13 October 2026: Last patch for Windows Server 2012/R2, Windows 10 ESU year one ends

Patch Tuesday on 13 October 2026 will be the last Extended Security Updates (ESU) release for Windows Server 2012 and 2012 R2. On the same day, year one of the commercial ESU programme for Windows 10 ends, and Windows Server 2022 moves from mainstream to extended support. Here are the dates, the costs and an action plan for SMBs.

In brief

• Windows Server 2012 / 2012 R2: The third and final year of ESU ends on 13 October 2026. Microsoft's lifecycle page shows the end as 14 October 2026, 06:59 (PT), which is 16:59 on 14 October in Turkey. In practice, the 13 October Patch Tuesday updates are the last ones.
• Windows 10 (commercial ESU): Year one ends on 13 October 2026. Year two runs until 12 October 2027 and year three until 10 October 2028.
• Windows 10 (consumer ESU): The programme runs until 12 October 2027, but it cannot be used on business devices.
• Windows Server 2022: Mainstream support ends on 13 October 2026 and the servers move to extended support. This is not end of life: monthly security updates continue at no additional cost until 14 October 2031.

Windows Server 2012 / 2012 R2: the end of ESU

Extended support for Windows Server 2012 and 2012 R2 ended on 10 October 2023. Since then, these servers have only received critical and important security updates through the paid ESU programme. ESU lasts a maximum of three years, and year three ends on 13 October 2026. Microsoft's lifecycle pages list no fourth ESU year for Windows Server 2012/R2.

According to Microsoft's FAQ, free ESU for 2012/R2 servers moved to Azure also covers the three years after end of support. Moving these servers to Azure now therefore does not bring any new security updates after 13 October.

After 14 October these servers keep running, but they get no security updates for newly found vulnerabilities. Microsoft says customers without ESU cannot open a support ticket for 2012/R2, even with a support plan. It also stresses that third-party application control tools do not replace product security fixes.

Windows 10: year two of commercial ESU

Windows 10 support ended on 14 October 2025. Businesses can buy ESU for Pro, Enterprise and Education devices running Windows 10, version 22H2. Through volume licensing, year one costs USD 61 per device. Microsoft says the price doubles every year.

Key points:

• ESU is sold by the year; partial periods such as six months are not available.
• ESU is cumulative: an organization that joins in year two also pays for year one.
• ESU is included at no extra cost for Windows 10 virtual machines in Windows 365, Azure Virtual Desktop and Azure virtual machines. Windows 10 devices that connect to Windows 365 Cloud PCs with an active Windows 365 subscription are also entitled to ESU for up to three years.
• ESU includes no technical support and no new features; it covers critical and important security updates only.

Consumer ESU is not an option for businesses

Microsoft is running the consumer ESU programme for individuals until 12 October 2027, and coverage on enrolled devices continues automatically until that date. However, it cannot be used in commercial scenarios: enrollment is not offered on devices joined to an Active Directory domain or Microsoft Entra, or enrolled in a mobile device management (MDM) solution. For company PCs, the right path is commercial ESU or a move to Windows 11.

Windows Server 2022: mainstream support ends, security updates continue

13 October is also an important date for Windows Server 2022: according to Microsoft, the October 2026 security update will be the last update of the mainstream support phase. The lifecycle page shows the end of mainstream support as 14 October 2026, 06:59 (PT), which is 16:59 on 14 October in Turkey. Windows Server 2022 then moves to extended support.

This is not end of life. Your Windows Server 2022 servers will keep receiving monthly security updates at no additional cost until 14 October 2031. What changes:

• No new features or design changes.
• Non-security fixes (updates for performance, stability and compatibility issues) are no longer released in general.
• Under Microsoft's Fixed Lifecycle Policy, benefits such as no-charge incident support included with the licence apply only during mainstream support; during extended support, support is paid.

So there is no immediate risk for your 2022 servers. As long as you install updates regularly, they stay secure. But this date is a good time to plan the move to Windows Server 2025 without pressure. Mainstream support for Windows Server 2025 runs until 13 November 2029 and extended support until 14 November 2034.

Key points for planning:

• In-place upgrade is possible: Microsoft supports a direct in-place upgrade to Windows Server 2025 from Windows Server 2016, 2019 and 2022, and also from 2012 R2. There is no direct path from Windows Server 2012 (non-R2). Not every server role supports in-place upgrade; in that case, migrating to a new server is the better route.
• An upgrade needs a separate licence: Unlike Windows client, each Windows Server version upgrade requires a licence for that version. Licences with active Software Assurance include new version rights.
• Core and CAL licensing: Windows Server 2025 Standard and Datacenter are licensed per core. On a physical server, all cores must be licensed, with a minimum of 8 core licences per processor and 16 per server. Every user or device that accesses the server needs a Windows Server CAL. CALs grant access to the same or earlier versions, so 2022 CALs are not enough to access a 2025 server. If you use Remote Desktop Services (RDS), the version of your RDS CALs matters too.
• Back up first: Microsoft recommends backing up the system and important files before any upgrade or migration.

Action plan for SMBs

1. Install the 13 October updates: Deploy the 13 October updates to Windows Server 2012/R2 servers and Windows 10 devices without delay.
2. Take inventory: List which servers run Windows Server 2012/2012 R2 and which PCs run Windows 10, including the version (is it 22H2?), the owner and the workload. Include forgotten VMs, old application servers and shop-floor PCs.
3. Decide on Windows 10: Check each device for Windows 11 hardware eligibility (TPM 2.0, supported CPU). Upgrade eligible devices to Windows 11. For the rest, compare the budget for new hardware with the cost of ESU year two. Treat ESU as a bridge until the migration is done.
4. Move Server 2012/R2 workloads: Migrate applications preferably to Windows Server 2025, or to Azure. Windows Server 2022 also receives security updates until 2031, but its mainstream support ends on 13 October, so 2025 makes more sense for new long-lived deployments. Confirm compatibility with the application vendor. Do not pick Windows Server 2016 as the target, because its extended support ends in January 2027.
5. Isolate what cannot move yet: Put servers that cannot be migrated right away in a separate network segment, block internet access, allow only the connections that are needed, restrict admin access and monitor the logs. This lowers the risk but does not replace security updates.
6. Tie the timeline to the budget: Windows 10 ESU year two ends on 12 October 2027. Year three will cost more, so aim to finish migrating the remaining devices before that date.

How can Doğa Network help?

Our team can help with server and client inventory, Windows 11 eligibility checks, the ESU licensing decision, moving Windows Server 2012/R2 workloads to Windows Server 2022/2025 or Azure, and isolating systems that cannot be moved. If you are planning to move Windows Server 2016, 2019 or 2022 servers to Windows Server 2025, we can also help with the licence upgrade (calculating core and CAL needs), in-place upgrades or migration to new servers. Call us on +90 850 888 3642 or email hi@doga.network.

Sources

• Microsoft Learn – Product Lifecycle FAQ: Extended Security Updates
• Microsoft Learn – Windows Server 2012 R2 lifecycle
• Microsoft Learn – Windows Server 2012 lifecycle
• Microsoft Learn – Extended Security Updates (ESU) program for Windows 10
• Microsoft – Windows 10 Consumer Extended Security Updates (ESU)
• Microsoft Learn – Windows Server 2016 lifecycle
• Microsoft Learn – Windows Server 2022 lifecycle
• Microsoft Learn – Windows Server 2022 release health
• Microsoft Learn – Windows Server 2025 lifecycle
• Microsoft Learn – Fixed Lifecycle Policy
• Microsoft Learn – Plan your Windows Server upgrade path
• Microsoft – Windows Server 2025 Licensing Guidance