CybersecurityVulnerability Management

Microsoft Flags 60-Day Countdown for Windows Server 2022 Support Shift

Analyst 207||Source: BleepingComputer
Server room interior with rows of rack-mounted servers and IT staff in the background near a large window.

"On October 13, 2026, Windows Server 2022 will reach end of mainstream support. The October 2026 security update will be the last mainstream support update available for this version," Microsoft wrote in a message center update on Friday.

The date and what Microsoft said

Microsoft reminded administrators that Windows Server 2022 is approaching its mainstream support cutoff on October 13, 2026, after which the product will transition to extended support. The company made the timing explicit in a message center update and repeated that, under extended support, "security updates at no additional cost" will continue monthly through October 14, 2031.

Windows Server 2022 lifecycle: origins and timeline

Windows Server 2022 was announced in March 2021 and became generally available in September 2021 as the Long-Term Servicing Channel (LTSC) release, carrying a ten-year support promise. With the mainstream phase ending in October 2026, that initial 10-year cadence is giving way to the extended-support phase that Microsoft defines for LTSC products.

Upgrade path: Windows Server 2025 and deployment testing

Microsoft advised administrators to plan upgrades to Windows Server 2025. According to the company, Windows Server 2025 became generally available in November 2024 after an initial rollout to Windows Insiders in January 2024. Microsoft characterized it as "now the latest Long-Term Servicing Channel (LTSC) release for Windows Server" and urged customers to "plan to upgrade to Windows Server 2025 for full mainstream support." The vendor also recommended that organizations "evaluate upgrade options and begin deployment testing early to help ensure a smooth transition."

Microsoft set specific lifecycle dates for Windows Server 2025: it will reach end of support on November 13, 2029, with five years of extended support available until November 14, 2034. For teams wanting to trial the platform before committing to deployment, Microsoft makes a free Windows Server 2025 180-day evaluation available through the Microsoft Evaluation Center.

Hotpatching, Windows 10 ESU, and Windows 11 notices

Microsoft has made a few notable exceptions and extensions tied to the broader support picture. The company announced an extension of Windows Server 2022 hotpatching until October 2027 for systems running the Datacenter: Azure Edition — a year beyond the mainstream cutoff. Separately, Microsoft quietly extended the free Windows 10 Extended Security Updates (ESU) program for consumers by an additional year. The company also reminded customers that Windows 11 23H2 Enterprise and Education editions will reach end of updates on November 10, 2026, and recommended upgrading to Windows 11 25H2, its latest endpoint operating system.

What this means for technologists, IT administrators, and procurement leaders

  • Technologists and security teams: Monthly security updates will continue under extended support through October 14, 2031, but Microsoft’s messaging emphasizes that mainstream support — and the broader servicing and feature cadence it includes — ends in October 2026. Teams running Datacenter: Azure Edition should note the hotpatching extension to October 2027.
  • IT administrators and deployment teams: Microsoft explicitly advised administrators to upgrade to Windows Server 2025 and to "evaluate upgrade options and begin deployment testing early" to help ensure a smooth transition. The availability of a 180-day Windows Server 2025 trial is a concrete option for testing.
  • Procurement and operations leaders: The different end-of-support dates — Windows Server 2022’s mainstream end in October 2026 and Windows Server 2025’s end of support in November 2029 with extended support through November 14, 2034 — affect budgeting and procurement windows for upgrade projects and extended-support planning.

Microsoft points administrators to its Windows Lifecycle FAQ, the Lifecycle Policy search tool, and a maintained list of products scheduled to reach end of support or retirement during the year for more details. The company’s public guidance centers on two clear actions: plan upgrades to Windows Server 2025 for continued mainstream support, and begin deployment testing early.

Whether organizations take the immediate step of trialing Windows Server 2025, rely on extended support for a defined interval, or use Datacenter: Azure Edition hotpatching as a temporary bridge, the dates Microsoft set are fixed points on a timeline IT teams must now schedule around. The practical question left for every administrator is both simple and urgent: which systems will move first, and how will those migrations be tested before the October 13, 2026 mainstream cutoff?

Read the original Microsoft announcement at Bleeping Computer

MicrosoftWindows Server 2022Extended SupportEnd Of SupportMainstream SupportServer Lifecycle
Related Intelligence

Continue Reading

Laptop screen displays WordPress dashboard on a desk in a home office.

WordPress Plugin Flaw Enables Admin Takeover on 40,000 Sites

A critical vulnerability in the popular User Profile Builder plugin has put over 40,000 WordPress sites at risk of admin takeover, with a CVSS rating of 9.8; site owners should immediately update to version 3.16.5 or later to patch the flaw.

Analyst 207
Server room with technicians, focusing on a single MCP server and blurred credentials storage area.

MCP Servers Expose Enterprise Secrets Through Flawed Security Practices

Are your organization's secrets safe with AI? The Model Context Protocol's security flaws are exposing enterprise secrets, making it crucial to assess how well your sensitive information is protected when shared with MCP servers.

Analyst 207
Cybersecurity researcher poised to type on keyboard amidst multiple computer screens in a bright lab setting.

Researchers Expose Chrome DevTools Protocol Hijacking Technique

Google warns that attackers are exploiting Chrome Remote Debugging to steal cookies, and now researchers have developed a new technique to activate DevTools inside a live browser, allowing for even easier cookie extraction. This technique uses a Beacon Object File to tap into the Chrome DevTools Protocol, posing a new threat to users.

Analyst 207
Professionals gather around a large screen in a secure setting, surrounded by blurred computer equipment and cybersecurity…

US Authorizes Private Firms for Cyber Counterattacks

The US has taken a bold step in cyberspace, launching a program that empowers select private companies to launch targeted counterattacks against ransomware gangs and other cybercrime syndicates. This innovative approach aims to disrupt and dismantle these threats, with the government maintaining control and ensuring accountability every step of the way.

Analyst 207