the public-facing internet by Bitsight's Groma scanning engine over the prior 30 days, each identified by an address, port and domain name (so one host with several domains or ports counts more than once); shown on 2026-10-14 · China · 2026-10-14 |
| Hong Kong | 36,097 | Software observations on the public-facing internet by Bitsight's Groma scanning engine over the prior 30 days, each identified by an address, port and domain name (so one host with several domains or ports counts more than once); shown on 2026-10-14 · Hong Kong · 2026-10-14 |
| Germany | 35,873 | Software observations on the public-facing internet by Bitsight's Groma scanning engine over the prior 30 days, each identified by an address, port and domain name (so one host with several domains or ports counts more than once); shown on 2026-10-14 · Germany · 2026-10-14 |
| United Kingdom | 31,760 | Software observations on the public-facing internet by Bitsight's Groma scanning engine over the prior 30 days, each identified by an address, port and domain name (so one host with several domains or ports counts more than once); shown on 2026-10-14 · United Kingdom · 2026-10-14 |

| Vendor, version and measure | Figure | Scope |
|---|---|---|
| Enlyft: companies using Windows Server 2012 | 37,487 companies | Companies in Enlyft's B2B database tagged with Windows Server 2012 (cumulative evidence, up to 10 years 11 months old) · Worldwide · 2026-10 |
| 6sense: Windows Server 2012 customers | 27,732 (June 2025: 9,402) | Companies in 6sense's database tagged with Windows Server 2012 · Worldwide · 2026-10 |
| 6sense: Windows Server 2016 customers | 10,774 (UK 746) | Companies in 6sense's database tagged with Windows Server 2016 · Worldwide · 2026-10 |
| TheirStack: companies using Windows Server 2012 (from job postings) | 9,178 companies | Companies with job postings mentioning Windows Server 2012 (TheirStack's job-posting dataset) · Worldwide · 2026-10 |
| Enlyft: Windows Server 2012's share of its operating systems category | about 0.5% | Companies in Enlyft's database tagged as using Windows Server 2012, built by 'scanning billions of public documents' with 'indexing techniques combined with advanced data science' (no sampling frame, date of observation or definition of 'use' published) · Worldwide (Enlyft database) · 2026-10-14 |
| Enlyft: Windows Server 2012 users in the United States | 46% | Companies in Enlyft's database tagged as using Windows Server 2012, built by 'scanning billions of public documents' with 'indexing techniques combined with advanced data science' (no sampling frame, date of observation or definition of 'use' published) · United States · 2026-10-14 |
Sources: Techzine; The Register (2024, 2026); Lansweeper; Spiceworks (2015, 2016); Network World; SC Media; Bitsight (2026); Smart Profile (2017); Enlyft; 6sense (2026); TheirStack
49 actively exploited vulnerabilities affecting Windows Server 2012 R2 were catalogued by US authorities during its three paid update years (CISA and Microsoft, counted 2026).

| Entries | Count |
|---|---|
| All entries in the catalogue | 1,741 |
| Microsoft entries | 390 (22.4%) |
| Microsoft entries naming Windows | 181 |
| Entries naming Windows Server | 3 |
| Entries affecting Windows Server 2012 R2 (joined with Microsoft's advisories) | 132 |
| Entries affecting Windows Server 2016 | 150 |
| Entries affecting Windows Server 2019 | 168 |
Sources: Cybersecurity and Infrastructure Security Agency; Microsoft Security Response Center (2025, 2024, 2023); The Shadowserver Foundation; Information Commissioner's Office; Coalition; Microsoft
49 actively exploited Microsoft vulnerabilities affecting Windows Server 2012 R2 were added to CISA's Known Exploited Vulnerabilities catalogue between 11 October 2023 and 13 October 2026, the version's three paid ESU years, 4 of them known to be used by ransomware (CISA and Microsoft MSRC, counted 2026).
An unsupported server keeps working. What changes is that newly found flaws are fixed in the supported versions and not in it, that scanners can see which versions are listening on the internet, and that the agencies which track exploited vulnerabilities keep adding entries that apply to it. The counts below are associations and tallies, not advice.
| Version and period | CVEs | Scope |
|---|---|---|
| Windows Server 2008 R2, 2019 (its last full supported year) | 385 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2008 R2 · Worldwide (all customers of the product) · 2019 |
| Windows Server 2008 R2, January 2026 (last document to list it) | 28 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2008 R2 · Worldwide (all customers of the product) · 2026-01 |
| Windows Server 2012 R2, 2023 | 450 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2012 R2 · Worldwide (all customers of the product) · 2023 |
| Windows Server 2012 R2, January to October 2023 (last supported months) | 413 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2012 R2 · Worldwide (all customers of the product) · 2023-01/2023-10 |
| Windows Server 2012 R2, 2024 (first ESU year) | 430 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2012 R2 · Worldwide (all customers of the product) · 2024 |
| Windows Server 2012 R2, 2025 (without November) | 466 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2012 R2 · Worldwide (all customers of the product) · 2025 |
| Windows Server 2012 R2, January to October 2026 | 1,693 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2012 R2 · Worldwide (all customers of the product) · 2026-01/2026-10 |
| Windows Server 2012 R2, October 2026 (final ESU update) | 673 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2012 R2 · Worldwide (all customers of the product) · 2026-10 |
| Windows Server 2012 R2, the three ESU years | 2,626 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2012 R2 · Worldwide (all customers of the product) · 2023-11/2026-10 |
| Windows Server 2012 R2, Critical, January to October 2026 | 120 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2012 R2 · Worldwide (all customers of the product) · 2026-01/2026-10 |
| Windows Server 2016, 2025 (without November) | 587 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2016 · Worldwide (all customers of the product) · 2025 |
| Windows Server 2016, January to October 2026 | 2,076 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2016 · Worldwide (all customers of the product) · 2026-01/2026-10 |
| Windows Server 2019, 2025 (without November) | 664 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2019 · Worldwide (all customers of the product) · 2025 |
| Windows Server 2019, January to October 2026 | 2,451 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2019 · Worldwide (all customers of the product) · 2026-01/2026-10 |
| Windows Server 2022, 2025 (without November) | 731 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2022 · Worldwide (all customers of the product) · 2025 |
| Windows Server 2022, January to October 2026 | 2,624 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2022 · Worldwide (all customers of the product) · 2026-01/2026-10 |
| Windows Server 2025, 2025 (without November) | 755 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2025 · Worldwide (all customers of the product) · 2025 |
| Windows Server 2025, January to October 2026 | 2,815 | Security vulnerabilities (CVE ids) in Microsoft's monthly security update documents whose affected products include Windows Server 2025 · Worldwide (all customers of the product) · 2026-01/2026-10 |
| All Microsoft products, January to October 2026 | 12,276 | All vulnerabilities (CVE ids) in Microsoft's monthly CVRF documents, any product, any issuing CNA · Worldwide (all customers of the product) · 2026-01/2026-10 |

| Measure | Entries | Scope |
|---|---|---|
| All entries in the catalogue | 1,741 | Vulnerabilities CISA has evidence of active exploitation for · Worldwide (catalogue maintained by the US CISA) · 2026-10-13 |
| Microsoft entries | 390 (22.4%) | KEV catalogue entries · Worldwide (catalogue maintained by the US CISA) · 2026-10-13 |
| Microsoft entries naming Windows | 181 | KEV catalogue entries with vendor Microsoft · Worldwide (catalogue maintained by the US CISA) · 2026-10-13 |
| Entries naming Windows Server | 3 | KEV catalogue entries with vendor Microsoft · Worldwide (catalogue maintained by the US CISA) · 2026-10-13 |
| Entries affecting Windows Server 2012 R2 (joined with Microsoft's advisories) | 132 | KEV catalogue entries with vendor Microsoft and a 2019-2026 MSRC CVRF record · Worldwide (catalogue maintained by the US CISA) · 2026-10-13 |
| Added during Windows Server 2012 R2's ESU years | 49 | KEV catalogue entries with vendor Microsoft whose MSRC advisory lists Windows Server 2012 R2 · Worldwide (catalogue maintained by the US CISA) · 2023-10-11/2026-10-13 |
| Entries affecting Windows Server 2016 | 150 | KEV catalogue entries with vendor Microsoft and a 2019-2026 MSRC CVRF record · Worldwide (catalogue maintained by the US CISA) · 2026-10-13 |
| Entries affecting Windows Server 2019 | 168 | KEV catalogue entries with vendor Microsoft and a 2019-2026 MSRC CVRF record · Worldwide (catalogue maintained by the US CISA) · 2026-10-13 |
| Scan, date and measure | Count or share | Scope |
|---|---|---|
| Shadowserver, March 2026: IIS servers on end-of-life IIS versions | 511,000+ | Internet-reachable HTTP services identifying as Microsoft IIS in Shadowserver's daily scans · Worldwide (IPv4 and IPv6 hosts scanned daily by Shadowserver) · 2026-03 |
| Shadowserver, March 2026: on the IIS releases of Windows Server 2012 and 2012 R2 (derived) | ~284,000 | Internet-reachable HTTP services identifying as Microsoft IIS in Shadowserver's daily scans · Worldwide (IPv4 and IPv6 hosts scanned daily by Shadowserver) · 2026-03 |
| Shadowserver, March 2026: on IIS releases beyond ESU (2008 R2 or older) | 227,000+ | Internet-reachable HTTP services identifying as Microsoft IIS in Shadowserver's daily scans · Worldwide (IPv4 and IPv6 hosts scanned daily by Shadowserver) · 2026-03 |
| Bangladesh national CIRT, March 2026: IP addresses with end-of-life IIS | 452 | Internet-facing IP addresses in Bangladesh running end-of-life IIS · Bangladesh · 2026-03-23 |
| Shadowserver via TechRadar, December 2023: end-of-life Exchange servers | ~20,000 | Internet-connected Microsoft Exchange servers seen in Shadowserver scans · Worldwide (more than half in Europe, about 6,000 in the US) · 2023-12 |
| Cybernews via Shodan, September 2021: web servers on unsupported IIS | 2 million+ | Internet-facing web servers announcing a legacy Microsoft IIS version in Shodan, honeypots excluded · Worldwide (Shodan search results) · 2021-09 |
| Cybernews via Shodan, September 2021: IIS 7.5 (Windows Server 2008 R2) | 1,376,216 | Internet-facing web servers announcing a legacy Microsoft IIS version in Shodan, honeypots excluded · Worldwide (Shodan search results) · 2021-09 |
| Rapid7, 2020: Windows Server nodes exposing SMB | 298,296 | Internet-exposed SMB services found by Project Sonar in 2020 · Worldwide (Rapid7 Project Sonar) · 2020 |
| Bitsight, July 2019: exposed systems vulnerable to BlueKeep | 788,214 | Internet-exposed RDP systems vulnerable to BlueKeep (CVE-2019-0708): Windows XP, 7, Server 2003, 2008 and 2008 R2 · Worldwide (Bitsight internet scans) · 2019-07-23 |
| Bitsight, July 2019: still unpatched ten weeks after the fix | 81% | Internet-exposed RDP systems vulnerable to BlueKeep (CVE-2019-0708): Windows XP, 7, Server 2003, 2008 and 2008 R2 · Worldwide (Bitsight internet scans) · 2019-05-31/2019-07-23 |
| Shodan, June 2017: SMB services still vulnerable to WannaCry's flaw | 91,081 | SMB services visible to Shodan on the internet · Worldwide (Shodan crawlers) · 2017-06-15 |
| Rapid7, May 2017: Windows devices exposing SMB | 800,000+ | Internet-connected devices exposing SMB on TCP 445, fingerprinted by Rapid7 recog · Worldwide (Rapid7 Project Sonar) · 2017-05 |
| Version | Computers cleaned per 1,000 |
|---|---|
| Windows Server 2003 SP2 | 6.5 per 1,000 |
| Windows Server 2008 SP2 | 3.7 per 1,000 |
| Windows Server 2008 R2 SP1 | 2.5 per 1,000 |
| Windows Server 2012 | 1.2 per 1,000 |
| Windows Server 2012 R2 | 0.5 per 1,000 |
| Case | Figure | Scope |
|---|---|---|
| Interserve (UK ICO, 2022): servers on Windows Server 2003 R2 | 18 | Interserve Group servers processing personal data (HR and pensions systems) · United Kingdom · 2020 |
| Interserve: servers on Windows Server 2008 R2 | 22 | Interserve Group servers processing personal data (HR and pensions systems) · United Kingdom · 2020 |
| Interserve: penalty | £4.4 million | Interserve Group Limited (one case) · United Kingdom · 2022-10 |
| Cathay Pacific (UK ICO, 2020): penalty | £500,000 | Cathay Pacific Airways Limited (one case) · United Kingdom (and 9.4 million customers worldwide) · 2014-10/2018-05 |
| Anchorage Community Mental Health Services (US HHS, 2014): settlement | $150,000 | Anchorage Community Mental Health Services (one case, 2,743 individuals affected) · United States (Alaska) · 2014-12 |
| Site, version and measure | Figure | Scope |
|---|---|---|
| stack.watch: Windows Server 2012, 2026 to 14 October | 1,515 (2025: 467) | CVEs that stack.watch maps to Microsoft Windows Server 2012 · Worldwide · 2026-01 to 2026-10 |
| stack.watch: Windows Server 2016, 2026 to 14 October | 1,977 (2025: 601) | CVEs that stack.watch maps to Microsoft Windows Server 2016 · Worldwide · 2026-01 to 2026-10 |
| cvefeed.io: Windows Server 2012, all time | 5,714 CVEs; 211 in CISA KEV | CVEs that cvefeed.io maps to the product 'Windows Server 2012' · Worldwide · 2026-10 |
| OpenCVE: Windows Server 2012, all time | 5,705 CVEs; 209 in KEV | CVEs whose CPE configuration includes microsoft:windows_server_2012 (OpenCVE) · Worldwide · 2026-10 |
| OpenCVE: Windows Server 2016, all time | 7,018 CVEs; 188 in KEV | CVEs whose CPE configuration includes microsoft:windows_server_2016 (OpenCVE) · Worldwide · 2026-10 |
| CVEdetails: Windows Server 2012, March 2025 capture | 3,315 | CVEs that CVEdetails maps to Microsoft Windows Server 2012 · Worldwide · 2025-03 |
| endoflife.ai: times Windows Server appears in CISA's catalogue | 1 (catalogue: 3 by name, 178 'Windows') | CISA KEV catalogue entries (endoflife.ai's product match) · Worldwide · 2026-10 |
| Morphisec: Windows Server 2012 CVEs by end of support (unsourced) | over 1,000 | CVEs affecting Windows Server 2012 and 2012 R2 (unspecified count method) · Worldwide · 2023-10 |
Sources: Cybersecurity and Infrastructure Security Agency (2017-2026); Microsoft Security Response Center (2017-2026); The Shadowserver Foundation; Bangladesh e-Government Computer Incident Response Team; TechRadar; Cybernews; Rapid7 (2017, 2020); Bitsight; Shodan; Microsoft (2015-2025); BleepingComputer; Computerworld; Coalition (2023); Channel Futures; Redmond Channel Partner; Information Commissioner's Office (2020, 2022); US Department of Health and Human Services; National Cyber Security Centre; European Union Agency for Network and Information Security; Bundesamt für Sicherheit in der Informationstechnik; PCI Security Standards Council; Canadian Centre for Cyber Security; stack.watch (2026); cvefeed.io; OpenCVE (2026); CVEdetails; endoflife.ai; Morphisec; Red Piranha
Windows Server 2016 security updates cost $5.21 per core a month through Azure Arc, $2,999 over three years for 16 cores (Microsoft, 2026).

| Programme and date | Share of the licence price |
|---|---|
| Windows Server and SQL Server 2008, as announced in July 2018 | 75% |
| Windows Server and SQL Server 2008, August 2019 | about 75% per year |
| Windows Server 2012, first published (November 2021) | 75%, 100%, 125% |
| Windows Server 2012, by 9 October 2023 | 100% each year |
| Windows Server 2012, Microsoft's lifecycle FAQ in 2026 | 100% per year |
| Windows Server 2012, three years under either schedule | 300% over 3 years |
| SQL Server ESU, 2026 | about 75% per year |
Sources: Microsoft (2018-2026); The Register
$5.21 per core per month is the Azure Arc list price of Windows Server 2016 Extended Security Updates for Standard edition, at Microsoft's $0.007132 per core-hour rate (Microsoft, 2026).
Microsoft sells security-only updates for a retired Windows Server for up to three years, at a price set as a share of the licence, with exceptions for servers that run in Azure or are connected to it through Azure Arc. The terms below are Microsoft's own; the worked examples are arithmetic on its published prices.
| Product and edition | Price | Scope |
|---|---|---|
| Windows Server 2012 ESU, Standard | $4.73 per core per month | Windows Server 2012 Standard cores enrolled in ESUs enabled by Azure Arc (list price, Global region) · Worldwide · 2023-09-01 |
| Windows Server 2012 ESU, Datacenter | $27.25 per core per month | Windows Server 2012 Datacenter cores enrolled in ESUs enabled by Azure Arc (list price, Global region) · Worldwide · 2023-09-01 |
| Windows Server 2016 ESU, Standard | $5.21 per core per month | Windows Server 2016 Standard cores enrolled in ESUs enabled by Azure Arc (list price, Global region) · Worldwide · 2026-08-01 |
| Windows Server 2016 ESU, Datacenter | $29.98 per core per month | Windows Server 2016 Datacenter cores enrolled in ESUs enabled by Azure Arc (list price, Global region) · Worldwide · 2026-08-01 |
| SQL Server 2016 ESU, Standard edition | $138.70 per core per month (Standard) | SQL Server 2016 cores enrolled in ESUs enabled by Azure Arc (list price, Global region) · Worldwide · 2026-04-01 |
| Windows Server licence, pay as you go through Azure Arc | $33.58 per core per month | Windows Server pay-as-you-go licences via Azure Arc (list price, USD) · Worldwide · 2026-10 |

| Version and edition | Three years | Scope |
|---|---|---|
| Windows Server 2012 Standard | $2,725 | A hypothetical 16-core Windows Server 2012 Standard server licensed on physical cores (worked example) · Worldwide · 2023-10 to 2026-10 |
| Windows Server 2016 Standard | $2,999 | A hypothetical 16-core Windows Server 2016 Standard server licensed on physical cores (worked example) · Worldwide · 2027-01 to 2030-01 |
| Windows Server 2016 Datacenter | $17,268 | A hypothetical 16-core Windows Server 2016 Datacenter server licensed on physical cores (worked example) · Worldwide · 2027-01 to 2030-01 |
| Programme and date | Share of the licence price | Scope |
|---|---|---|
| Windows Server and SQL Server 2008, as announced in July 2018 | 75% | Customers with active Software Assurance or subscription licences buying ESU for on-premises 2008 servers · Worldwide · 2018-07 |
| Windows Server and SQL Server 2008, August 2019 | about 75% per year | Microsoft's ESU pricing for Windows Server and SQL Server 2008 and 2008 R2 (marketing FAQ) · Worldwide · 2019-08 |
| Windows Server 2012, first published (November 2021) | 75%, 100%, 125% | Microsoft's announced ESU pricing for Windows Server 2012/2012 R2 and SQL Server 2012 (marketing FAQ) · Worldwide · 2021-11 |
| Windows Server 2012, by 9 October 2023 | 100% each year | Microsoft's ESU pricing for Windows Server 2012 and 2012 R2 (lifecycle FAQ) · Worldwide · 2023-10-09 |
| Windows Server 2012, Microsoft's lifecycle FAQ in 2026 | 100% per year | Microsoft's Extended Security Update terms for Windows Server 2012 and 2012 R2 (documentation) · Worldwide · 2023-10 to 2026-10 |
| Windows Server 2012, three years under either schedule | 300% over 3 years | Microsoft's ESU pricing for Windows Server 2012 and 2012 R2 · Worldwide · 2023-10 to 2026-10 |
| SQL Server ESU, 2026 | about 75% per year | Microsoft's SQL Server ESU terms (documentation) · Worldwide · 2026 |
| Product | Price | Scope |
|---|---|---|
| Windows Server 2016, 16 cores (Open NL reference) | $883 (Standard), $6,155 (Datacenter) | Windows Server 2016 Standard and Datacenter licences (reference price) · Worldwide · 2016-10 |
| Windows Server 2025 Standard, 16 cores | $1,176 | Windows Server 2025 Standard licence (suggested MSRP, USD) · Worldwide · 2026-10 |
| Windows Server 2025 Datacenter, 16 cores | $6,771 | Windows Server 2025 Datacenter licence (suggested MSRP, USD) · Worldwide · 2026-10 |
Sources: Microsoft (2018-2026); The Register; Network World; Redmond Magazine
53% of organisations still ran Windows Server 2003 in June 2016, 11 months after its end of support (Spiceworks, 2016).

| Finding | Share or amount |
|---|---|
| Fully migrated | 15% |
| Partially migrated | 48% |
| Still planning | 28% |
| No plans to migrate | 8% |
| Not upgrading every system | 22% |
| Those keeping it: citing software compatibility | 72% |
| Moving to Windows Server 2012 R2 | 64% |
| Naming Windows Server 2008 R2 as a path | 39% |
| Moving its applications to a virtualised environment | 74% |
| Average migration budget | $60,000 |
Sources: Spiceworks (2015, 2016); Redmond Channel Partner (2019, 2015); Microsoft; Netcraft
53% of companies in the Spiceworks network still had at least one instance of Windows Server 2003 running in June 2016, 11 months after its July 2015 end of support, down from 61% in January 2015 (Spiceworks, 2016).
Windows Server 2003 and Windows Server 2008 went through the same deadline a decade ago, and the audits and surveys of that time show how long the tail lasted. They are the only guide to what the 2012 and 2016 deadlines will look like a year on.
| Date and population | With at least one instance | Scope |
|---|---|---|
| June 2014, Asia Pacific organisations (cited by Microsoft) | 64.5% | Organisations in Asia Pacific using Spiceworks' tools (Spiceworks inventory data) · Asia Pacific · 2014-06 |
| January 2015 | 61% | Companies in the Spiceworks network (the release does not say whether this share comes from network inventory data or from the 1,300+ survey respondents) · North America, EMEA and Asia Pacific · 2015-01 |
| July 2015 | 60% | Organisations in the Spiceworks network (anonymised, aggregated usage data from Spiceworks' free inventory software), share with at least one instance of each server OS ('penetration rate') · Worldwide (Spiceworks network, mostly small and mid-sized businesses) · 2015-07 |
| September 2015 | 60% | Companies in the Spiceworks network (anonymised network data; date of the data not stated beyond the 30 September 2015 release) · North America and EMEA (Spiceworks network) · 2015-09 |
| November 2015 | 59% | Organisations in the Spiceworks network (anonymised, aggregated usage data from Spiceworks' free inventory software), share with at least one instance of each server OS ('penetration rate'), November 2015 · Worldwide (Spiceworks network, mostly small and mid-sized businesses) · 2015-11 |
| June 2016 | 53% | Physical servers and virtual machines, and the organisations running them, in Spiceworks' anonymised network inventory data, June 2016 (mostly on-premises, skewed to small and mid-sized businesses) · Worldwide (Spiceworks network, mostly on-premises) · 2016-06 |
| September 2016 | 52% | Organisations in the Spiceworks network (anonymised, aggregated usage data) · Worldwide (Spiceworks network, mostly small and mid-sized businesses) · 2016-09 |
| Finding | Figure |
|---|---|
| Fully migrated | 15% |
| Partially migrated | 48% |
| Still planning | 28% |
| No plans to migrate | 8% |
| Not upgrading every system | 22% |
| Those keeping it: citing software compatibility | 72% |
| Moving to Windows Server 2012 R2 | 64% |
| Naming Windows Server 2008 R2 as a path | 39% |
| Moving its applications to a virtualised environment | 74% |
| Average migration budget | $60,000 |

| Estimate, date and source | Figure | Scope |
|---|---|---|
| Microsoft (John Case), July 2014: instances | 22 million | Windows Server 2003 instances worldwide (Microsoft statement at WPC 2014) · Worldwide · 2014-07 |
| Data Center Knowledge, September 2014: 'Microsoft estimate', instances | 23.8 million | Windows Server 2003 instances worldwide, physical and virtual (Microsoft estimate; method not published) · Worldwide · 2014-09 |
| Redmond Magazine, September 2014: 'Microsoft data', instances | 24 million instances on 12 million servers | Windows Server 2003 instances worldwide (Microsoft estimate, method not stated) · Worldwide · 2014-07 |
| Insight Enterprises, September 2014: 'servers' | 24 million | Windows Server 2003 installations worldwide (as restated by a Microsoft licensing partner) · Worldwide · 2014-09 |
| CIO.com, September 2014: 'servers' | 24 million | Windows Server 2003 installations (as restated) · Worldwide; United States · 2014-09 |
| US-CERT alert, November 2014: physical servers (citing Redmond) | 12 million (restated) | Physical servers running Windows Server 2003 (source's estimate) · Worldwide · 2014-07 |
| BizTech, November 2014: instances | 24 million instances | Windows Server 2003 instances worldwide (Microsoft estimate) · Worldwide · 2014-07 |
| Distributique, March 2015: instances | 23.8 million instances on 11.9 million servers | Windows Server 2003 instances worldwide (Microsoft estimate) · Worldwide · 2014-07 |
| BizTech, April 2015: 'deployed' | more than 23 million | Windows Server 2003 instances (unspecified) · Worldwide · 2015-04 |
| Network World, July 2015: instances | almost 24 million | Windows Server 2003 instances worldwide (Microsoft statement) · Worldwide · 2014-07 |
| PCWorld, July 2015: instances | almost 24 million | Windows Server 2003 instances worldwide (Microsoft estimate) · Worldwide · 2014-07 |
| HP via The Register, May 2014: systems | 11 million | Servers running Windows Server 2003 worldwide (HP estimate; method not published) · Worldwide · 2014-05 |
| HP via ChannelBuzz, July 2014: servers | 11 million | Servers running Windows Server 2003 worldwide (HP estimate) · Worldwide · 2014-07 |
| CRN, July 2014: servers | 11.7 million | Servers running Windows Server 2003 worldwide (HP figure as reported by CRN) · Worldwide · 2014-07 |
| HKCERT, August 2015: systems (citing HP) | approximately 11 million | Systems running Windows Server 2003 worldwide (HP estimate) · Worldwide · 2014-05 |
| HP via The Register, July 2014: servers in Europe | 2.7 million | Servers running Windows Server 2003 in Europe (HP estimate; method not published) · Europe · 2014-07 |
| Dell via Computerworld, July 2014: servers | up to 12 million | Servers running Windows Server 2003 worldwide (Dell estimate; method not published) · Worldwide · 2014-07 |
| Digitimes, November 2014: servers (unnamed sources) | more than 10 million | Windows Server 2003 servers worldwide (unnamed industry sources) · Worldwide (Taiwan server-maker sources) · 2014-11 |
| Gartner via The Register, November 2014: servers | 8 million | Servers running Windows Server 2003 worldwide (Gartner estimate; method not published) · Worldwide · 2014-11 |
| Gartner, November 2014: systems to be replaced | 5.5 million | Servers running Windows Server 2003 worldwide (Gartner forecast) · Worldwide · 2014-11 |
| Bit9 + Carbon Black, March 2015: systems (unsourced) | about 9 million | Windows Server 2003 systems worldwide (no source or method given) · Worldwide · 2015-03 |
| Bit9 + Carbon Black: servers left unprotected | 2.7 million | Windows Server 2003 systems worldwide (Bit9's base of about 9 million, times the 30% planning to stay) · Worldwide (extrapolated) · 2015-02 |
| TechRadar, March 2015: installations (no source) | 2.6 million to 11 million | Windows Server 2003 installations worldwide (unsourced) · Worldwide · 2014-11 |
| TechRadar, 25 March 2015: users | 2.6 million to 11 million | Windows Server 2003 'users' (unspecified) · Worldwide · 2015-03 |
| The Register's arithmetic, May 2014: upgrades a day needed | 25,000 a day | HP's estimate of 11 million Windows Server 2003 systems divided by the 438 days left · Worldwide · 2014-05 |
Sources: Spiceworks (2015, 2016); Microsoft (2014, 2015, 2020); Redmond Channel Partner (2015, 2019); Redmond Magazine (2014, 2015, 2019); The Register (2014); Bit9 + Carbon Black; DatacenterDynamics; Scottish Government (2017); PublicTechnology; Data Center Knowledge (2014, 2016); Insight Enterprises; CIO.com; Cybersecurity and Infrastructure Security Agency; BizTech Magazine (2014, 2015); Distributique; Network World (2015, 2016, 2020); PCWorld; ChannelBuzz.ca; CRN; Hong Kong Computer Emergency Response Team Coordination Centre; Computerworld; Digitimes; TechRadar (2015); Wikipedia; CIO Dive; Brent Ozar Unlimited; Rapid7; Netcraft (2015, 2020); Forbes Technology Council; BetaNews
98% of businesses in North America and Europe ran server hardware on their own premises in 2019 (Spiceworks, 2019).

| Budget year | Share of hardware budget |
|---|---|
| 2016 (via eWeek) | 19% |
| 2017 | 17% |
| 2018 | 13% |
| 2019 | 12% |
| 2021 | 12% |
| 2022 | 11% |
| 2026 | 13.3% |
Sources: Spiceworks (2025, 2019, 2016); Uptime Institute (2026, 2025, 2024); Flexera; Microsoft; Synergy Research Group; eWeek; Spiceworks Ziff Davis; CIO Dive; CIO.com
98% of businesses in North America and Europe were running server hardware on-premises in Spiceworks' February 2019 survey of 530 IT decision makers (Spiceworks, 2019).
The cloud did not empty the server room. The surveys below ask IT departments where their workloads run, how many still own servers and what they plan to buy; the analyst firms count the servers shipped and the money spent on them.
| Survey year and measure | Share | Scope |
|---|---|---|
| 2017: in enterprise-owned data centres (via CIO Dive) | 65% | Enterprise IT and data center managers answering Uptime Institute's annual Global Data Center Survey (organisations that own or use data centers) · Worldwide · 2017 |
| 2020: off-premises | 42% | Enterprise IT and data center managers answering Uptime Institute's annual Global Data Center Survey (organisations that own or use data centers) · Worldwide · 2020 |
| 2023: in corporate, on-premises facilities | below half | Enterprise IT and data center managers answering Uptime Institute's annual Global Data Center Survey (organisations that own or use data centers) · Worldwide · 2023 |
| 2023: in corporate data centres (via CIO.com) | 48% (2023), 58% (2020) | Enterprise IT and data center managers answering Uptime Institute's annual Global Data Center Survey (organisations that own or use data centers) · Worldwide · 2023 |
| 2024: off-premises | 55% | Enterprise IT and data center managers answering Uptime Institute's annual Global Data Center Survey (organisations that own or use data centers) · Worldwide · 2024 |
| 2025: in corporate data centres | 45% | Enterprise IT and data center managers answering Uptime Institute's annual Global Data Center Survey (organisations that own or use data centers) · Worldwide · 2025 |
| 2026: in third-party venues against enterprise-owned data centres | 46% vs 44% | Enterprise IT and data center managers answering Uptime Institute's annual Global Data Center Survey (organisations that own or use data centers) · Worldwide · 2026 |
| 2028 forecast: third-party venues against enterprise-owned | 48% vs 42% (2028 forecast) | Enterprise IT and data center managers answering Uptime Institute's annual Global Data Center Survey (organisations that own or use data centers) · Worldwide · 2028 |
| 2021: operators that had not moved workloads back from public cloud | about 70% (32% had) | Data center owners and operators answering Uptime Institute's 2021 Global Data Center Survey · Worldwide · 2021 |
| Report year and population | Share | Scope |
|---|---|---|
| 2020, all respondents | 53% | Cloud decision-makers and users at organisations with 100 to 10,000+ employees (Flexera State of the Cloud survey) · Worldwide · 2020-Q1 |
| 2020, enterprises | 48% | Cloud decision-makers and users at organisations with 100 to 10,000+ employees (Flexera State of the Cloud survey) · Worldwide · 2020-Q1 |
| 2021, enterprises | 47% | Cloud decision-makers and users at organisations with 100 to 10,000+ employees (Flexera State of the Cloud survey) · Worldwide · 2020-Q4 |
| 2022, all respondents | 50% | Cloud decision-makers and users at organisations with 100 to 10,000+ employees (Flexera State of the Cloud survey) · Worldwide · 2021-Q4 |
| 2022, enterprises | 49% | Cloud decision-makers and users at organisations with 100 to 10,000+ employees (Flexera State of the Cloud survey) · Worldwide · 2021-Q4 |
| 2023, enterprises | 50% | Cloud decision-makers and users at organisations with 100 to 10,000+ employees (Flexera State of the Cloud survey) · Worldwide · 2022-Q4 |
| 2024, all respondents | 51% | Cloud decision-makers and users at organisations with 100 to 10,000+ employees (Flexera State of the Cloud survey) · Worldwide · 2023-Q4 |
| 2024, enterprises | 49% | Cloud decision-makers and users at organisations with 100 to 10,000+ employees (Flexera State of the Cloud survey) · Worldwide · 2023-Q4 |
| 2026, enterprises | 54% | Cloud decision-makers and users at organisations with 100 to 10,000+ employees (Flexera State of the Cloud survey) · Worldwide · 2025-Q4 |
| 2026, small and medium businesses | 63% | Cloud decision-makers and users at organisations with 100 to 10,000+ employees (Flexera State of the Cloud survey) · Worldwide · 2025-Q4 |
| 2025: cloud workloads already moved back | 21% | Cloud decision-makers and users at organisations with 100 to 10,000+ employees (Flexera State of the Cloud survey) · Worldwide · 2024-Q4 |
| 2026: change in workloads moved back | +2 pts | Cloud decision-makers and users at organisations with 100 to 10,000+ employees (Flexera State of the Cloud survey) · Worldwide · 2025-Q4 |

| Budget year | Share of hardware budget | Scope |
|---|---|---|
| 2016 (via eWeek) | 19% | IT buyers at businesses in North America and Europe (Spiceworks / Spiceworks Ziff Davis State of IT survey) · North America and Europe · 2016 |
| 2017 | 17% | IT buyers at businesses in North America and Europe (Spiceworks / Spiceworks Ziff Davis State of IT survey) · North America and Europe · 2017 |
| 2018 | 13% | IT buyers at businesses in North America and Europe (Spiceworks / Spiceworks Ziff Davis State of IT survey) · North America and Europe · 2018 |
| 2019 | 12% | IT buyers at businesses in North America and Europe (Spiceworks / Spiceworks Ziff Davis State of IT survey) · North America and Europe · 2019 |
| 2021 | 12% | IT buyers at businesses in North America and Europe (Spiceworks / Spiceworks Ziff Davis State of IT survey) · North America and Europe · 2021 |
| 2022 | 11% | IT buyers at businesses in North America and Europe (Spiceworks / Spiceworks Ziff Davis State of IT survey) · North America and Europe · 2022 |
| 2026 | 13.3% | IT buyers at businesses in North America and Europe (Spiceworks / Spiceworks Ziff Davis State of IT survey) · North America and Europe · 2026 |

| Firm, period and measure | Figure | Scope |
|---|---|---|
| IDC: server market revenue, 2024 | $235.7 billion | Worldwide server vendor revenue (IDC Worldwide Quarterly Server Tracker) · Worldwide · 2024 |
| IDC: server market revenue, 2025 | $444.1 billion | Worldwide server vendor revenue (IDC Worldwide Quarterly Server Tracker) · Worldwide · 2025 |
| IDC: server revenue, third quarter 2025 | $112.4 billion | Worldwide server vendor revenue (IDC Worldwide Quarterly Server Tracker) · Worldwide · 2025-Q3 |
| IDC: server revenue, first quarter 2026 | $122.6 billion | Worldwide server vendor revenue (IDC Worldwide Quarterly Server Tracker) · Worldwide · 2026-Q1 |
| IDC: server revenue, second quarter 2026 | $166.3 billion | Worldwide server vendor revenue (IDC Worldwide Quarterly Server Tracker) · Worldwide · 2026-Q2 |
| CIO Dive: IDC's first-quarter 2025 figure as first reported | $95.2 billion (revised: $94.1 billion) | Worldwide server vendor revenue (IDC Worldwide Quarterly Server Tracker) · Worldwide · 2025-Q1 |
| Gartner: data-centre systems spending, 2026 forecast | $788 billion (2026 forecast) | Worldwide end-user spending on data center systems (Gartner IT spending forecast) · Worldwide · 2026 |
| Synergy: on-premise share of data-centre capacity, 2024 | 37% | Worldwide data center capacity (Synergy Research Group: hyperscale, colocation and on-premise enterprise data centers) · Worldwide · 2024-Q2 |
| Synergy: on-premise share of data-centre capacity, early 2025 | 34% | Worldwide data center capacity (Synergy Research Group: hyperscale, colocation and on-premise enterprise data centers) · Worldwide · 2025-Q1 |
| Synergy: servers sold into cloud providers' data centres, 2020 | 60% | Worldwide server sales and enterprise data center spending (Synergy Research Group) · Worldwide · 2020 |
| Calendar quarter (Microsoft fiscal quarter) | Change | Scope |
|---|---|---|
| April to June 2023 (FY23 Q4) | -1% | Microsoft corporate reporting · Worldwide · 2023-Q2 (April to June 2023, Microsoft FY23 Q4) |
| July to September 2023 (FY24 Q1) | +2% | Microsoft corporate reporting · Worldwide · 2023-Q3 (July to September 2023, Microsoft FY24 Q1) |
| October to December 2023 (FY24 Q2) | +3% | Microsoft corporate reporting · Worldwide · 2023-Q4 (October to December 2023, Microsoft FY24 Q2) |
| January to March 2024 (FY24 Q3) | +6% | Microsoft corporate reporting · Worldwide · 2024-Q1 (January to March 2024, Microsoft FY24 Q3) |
| April to June 2024 (FY24 Q4) | +2% | Microsoft corporate reporting · Worldwide · 2024-Q2 (April to June 2024, Microsoft FY24 Q4) |
| July to September 2024 (FY25 Q1) | -1% | Microsoft corporate reporting · Worldwide · 2024-Q3 (July to September 2024, Microsoft FY25 Q1) |
| October to December 2024 (FY25 Q2) | -3% | Microsoft corporate reporting · Worldwide · 2024-Q4 (October to December 2024, Microsoft FY25 Q2) |
| January to March 2025 (FY25 Q3) | -6% | Microsoft corporate reporting · Worldwide · 2025-Q1 (January to March 2025, Microsoft FY25 Q3) |
| April to June 2025 (FY25 Q4) | -2% | Microsoft corporate reporting · Worldwide · 2025-Q2 (April to June 2025, Microsoft FY25 Q4) |
| July to September 2025 (FY26 Q1) | +1% | Microsoft corporate reporting · Worldwide · 2025-Q3 (July to September 2025, Microsoft FY26 Q1) |
| October to December 2025 (FY26 Q2) | +2% | Microsoft corporate reporting · Worldwide · 2025-Q4 (October to December 2025, Microsoft FY26 Q2) |
| January to March 2026 (FY26 Q3) | slightly up (-3% in constant currency) | Microsoft corporate reporting · Worldwide · 2026-Q1 (January to March 2026, Microsoft FY26 Q3) |
| April to June 2026 (FY26 Q4) | unchanged | Microsoft corporate reporting · Worldwide · 2026-Q2 (April to June 2026, Microsoft FY26 Q4) |

Sources: Spiceworks (2016-2025); CIO Dive (2017, 2025); Uptime Institute (2021-2026); CIO.com; Network World (2019, 2026); Flexera (2020-2026); eWeek; Spiceworks Ziff Davis; ITAM Review; VMblog; Le Monde Informatique; TechRepublic Premium; Kaspersky Lab; IDC (2025, 2026); Gartner (2018, 2026); Synergy Research Group (2021, 2024, 2025); Nutanix; SDxCentral; Microsoft (2023-2026); GeekWire; The Motley Fool
A server costs $22,511 a year to run in years four to six, up 199%, in a vendor-sponsored survey (IDC for Dell and Intel, 2021).

| Survey, date and measure | Figure |
|---|---|
| IDC, 2017: mean server life cycle | 5.15 years |
| IDC: servers on a five-year cycle, 2016 | 32.9% (from 48.7%) |
| IDC, 2017: servers kept five or six years | 60.2% |
| IDC for Dell and Intel, 2020: replacing every five years or more | 53% |
| IDC for Dell and Intel, 2025: refreshing every three years or less | 44% |
| IDC for Dell and Intel, 2025: waiting three to five years | Half |
| Uptime Institute, 2022: keeping servers five years or longer | 52% (from 34%) |
| Uptime Institute, 2026: refreshing every six years or more | 18% |
| Omdia, 2022: useful life at North American enterprises | 5.4 years |
| Omdia, 2022: the longest most enterprises keep a server | 7 years |
Sources: IDC (2025, 2021, 2018); Microsoft; Uptime Institute; eWeek; Network World; Data Center Knowledge
$22,511 a year per server was the operating cost enterprises expected in years four to six of a server's life, up 199% from $7,541 in years one to three, in IDC's survey of 425 enterprises for Dell and Intel (IDC for Dell and Intel, 2021).
Few surveys measure a server migration end to end. What exists are migration budgets, vendor-commissioned studies of what an old server costs to keep or a move saves, the cloud operators' own accounting for how long a server lasts, and surveys of how long companies keep theirs, each labelled with who paid for it.
| Survey, date and measure | Figure | Scope |
|---|---|---|
| IDC, 2017: mean server life cycle | 5.15 years | Respondents to IDC's Server and Storage Workloads Survey: Understanding 3rd Platform Usage (May 2017), estimating how long servers bought in 2016 would stay in operation · Worldwide (IDC survey) · 2017-05 |
| IDC: servers on a five-year cycle, 2016 | 32.9% (from 48.7%) | Respondents to IDC's Server and Storage Workloads Survey, 2010 to 2016 editions · Worldwide (IDC survey) · 2016 |
| IDC, 2017: servers kept five or six years | 60.2% | Respondents to IDC's Server and Storage Workloads Survey (May 2017), estimating the life of servers purchased in 2016 · Worldwide (IDC survey) · 2017-05 |
| IDC for Dell and Intel, 2020: replacing every five years or more | 53% | Enterprise respondents (organisations with more than 500 employees, n = 425) to IDC's web survey of 707 IT practitioners and decision-makers for Dell and Intel ('Dell EMC Server Upgrade 2020 Research'); a Dell brochure says respondents used Dell server solutions across seven industries · Not stated (USD values) · 2020 |
| IDC for Dell and Intel, 2025: refreshing every three years or less | 44% | IT decision-makers at US organisations with at least 1,000 employees, IDC's Intel-Dell Server Refresh and Upgrade Survey, March 2025 (n = 199 for this question in the white paper; 200 respondents in the May 2025 InfoBrief) · United States · 2025-03 |
| IDC for Dell and Intel, 2025: waiting three to five years | Half | IT decision-makers at US organisations with at least 1,000 employees, IDC's Intel-Dell Server Refresh and Upgrade Survey, March 2025 (n = 199 for this question in the white paper; 200 respondents in the May 2025 InfoBrief) · United States · 2025-03 |
| Uptime Institute, 2022: keeping servers five years or longer | 52% (from 34%) | Respondents to Uptime Institute's Global Data Center Survey 2022 (and 2015 edition) · Worldwide · 2022 |
| Uptime Institute, 2026: refreshing every three years or less | 1 in 3 | Data center owner/operator respondents to Uptime Institute's 2026 Global Data Center Survey, fielded 17 March to 1 May 2026 (n = 659 for this question; 801 owner/operators of 1,635 respondents) · Worldwide · 2026-05 |
| Uptime Institute, 2026: refreshing every six years or more | 18% | Data center owner/operator respondents to Uptime Institute's 2026 Global Data Center Survey, fielded 17 March to 1 May 2026 (n = 659 for this question; 801 owner/operators of 1,635 respondents) · Worldwide · 2026-05 |
| Omdia, 2022: useful life at North American enterprises | 5.4 years | North American enterprises in Omdia's annual survey (sample size not reported) · North America · 2022 |
| Omdia, 2022: the longest most enterprises keep a server | 7 years | Analyst expectation drawn from Omdia's survey of North American enterprises · North America · 2022 |
| Company | Years | Scope |
|---|---|---|
| Microsoft, from fiscal 2023 | 6 years (from 4) | Microsoft's own server and network equipment (accounting estimate) · Worldwide (Microsoft's fleet) · 2022-07 |
| Alphabet, from 2023 | 6 years | Alphabet's own servers and certain network equipment (accounting estimate) · Worldwide (Google's fleet) · 2023-01 |
| Meta, from 2025 | 5.5 years | Certain Meta servers and network assets (accounting estimate) · Worldwide (Meta's fleet) · 2025-01 |
| Amazon (a subset), from 2025 | 5 years (from 6) | A subset of Amazon's own servers and networking equipment (accounting estimate) · Worldwide (Amazon's fleet) · 2025-01 |

Sources: IDC (2018, 2021, 2025); Network World; Uptime Institute (2020, 2026); Data Center Knowledge; Microsoft (2014, 2022, 2024); Alphabet; Meta Platforms; Amazon; TechRadar; TechTarget; Professional Advantage; Forrester Consulting (2025); Lenovo; Principled Technologies; PR.com; eWeek; Symantec; Datto; Kaseya; ConnectWise (2024, 2025)
Windows Server 2012 upgrades in place only to 2012 R2 or 2016, so reaching 2025 takes two upgrades or a migration (Microsoft, 2026).

| Rule | Versions or paths |
|---|---|
| To Windows Server 2025: versions back it accepts | 4 versions |
| To Windows Server 2022 or earlier: versions back | 2 versions |
| Failover cluster, rolling upgrade: versions at a time | 1 version |
| From Windows Server 2012 R2: targets | 3 targets (2016, 2019, 2025) |
| Through Windows Update to 2025: versions | 2 versions (2019, 2022) |
| Across languages or from 32-bit to 64-bit: paths | 0 |
| Edition changes allowed | Standard to Datacenter only |
Sources: Microsoft (2024, 2025, 2026); Amazon Web Services
0 supported in-place upgrade paths lead from Windows Server 2012 (non-R2) to Windows Server 2019, 2022 or 2025; its only in-place targets are 2012 R2 and 2016, so reaching a current version needs two upgrades or a migration (Microsoft, 2026).
Microsoft supports an in-place upgrade only across a limited number of versions, and only within the same language and architecture. The limits below are from Microsoft's documentation; what follows is what Microsoft says a migration involves and what the cloud providers offer to those who move.
| Rule | Versions or paths |
|---|---|
| To Windows Server 2025: versions back it accepts | 4 versions |
| To Windows Server 2022 or earlier: versions back | 2 versions |
| Failover cluster, rolling upgrade: versions at a time | 1 version |
| From Windows Server 2012: paths to 2019, 2022 or 2025 | 0 of 3 |
| From Windows Server 2012 R2: targets | 3 targets (2016, 2019, 2025) |
| Through Windows Update to 2025: versions | 2 versions (2019, 2022) |
| Across languages or from 32-bit to 64-bit: paths | 0 |
| Edition changes allowed | Standard to Datacenter only |
Sources: Microsoft (2005-2026); Amazon Web Services (2019, 2025, 2026); Google Cloud

| Date, outlet and wording | Figure as stated |
|---|---|
| 2 March 2026, The Register: 'more than a fifth of servers' (Lansweeper's monitored servers) | more than a fifth (20.3%) |
| 7 May 2026, Air IT: 'around one in five', called independent analysis | around one in five |
| 16 July 2026, Servnet: 'one in five (20.3%)' of the servers Lansweeper monitors | one in five (20.3%) |
| 18 August 2026, Jimber: 'roughly one in five enterprise servers', no source | roughly one in five |
Sources: The Register (2026a, 2026b); MM Research Institute; Dell Technologies Japan; Servnet Research (2026a, 2026b); Microsoft; Air IT Group; Jimber
20.3% of all the servers Lansweeper monitors were running Windows Server 2016 in March 2026, ten months before its 12 January 2027 end of extended support (Lansweeper data via The Register, 2026).
The next deadline is Windows Server 2016 in January 2027, then Windows Server 2019 in 2029. Windows Server 2022 has entered extended support and Windows Server 2025 is the current release; the figures below are what has been published about who still runs the older versions and who has moved to the newest.
| Survey, date and measure | Figure | Scope |
|---|---|---|
| MM Research Institute, late 2025: non-virtualised servers on Windows Server 2016 | 13.8% | Japanese companies' IT department staff (screening survey, 45,172 valid responses) · Japan · 2025-10 to 2025-12 |
| MM Research Institute: Windows Server as host and guest OS on virtualised servers | 75.3% (hosts), 78.5% (guests) | Japanese companies' virtualised servers (MM Research survey) · Japan · 2025-10 to 2025-12 |
| MM Research Institute: Windows Server 2016 among virtualised Windows Server | about 20% | Japanese companies' virtualised servers running Windows Server · Japan · 2025-10 to 2025-12 |
| MM Research Institute, November 2025: Windows Server 2016 systems in operation | about 250,000 | Windows Server 2016 systems in Japan, including virtual servers · Japan · 2025-11 |
| MM Research Institute: users investigating, migrating, with no plan | 57% investigating, 17% migrating, 10% no plan | Japanese companies using Windows Server 2016 (MM Research '国内サーバー稼働状況実態調査') · Japan · 2025-12 |
| MM Research Institute: not migrated because of staff shortage | 45% | Japanese companies using Windows Server 2016 that had not migrated · Japan · 2025-10 to 2025-12 |
| MM Research Institute: Windows Server 2016 used as a web server | 54.2% | Japanese companies using Windows Server 2016 · Japan · 2025-10 to 2025-12 |
| MM Research Institute: aware support is ending; unsure of the month | over 80% aware; 70% unsure of the date | Japanese companies using Windows Server 2016 (main survey) · Japan · 2025-10 to 2025-12 |
| MM Research Institute: naming the cloud as destination | about 5% | Japanese companies using Windows Server 2016 (main survey, 967 valid responses) · Japan · 2025-10 to 2025-12 |
| Dell-sponsored survey, early 2026: firms of 50 to 999 staff still using Windows Server 2016 | 43.1% | Japanese companies with 50 to 999 employees (Dell Technologies-sponsored survey; sample size not stated) · Japan · 2026-02 |
| Dell-sponsored survey: using Windows Server 2019 | 63.2% | Japanese companies with 50 to 999 employees (Dell Technologies-sponsored survey; sample size not stated) · Japan · 2026-02 |
| Dell-sponsored survey: already on Windows Server 2025 | 1.5% | Japanese companies with 50 to 999 employees (Dell Technologies-sponsored survey; sample size not stated) · Japan · 2026-02 |
| Dell-sponsored survey: migrating to or validating Windows Server 2025 | 4.4% | Japanese companies with 50 to 999 employees (Dell Technologies-sponsored survey; sample size not stated) · Japan · 2026-02 |
| Dell-sponsored survey: planning or considering; no plan | 51.5% planning or considering; 25.0% no plan | Japanese companies with 50 to 999 employees (Dell Technologies-sponsored survey; sample size not stated) · Japan · 2026-02 |
| Dell-sponsored survey: hotpatching the most anticipated feature | 51.5% | Japanese companies with 50 to 999 employees (Dell Technologies-sponsored survey; sample size not stated) · Japan · 2026-02 |
| Answers and release | Share of bodies | Scope |
|---|---|---|
| 2024-25, 70 bodies: Windows Server 2016 | 72.9% (51 of 70) | UK public bodies that named at least one Windows Server release in FOI answers (70 of 223 asked) · United Kingdom (public bodies answering FOI requests) · 2024-11 to 2025-07 |
| 2024-25: Windows Server 2019; 2022 | 81.4% (2019), 58.6% (2022) | UK public bodies that named at least one Windows Server release in FOI answers · United Kingdom (public bodies answering FOI requests) · 2024-11 to 2025-07 |
| 2024-25: Windows Server 2012 R2 or older | 21.4% (15 of 70) | UK public bodies that named at least one Windows Server release in FOI answers · United Kingdom (public bodies answering FOI requests) · 2024-11 to 2025-07 |
| 2024-25: Windows Server 2025 | fewer than 5 of 70 | UK public bodies that named at least one Windows Server release in FOI answers · United Kingdom (public bodies answering FOI requests) · 2024-11 to 2025-07 |
| 2023-24, 21 bodies: Windows Server 2016 | 61.9% (13 of 21) | UK public bodies that named at least one Windows Server release in 2023-24 FOI answers (21 of 84 asked) · United Kingdom (public bodies answering FOI requests) · 2023-08 to 2024-01 |

| Quarter end | Customers | Scope |
|---|---|---|
| December 2022 | 12,000+ | Organisations using Azure Arc (Microsoft's hybrid management service for non-Azure servers) · Worldwide · 2022-12 |
| March 2023 | 15,000+ | Organisations using Azure Arc · Worldwide · 2023-03 |
| June 2023 | 18,000 | Organisations using Azure Arc · Worldwide · 2023-06 |
| September 2023 | 21,000 | Organisations using Azure Arc · Worldwide · 2023-09 |
| June 2024 | 36,000 | Organisations using Azure Arc (Microsoft's hybrid management service for non-Azure servers) · Worldwide · 2024-06 |
| September 2024 | 39,000+ | Organisations using Azure Arc · Worldwide · 2024-09 |
| Date, outlet and wording | Figure as stated | Scope |
|---|---|---|
| 2 March 2026, The Register: 'more than a fifth of servers' (Lansweeper's monitored servers) | more than a fifth (20.3%) | Servers monitored by Lansweeper at its customers (count not stated) · Worldwide (Lansweeper customer base) · 2026-03 |
| 7 May 2026, Air IT: 'around one in five', called independent analysis | around one in five | 'servers in monitored environments' (Lansweeper's customer servers, unnamed) · Worldwide (as implied) · 2026-05 |
| 16 July 2026, Servnet: 'one in five (20.3%)' of the servers Lansweeper monitors | one in five (20.3%) | Servers monitored by Lansweeper (as restated) · Worldwide (Lansweeper customer base) · 2026-07 |
| 18 August 2026, Jimber: 'roughly one in five enterprise servers', no source | roughly one in five | 'enterprise servers' (unspecified) · Worldwide (as implied) · 2026-08 |
Sources: The Register (2026); MM Research Institute (2025, 2026); Dell Technologies Japan; Servnet Research (2026); Microsoft (2023, 2024, 2026); Redmond Magazine; Techzine (2023, 2026); Air IT Group; Jimber; Wikipedia; WPS Office
Data. All 596 statistics on this page, each with its source, verbatim quote and locator: CSV · JSON. Charts and figures on this page may be reused with a link to https://www.zinstall.com/research/windows-server-end-of-life-statistics as the source. Original publishers retain attribution.
What we included. This page collects every Windows Server, Hyper-V Server, SQL Server and Exchange Server lifecycle date from Microsoft's lifecycle pages; Microsoft's Extended Security Updates terms and prices (lifecycle FAQ, the ESU documentation, the Azure Retail Prices API); the install-base audits and surveys we could trace to their publisher (Lansweeper, Spiceworks, Softchoice, CloudPhysics, Bitsight, Smart Profile, MM Research Institute, a Dell-sponsored survey in Japan, Servnet's Freedom of Information requests, W3Techs, Netcraft, IDC); the exposure figures (counts we made from Microsoft's monthly security documents and CISA's Known Exploited Vulnerabilities catalogue, Shadowserver, Rapid7, Shodan, Cybernews, Bitsight, Microsoft's security reports, regulators' penalty notices, agency guidance); the on-premises and cloud surveys (Spiceworks, Uptime Institute, Flexera, TechRepublic Premium, Kaspersky, IDC, Gartner, Synergy); the cost and effort figures (IDC, Uptime Institute, Omdia, the cloud operators' annual reports, Forrester and IDC studies commissioned by vendors and labelled as such, Microsoft's upgrade documentation, the cloud providers' own claims); the previous deadlines (Microsoft, HP, Dell, Gartner, Spiceworks, Rapid7 and the trade press of 2014 to 2020); and the restatements in circulation, each with what it traces to. Official statistics, the trackers' own publications, company filings and transcripts, and peer-reviewed or analyst reports are preferred; vendor surveys and news reports are included only where no better source exists and are labelled as such in the dataset.
How each figure was verified. Every record carries the exact sentence or table cell from the source (the quote) and where it sits (the locator). A researcher confirmed each one against the source document; a script then re-fetched every source on October 14, 2026 and checked for the quote. Records the script could not confirm are kept only if the researcher's check was complete, and are marked for human review in the dataset. Restatements (a later outlet quoting an earlier figure) are recorded as restatements, with the primary figure alongside.
What we excluded. Dates from aggregator sites (recorded only where they differ from Microsoft); counts of companies 'using' a version from data vendors that publish no method, as findings; the '24 million' Windows Server 2003 instances as a Microsoft figure; the 'one in five servers on Windows Server 2016' as a figure about all servers; TechRepublic's 2021 on-premises share, which could not be traced; any first-party Zinstall data; and any average computed across audits with different populations. Where a source gives a figure only in a form we could not confirm (for example, a chart with no data table), the record is marked unverified and is not exported.
Rounding and derivation. Numbers are reproduced as published. Where a tracker publishes two decimals, statements and table cells give one decimal, rounded half up, and the dataset keeps the published value. In the short sentences at the top of the page and of each section, large counts and money amounts may be rounded to two or three significant figures; the exact figure follows in the section's full statements and in the dataset. Derived figures (a change between two months, a share computed from two counts) say so and name their inputs. The bold figure in each statement is a reading aid, not an edit.
Updates. Sources are re-checked and new figures added quarterly, with the monthly tracker series topped up as they are published; the next scheduled refresh is January 2027 (after Windows Server 2016's end of support), then quarterly. Corrections are welcome through the contact page.
Counts made for this page. Vulnerability counts per year were computed on 14 October 2026 from Microsoft's monthly security update documents (the CVRF API), counting distinct CVE identifiers whose known-affected products include the named Windows Server version; the API no longer serves November 2025, so 2025 counts are lower bounds. Counts from CISA's Known Exploited Vulnerabilities catalogue (version 2026.10.13) were joined with Microsoft's advisories to find the entries that affect each version. Both count published vulnerabilities, not attacks.
Zinstall. "Statistics on Windows Server Versions in Use, End-of-Life Dates, and What Happens Next." https://www.zinstall.com/research/windows-server-end-of-life-statistics. Updated 2026-10-14.
Windows Server 2016 reaches the end of extended support on 12 January 2027, after mainstream support ended on 11 January 2022. Microsoft announced in February 2026 that it will sell Extended Security Updates for it through Azure Arc for up to three years, through 2030, with billing from 13 January 2027.
Windows Server 2012 and 2012 R2 reached the end of extended support on 10 October 2023. Paid Extended Security Updates ran for three more years and ended on 13 October 2026; licences bought through Azure Arc were deactivated at midnight UTC the next day. There is no fourth year.
No one counts every server. In Lansweeper's inventories, about a fifth of 1.3 million Windows Server instances still ran Windows Server 2012 or 2012 R2 five weeks before its October 2023 end of support. Bitsight's internet scanner showed 920,444 observations of Windows Server 2012 the day after its paid updates ended, a quarter of them in the United States; that is a count of what answers on the internet, not of servers in use.
For Windows Server 2016, sold only through Azure Arc, the list price is $5.21 per core per month for Standard and $29.98 for Datacenter, about $2,999 over three years for a minimum 16-core Standard server. Windows Server 2012 updates bought on-premises cost the full licence price each year, and were free for servers running in Azure.
Windows Server 2019 reaches the end of extended support on 9 January 2029. Windows Server 2022 left mainstream support on 13 October 2026 and reaches the end of extended support on 14 October 2031. Windows Server 2025 has mainstream support to 13 November 2029 and extended support to 14 November 2034.
Windows Server 2012 R2 can, because Windows Server 2025 accepts in-place upgrades from up to four versions back. Windows Server 2012 without R2 cannot: its only in-place targets are 2012 R2 and 2016, so it needs two upgrades or a migration. An upgrade cannot change the language or move from 32-bit to 64-bit, and Microsoft lists ten of sixteen server roles that cannot be migrated without downtime.
Most. In Spiceworks' 2019 survey 98% of businesses in North America and Europe ran server hardware on their premises, and in Uptime Institute's 2026 survey 44% of enterprise workloads still ran in enterprise-owned data centres, with third-party venues at 46%. Flexera's 2026 respondents had 54% of enterprise workloads in public cloud, so the rest still ran elsewhere.
For dates, Microsoft's lifecycle page for each version, not an aggregator; five of the twenty-three pages we checked gave a wrong date for Windows Server 2016. For how many servers still run an old version, Lansweeper's audits as reported by Techzine and The Register, with the population named (its customers' servers). For exposure, Microsoft's monthly security documents and CISA's Known Exploited Vulnerabilities catalogue. For the previous deadlines, Spiceworks' network data.
Sources: Microsoft (2023-2026); Techzine; Bitsight; Spiceworks (2016, 2019); Uptime Institute; Flexera; The Register; Cybersecurity and Infrastructure Security Agency
Every source document behind the figures on this page, listed by publisher. The sources line under each section links each publisher to its document, and the dataset carries the verbatim quote and locator for every statistic.
Loading the list of sources. It is also published as a file: JSON.