Cloudhouse Founder’s Perspective on Microsoft Extended Security Updates

Back To Resources

Founder and CEO Mat Clothier shares his take on ESUs and says enterprises need to act sooner rather than later

Companies running Microsoft operating systems that have reached end of life or are approaching end of life should be prepared to pay substantial costs. 

Windows Server 2008 reached end of life in January 2020 and the costs for Extended Security Updates (ESUs) are going up 75% year on year. Windows Server 2012 will reach end of life in October 2023 and ESUs for this operating system will go up 75% in year one, 100% in year two and 125% in year three. If you’re still using ESUs for this system in 2026, you will have paid four times the cost of the operating system. 

A huge number of enterprises still run on legacy systems. It’s not that they are resistant to change, it’s because it is too complex. This places these enterprises in a Catch 22 situation. They are dicing with increasing security risks through leaving their systems unpatched with known security issues. It’s the equivalent of leaving your back door open and wondering why you’ve been burgled. But the complexity of updating to a modern operating system is preventing them from mitigating those threats. 

While the rising ESU costs can be a bitter pill to swallow, pushing up those costs is understandable from Microsoft’s perspective. It’s not that they want to capitalise on enterprises using outdated systems – the rising costs are supposed to encourage enterprises to update to current systems. There is only so long Microsoft can continue supporting aging software. Its support teams need to be moved on to supporting new software. What’s more, customers still using legacy systems aren’t benefiting from the latest innovations Microsoft has painstakingly developed for its new systems.

ESUs for outdated systems do come with an expiry date. Another option Microsoft has put on the table is offering ESUs on the condition that the customer agrees to migrate to its Azure cloud platform. However, by their nature, many of these legacy systems are not always compatible with the cloud environment. 

Are ESUs worth it?

A common misconception is that ESUs includes support, but this is not the case. Microsoft will issue updates to fix security issues but they aren’t providing support, so if and when something goes wrong, customers paying for the ESU are on their own. They effectively end up paying substantial amounts of money for nothing more than the security updates. 

Another problem with ESUs is that security updates are often issued after a vulnerability has been discovered, by which point the customer may have already become compromised through the vulnerability. Ultimately, this makes paying for ESUs an expensive way to kick the can down the road.

What other options are there?

At Cloudhouse we have over a decade’s worth of experience helping enterprises get around end of life issues and end their reliance on ESUs. We offer two services that remove end of life headaches entirely. 

Our application compatibility packaging service called Alchemy effectively transplants applications from outdated platforms and places them into the latest Microsoft and Citrix platforms. Alchemy abstracts applications from the underlying platform instead of providing packaging as a means of application-to-application isolation or deployment like application virtualisation or layering solutions. Alchemy then isolates each application’s run time and optimises them for 64-bit desktop, server operating systems, Microsoft Office plug-ins and Internet Explorer 11.

Cloudhouse Guardian is a service designed to identify what enterprises have in their IT estates that is non-compliant or out of date and helps them achieve compliance through best practice configuration. We have implemented Cloudhouse Guardian for over 50 major global enterprises including NYSE, NASA and Rackspace.

The universal feedback we get is ‘I wish we knew about Cloudhouse sooner’. If you’re reading this blog, the chances are you’re already aware of us and how our services work. Our solutions are ready and waiting to end costly reliance on ESUs and get your enterprise critical applications running on safe, up to date operating systems.  To find out more about our easy-to-implement solution to removing compatibility issues, and explore our money back guarantee offering, read this whitepaper:

About Mat Clothier

Avatar photoCEO & Founder
Mat has more than 20 years’ industry experience, founding multiple organisations focusing on provisioning enterprise IT solutions. He is an expert in enterprise IT technology, virtualisation and distributed management of applications, and devotes his time to developing solutions that simplify user-access to modern enterprise IT applications. He started his first business while at university, providing CIO services to SMEs in the South West of England. Mat is a motoring enthusiast and enjoys experimenting with new technologies. He graduated from the University of Plymouth with a BSc Hons in Computer Systems and Networks.

Load More


How much does Cloudhouse cost? Down Arrow

Cloudhouse costs are split into two elements – the licensing required to deploy application compatibility packages, and the professional services needed to create the application compatibility packages.

Licensing is offered on a per user basis for desktop applications and a per server basis for server applications. There are discounts available based on volumes.

Professional Services costs are dependent on the nature and complexity of the application. We quote a cost for packaging once we have been able to see the application, or portfolio of applications.

Contact us here with your requirements and we will provide you with a quote.

Packaging and Maintaining Applications
Who is responsible for packaging desktop and server applications? Down Arrow

Cloudhouse provide the Professional Services to package applications.

Requirements for Test and Development Down Arrow

Cloudhouse recommend packaged applications are tested in the standard UAT environments used for natively installed applications, or applications packaged in App-V. The more representative the test environment is of the live environment, the greater the chance of finding any issues prior to go-live.

Updating Applications Down Arrow

Service packs and updates can be applied to the applications in a package using the Editor, refer to Updating, Editing and Maintaining Containers which describes how a new snapshot is created for the update, and how it is then applied to the package.

Who manages Cloudhouse operationally within an account? Down Arrow

Cloudhouse recommends the same team who manage the operations of native apps.

Automation and Deployment Down Arrow

Applications running in Application Compatibility Packages can be deployed, and managed with same tools, or scripts used to deploy natively installed applications e.g. SCCM, InTune, LAN Desk. Please refer to Supported 3rd Party Products and Versions for details.

How do we know which of our departments/ teams should support the Package? Down Arrow

The Cloudhouse Package does not include OS components, it only contains the packaged application plus Cloudhouse components. Cloudhouse recommend the same team that is responsible for supporting applications packaged with App-V, or delivered as natively installed applications, support Cloudhouse Application Compatibility Containers.

Documentation for Service Desk & Service Management Down Arrow

Full documentation is made available to Cloudhouse partners and customers as required.

Do Cloudhouse provide training? Down Arrow

Cloudhouse offers a full packaging service that can scale to meet any requirement. In the event, however, that a partner wishes to offer application compatibility packaging as part of a wider solution, Cloudhouse will work with that partner. Please contact us here for details.