Windows Server 2022 reaches end of mainstream support in 60 days
August 17, 2026 · BleepingComputer · Severity: MEDIUM
Microsoft has reminded IT administrators that Windows Server 2022 will reach the end of mainstream support on October 13, 2026, transitioning to extended support (security updates only) until October 14, 2031. The company strongly recommends upgrading to Windows Server 2025, the latest Long-Term Servicing Channel (LTSC) release, which offers mainstream support through November 14, 2034. To facilitate testing, a free 180-day trial of Windows Server 2025 is available. Additionally, Microsoft extended hotpatching for Windows Server 2022 Datacenter: Azure Edition until October 2027, one year beyond the mainstream support cutoff. On the endpoint side, Windows 11 23H2 Enterprise and Education editions will reach end of updates on November 10, 2026, with a recommended upgrade to Windows 11 25H2. The Windows 10 Extended Security Updates (ESU) program has also been quietly extended by one year for consumers. Separately, the Blue Report 2026 highlights a critical security gap: after attackers obtain valid credentials, only 37% of their actions are blocked, underscoring the need for stronger post-authentication controls and defense-in-depth strategies.
Key Takeaways
- Upgrade to Windows Server 2025 before October 13, 2026 – After this date, Windows Server 2022 loses mainstream support (non-security fixes, feature updates). Migrating to the latest LTSC release ensures full support and reduces exposure to unpatched non-security vulnerabilities.
- Leverage extended hotpatching for Azure Edition – If using Windows Server 2022 Datacenter: Azure Edition, take advantage of the hotpatching extension through October 2027 to minimize reboot requirements and accelerate security patch deployment.
- Strengthen post-authentication defenses – The Blue Report 2026 shows that once attackers have valid credentials, only 37% of their actions are blocked. Implement least-privilege access, continuous authentication monitoring, and anomaly detection to close this gap.