Podcast Summary: Microsoft's Extended Security Updates: What You Need to Know
Podcast: The Directions on Microsoft Briefing Podcast
Date: October 29, 2025
Host: Mary Jo Foley
Guests: Jim Gaynor (Editorial Lead) & Rob Helm (Managing Vice President), Directions on Microsoft
Episode Overview
This episode dives deep into Microsoft’s Extended Security Updates (ESUs), a critical option for enterprises still running legacy products like Windows 10, Exchange Server, and Skype for Business Server following their end-of-support dates in October 2025. Host Mary Jo Foley interviews Directions on Microsoft analysts Jim Gaynor and Rob Helm to unpack what ESUs are, their strategic implications, costs, and practical guidance for decision-making as organizations grapple with complex migration timelines amidst Microsoft’s evolving technology and support landscape.
Key Discussion Points & Insights
1. What Are ESUs and Who Needs Them? [02:31–03:49]
- Definition:
- Jim Gaynor: "If you've been kicking the can down the road and you suddenly find yourself facing end of support on things that you don't have time to replace... This is a way to buy literally a little more time. It's just like insurance." [02:46]
- Rob Helm: "An ESU is a subscription to security updates, period. It's fixes for security holes in the software versions you're running. You used to get them free, now you'll be paying for them and that's it." [03:17]
- Scope:
- ESUs do not provide feature updates, compatibility, or broad technical support—just security updates to keep unsupported software secure as you transition.
2. Strategic Value & Pitfalls of Relying on ESUs [03:49–06:41]
- Signal of Deeper IT Issues:
- Rob Helm: "If you find your ESU bill growing every year, you have a bigger problem. You may be chronically underfunding migration projects or your architects may be setting out unrealistic product roadmaps." [04:19]
- ‘Necessary Evil’ or Sound Strategy?
- Jim Gaynor: "It's not like the organizations didn’t know these dates were coming. But there's always some new priority, some fire burning hotter... If you need them too often, then you really need to sit down and look at lifecycle planning." [05:23]
- Regulated Industries:
- ESUs may be mandatory for compliance, as some regulated sectors require all systems to remain under support. [06:26]
3. Limitations: What ESUs Don’t Cover [07:00–08:56]
- No Guarantee of Compatibility:
- "Just because you've got support for ESUs... It means you're just getting those really focused security updates. You're not getting compatibility updates, you're not getting featured updates." — Jim Gaynor [07:00]
- Third-party vendors or hardware drivers may stop supporting old versions, even if ESUs are in place.
- Example:
- Rob Helm: "If you've got Windows 10 with ESU, suddenly you have exactly one office suite that Microsoft will support on that... Microsoft 365 Apps for Enterprise." [08:21]
4. Microsoft’s Recommended Paths & Negotiation Leverage [08:56–12:01]
- Push to Cloud & Subscription Licensing:
- Rob Helm: "It's all about migrating to the cloud and adopting subscription licensing. That's where Microsoft's business and sales incentives are." [09:26]
- Jim Gaynor: "If you're in negotiation, you want to use the possibility of moving from your on prem software to a Microsoft hosted online service because that's more likely to get you something." [09:43]
- Negotiation Tactics:
- Use migration to cloud services as leverage for discounts or additional services—especially where Microsoft’s current sales goals (e.g., AI, Copilot) are concerned.
- Cloud Caveats:
- Moving to the cloud does not exempt organizations from end-of-service timelines, and there are no ESU equivalents for cloud services. When services are retired, access is lost entirely. [10:40]
- Loss of control over feature updates in cloud: "These new features come out and you can't not take them." — Jim Gaynor [12:01]
5. Alternatives: Free ESUs via Cloud Services [13:42–16:37]
- “Free” ESUs with Virtual Desktop Services:
- Rob Helm: "Cloud Virtual desktop services...offer free ESUs and it can really affect your costs if you want to run Windows 10 on them...but the bigger and more complex your PC fleet, the less ESU discounts are going to matter." [13:42]
- Jim Gaynor: "It's not that you're getting it for free. I say you're getting it at no additional cost, because you're already paying. That really shouldn't be your sole motivator." [15:15]
- Enterprise Complexities:
- Migrations often require refactoring systems—‘lift and shift’ may not reduce overall effort/cost.
6. Realities of Cloud Migration & Long-term Considerations [16:37–20:25]
- Cloud Isn’t Automatically Cheaper or Easier:
- Sudden migrations (e.g., COVID-era shifts) sometimes lead to higher-than-expected ongoing costs.
- For optimized use and cost savings, systems often need re-architecting for cloud environments. [17:14]
- "If you want to optimize your cost, you've got to spend that effort. Just saying I can move here and get free ESUs doesn't solve all your problems." — Jim Gaynor [18:47]
- Not Everyone Can Move to Cloud:
- Some organizations—due to regulatory or security concerns—must stay on-premises and thus may need ESUs regardless of cost. [19:45]
- Rob Helm: "There is still a small group of...organizations that just can't move to Microsoft cloud no matter how cheap it is...compliance and security in the end trump any cost considerations." [19:45]
Notable Quotes & Memorable Moments
-
On ESUs as ‘Insurance’:
- Jim Gaynor: “It's just like insurance. You might not even need it, and some things might not even be covered, but Microsoft's still going to make sure that you pay the full term for what you need.” [02:46]
-
On Migration Budget Reality:
- Rob Helm: "If you find your ESU bill growing every year, you have a bigger problem." [04:19]
-
On Cloud Migration Pitfalls:
- Rob Helm: "In the worst case, you could end up like Project Online customers...They all just learned they have less than 12 months to get off that service before it shuts down." [10:40]
-
On “Free” ESUs:
- Jim Gaynor: "I don't say you're getting it for free, I say you're getting it at no additional cost because you're already paying." [15:15]
-
On Cloud’s Cost Surprises:
- Jim Gaynor: "We moved everything to the cloud and now suddenly our bill is n number of times higher." [17:14]
Timestamps for Important Segments
- Definition and scope of ESUs: [02:31–03:49]
- Are ESUs a ‘necessary evil’ or a sign of poor planning?: [03:49–06:41]
- What ESUs don’t cover (limitations and examples): [07:00–08:56]
- Negotiating with Microsoft and leveraging future plans: [08:56–12:01]
- Cloud migration, ‘free’ ESUs via Azure and Windows 365: [13:42–16:37]
- Why cloud isn’t a simple solution; compliance realities: [16:37–20:25]
Closing Advice
- ESUs are a short-term bridge, not a long-term solution.
- Over-reliance signals the need for better IT planning and governance.
- Weigh true total costs—including migration/re-engineering—when considering cloud paths or hybrid solutions.
- Consider compliance, security, and strategic negotiation in contract renewals with Microsoft.
For further resources, check out Directions on Microsoft or consult their advisory team for negotiation support.
