Skip to main content
CybersecurityVulnerability Management

Microsoft Offers Lifeline for Laggard Exchange, Skype Customers

Dark, abandoned server room with outdated equipment and flickering light bulb.

How long should an organization hold on to aging communications software when the vendor is ready to move on? Microsoft has answered that question with an awkward compromise: keep shipping security fixes for older Exchange Server and Skype for Business Server installations — for a price.

The announcement

Microsoft said it will continue to deliver security updates for older versions of Exchange Server and Skype for Business Server, acknowledging that “some customers aren't ready to make the move to newer products.” The company is offering extended security updates for those legacy products, a commercial option intended for organizations that cannot migrate immediately.

What changed and why it matters

The key fact is straightforward: Microsoft is extending its support path by providing security updates beyond the usual migration timeline, and it will do so as a paid offering. That combination changes the calculus for organizations that have been postponing migration to newer messaging and communications platforms. For administrators weighing operational disruption, budgetary limits, and compatibility, the extended security updates provide an alternative to an immediate cutover — at a cost.

Different perspectives on the move

  • Technologists: For IT teams, extended updates preserve continuity. They buy time to plan, test, and execute migrations without immediately abandoning vendor patches.
  • Procurement and budget managers: The option converts an operational problem into a financial decision. Organizations must weigh the recurring or one‑time expense of extended updates against migration costs.
  • End users and business units: The announcement allows continued use of familiar systems while buying migration planning time, but the announcement also signals that those systems are on a sunset path.
  • Policymakers and regulators: The availability of paid, extended patches may affect how institutions with regulatory obligations demonstrate ongoing software maintenance; it also shifts responsibility for migration timing back to the customer.

Conclusion

Microsoft's extended security updates for old Exchange Server and Skype for Business Server is a pragmatic, if imperfect, response to a common enterprise dilemma: migrate now or pay to stay on an older platform a little longer. The choice will force organizations to balance immediate operational needs against longer‑term costs and planning. In the end, will the extra time bought by a paid patching path accelerate careful migrations — or simply postpone the hard decisions?

Source: The Register