Exchange 2016 Is Out of Support. Upgrade to Exchange SE or Move to Exchange Online?

Exchange Server 2016 and 2019 left support on October 14, 2025. Microsoft sold a one-time, six-month extended security update window, and that ended on April 14, 2026. If your mail still runs on either version today, it is an unpatched, internet-facing server holding your company's most subpoenaed data. You have two real options: move the mailboxes to Exchange Online, or move to Exchange Server SE. Doing nothing is the third option, and it is how breach stories start.

Where you actually stand

The dates matter because they change your risk math:

• October 14, 2025: Exchange 2016 and 2019 end of support. No more security updates on the normal channel.
• April 14, 2026: the one-time extended security update program ended. There is no second extension. Every vulnerability published since then stays open on your server.

Exchange has been the front door for some of the most damaging attacks of the last five years. Running it unpatched is not a deferred decision. It is a decision, and attackers agree with it.

Option one: move to Exchange Online

For most companies under roughly 500 seats, this is the right call, and often the cheaper one:

• You may already own the licenses. Microsoft 365 Business Premium and E3 include Exchange Online. Many companies paying for those plans are running an on-prem Exchange server out of habit, paying twice for mail.
• Patching stops being your problem. No more security update weekends, certificate renewals, or backup testing for the mail role.
• The route is known. Mailbox moves, coexistence, and cutover are a well-worn path with a tested rollback at every step.

The honest costs: per-user subscription pricing for as long as you operate, and any printers, scanners, or line-of-business apps that relay mail through the server will need their SMTP path rebuilt. Both are knowable before you commit.

Option two: upgrade to Exchange Server SE

Exchange Server SE (Subscription Edition) shipped in July 2025 and is the only supported on-premises Exchange going forward. Three things to understand before choosing it:

• It is subscription licensed. Server and user licenses require active subscription coverage. The era of buying Exchange once and running it for a decade is over.
• It follows the Modern Lifecycle. There is no fixed end-of-support date anymore, which sounds good until you read the fine print: you are required to stay current with updates to stay supported. The patch treadmill is the product.
• There is no in-place upgrade from 2016. In-place upgrade to SE exists from Exchange 2019 only. From 2016, you build new servers and move every mailbox anyway.

That last point is the one most 2016 shops miss: if you are on Exchange 2016, both roads are migration projects. The effort of moving to SE and the effort of moving to Exchange Online are closer than the marketing suggests. The only question is the destination, so choose it on requirements, and that means the decision deserves ten minutes of honesty rather than a default.

Four traps that turn this into a rescue job

• Treating SE as the free option. Subscription licensing plus server hardware plus your time patching, renewing certificates, and testing backups is a real annual number. Put it next to the per-user math before deciding.
• Migrating out from under holds, journaling, or an archive. Litigation holds have to be re-established in Exchange Online before the source retires, or you have broken preservation in the middle of a legal matter. Exchange Online cannot journal to one of its own mailboxes, so an existing journaling requirement needs a new destination. And a third-party archive such as Enterprise Vault leaves stubs in every mailbox that must be rehydrated or migrated with dedicated tooling. Any one of these turns a weekend cutover into a phased project.
• Decommissioning in the wrong order. Mail flow, autodiscover, and directory sync dependencies have to be unwound deliberately. Shutting the old server down before the sequence is verified is how mail silently stops.
• The last server question. If you sync identities from Active Directory, you may need an Exchange management presence even after every mailbox is in the cloud. What to do with that last Exchange server is its own decision, and it is the next article in this series.

The honest decision checklist

Move to Exchange Online if: you are under roughly 500 seats, your Microsoft 365 plan already includes Exchange Online, no regulator dictates where your mail must physically live, and nobody on your team has patching mail servers in their job description.

Stay on premises with Exchange SE only if: a regulator or data residency requirement names where mail must live, you run applications with hard on-premises mail dependencies that cannot be relayed, and you have staff who apply updates monthly without being reminded.

If you read both lists and the first one described you, you have your answer, and it is the one most consultants who sell servers will not lead with.

What the move costs, fixed

An on-premises Exchange to Exchange Online cutover at standard scope (Exchange 2016 or newer, under 1 TB of mail counting archives, no mailbox over 100 GB, no public folders, no holds or third-party archive, a single weekend cutover) is $6,000 fixed, typically two to three weeks end to end. Older versions, larger data, public folders, compliance holds, journaling, or a coexistence period shift it to the Migration & Cutover Plan, $3,500 to $6,000 fixed once scoped, and the assessment fee is credited back when the migration proceeds within 60 days. You can scope your own move in about sixty seconds on the migration page, or request a scoping session and have a fixed price within one business day.