Enabling Extended Security Updates (ESU) for Windows Server provides your organization with additional update support past the normal lifecycle of the server. This is not only cost-effective but also allows ample time for transitioning to an upgraded version of Windows Server. This article discusses the procedures to obtain and implement ESU for Windows Server.

ESUs are automatically available for servers enabled with Azure Arc as well as non-Azure servers associated with Azure Arc. These updates can be registered on a large scale through Azure Policy or directly via the Azure portal without any initial fees. The charges are then billed monthly through the Azure subscription, and there is no need to activate any product keys.

From September 2023, Windows Server 2012 and 2012 R2 ESUs will be easily activatable via Azure Arc. This platform allows for straightforward integration of your Windows Server 2012 and 2012 R2 with Azure Arc, highlighting the advantages of linking hybrid machines to Azure Arc-enabled servers. If using Windows Server 2012 or 2012R2 Arc-enabled servers, follow the subsequent steps to set up your server.

Should Azure Arc connection be unfeasible for ESU application, retrieve the MAK or Microsoft Activation Key through the Windows Admin Center.

Now that we have learned how to get ESU, let’s see how to deliver it. To deliver ESU, follow the following guides.

First, we are going to provision the ESU license from Azure Arc for the outdated Windows Server and then link it to multiple Arc-enabled servers. You can follow the steps given below to do the same.

That is how you create a license.

Read: Add Group Policy Management Console in Windows Server

After establishing the license, it’s essential to connect our resources. These resources will utilize the protocols described in the license and will receive Extended Security Updates following the end of their support period. To proceed, adhere to the steps outlined below.

Upon completion, check the status of the machines. Their ESU status will read “Enabled”.

Certain conditions might allow your server to obtain Extended Security Updates (ESUs) patches free of charge. These include Development/Test (Visual Studio) and Disaster Recovery (DR instances covered by Software Assurance or subscription only). Both situations necessitate the customer already using Windows Server 2012/R2 ESUs activated by Azure Arc on chargeable, production systems.

This process will enable you to enroll for Extended Security Updates and distribute them across all qualified resources.

Read: How to connect Windows Server to Azure?

Extended Support and Extended Security Updates (ESU) distinguish two important service periods in Microsoft product maintenance. During Extended Support, users still receive mainstream support, including security updates and paid support, but no new features or modifications are introduced. Alternatively, Extended Security Updates (ESU) provide crucial security updates after a product has reached the end of its official lifecycle.

Read: How to remove Roles and Features in Windows Server?

Server or Microsoft 365 administrators can verify the ESU status through the Azure Admin Center. They should access the Azure Admin portal and proceed to Extended Security Updates > Eligible resources. This section displays all resources for which ESU has been activated.

Also Read: Best Windows Server Tutorial and Tips.

Published on August 19, 2024

July 25, 2024

July 18, 2024

August 13, 2024

August 9, 2024

Welcome to DediRock, your trusted partner in high-performance hosting solutions. At DediRock, we specialize in providing dedicated servers, VPS hosting, and cloud services tailored to meet the unique needs of businesses and individuals alike. Our mission is to deliver reliable, scalable, and secure hosting solutions that empower our clients to achieve their digital goals. With a commitment to exceptional customer support, cutting-edge technology, and robust infrastructure, DediRock stands out as a leader in the hosting industry. Join us and experience the difference that dedicated service and unwavering reliability can make for your online presence. Launch our website.