Sunday, 25 October 2026

Defender for Identity clarifies Windows Server 2016 sensor behavior after extended support ends

The four updates tightened lifecycle, deployment, and navigation guidance. Defender for Identity documentation says sensors continue reporting and receiving updates after Windows Server 2016 extended support ends, although some functionality may be affected. Defender for Containers guidance states that its sensor does not support GKE Autopilot clusters. Identity health guidance also flags Windows Server 2016 as approaching extended end of support while Windows Server 2012 and 2012 R2 remain unsupported.

• Identity · Identity protection

  Server 2016 sensor lifecycle guidance

  The prerequisites page says sensors continue reporting to Defender for Identity and receiving updates after Windows Server 2016 extended support ends, although some functionality may be affected.

• Defender for Cloud · Architecture and deployment

  GKE Autopilot sensor support limitation

  Defender for Containers deployment guidance now states that the sensor does not support GKE Autopilot clusters.

• Identity · Identity protection

  Health guidance distinguishes approaching and unsupported Windows versions

  The health-alert guidance identifies Windows Server 2016 as approaching extended end of support and links to Legacy operating systems guidance; Windows Server 2012 and 2012 R2 remain identified as unsupported.

• Defender for Cloud · Cloud and workloads

  Updated path for cloud cost reporting

  The portal comparison now lists the Defender portal location for cloud security cost reporting as Setup & configuration > Costs & usage.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.