Your Windows Server 2016 loses security updates on January 12, 2027
If the server in your closet runs Windows Server 2016, Microsoft's lifecycle page puts the end of support at January 12, 2027. Nothing breaks that day. What ends is the monthly stream of security fixes, on a server that holds your files, your user accounts and probably the database behind your practice software. This page says what stops, how to check your version safely, what to ask your software vendor, and three realistic paths with every Appluex price published.
Nothing stops working on January 12. The risk is that nothing gets fixed after it
Microsoft's lifecycle page for Windows Server 2016 lists the end of extended support as January 12, 2027 (the listing is dated in Pacific time). Under Microsoft's Fixed Lifecycle Policy, security updates are available during extended support, and after the end date they are available only through the Extended Security Update program. Non-security updates and design changes ended earlier. In Microsoft's own words, once a product reaches the end of support it also means the end of security updates and bulletins.
What keeps working: the server boots, your shared folders open, people sign in, QuickBooks Desktop opens its company file, and the practice software runs. Nothing is switched off. What changes is what happens the next time someone finds a flaw in Windows Server 2016. Before the date the flaw gets a fix on Patch Tuesday. After it, the flaw stays open, for every attacker who learns of it, on the machine that holds your most valuable data. Add the fact that a server is normally reachable from every computer in the office, and one infected laptop becomes a problem for the whole building.
Microsoft does offer Extended Security Updates for Windows Server 2016. They are delivered through Azure Arc (a Microsoft service that connects an on-premises server to your Azure account), can be set up in the Azure portal from August 3, 2026, and billing for them begins January 13, 2027. They cover Critical and Important security updates for up to three years, through 2030, and nothing else: no new features and no fixes for ordinary bugs. To buy them you need Software Assurance on the server licences through a Volume Licensing program (or a Server Subscription, or a licence acquired through a hosting provider under SPLA). Microsoft's own FAQ calls the program a last resort and a temporary bridge to a supported platform, not a long-term solution. We do not quote a price for it because Microsoft's pages we rely on do not publish one: ask your Microsoft reseller.
How to check your version safely. Sign in to the server as an administrator, press the Windows key and R together, type winver and press Enter. The window that opens is read-only. Windows Server 2016 shows as version 1607 with an OS build starting 14393. If it shows a different build, you are not on 2016 and this deadline is not yours. If you cannot sign in, or it is not your server to touch, write down what the label or invoice says and send it to us: we can confirm it from a remote screen share without changing anything. Do not reinstall, reset or upgrade the server to find out.
When to stop and call. Call before you touch anything if any of these is true: the server runs your practice-management, imaging or accounting database and nobody knows which vendor installed it; the server is a domain controller and you have only one; you see backup or disk warnings today; or a vendor tells you the software will not run on anything newer. These are exactly the cases where a rushed weekend upgrade costs more than the deadline does.
A note for healthcare practices. The HIPAA Security Rule requires a covered entity to assess the risks to electronic patient information and to put security measures in place that reduce those risks to a reasonable and appropriate level (45 CFR 164.308(a)(1)(ii)(A) and (B)). It does not name an operating system and it does not set a date. An unpatched server holding patient data is plainly a risk to write down and to address in your own risk analysis, and we can document the plan, but we are not telling you the rule says a particular upgrade is mandatory, because it does not.
Nothing stops on January 12. What stops is the fixing, on the one machine in the office that holds everything.
If your server also hosts mail or you want the broader picture of what we do for offices like yours, see the managed IT support page
Choose after you have asked your software vendor, not before
Which path fits depends on what the server actually does. A server that only holds shared folders is a file move. A server that runs a practice database is a vendor conversation first. Hardware and Windows Server licences are bought by you directly from the vendor; Appluex does the planning, configuration and testing, and the work is quoted in writing before it starts.
Move files and permissions to SharePoint or OneDrive, from $1,295
For a server whose real job is shared folders. Up to 10 users and 100 GB moves for $1,295, plus $195 for copying from a server in the office. Be clear about the limit: this moves files and who can see them. It does not move user accounts, a QuickBooks Desktop host or a practice database, so a server that does those jobs still needs Path 2 or 3 for them.
Move the workload to a newer Windows Server, labour at published rates
For a server that runs user accounts (Active Directory), a QuickBooks Desktop host or a database your software needs on site. You buy the new hardware and the licences. We plan the move, build and configure the new server, move the data and test, at $125 an hour remote, $155 an hour for engineering work and $150 an hour at your office. Windows Server 2025 is supported by Microsoft until November 2029 (mainstream) and November 2034 (extended).
Use your vendor's own cloud-hosted version
Many practice-management, imaging and accounting vendors host their own product for a monthly fee, which removes the database from your closet. The vendor sets the price and runs the hosting. We read the offer with you, list what has to move, and handle the files, printers and user accounts around it (often the $1,295 files job above).
Published rates for each path
Labour only. Server hardware, Windows Server licences, Extended Security Updates and your software vendor's hosting fees are bought from their sellers, and a quote names every assumption before the work starts. Nothing extra is done without your written yes.
| Files and permissions moved, up to 10 users and 100 GBYour shared folders are moved to SharePoint and OneDrive (Microsoft's shared file storage) with each person seeing what their role needs, and the move is tested before the old server is switched to read-only. | $1,295 |
|---|---|
| Files coming from a server in the officeThe add-on for copying from an on-premises server. It needs the server, or one PC in the office, left on while the copy runs. | $195 |
| Each extra 100 GB | $150 |
| Each extra user | $49 |
| Access design beyond three shared areas, or department by departmentEach. Also the fix when the inventory finds files shared with the whole company by mistake. | $145 |
| Switch-over done after hoursSo nobody loses a working morning. | $195 |
| Planning the move: the inventory, the order, the vendor questions, the cut-over planRemote work at the published remote rate. Quoted in writing before it starts. | $125 an hour |
|---|---|
| Building and moving: the new server's setup, user accounts, file shares, printers, the data move, testingEngineering rate. You buy the server hardware and the Windows Server licences directly from the vendor; Appluex plans, configures and tests them and does not sell or supply either. | $155 an hour |
| Project coordination with your software vendorScheduling the vendor's own steps around yours. | $150 an hour |
| Work at your officeVisits in Cape Coral, Fort Myers, Estero, Bonita Springs and Naples only. In Cape Coral and Fort Myers the minimum is 1 hour and there is no travel charge. Visits in Estero, Bonita Springs and Naples have a 2-hour minimum, which covers the drive. Time past the minimum is billed in 30-minute steps. Everywhere else the work is remote. | $150 an hour |
| Work done after hours or overnightThe published multipliers apply to the hourly rates above. | 1.5 times / 2 times the rate |
| Reading the vendor's offer with you and listing what must moveThe vendor sets and bills their hosting price. Appluex does not resell it. | $125 an hour |
|---|---|
| Moving what the vendor does not host (files, printers, users)Often the files job in Path 1, for up to 10 users and 100 GB. | $1,295 |
Dates are from Microsoft's Lifecycle pages for Windows Server 2016 and Windows Server 2025, and Extended Security Update details from Microsoft's Azure Arc documentation, read in October 2026. Check the Microsoft Lifecycle page for your edition before you plan around a date.
From October 2026 to the deadline, in order
Security updates stop on January 12, 2027, and a server retirement is easier weeks ahead of that date than days ahead of it. This is the order that avoids a rushed weekend, and the first two steps cost nothing in equipment.
October: find out what the server really does
Confirm the version with winver, list what is on it (shared folders, user accounts, QuickBooks, which databases), and write down who installed each program. A 30 minute remote look usually answers it. Do not change anything yet.
Late October to early November: ask the vendors
Send each software vendor the questions in the FAQ below and get the answers in writing: does the product run on Windows Server 2025, what version is needed first, do they offer hosting, and who does the data move.
November: choose the path and order the equipment
Files only, Path 1. A database or accounts, Path 2 or Path 3. Hardware lead times are the usual delay, so order before the holidays if you are buying a server. Decide whether Extended Security Updates are a bridge for one slow vendor, and ask your Microsoft reseller for the price.
Early December: build and test in parallel
The new setup is built beside the old one while the office keeps working. Files and permissions are copied, the vendor moves or installs their software, and a few people test a real day's work.
Mid December to January 12: cut over, then retire the old server
Switch-over on a quiet evening or weekend (after-hours rate applies), keep the old server powered but read-only for a few weeks, then retire it safely. Avoid the week of the deadline itself.
Why Appluex for this
Questions to your vendor before any quote
A server move fails on the vendor's software, not on Windows. We start with the vendor questions and a written list of what is on the server, so the plan is based on facts and not on the closest guess.
Labour at published rates, equipment bought by you
We do not sell servers or licences. You buy them directly from the seller, and every hour we spend is at a rate you can read on this page before you call.
An honest limit on what each path covers
Moving files to SharePoint is not moving your practice database, and we say so in the quote. If Extended Security Updates are the right bridge for one slow vendor, we will say that too.
Written results you can keep
Each path ends with documents, not a verbal all-clear.
For every path
- Inventory: version and build, what the server does, who installed each program
- The vendor questions with their written answers
- A dated plan with a rollback step
- Admin sign-in details handed to you, and the old server's retirement record
Files and permissions to SharePoint or OneDrive
- Folder and access map: who sees what
- Test record: files opened by the people who use them
- The old server's folders left read-only for the agreed period
New Windows Server
- Setup sheet: names, shares, accounts, backups
- Test record from a real working day
- Cut-over and rollback notes
Windows Server 2016 end of support. Questions owners ask
When exactly does Windows Server 2016 reach end of support?
Microsoft's lifecycle page for Windows Server 2016 lists the end of extended support as January 12, 2027 (the listing is in Pacific time), and the Azure Arc documentation says the same date. Mainstream support already ended in January 2022. After January 12, 2027, Microsoft no longer ships its normal monthly security updates for the product. Always confirm against the Microsoft Lifecycle page for your edition.
Will my server stop working on that day?
No. The server keeps starting, your shared folders open and your software runs. What ends is the regular stream of security fixes, so any new flaw found in Windows Server 2016 stays unfixed unless you have bought Extended Security Updates. That is a growing risk on a machine that holds your files and accounts, not an outage on a date.
Are Extended Security Updates available for Windows Server 2016, and what do they cost?
Yes. Microsoft offers them through Azure Arc; they can be configured from August 3, 2026, billing starts January 13, 2027, and they cover Critical and Important security updates for up to three years, through 2030. You need Software Assurance on the licences through a Volume Licensing program, or a Server Subscription. Microsoft's pages we rely on publish no price, so we do not quote one: ask your Microsoft reseller. Microsoft calls the program a temporary bridge, not a long-term plan.
How can I check which Windows Server version I am running, safely?
Sign in as an administrator, press the Windows key and R together, type winver and press Enter. The window only displays information. Windows Server 2016 is version 1607 with an OS build beginning 14393. Do not reinstall, reset or upgrade anything to find out. If you cannot sign in, we can confirm it over a remote screen share without changing a setting.
What should I ask my practice-software or accounting vendor?
Ask four things and get the answers in writing: does the current version of your product run on Windows Server 2025, which version of the product do I need first, do you offer a cloud-hosted version and at what monthly fee, and who moves the database and charges for it. Also ask whether they support the product on the server operating system you have now, and for how long.
Does moving my files to SharePoint or OneDrive solve the whole problem?
Only if the server does nothing else. Moving files and permissions is a priced job (from $1,295 for up to 10 users and 100 GB, plus $195 for copying from a server in the office). It does not move user accounts, a QuickBooks Desktop host or a practice database, so a server doing those jobs still needs a new Windows Server or a vendor-hosted version for them.
Do you sell servers or Windows Server licences?
No. You buy the hardware and the licences directly from the seller. Appluex plans the move, configures the new server, moves the data and tests, and that labour is billed at the published hourly rates and quoted in writing before it starts. That keeps the equipment price between you and the seller, where you can compare it.
Does HIPAA require me to replace the server?
The HIPAA Security Rule requires an accurate assessment of the risks to electronic patient information and security measures that reduce those risks to a reasonable and appropriate level. It does not name an operating system or set an upgrade date. A server that no longer gets security updates is a risk you should record and address in your own risk analysis, and we can document the plan. We do not say the rule mandates a specific upgrade.
Can you come to my office, and how are visits priced?
A visit is $150 an hour. In Cape Coral and Fort Myers the minimum is 1 hour and there is no travel charge. Visits in Estero, Bonita Springs and Naples have a 2-hour minimum, which covers the drive. The minimum is per visit, not per problem: everything fixed on that visit counts toward the same time. In-person work is only inside Cape Coral, Fort Myers, Estero, Bonita Springs and Naples; everywhere else the planning, the build and the testing are done remotely. Remote planning is $125 an hour.
Other ways we can help
Guides from our team
Something isn't working?
Email stopped, a computer will not start, the internet is down at the office: call and tell us what is happening, in English or Spanish. You will know the price before any work starts.
In person in Cape Coral, Fort Myers, Estero, Bonita Springs and Naples. Remote support anywhere.