Microsoft Extended Security Updates for Windows 7 and Windows Server
Windows 7 and Windows Server 2008/2008R2 reached the end of their support lifecycle on January 14th, 2020. Microsoft is selling Extended Security Updates (ESU) to provide support for those products after the end of the normal support lifecycle. Extended Security Updates...
- will provide Security Updates and Bulletins rated “critical” and “important” for a maximum of three years after January 14, 2020, and will be sold in one-year increments.
- will be distributed if and when available.
- do not include technical support, but you may use other Microsoft support plans to get assistance on your Server 2008 and 2008 R2 questions on workloads covered by Extended Security Updates.
- do not include new features, customer-requested non-security hotfixes, or design change requests. However, Microsoft may include non-security fixes as deemed necessary.
This FAQ is an excellent resource for general questions about Extended Security Updates.
Licensing and Purchasing
Extended Security Updates for Windows 7 and Windows Server 2008/2008R2 Standard and Datacenter are available for purchase from the Software Order Form.. The ESU SKUs closely follow the Windows Server licensing model.
- You can purchase Extended Security Updates at any time. The prices are not prorated.
- Provisioning of Extended Security Updates will be through special multiple activation keys (MAKs)that you will receive in an email within an hour of your order.
- 32- and 64-bit versions of Windows 7 use the same ESU MAKs, as do the 32- and 64-bit versions of Windows Server 2008. Windows Server 2008 is the last version of Windows Server available for 32-bit machines; Windows Server 2008R2 is 64-bit only.
- Software Assurance must be maintained on the Windows Server licenses being covered by Extended Security Updates. If software assurance lapses during the term of the Extended Security Updates, your right to use Extended Security Updates ends.
- If your Windows Server 2008/2008R2 license doesn't have software assurance associated with it and you want to cover it with Extended Security Updates, there are two options, both of which would be in addition to the Extended Security Updates above.
- You can purchase a new perpetual Windows Server license with software assurance from the Software Order Form.
- You can purchase a lease for Windows Server with software assurance.
- The term of the lease would begin on the first day of the month following your purchase date and end on October 31st, at which time you can either let it lapse or renew it for another year.
- Windows Server leases do not include perpetual license rights.
- The purchase price of leases that begin on dates other than November 1st would be prorated to correspond with an end date of October 31st. Because of that, each order for a Windows Server lease will need to be quoted before purchase.
- These items license two physical cores on one machine; the minimum order is 8, which would license one machine with up to 16 cores. If your server has more than 16 cores, you would need to purchase additional quantities.
- Windows Server Standard 1-year lease: $5.22/two cores on one server/year (will be prorated)
- Windows Server Datacenter 1-year lease: $36.02/two cores on one server/year (will be prorated)
- If you'd like to get an estimate of the costs of licensing your systems for Extended Security Updates, please email firstname.lastname@example.org.
- Please refer to this blog post for prerequisites, installation, and activation: https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/How-to-get-Extended-Security-Updates-for-eligible-Windows/ba-p/917807
- More on prerequisites: https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/preparing-to-deploy-extended-security-updates/ba-p/1139851
- This page was updated on 2/11/2020 to include additional Licensing Preparation Package prerequisites: https://support.microsoft.com/en-us/help/4522133/procedure-to-continue-receiving-security-updates
If you've purchased Extended Security Updates and installed the ESU MAK on your system(s), you can follow this procedure from Microsoft to test the ability of the system(s) to receive ESUs: https://support.microsoft.com/en-us/help/4528069/update-for-eligible-windows-7-and-server-2008-r2-devices-can-get-esu