The Extended Security Update (ESU) program is a last resort option for customers who need to run certain legacy Microsoft products past the end of support. It includes Critical* and/or Important* security updates for a maximum of three years after the product’s End of Extended Support date.
Extended Security Updates will be distributed if and when available. ESUs do not include new features, customer-requested non-security updates, or design change requests.
All Windows 7 and Windows Server 2008/R2 customers will get an update on January 14, 2020 as the operating system is in support until then. Updates for these operating systems after January 14, 2020 will be for ESU customers only.
*As defined by the Microsoft Security Response Center (MSRC).
| End of Extended Support/ESU Start Date | ESU End Date | ESU End Date | ESU End Date | Type of Security Update |
SQL Server 2008/R2 (Enterprise, Standard, Datacenter, Web, Workgroup) | July 9, 2019 | July 14, 2020 | July 13, 2021 | July 12, 2022 | Critical |
SQL Server 2008/R2 for Embedded Systems* | |||||
Windows Server 2008/R2 (Datacenter, Standard, Enterprise) | January 14, 2020 | January 12, 2021 | January 11, 2022 | January 10, 2023 | Critical, Important |
Windows 7 (Professional, Enterprise) | |||||
Windows 7 Professional for Embedded Systems* | |||||
Windows Server Embedded 2008/R2* | |||||
Windows Embedded Standard 7* | October 13, 2020 | October 12, 2021 | October 11, 2022 | October 10, 2023 | |
Windows Embedded POSReady 7* | October 12, 2021 | October 8, 2022 | October 10, 2023 | October 14, 2024 |
*Extended Security Updates for select Embedded products are available via OEMs. All others are available via volume licensing.
For technical support, customers must purchase Extended Security Updates and have an active support plan in place to get technical support on a product that has moved beyond the Extended Support date. Please call 1-800-Microsoft to receive support.
For security updates only, customers can receive Extended Security Updates on the following products for free:
- SQL and Windows Server 2008/R2: Customers who move workloads to Azure Virtual Machines (IaaS) “as-is” will have free access to Extended Security Updates for both SQL Server and Windows Server 2008 and 2008 R2 for three years after the End of Support.
- Windows 7: Microsoft Windows Virtual Desktop provides a Windows 7 device with free Extended Security Updates through January 2023.
Extended Security Updates are available through specific volume licensing programs. Contact your Microsoft partner or account team to learn more. ESUs for select Embedded products are available via your embedded device manufacturer.
Coverage will be available in three consecutive 12-month increments following End of Support. Customers cannot buy partial periods (e.g., only 6 months). Extended Security Updates are transacted per year (12-month period), commencing with the End of Support date.
Eligible customers can use the Azure Hybrid Benefit (available to customers with active Software Assurance or Server Subscriptions) to obtain discounts on the license of Azure Virtual Machines (IaaS) or Azure SQL Database Managed Instance (PaaS).
No, customers must purchase the Extended Security Update program separately. The cost of Extended Security Updates is not included in the price of the Unified Support. However, customers can use Unified Support to get technical support for products covered by ESUs. Onsite or proactive support will only be available to a customer if it is part of their Unified Support agreement.
Windows 7 and Windows Server Extended Security Update (ESU) customers may install an optional non-security update prior to the start of ESU, to verify that eligible devices will continue to get ESUs after the end of support date of January 14, 2020. Go here to learn more:
Customers who have purchased Windows ESUs can use the latest version of System Center Configuration Manager, Current Branch (SCCM) to deploy and install Windows security updates.
SCCM 2012 R2 will not be supported on Windows 7 or Windows Server 2008/R2 operating systems during their respective ESU phases.
For more information, go here.
.NET 3.5 SP1, .NET 4.5.2 and .NET 4.6 are supported during the Windows Server 2008 ESU.
.NET 3.5. SP1, and .NET 4.5.2 through .NET 4.8 are supported during Windows Server 2008 R2 and Windows 7 ESU phases.
To learn more about the Extended Security Update Program, and End of Support and migration options for Window 7 and SQL and Windows Server 2008/R2, see the following articles:
- How to get ESU for Windows devices
- IT Pro FAQ about the end of support for Windows 7
- Windows 7 and Office 365 ProPlus support
- SQL Server 2008/R2 and Windows Server 2008/R2 ESU FAQs
- SQL Server 2008/2008 R2 ESU resource site
- Extended Security Updates and System Center Configuration Manager
The information on this page is subject to the Microsoft Policy Disclaimer and Change Notice. Return to this site periodically to review any such changes.