Microsoft Ends Security Updates for Exchange 2016/2019 in October 2026

Microsoft has announced that it will cease all security updates for Exchange Server 2016 and 2019 in October 2026, following a six-month extension of the Extended Security Update (ESU) program. This decision affects organizations still using these outdated versions, which will no longer receive security patches or updates after the deadline. IT administrators are advised to upgrade to Exchange Server Subscription Edition (SE) or migrate to Microsoft 365 to maintain security. The Exchange Server team confirmed that there will be no further extensions beyond the current ESU program. This move comes as Microsoft also transitions other products, including Windows 10 and Windows Server 2022, to different support statuses. Organizations relying on Exchange 2016 or 2019 must act promptly to avoid potential security vulnerabilities.

Key Points: • Microsoft will stop security updates for Exchange 2016 and 2019 in October 2026. • Organizations must upgrade to Exchange Server SE or migrate to Microsoft 365 to remain secure. • No further extensions to the Extended Security Update program will be granted.