Microsoft Out of Support Dates

End of support is not a switch that stops software working on the day it passes — an unsupported server or application generally keeps running exactly as it did the day before. What changes is that Microsoft stops releasing security patches for newly discovered vulnerabilities, so every flaw found after that date remains open indefinitely. Attackers actively target known end-of-support software precisely because the fixes will never arrive, which makes these systems disproportionately likely to be the entry point in a breach.

• Unpatched vulnerabilities accumulate with no fix ever released, unlike a supported system where a patch closes the gap within weeks.
• Cyber insurance policies increasingly exclude claims involving unsupported software, so an incident on an end-of-support system may not be covered.
• Compliance and due-diligence reviews in regulated sectors — legal, corporate services, trust, insurance — routinely flag unsupported software as an open finding.
• Compatibility gradually degrades as newer applications, browsers and Microsoft 365 services stop supporting connections from end-of-life products.

Fresh Mango treats each date on this page as a planning deadline, not a surprise. A replacement or upgrade project — whether that is moving a server workload to Microsoft Azure, upgrading a desktop operating system fleet, or migrating a mail server into Microsoft Exchange Online — typically needs three to twelve months of lead time depending on scale, so the practical planning point is well before the date itself, factoring in budget cycles and, for hardware, British Virgin Islands shipping lead times.

On-premises Microsoft Exchange Server versions follow the same fixed lifecycle as Windows Server, and businesses still running an on-premises Exchange server should treat its end-of-support date as a trigger to migrate into Microsoft Exchange Online rather than patch in place. Microsoft Defender and Microsoft 365 cloud services are continuously updated rather than versioned with a fixed end date, so they are not part of this lifecycle table, but they depend on the underlying operating system remaining supported — Defender's protection on an end-of-support Windows version becomes progressively less effective as new detection features stop being backported.

Microsoft Power Platform, including Power Apps, Power Automate and Power BI, is a continuously updated cloud service in the same way, with no fixed retirement date for the platform itself, though individual connectors and older Power Apps licensing models are retired on their own schedules and should be checked separately.

• Modern Workplace hubSee Microsoft's supported cloud alternative to on-premises servers approaching end of life.Read more
• Office 365 migrationRead the methodology for migrating an on-premises Microsoft Exchange server before its support date.Read more
• Microsoft 365 Security 101Understand Microsoft Defender and Exchange Online Protection coverage.Read more
• Managed IT servicesSee how lifecycle planning fits into ongoing managed IT services.Read more