Microsoft's January 2026 Skype for Business Server Update: No Patches, But Communication Continues

Microsoft has announced that there will be no security updates for any version of Skype for Business Server in January 2026. This announcement, while seemingly straightforward, carries important implications for organizations still running legacy Skype for Business deployments and highlights Microsoft's evolving approach to product lifecycle communication.

The Announcement Details

The January 2026 update follows Microsoft's standard Patch Tuesday cycle, but with a notable absence of security fixes. According to the announcement, this applies to three deployment scenarios:

• Skype for Business Server 2015 - Already out of mainstream support
• Skype for Business Server 2019 - Also out of mainstream support
• Skype for Business Server SE (Subscription Edition) - The current supported version

What makes this announcement significant is Microsoft's commitment to maintaining communication even when no updates are released. The company explicitly states: "we will make an explicit update related announcement even if we DO NOT release anything for that particular month."

Extended Security Updates: The Bridge to 2026

For organizations still running Skype for Business 2015 or 2019, Extended Security Updates (ESU) represent a critical lifeline. These paid extensions provide security fixes beyond the standard support lifecycle, but only for customers who have purchased the ESU program.

The ESU program for Skype for Business 2015 and 2019 runs through April 2026, after which all support officially ends. During this ESU period, Microsoft commits to:

1. Monthly security update announcements (even if no updates are needed)
2. Security patches for critical vulnerabilities
3. Technical documentation support

This communication protocol ensures ESU customers receive predictable updates about their security posture, even during months like January 2026 when no patches are required.

Skype for Business SE: The Migration Target

The announcement includes a clear directive: "Please keep upgrading your organizations to Skype for Business SE." This isn't just Microsoft's preference—it's the only path forward for organizations needing continued support.

Skype for Business Server SE represents a fundamental shift in Microsoft's deployment model:

• Subscription-based licensing rather than perpetual licenses
• Regular feature updates alongside security patches
• Cloud-aligned release cadence with faster iteration cycles
• Integration with Microsoft 365 services

For organizations currently on 2015 or 2019 versions, the migration path involves:

1. License acquisition for Skype for Business SE
2. Infrastructure planning - SE can coexist with legacy versions
3. Migration of user data and configuration
4. Decommissioning of legacy servers

Business Impact Analysis

For ESU Customers

The January 2026 announcement provides reassurance that Microsoft maintains visibility on the Skype for Business ecosystem. No critical vulnerabilities requiring immediate patches is positive news, but organizations should interpret this carefully:

• Reduced operational risk from patching activities
• Continued compliance with security requirements
• Time buffer for migration planning

For Non-ESU Customers

Organizations without ESU coverage face immediate risk. Skype for Business 2015 and 2019 are already out of support, meaning any vulnerabilities discovered would remain unpatched. The January 2026 announcement serves as a stark reminder of the security exposure these deployments represent.

Migration Considerations

Technical Complexity: Migrating from Skype for Business 2015/2019 to SE requires careful planning:

• Server topology: SE supports in-place upgrades for some scenarios, but greenfield deployments are often recommended
• Database migration: User data, configuration, and meeting content require migration planning
• Client compatibility: Ensure desktop and mobile clients support SE features
• Integration points: Check compatibility with gateways, SBCs, and third-party applications

Cost Implications:

• ESU costs: Continuing ESU through April 2026 adds recurring licensing expense
• Migration costs: Infrastructure, labor, and potential downtime
• SE subscription: Ongoing operational expense vs. capital expenditure model

Timeline Pressure: With ESU ending in April 2026, organizations have approximately 15 months from the January 2026 announcement to complete migrations. This timeline is tight for complex enterprise environments.

Strategic Recommendations

Immediate Actions (January 2026)

1. Verify ESU coverage: Confirm your organization has purchased ESU for 2015/2019 deployments
2. Assess vulnerability posture: Even without patches, conduct security assessments of existing deployments
3. Review migration progress: If already migrating to SE, ensure timeline remains on track

Planning Considerations

Alternative Communication Platforms: Some organizations view the Skype for Business lifecycle as an opportunity to evaluate alternatives:

• Microsoft Teams: Microsoft's strategic direction for unified communications
• Hybrid deployments: Combining on-premises Skype for Business with cloud services
• Competitive platforms: Zoom, Cisco Webex, or other UC solutions

Risk Mitigation:

• Implement additional security controls around legacy Skype for Business infrastructure
• Monitor for vulnerability disclosures even without official patches
• Develop rollback plans if migration issues arise

The Broader Context

This announcement reflects Microsoft's broader strategy of clear communication during product sunsetting. By committing to monthly announcements regardless of update content, Microsoft provides:

• Predictability for IT administrators planning maintenance windows
• Transparency about product security status
• Accountability for ESU program delivery

For the Skype for Business ecosystem, January 2026 represents a relatively quiet month in what will be an increasingly active transition period leading to the April 2026 ESU deadline. Organizations should use this stability to accelerate migration planning rather than becoming complacent.

The absence of patches doesn't mean absence of risk, and the clear message from Microsoft remains: the clock is ticking on Skype for Business 2015 and 2019, and Skype for Business SE—or alternative platforms—represent the only sustainable path forward.

Additional Resources

For organizations planning their migration strategy, Microsoft provides extensive documentation:

• Skype for Business Server SE documentation
• Upgrade from Skype for Business Server 2015/2019 to SE
• Extended Security Updates program details

The Skype for Business Team continues to provide updates through their official blog, which organizations should monitor for future announcements as the ESU end date approaches.