Nice2GeekYou

Deadline Day: Microsoft Just Stopped Patching Office 2021 and Windows 11 24H2

As of today, Office 2021, Windows 11 Home/Pro 24H2, and the last paid ESU year for Windows Server 2012 no longer get security updates. Here's what to check on every PC this week.

  • microsoft
  • end-of-support
  • windows-11
  • office-2021
  • patching
  • msp
  • smb
  • texas-it
  • managed-it

Today — October 13, 2026 — is the day. Microsoft’s lifecycle calendar cuts security updates for several products that still sit on a lot of small-business desks:

  • Office 2021 and Office LTSC 2021 (Word, Excel, Outlook, PowerPoint, and the rest of the suite)
  • Windows 11 Home and Pro, version 24H2 (end of servicing for that feature update)
  • Windows Server 2012 / 2012 R2 — the final year of paid Extended Security Updates

The apps and PCs will still boot and open. What stops is the quiet stream of fixes that close holes attackers hunt for. Unpatched Office macros, Outlook flaws, and OS bugs do not wait for a convenient upgrade window.

We flagged this last week. If you have not finished the inventory yet, treat this week as catch-up — not optional.

Why this matters for small businesses

Attackers do not care that your bookkeeper “still likes the ribbon layout.” Once a product falls off Microsoft’s security-update list, new CVEs stay open forever on that build. Phishing kits and exploit packs add those CVEs within days. Clinics, law offices, contractors, and finance shops that run perpetual Office on older Windows feature updates are the easy targets.

Practical next steps (this week)

  1. Inventory Office versions. On each PC, open Word → Account (or File → Account) and note whether you see Microsoft 365, Office 2024, or Office 2021. Anything on 2021 needs a path to Microsoft 365 Apps or Office 2024.
  2. Check Windows feature update. Settings → System → About (or winver). If you are still on 24H2 for Home/Pro, plan the move to a supported release (25H2 or newer) before the next Patch Tuesday pile-on.
  3. Find leftover Server 2012. Domain controllers, file servers, and backup hosts on 2012/2012 R2 are past the last ESU year. Migrate or isolate them — do not leave them internet-reachable.
  4. Turn on MFA everywhere that still has a login. End-of-support machines are easier to compromise; MFA on email, VPN, and admin accounts limits how far a stolen password goes.
  5. Back up before you upgrade. Image or cloud-backup critical PCs, then upgrade Office and Windows on a pilot machine first.

For South Texas teams on-site: walk the office with a clipboard (or phone notes), photograph the Office Account screen and winver on every shared PC, and text the list to whoever owns IT. For remote-managed clients nationwide: ask your MSP for a written list of devices still on Office 2021, Windows 11 24H2, or Server 2012 — and a dated upgrade plan.

Nice2GeekYou is based in San Antonio, serving all of Texas, and our managed IT plans help remote clients across the U.S. with patch tracking, Microsoft 365 rollouts, MFA, and monitoring. Request a quote or see our monthly plans.

Sources: Microsoft Support — End of support for Office 2021; Microsoft Learn — Ending Support in 2026; Windows 11 Home and Pro lifecycle.