Microsoft recently announced that it will expand the Extended Security Updates (ESU) program from Windows 10 to more Windows versions that are about to end their support cycle, providing enterprise customers who are still using older systems with paid security patch options. Previously, Windows 10 had ended mainstream support in October 2025 and entered the ESU stage. Users can continue to receive security updates without upgrading the operating system.
According to the schedule announced by Microsoft, three Windows products will reach the end of support (End of Support) node in the next few months: Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB will end support on October 13, 2026, and Windows Server 2016 will end support on January 12, 2027. After the above date, these versions will no longer receive monthly quality updates, security updates, and official technical support. However, enterprise customers can continue to receive security patches by purchasing ESU services to reduce the risks associated with running older systems.
For Windows 10 Enterprise 2016 LTSB, Microsoft's first recommendation is to migrate to the latest Windows 10 or Windows 11 LTSC version as soon as possible. For organizations that have not completed their migration after October 13, 2026, Microsoft will offer an ESU subscription for up to three years at a first-year price of $61 per device per year, with a discounted price of $45 per device per year if managed centrally through tools such as Intune or Windows Autopatch. The fee will double every year, and if the customer joins the ESU plan from the second year, he will not only need to pay the current year's fee, but also must pay the first year's fee. This is because the ESU update is provided cumulatively, and even if he joins one year later, he will still receive all the security patches of the previous year.
For Windows 10 IoT Enterprise 2016 LTSB, Microsoft also recommends that customers migrate to the latest Windows 10 or Windows 11 IoT LTSC version for longer support periods and better functionality. If upgrade is not possible due to business or device ecosystem reasons, Microsoft recommends that relevant customers contact their respective IoT device OEM manufacturers to learn about the specific pricing and supply of ESU, and complete registration and purchase through OEM channels.
On the server side, Windows Server 2016 users are advised to upgrade to the newer Windows Server 2025 for new features and general support. Microsoft said it will also provide ESU options for Windows Server 2016, but specific pricing and availability information has not yet been announced, and relevant details will be disclosed later.
Overall, while Microsoft provides "life extension" options for paid security updates for older systems, it still clearly considers upgrading to more modern Windows versions as the preferred path. The ESU plan can ensure system security to a certain extent, but it does not include the push of new features, and technical support is very limited. Therefore, in the long run, if enterprises want to obtain more complete support and functions, they still need to plan to migrate to a new version of the platform.