Critical Support Update: Microsoft Extends Security Lifeline for Exchange and Skype Servers
If your organization is still running on-premise Exchange Server or Skype for Business Server, you’re likely well aware of the impending end-of-life deadline. The pressure to migrate to cloud-based solutions like Exchange Online and Microsoft Teams is significant. In a crucial update for IT administrators, a six-month extension has been granted for Extended Security Updates (ESU) for key server products.
This change provides a valuable, albeit temporary, window for businesses to finalize their transition strategies and protect their critical communication infrastructure.
What’s Changing? A Six-Month Reprieve
The original end date for Extended Security Updates for several popular on-premise server products was October 14, 2025. This deadline has now been pushed back.
The following products will now receive security updates until April 8, 2026:
- Exchange Server 2016
- Exchange Server 2019
- Skype for Business Server 2019
This extension was granted in response to feedback from customers who highlighted the complexity and time required to migrate large-scale, on-premise environments to the cloud. This decision acknowledges the real-world challenges many organizations face in moving away from these deeply integrated systems.
A Warning: This Is Borrowed Time, Not a Pardon
While this extension is welcome news, it comes with a critical warning: this is not an excuse for procrastination. The fundamental need to migrate away from these legacy servers has not changed. On-premise servers are increasingly targeted by cyberattacks, and running unsupported software after the final ESU date is a significant security risk.
The additional six months should be viewed as a strategic opportunity to execute a well-planned migration, not as a reason to delay it further. The goal remains the same: transition to a modern, more secure platform like Microsoft 365.
Your Action Plan: How to Use This Extension Wisely
For IT leaders and system administrators, this extension is a call to action. Use this extra time to solidify your migration plans and reduce risk.
Re-evaluate and Finalize Your Migration Timeline: If your original plan felt rushed, now is the time to refine it. Break the migration down into manageable phases, conduct thorough testing, and ensure all stakeholders are aligned. Use this window to build a more robust and realistic timeline that minimizes disruption.
Prioritize Security Patching: Remember, Extended Security Updates only cover critical and important security vulnerabilities. They do not include new features, non-security updates, or technical support. It is absolutely essential to continue applying all available security patches promptly to protect your servers from known exploits.
Address Migration Blockers: Use this period to aggressively tackle any technical or logistical hurdles that were slowing down your transition. This could involve cleaning up Active Directory, archiving old data, or securing the necessary budget and resources for the move.
Begin the Transition Now: Don’t wait until the final months. Start with pilot migrations for small groups of users to work out any issues in a controlled environment. This builds momentum and provides valuable lessons that can be applied to the larger-scale migration. The sooner you start, the smoother the final cutover will be.
The Bottom Line: Secure Your Future in the Cloud
The six-month extension for Exchange and Skype for Business servers is a practical concession to the complexities of modern IT. However, the destination is unchanged. Moving to cloud platforms like Exchange Online and Microsoft Teams offers superior security, scalability, and collaboration features that on-premise solutions can no longer match.
Use this extension wisely. Treat it as the final grace period to ensure your organization completes its transition smoothly and securely, safeguarding your data and communications for the future. The clock is still ticking.
Source: https://go.theregister.com/feed/www.theregister.com/2025/07/17/microsoft_extended_security_exchange_skype_server/
