The date is fixed
Windows Server 2016 extended support ends on 12 January 2027. After that date there are no security updates without a paid extended security update arrangement.
Source: Microsoft Lifecycle Policy

After 12 January 2027 Microsoft stops releasing security fixes for Windows Server 2016. Every server still on it becomes a growing risk, and a finding in any audit or inspection. The options are clear; the time to choose is now.
Every server and the applications on it listed, with versions and owners.
Each application checked with its vendor for support on newer Windows Server or in the cloud.
Upgrade in place, rebuild on new hardware, move to Azure, replace with SaaS or buy extended security updates for a short bridge.
A phased plan with test, cutover and rollback steps for each server.
Costs for hardware, licences and project work, timed into the IT budget.
Servers and applications listed.
An option chosen for each server.
Servers moved in planned waves.
Old servers decommissioned and data disposed of securely.
Windows Server 2016 extended support ends on 12 January 2027. After that date there are no security updates without a paid extended security update arrangement.
Source: Microsoft Lifecycle Policy
Windows 10, Exchange Server 2016 and Exchange Server 2019 left support on 14 October 2025.
Source: Microsoft Lifecycle Policy
It will keep working, but without security fixes. Each new vulnerability stays open, and auditors, regulators and insurers will treat it as a risk.
Often, yes, either in place or by building a new server and migrating. Application support decides which is safer.
Sometimes. End of support is a good moment to compare a cloud or SaaS option against new hardware.
Tell us what you're working on. We'll listen, ask the right questions and recommend a practical next step. No obligation.