Plenty of small offices across New York still have a Windows Server in a closet. It was set up years ago to hold the shared drive, run sign-ins, and maybe host one line-of-business app. It mostly works, so nobody thinks about it. That is about to change for a lot of offices, because the support clock on older versions is running out.

This page explains what the dates are, what your server is likely doing, and where each of those jobs can go if you decide to move to the cloud. It is written for owners and office managers, not IT staff.

Why this is coming up now

Microsoft publishes a fixed support lifecycle for every Windows Server version. Once a version passes its extended support end date, Microsoft stops shipping regular security updates for it.

Here is where the common versions stand, per Microsoft's lifecycle pages:

  • Windows Server 2012 and 2012 R2: extended support ended in October 2023. The paid Extended Security Update program for these versions ran through its third and final year in October 2026.
  • Windows Server 2016: extended support ends January 12, 2027.
  • Microsoft has announced paid Extended Security Updates for Windows Server 2016, delivered through Azure Arc, for up to three years. Eligibility depends on how the server is licensed.
  • Windows Server 2019: mainstream support ended in January 2024, and extended support ends in January 2029.
  • Windows Server 2022: mainstream support ended in October 2026, and extended support runs to October 2031.
  • Windows Server 2025: extended support runs to November 2034.

Microsoft describes its Extended Security Update program as "a last resort paid option" and "a temporary bridge," not a long-term plan. It covers security updates only, not general technical support.

If your office is on 2016 or older, the decision is no longer "someday." You either upgrade the server, pay for a bridge where one is offered, or move the work somewhere else.

What your server is probably doing today

Before deciding anything, list what the server actually does. In most small offices it is some mix of these:

  1. Shared files. The S: drive or P: drive everyone maps to.
  2. Sign-ins. Active Directory, so staff log in to their PCs with an office account.
  3. Printing. A print server that hands out printer drivers.
  4. One or two apps. A practice management, accounting or document system that was installed on the server.
  5. Backups. Sometimes the server is also the backup target, which is its own risk.
  6. Odd jobs. DHCP, DNS, a scanner folder, a scheduled script someone wrote in 2015.

Each of those has a different answer. Moving off a server is really five or six small projects, not one big one.

Where each job can go

Shared files to SharePoint and OneDrive. Microsoft's SharePoint Migration Tool is a free tool that moves content from file shares into SharePoint, OneDrive and Teams. Departments or shared folders usually become SharePoint sites or Teams. Personal folders usually become each person's OneDrive. Permissions need to be planned, not copied blindly.

Sign-ins to Microsoft Entra ID. Windows 10 and Windows 11 PCs (other than Home editions) and Macs running macOS 13 or newer can be joined directly to Microsoft Entra ID, Microsoft's cloud directory. Staff then sign in to their computer with their Microsoft 365 account. Microsoft says Entra joined devices can still reach on-premises file, print and app servers while they are on the office network, which helps during a gradual move.

Device management to Intune. Once PCs are Entra joined, a tool like Microsoft Intune can push settings such as required disk encryption, password rules, software installs and updates. That replaces much of what Group Policy on the server used to do.

Security for the PCs. Microsoft 365 Business Premium includes Intune Plan 1, Microsoft Defender for Business for endpoint protection, and Entra ID P1 with Conditional Access. It is built for organizations of up to 300 users. Other Microsoft 365 plans or standalone licenses can also work, depending on what you need.

Printing. Many current printers work fine without a print server. Some offices use a cloud print service instead. This one depends on your printers.

Apps. This is usually the hardest piece. Ask the vendor whether there is a cloud or hosted version, whether they support a newer Windows Server, or whether the app can run on a small hosted server. Their answer often decides the timeline.

When keeping a server still makes sense

Moving everything to the cloud is not always right. A server may still be the better fit if:

  • A key app only runs on-premises and the vendor has no cloud option.
  • You work with very large files over a slow internet connection.
  • You have equipment, such as scanners or lab devices, that needs a local share.

In those cases the move may be to a supported version of Windows Server, possibly a smaller one, with the rest of the jobs moved to Microsoft 365. Note that Microsoft says protecting Windows servers with Defender for Business requires extra licenses.

A sensible order of steps

  1. Inventory. List every job the server does, every app on it, and every person and device that depends on it.
  2. Fix identity first. Turn on multifactor authentication for every Microsoft 365 account before moving anything else.
  3. Move files. Clean up old folders, plan who needs access to what, then migrate in batches.
  4. Move PCs. Join computers to Entra ID and enroll them in management, a few at a time.
  5. Sort out the app. Follow the vendor's path, whatever it is.
  6. Check backups. Make sure the new setup is backed up, and that a restore actually works.
  7. Retire the server. Only after a quiet period where nobody needs it. Wipe drives properly before disposal.

Common things that trip offices up

  • Long file paths and odd characters in old folder names can cause migration errors.
  • Mapped drive habits. Staff used to the S: drive need a short walkthrough of where things live now.
  • Shared logins. A front desk account that everyone uses does not fit well with per-person cloud sign-ins.
  • Forgotten jobs. The scanner that saves to a server folder, or the script that runs at midnight, only shows up after the server is gone. That is why the inventory step matters.

Talk it through with FIX256

FIX256 helps small offices across New York with general IT and security. If you are not sure whether to upgrade, move to the cloud, or do some of each, book a free 20-minute call: https://calendar.app.google/jJf25UeTNo1npcAT9

FAQ

When does Windows Server 2016 support end? Extended support for Windows Server 2016 ends January 12, 2027. (Microsoft's lifecycle page lists the end time as January 13, 2027, 6:59:59 AM Pacific.) After that, regular security updates stop unless you buy Extended Security Updates.

Is Windows Server 2019 still supported? Yes. Mainstream support ended in January 2024, but extended support, which includes security updates, runs until January 2029.

Can a small office run without any server at all? Many can. Files can move to SharePoint and OneDrive, sign-ins to Microsoft Entra ID, and device settings to Intune. The usual blocker is a line-of-business app that only runs on a local server.

What happens to our shared S: drive? It usually becomes one or more SharePoint sites or Teams, with personal folders moving to each person's OneDrive. Microsoft's SharePoint Migration Tool can move file share content into these locations.

Do we need Microsoft 365 Business Premium to move off a server? Not always. Business Premium bundles Intune Plan 1, Defender for Business and Entra ID P1 with Conditional Access for organizations up to 300 users, which covers most of what a small office needs. Other plans can work depending on your setup.

Can we pay to keep getting updates on an old server? Microsoft offers Extended Security Updates for some versions, but describes the program as a temporary, last resort bridge with security updates only. The program for Windows Server 2012 and 2012 R2 ended in October 2026. Microsoft has announced Extended Security Updates for Windows Server 2016 through Azure Arc, for up to three years, and eligibility depends on your licensing. We can help you weigh whether a bridge makes sense or whether moving is the better spend.

How long does a move like this take? It depends on how many people, how much data, and what apps are involved. The app vendor's timeline is often the deciding factor.

Microsoft, Windows, Windows Server, Microsoft 365, Microsoft Defender, Active Directory, SharePoint, OneDrive, Teams, Entra, Intune and Azure Arc are trademarks of the Microsoft group of companies. FIX256 is an independent IT provider, and this page is not sponsored or endorsed by Microsoft.

Sources

  1. Microsoft Lifecycle, Windows Server 2016 (fixed policy; mainstream end 1/12/2022, extended end listed 1/13/2027 6:59:59 AM PT): https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2016
  2. Microsoft Lifecycle, Windows Server 2019 (mainstream end 1/10/2024, extended end 1/10/2029): https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2019
  3. Microsoft Lifecycle, Windows Server 2012 R2 (extended end 10/11/2023; ESU Year 3 ends 10/14/2026 PT listing): https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2012-r2
  4. Microsoft Lifecycle, Windows Server 2022 (mainstream end 10/14/2026, extended end 10/15/2031): https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2022
  5. Microsoft Lifecycle, Windows Server 2025 (mainstream end 11/14/2029, extended end 11/15/2034): https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2025
  6. Microsoft Lifecycle FAQ, Extended Security Updates ("last resort paid option", "temporary bridge", security updates only; 2012/R2 ESU Year 3 end October 13, 2026): https://learn.microsoft.com/en-us/lifecycle/faq/extended-security-updates
  7. Microsoft Learn, SharePoint Migration Tool (free; file shares to SharePoint, OneDrive and Teams): https://learn.microsoft.com/en-us/sharepointmigration/introducing-the-sharepoint-migration-tool
  8. Microsoft Learn, What is a Microsoft Entra joined device? (supported OS; Intune policies; access to on-premises file, print and app servers): https://learn.microsoft.com/en-us/entra/identity/devices/concept-directory-join
  9. Microsoft Learn, Microsoft 365 for business security overview (Business Premium includes Entra ID P1 with Conditional Access, Intune Plan 1, Defender for Business; up to 300 users): https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/m365b-security-overview?view=o365-worldwide
  10. Microsoft Learn, What is Microsoft Defender for Business? (up to 300 users; server protection requires extra licenses): https://learn.microsoft.com/en-us/defender-business/mdb-overview
  11. Microsoft Learn, Prepare to deliver ESUs through Azure Arc (Windows Server 2016: end of support January 12, 2027; ESUs up to three years through 2030; licensing requirements): https://learn.microsoft.com/en-us/azure/azure-arc/servers/prepare-extended-security-updates?pivots=windows-server-2016
  12. Microsoft Windows Server Blog, Planning ahead for Windows Server 2016 end of support (Feb 25, 2026): https://www.microsoft.com/en-us/windows-server/blog/2026/02/25/planning-ahead-for-windows-server-2016-end-of-support/

All sources fetched 2026-11-01.