Lifecycle FAQ - Extended Security Updates

Originally published: April 2, 2019
Updated: August 24, 2021

Please go here to search for your product's lifecycle.

What is the Extended Security Update (ESU) program?

The Extended Security Update (ESU) program is a last resort option for customers who need to run certain legacy Microsoft products past the end of support. It includes Critical* and/or Important* security updates for a maximum of three years after the product's End of Extended Support date.

Extended Security Updates will be distributed if and when available. ESUs do not include new features, customer-requested non-security updates, or design change requests.

All Windows 7 and Windows Server 2008/R2 customers received an update on January 14, 2020 as the operating systems were in support until then. Updates for these operating systems after January 14, 2020 are provided for ESU customers only.

To learn more about year 2 of the ESU program for Windows 7 and Windows Server 2008, go here, and see our Windows 7 ESU FAQs.

* As defined by the Microsoft Security Response Center (MSRC).

What products are included?

ESU Availability and End Dates

Products End of Extended Support/ESU Start Date ESU End Date Year 1 ESU End Date Year 2 ESU End Date Year 3 Type of Security Update
SQL Server 2008/R2 (Enterprise, Standard, Datacenter, Web, Workgroup)** July 9, 2019 July 14, 2020 July 13, 2021 July 12, 2022 Critical
SQL Server 2008/R2 for Embedded Systems* July 9, 2019 July 14, 2020 July 13, 2021 July 12, 2022 Critical
Windows Server 2008/R2 (Datacenter, Standard, Enterprise)** January 14, 2020 January 12, 2021 January 11, 2022 January 10, 2023 Critical, Important
Windows 7 (Professional, Enterprise) January 14, 2020 January 12, 2021 January 11, 2022 January 10, 2023 Critical, Important
Windows 7 Professional for Embedded Systems* January 14, 2020 January 12, 2021 January 11, 2022 January 10, 2023 Critical, Important
Windows Server Embedded 2008/R2* January 14, 2020 January 12, 2021 January 11, 2022 January 10, 2023 Critical, Important
Windows Embedded Standard 7* October 13, 2020 October 12, 2021 October 11, 2022 October 10, 2023 Critical, Important
Windows Embedded POSReady 7* October 12, 2021 October 11, 2022 October 10, 2023 October 8, 2024 Critical, Important
Dynamics AX 2009 April 12, 2022 ESUs available until January 10, 2023 via the Dynamics 365 Migration Program Not applicable Not applicable Critical
Dynamics AX 2012/R2 April 12, 2022 ESUs available until January 10, 2023 via the Dynamics 365 Migration Program Not applicable Not applicable Critical
SQL Server 2012 July 12, 2022 July 11, 2023 July 9, 2024 July 8, 2025 Critical
Windows Server 2012/R2 October 10, 2023 October 8, 2024 October 14, 2025 October 13, 2026 Critical

* Extended Security Updates for select Embedded products are available via OEMs. All others are available via volume licensing.
** One additional year of ESU is available for Windows Server and SQL Server 2008 and 2008 R2 only on Azure.

Can I get support after the Extended Support date, without purchasing Extended Security Updates?

For technical support, customers must purchase Extended Security Updates and have an active support plan in place to get technical support on a product that has moved beyond the Extended Support date. Please call 1-800-Microsoft to receive support.

For security updates only, customers can receive Extended Security Updates on the following products for free:

  • SQL and Windows Server 2008/R2: Customers who move workloads to Azure Virtual Machines (IaaS) "as-is" will have free access to Extended Security Updates for both SQL Server and Windows Server 2008 and 2008 R2 for three years after the End of Support.

  • Windows 7: Microsoft Windows Virtual Desktop provides a Windows 7 device with free Extended Security Updates through January 2023.

  • Dynamics AX 2009 and AX 2012/R2: Dynamics customers who purchase Dynamics 365 Finance, Dynamics 365 Supply Chain, or Dynamics 365 Commerce with the intent to start their migration to the cloud will receive Extended Security Updates (ESU) at no charge. Go here to learn more.

How can I purchase ESUs?

Extended Security Updates are available through specific volume licensing programs. Contact your Microsoft partner or account team to learn more. ESUs for select Embedded products are available via your embedded device manufacturer. For ESUs available through the Dynamics 365 Cloud Migration offer, customers can purchase via the Cloud Service Provider (CSP) licensing program.

Coverage will be available in three consecutive 12-month increments following End of Support. Customers cannot buy partial periods (e.g., only 6 months). Extended Security Updates are transacted per year (12-month period), commencing with the End of Support date.

Eligible customers can use the Azure Hybrid Benefit (available to customers with active Software Assurance or Server Subscriptions) to obtain discounts on the license of Azure Virtual Machines (IaaS) or Azure SQL Database Managed Instance (PaaS).

Does Unified Support include ESUs?

No, customers must purchase ESU support separate from Unified Support. Once ESU support is purchased, customers can get technical support for products covered by the program.

How do I install ESU updates?

SQL Server 2008/R2: Once SQL Server instances have been registered with the SQL Server registry service, customers can download the Extended Security Update packages using the link found in the Azure portal, if and when they are made available. Go here to learn more.

Can I use System Center Configuration Manager (SCCM) to deploy Extended Security Updates?

Customers who have purchased Windows ESUs can use the latest version of System Center Configuration Manager, Current Branch (SCCM) to deploy and install Windows security updates.

SCCM 2012 R2 will not be supported on Windows 7 or Windows Server 2008/R2 operating systems during their respective ESU phases.

For more information, go here.

What versions of .NET Framework are supported on Windows during their respective Extended Security Update (ESU) phases?

.NET Framework 3.5 SP1, .NET Framework 4.5.2, .NET Framework 4.6, and .NET Framework 4.6.2 are supported during the Windows Server 2008 ESU until April 26, 2022. .NET Framework 4.5.2, 4.6, and 4.6.1 reach end of support on April 26, 2022. After this date, Windows Server 2008 ESU will include .NET Framework 4.6.2 and .NET Framework 3.5 SP1 only.

.NET Framework 3.5. SP1, and .NET Framework 4.5.2 through .NET Framework 4.8 are supported during Windows Server 2008 R2 and Windows 7 ESU phases until April 26, 2022. .NET Framework 4.5.2, 4.6, and 4.6.1 reach end of support on April 26, 2022. After this date, Windows Server 2008 R2 ESU and Windows 7 ESU will include .NET Framework 4.6.2 thru .NET Framework 4.8 and .NET Framework 3.5 SP1 only.

How can I learn more?

Change Log

January 2020 edits
EDITED: URLs for SQL Server 2008/R2 ESU FAQs and Resources

July 2020 edits
EDITED: ESU end date year 2 for Windows Embedded Standard 7

November 2020 edits
ADDED: ESU end date year 2 for Windows 7 and Windows Server 2008
ADDED: Link to getting ESU for Windows Embedded 7 Standard

January 2021 edits
ADDED: Links to the Windows 7 ESU FAQ

March 2021 edits
ADDED: Dynamics 365 ESU details

June 2021 edits
UPDATED: .NET Framework ESU details

July 2021 edits
UPDATED: ESU end dates for SQL Server 2012 and Windows Server 2012/R2

August 2021 edits
UPDATED: ESU availability for Dynamics AX 2009 and Dynamics AX 2012/R2