The Extended Security Update (ESU) program is a last resort option for customers who need to run certain legacy Microsoft products past the end of support. It includes Critical* and/or Important* security updates for a maximum of three years after the product’s End of Extended Support date.
Extended Security Updates will be distributed if and when available. ESUs do not include new features, customer-requested non-security updates, or design change requests.
*As defined by the Microsoft Security Response Center (MSRC).
| Product | End of Extended Support/ | What type of security updates are included? | How can I purchase? |
| SQL Server 2008 and 2008 R2 Enterprise and Standard | July 9, 2019 | Critical | Volume Licensing |
| Windows Server 2008 and 2008 R2 Datacenter and Standard | January 14, 2020 | Critical, Important | |
| Windows 7 Professional and Enterprise | |||
| Windows 7 Professional for Embedded Systems | OEM | ||
| Windows Embedded Standard 7 | October 13, 2020 | ||
| Windows Embedded POSReady 7 | October 12, 2021 |
For technical support, customers must purchase Extended Security Updates and have an active support plan in place to get technical support on a product that has moved beyond the Extended Support date.
For security updates only, customers can receive Extended Security Updates on the following products for free:
- SQL and Windows Server 2008/R2: Customers who move workloads to Azure Virtual Machines (IaaS) “as-is” will have free access to Extended Security Updates for both SQL Server and Windows Server 2008 and 2008 R2 for three years after the End of Support.
- Windows 7: Microsoft Windows Virtual Desktop provides a Windows 7 device with free Extended Security Updates through January 2023.
Contact your Microsoft partner or account team to purchase ESUs. ESUs for Windows 7 Embedded products are available via your embedded device manufacturer.
Coverage will be available in three consecutive 12-month increments following End of Support. Customers cannot buy partial periods (e.g., only 6 months). Extended Security Updates are transacted per year (12-month period), commencing with the End of Support date.
Eligible customers can use the Azure Hybrid Benefit (available to customers with active Software Assurance or Server Subscriptions) to obtain discounts on the license of Azure Virtual Machines (IaaS) or Azure SQL Database Managed Instance (PaaS).
No, customers must purchase the Extended Security Update program separately. The cost of Extended Security Updates is not included in the price of the Unified Support. However, customers can use Unified Support to get technical support for products covered by ESUs. Onsite or proactive support will only be available to a customer if it is part of their Unified Support agreement.
To learn more about the Extended Security Update Program, and End of Support and migration options for Window 7 and SQL and Windows Server 2008/R2, see the following articles:
Now is the time to make the shift to Microsoft 365
Microsoft 365 adds modern desktop on Azure
Extended Security Updates FAQ for Windows Server 2008/R2 and SQL Server 2008/R2
Prepare for SQL Server and Windows Server 2008 end of support
Windows Server Installation and Upgrade
The information on this page is subject to the Microsoft Policy Disclaimer and Change Notice. Return to this site periodically to review any such changes.