End-of-life as a wake-up call: Why the end of Windows Server 2016 is an opportunity 

For years, Windows Server 2016 has been the reliable backbone of countless Swiss businesses. However, official support ends on 12 January 2027. What at first glance looks like a tedious IT chore turns out, on closer inspection, to be the greatest opportunity of the last decade: the perfect moment not just to patch up your infrastructure, but to make it radically future-proof.

Do you remember 2016? In the world of technology, it now feels like a different era. Back then, the iPhone 7 was the benchmark, and for many Swiss companies the cloud was still a vague promise of the future, whilst tried-and-tested systems were doing their job reliably in the server room. It was in this environment that Windows Server 2016 was launched – stable, predictable, unspectacular. That is precisely why it continues to run virtually unnoticed in countless companies to this day.

But every technology has an expiry date. On 12 January 2027, extended support for Windows Server 2016 will finally come to an end. From that point onwards, there will be no more security updates, no manufacturer support and no fixes for newly discovered vulnerabilities. The server won’t shut down – it will simply keep running. And that is precisely where the risk lies.

THE STRATEGIC TIPPING POINT: WHEN RELIABILITY BECOMES A THREAT 

End-of-Life (EOL) is not a technical fault, but a strategic tipping point. A reliable foundation gradually becomes an unpredictable source of uncertainty. Systems without security updates are predictable for attackers, and what is predictable will sooner or later be exploited. At MTF, we do not view this milestone as a burdensome migration requirement. We view this deadline as a unique opportunity to fundamentally re-evaluate your IT strategy. The real question is not: “How do we replace the old server?”, but: “What should the IT look like that will drive your business over the next ten years?”

The dead end of 1:1 modernisation 

The obvious reaction to an impending EOL is often the desire for a quick 1:1 replacement. You install the new operating system but leave the architecture completely unchanged, so that operations appear to continue seamlessly. 
 
Although we generally recommend a clean fresh installation rather than a risky ‘in-place upgrade’ from a technical standpoint, the fundamental problem remains the same with both approaches if the underlying concept is outdated: it is the path of least resistance. You simply swap the version number, but retain structures from a time when cyber threats were less complex and mobile working was the absolute exception. 
 
Anyone who simply updates the software today without reviewing the underlying concept is cementing the status quo. Whilst this buys you a few more years of support, you miss the opportunity to realise genuine efficiency gains. An old concept remains an old concept, even if it runs on a new server. We like to call this the ‘digital hamster wheel’: you invest a lot of time and money only to remain technically in exactly the same place.

AN HONEST LOOK AT YOUR OWN IT LANDSCAPE 

The end of support for Windows Server 2016 is the perfect opportunity to take a hard look at the current state of affairs. Many infrastructures today contain ‘ghost VMs’ – virtual machines whose original purpose has long since been forgotten. They run applications that could actually be replaced by modern SaaS (Software as a Service) solutions, and they tie up resources that are needed more urgently elsewhere.

Only once it is clear which workloads deliver real value and which merely tie up resources can meaningful decisions be made.

  • How many Server 2016 installations do we have?
  • Which applications are running on them?
  • Which of these are business-critical?
  • Are there ‘ghost VMs’ with no clear purpose?
  • Which workloads could be replaced by SaaS?
  • Where are we generating data dead weight?
  • And where is the old infrastructure preventing us from becoming more agile?

Not every application necessarily belongs in the cloud – but almost every application benefits if its location is chosen strategically rather than based on historical reasons.

FOUR PATHS TO MODERNITY – AND WHICH ONE IS RIGHT FOR YOU? 

Instead of viewing EOL as a tedious migration task, it is worth adopting a different perspective. The real question is not: How do we replace Windows Server 2016? But rather: What should our IT look like in five or ten years’ time? As your strategic partner, we’ll guide you in choosing the right path. There’s no ‘right’ or ‘wrong’ here, only what ‘fits your goals’.

  • Modernised on-premises: stability with a clear focus
    For some companies, a local environment remains the sensible choice – for instance, where there are extreme latency requirements in production or specific hardware interfaces. If we go down this route, we do it properly: with the latest Windows Server 2025 and a modern security architecture tailored precisely to your local needs and system requirements. This path makes sense if your infrastructure is fundamentally stable and no major structural changes are planned. The costs are predictable, and you retain full physical control. However, it also represents a conscious decision to retain responsibility for hardware and maintenance in-house for years to come.
     

  • The private cloud: data sovereignty “Made in Switzerland”
    This is where the heart of MTF’s DNA lies. Many SMEs want the benefits of the cloud – scalability, no hardware worries, high availability – but without knowing that their sensitive data is in the anonymous data centres of global hyperscalers. Our Private Cloud offers this “worry-free” approach: your data is physically located in Switzerland, protected by Swiss law and managed by experts who know your environment. Migration can take place in stages, and modern approaches such as SD-WAN enable secure site-to-site networking. This is the strategic shift away from high hardware investments (CapEx) towards predictable operating costs (OpEx).
     

  • The hybrid model: Bridging the gap
    Thanks to our close collaboration with the Microsoft specialists at itnetX, we have a perfect grasp of the hybrid landscape. Why not make the most of both worlds? Critical databases remain in the private cloud or on-premises, whilst collaborative tools such as Microsoft 365 run on Azure. This approach is ideal for growing businesses that require maximum scalability but do not wish to compromise on sensitive data. The challenge lies in the careful planning of identity and access systems – but once set up, this model offers the greatest strategic freedom.
     

  • The evolution: containerisation
    For companies that develop their own software or operate state-of-the-art application landscapes, the end of Server 2016 marks the start of the move away from traditional virtual machines. Technologies such as Kubernetes allow for a level of independence from infrastructure that was previously unthinkable. This is the most radical path and requires the highest initial investment as well as the relevant expertise within the team. Yet for the right workloads, it is the ‘ideal solution’ for agility and speed. You are consistently moving away from traditional server models and gaining an IT infrastructure that is as dynamic as your business.

The common foundation: sovereignty as a decision

As different as these four paths may be, they have one thing in common: they are conscious, proactive decisions. It is not about reacting frantically to an expiry date, but about regaining control over security, scalability and your own digital freedom. In times of the revised Swiss Data Protection Act (nDSG) and geopolitical uncertainty, the choice of infrastructure becomes a strategic competitive advantage. Whether a modernised on-premises system or the MTF Private Cloud: it is a promise to your customers and partners that their data remains protected not only technically but also legally in accordance with the highest Swiss standards. True independence begins where you retain full control.

THE TIMETABLE: ACTING RATHER THAN REACTING 

On paper, January 2027 still seems a long way off. But in the reality of IT projects, this date is surprisingly close. An infrastructure migration is not a project that can be completed ‘between Christmas and New Year’. By the EOL date at the latest, Windows Server 2016 will be classified as a critical vulnerability in every audit. Cyber insurance providers and the nDSG are also increasingly viewing outdated systems as a liability risk for management. Anyone who knowingly relies on outdated systems is acting negligently in the event of an incident.

Of course, Microsoft offers Extended Security Updates (ESU). These can buy time in the short term, but they are not a sustainable solution. They delay decisions without enabling genuine modernisation – and become more expensive with every passing year. ESU is an expensive plaster for a wound that really needs stitching. The costs double every year, and you are merely buying time, not innovation. At MTF, we regard ESU only as a last resort for hardship cases, not as a strategy.

MTF: YOUR PARTNER FOR MODERN IT INFRASTRUCTURES 

The end of Windows Server 2016 is not an emergency, but a wake-up call. It reminds us that stability in IT does not come from standing still, but from continuous adaptation. Companies that ignore this countdown will eventually find themselves at the mercy of circumstances. Companies that make conscious use of it gain valuable room for manoeuvre.

The server room doesn’t have to disappear, but it should be part of a clear vision. At MTF, we support you in developing and implementing this vision – vendor-neutral, technically sound and backed by the experience of hundreds of successful migrations.

Are you ready for the next step? Don’t wait until the deadline dictates your options. Let’s take a look at your current IT landscape together. Our infrastructure check provides you with an honest assessment and shows you how to turn the 2027 EOL deadline into a real competitive advantage.

FAQs 

  1. What exactly happens on January 12, 2027?
    From this date, Microsoft will permanently end extended support for Windows Server 2016. This means: no more security updates, no more bug fixes, no more technical support. The server will continue to function, but newly discovered security vulnerabilities will remain unpatched. From this point on, the system will be considered a critical vulnerability in audits.
     
  2. Is a simple upgrade to a newer version enough?
    An upgrade restores support, but it doesn't resolve outdated architectures. Those who only replace the software remain stuck in the digital hamster wheel – You invest a lot without achieving any real efficiency gains.
     
  3. Why is continuing to use software after the EOL date dangerous?
    Without security patches, your servers become an easy target for ransomware and hackers. Furthermore, with outdated systems, you violate compliance regulations (such as the Swiss Federal Data Protection Act) and risk losing your cyber insurance coverage, as operating outdated software is often considered grossly negligent.
     
  4. Are Extended Security Updates (ESU) a viable solution? 
    Yes, so-called "Extended Security Updates" (ESU) exist. However, these are very expensive, and the fees typically double every year. At MTF, we view ESU only as a short-term emergency solution to buy time for migration, not as a long-term IT strategy.
     
  5. Do I necessarily have to move to the cloud for a migration?
    No. While the cloud offers many advantages (scalability, OpEx instead of CapEx), modernizing on-premises with Windows Server 2025 can still be worthwhile – especially with specific hardware requirements or extreme latency needs. We provide vendor-neutral advice to help you choose the right path.
     
  6. Private Cloud or Public Cloud – which is better for SMEs?
    There is no "better," only "fits your needs." Private cloud in Swiss data centers is suitable when data sovereignty, compliance requirements, or control are important. Public cloud (Azure, AWS) offers maximum scalability and global reach. Many SMEs benefit most from a hybrid approach: business-critical data in the private cloud, flexible workloads in the public cloud. MTF provides vendor-neutral advice and presents all options.
     
  7. How do I find out which path is right for my company?
    The first step is a structured inventory of existing systems and requirements. Based on this, options can be evaluated and a sustainable target architecture defined.

Do you have Questions ?

Tobias Menzi
Geschäftsleiter Region Liechtenstein, St. Gallen & Chur