Microsoft to stop Exchange 2016 / 2019 security updates in October
Microsoft will stop shipping security updates for Exchange 2016 and 2019 through the Extended Security Update (ESU) program in October. IT admins are advised to upgrade to Exchange Server Subscription Edition (SE) or migrate to Exchange Online.
Intelligence analysis by Llama
Microsoft will stop providing security updates for Exchange 2016 and 2019 in October. IT admins should upgrade to Exchange Server Subscription Edition (SE) or migrate to Exchange Online to ensure continued security and support.
Imagine you have a computer that needs updates to stay safe. Microsoft is stopping updates for some old computers, so you need to upgrade to a new one to keep your data safe.
Analysis
A $60B Vote of Confidence
Microsoft has reminded customers that it will stop shipping security updates for Exchange 2016 and 2019 through the Extended Security Update (ESU) program in October. This comes after a 6-month extension announced in April 2026 to the original ESU program, which began in October after Exchange Server 2016 and 2019 reached the end of support. Exchange 2016 reached mainstream support in October 2020, while Exchange 2019 mainstream support ended in January 2024.
Why Cursor?
Admins advised to upgrade or migrate Microsoft advised IT admins to upgrade to Exchange Server Subscription Edition (SE), as they can perform in-place upgrades from Exchange Server 2019, a process identical to installing a Cumulative Update (CU). Admins who still have servers running Exchange 2016 or 2013 in production are also advised to directly upgrade to Exchange Server SE or, first, install Exchange 2019. Detailed Microsoft 365 migration guidance is available for global admins on Microsoft's documentation site, which also provides more information on how to migrate to Exchange Online (available as a standalone service or as an Office 365 subscription).
The Road Ahead
In June, Microsoft quietly extended the free Windows 10 Extended Security Updates (ESU) program for consumers by an additional year, allowing enrolled devices to continue receiving security updates up until October 2027. Earlier this month, it also announced that Windows Server 2022 and Windows 11 24H2 Home and Pro editions will reach the end of support in 90 days, but will switch to extended support and continue receiving security updates.
Key points
- Microsoft will stop shipping security updates for Exchange 2016 and 2019 through the ESU program in October.
- IT admins are advised to upgrade to Exchange Server Subscription Edition (SE) or migrate to Exchange Online.
- Exchange 2016 and 2019 reached the end of support in October 2020 and January 2024, respectively.
- Admins can perform in-place upgrades from Exchange Server 2019 to Exchange Server SE.
- Detailed migration guidance is available on Microsoft's documentation site.
If IT admins upgrade to Exchange Server Subscription Edition (SE) or migrate to Exchange Online, they can ensure continued security and support for their Exchange servers. This will help prevent potential vulnerabilities and maintain the security of their organization's email system.
If IT admins fail to upgrade or migrate to a supported version of Exchange, they risk exposing their organization's email system to potential vulnerabilities and security risks. This could lead to data breaches, email compromise, or other security incidents.
