Windows Server 2008 End of Support: How to Get Extended Security Updates

[Rick Claus]

With the End of Support for Windows Server 2008 on January 14th, 2020 - you no longer have the ability to receive Security Updates or Support for any servers running Windows Server 2008. If you need to keep these systems running and patched after January 14th - you have a few limited options:
 

1. You can migrate your Server and workload up to Azure and receive up to 3 free years of Security Updates from Microsoft. 
    
2. Provided you have an Enterprise Agreement / Volume License Agreement or you have purchased Software Assurance - you can purchase  Extended Security Updates from Microsoft for up to 3 years on a per server basis where you will be able to register / enroll a fixed number of systems into this program. See the FAQ for more details and eligibility.  

If you NEED to stay on-premises with these systems, and you have all the prerequisites in place, you can generate a special "Multiple Activation Key" from the Azure portal and deploy it to your on-prem update service: Windows Update, Configuration Manager (current branch) and even 3rd party solutions. 

Want to learn more? I've got you covered. I asked Ned Pyle - Principal Program Manager on the Windows Server Team to talk about your options and show us how to generate MAK keys. 

For more details and documentation about this process - check out this article which has all the info on how to request and provision an Extended Security Update MAK key from the Azure portal, once you have purchased Extended Security Updates. For details on HOW to deploy this key to your Windows Server 2008/R2 systems - check out this detailed blog by Poornima Priyadarshini. 

Did we miss anything? Let us know in the comments and we'll do our best to get you the info you need!

[sushanthamin]

Good Information. There are many customers who are at present stuck on MS Win Server 2008.  Going on Cloud would be an immediate challenge considering the type of application the customer(s) might be running. 

[Rick Claus]

My thoughts exactly @sushanthamin - that is why I always respond to questions from customers by asking for more info on the workload, what it's used for, where it's accessed and if it's a built in role to Windows Server that is critical to their operations. Each workload in your datacenter needs to be evaluated on what makes sense to move up and what makes sense to modernize and go hybrid. 

[jp_cutler]

Hi Rick,

We look after a customer who has volume licensing and software assurance, but not an Enterprise Agreement.  Would they be eligible for extended security updates. 

PS: Azure is not an option for them unfortunately.

Kind Regards

John

[sushanthamin]

Hello John, 

I would recommend the customer to Upgrade the OS to Microsoft Windows Server 2016 Standard Edition. Before doing so, you need to check if the application running on the server is compatible to run on MS Windows Server 2016. 

MS Windows Server 2008, i don't think MS will support the OS or provide mandatory patches, which will put the customer application environment at risk. 

If the customer is not ready to migrate to Azure, the he can upgrade the OS to MS Windows Server 2016 Standard Edition and be On-Premise. 

Thanks 

Sushanth