Apps & Software

Microsoft: Unsupported Windows Devices to Lose Security Updates

Microsoft has issued a warning that devices running unsupported versions of Windows will lose access to Windows Update services and stop receiving security updates following next year's certificate rotation.

Radwan AbdulhadiEditor and technology writer

Published: October 9, 2026 · Updated: October 9, 2026 · 3 min read

Microsoft: Unsupported Windows Devices to Lose Security Updates — Image: BleepingComputer

Certificate Rotation and Upcoming Restrictions

Microsoft announced that devices running unsupported versions of Windows will stop receiving security updates following next year's Windows Update certificate rotation. To ensure that systems continue to receive vital updates, administrators and regular users must upgrade to a supported version of Windows before the underlying security certificates expire in May and June of 2027.

According to official details shared by Microsoft said, these certificates feature standard expiration dates as part of standard security practices. This means they must eventually be rotated and replaced by new certificates. A specific set of these certificates is scheduled to expire on May 17, 2027, and June 19, 2027.

The company cautioned that any devices remaining on unsupported software versions will lose access to Windows Update services entirely and will not receive any updates as a direct result. Consequently, users are strongly advised to transition their environments safely.

Required Actions by Windows Version

To navigate the transition smoothly, Microsoft outlined comprehensive guidance detailing the required actions for different operating system editions. For systems running Windows 11, version 25H2 and later, no action is required to maintain update compatibility.

Systems running Windows 11, version 24H2 and Windows Server 2025 must have the September 2025 security update or a later release installed before June 19, 2027. Meanwhile, other supported versions of Windows 11, Windows Server 2022, and Windows 10 require the installation of the July 2026 security update or a later version before June 19, 2027.

Environments utilizing Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016 need to deploy the July 2026 security update or later prior to the earlier deadline of May 17, 2027. Users running any other older operating system versions are urged to upgrade to a supported version of Windows client or server to maintain continuous protection.

Guidance for IT Administrators

Microsoft has advised IT administrators to take proactive measures by identifying all enterprise devices running older or unsupported operating system versions well ahead of the 2027 certificate rotation dates. Administrators should routinely deploy monthly Windows updates on all supported machines to ensure they stay up to date.

In addition to regular patching schedules, organizations need to build a comprehensive upgrade plan for any lingering unsupported devices before the May and June 2027 expiration milestones arrive. While the clock is ticking, the company notes that there is still adequate time for enterprise teams to review, update, and plan hardware and software lifecycle upgrades.

Exemptions and Broader Ecosystem Updates

It is worth noting that these impending certificate-related restrictions do not apply to enterprise devices that receive their updates exclusively from Windows Server Update Services (WSUS). WSUS manages updates locally by downloading them and distributing them securely across internal enterprise networks.

Meanwhile, the broader Windows ecosystem continues to evolve. Last month, Microsoft released Windows 11, version 26H2, also referred to as the Windows 11 2026 Update. This new release is currently generally available for eligible Windows 11 24H2 and 25H2 systems, delivered as a small enablement package rather than a full operating system replacement through a phased rollout designed to expand over the coming months.