SAM Strategy Thoughts

Microsoft ESU – what’s the deal?

Following the end of support for SQL Server 2008/2008 R2 on July 9, 2019, Windows Server 2008/2008 R2 also reached the end of support on January 14, 2020. What does this mean and what are the alternatives?

Microsoft’s support policy states that products have a 10-year lifecycle during which they will provide support. These 10 years are actually cut into two periods – 5 years of mainstream support followed by 5 years of extended support. At the end of extended support, there is no more support available from Microsoft (except in very exceptional circumstances) which immediately introduces security risks if you are still running these versions. Specifically, these servers are no longer receiving security patches and any newly discovered flaw is an attack vector for trojans, ransomware etc. to potentially infiltrate your enterprise.

What are the options and is it already too late?

The first recommendation is to make sure your plans align with Microsoft’s support lifecycle, so you are only running software that is supported by the vendor. Microsoft strongly encourage organisations to ensure they are running at least Windows Server 2012, which is supported until 2022, but moving to Windows Server 2016 (supported until 2026) and Windows Server 2019 (supported until 2029) will give you a longer period before this situation occurs again. While it may seem that this is obvious, often we see organisations where around 25% of their server estate are legacy machines running Windows Server 2008/2008 R2. This can be for a variety of reasons but one of the most common is that a 3rd party application has a dependence on these older operating systems.

What are the (real) options?

If you are still on the impacted versions and you want to get protected ASAP, there is only one real option – Microsoft Extended Support Updates (ESUs). These extend the support deadline to 2023 but give only security updates – for Windows Server, it is those updates rated “Important” or “Critical”. There are two ways to access the ESUs:

1) Purchasing ESUs via your licensing agreement
2) Migrate your legacy servers to Azure

Purchase ESUs for on-premises servers

ESUs are available to purchase via the following licensing programs and channels:

  • Enterprise Agreement (EA)
  • Enterprise Agreement Subscription (EAS)
  • Server & Cloud Enrolment (SCE)
  • Enrolment for Education Solutions (EES)
  • Cloud Solution Provider (CSP)

And you need to have Software Assurance (SA) on the existing server licences, the Client Access Licenses (CALs) that connect to those servers, and on any external connector licenses for those servers too. That SA, however, can be on a different agreement.

On-premises customers will receive additional ESU keys via the well-loved Volume Licensing Service Centre (VLSC) website but must install certain packages before activating the keys. It is to be noted that KMS activation is not possible.

For CSP customers, the relevant Server Subscription licenses allow ESUs to be purchased.

How much does it cost?

Extended Support Updates for Windows Server (and SQL Server) cost approximately 75% of the on-premises license cost PER YEAR – taking Microsoft Extended Support Updates is by no means the cheap option! If you cover a server with ESUs for the full 3 years, you will pay 2.25 x the price of a full license – you could most likely have bought Windows Server 2019 w/SA for that price.

Migrating to Azure

If you need/want to remain on the older releases, another option is migrating the on-premises servers into Microsoft Azure, as cloud servers running Windows (or SQL) Server 2008/R2 receive ESUs at no additional cost. On the face of it, that makes the equation:

On-premises = 2.25 x cost


Azure = Free

But, of course, it isn’t really that straight forward! Once you get the server into Azure, you need to pay for the virtual machine, storage, networking etc. but even before that, the journey to the cloud is costly too.

The time needed to test compatibility, convert, and then migrate the physical server into the cloud is rarely a quick process and will incur plenty of “soft” costs through internal time and resources. Equally, if this move to the cloud is quicker than your organisation originally planned, you may find higher costs in on-going maintenance and management of the Azure based servers too.

Hybrid Use Benefit

Those of you with Software Assurance (or Server Subscriptions), you can take advantage of the Azure Hybrid Use Benefit to reduce the cost of your Windows Server virtual machines running in Azure.

For every 16 core licenses you have with active SA, you can run up to 2 VMs with up to 16 cores. Interestingly, the Microsoft guidance such as licensing datasheets, Microsoft Docs etc. says that each VM can have “up to 8 cores” however this isn’t reflected in the Microsoft Product Terms which instead states “16 Virtual Cores allocated across two or fewer Azure Base Instances”.

Windows Server Standard licenses can be used on-premises OR in Azure, while Windows Server Datacenter licenses can be used on-premises AND in Azure simultaneously – on shared servers. For Windows Server Standard, there is a 180-day migration period where you can run the licenses on-premises and in the cloud at the same time, to facilitate the migration process.

Hybrid Use Rights are also available for SQL Server, although the rules are slightly different. You can use them to reduce costs on SQL in Azure in both IaaS and PaaS scenarios, but there is no concept of simultaneous use between on-premises and Azure – save for the same 180 dual-use rights to allow migration to the cloud.


As already stated, if you’re looking at the Microsoft Extended Support Updates now, they’re probably your only real option – at least for the first year. That said, it can be a good opportunity to review your software refresh policies for the future as similar situations will come around before you know it; it’s only 2 years until Windows Server 2012 leaves extended support.

Get an overall picture of your server estate, match it against Microsoft’s support end dates, and then sit down with the relevant stakeholders to find out why the old versions are still in use and what can be done to make a change – hopefully upgrading the on-premises infrastructure more rapidly and/or creating a smooth, easily repeatable process for moving servers into the cloud.

What about ?

What’s the link between ESU questions and ? Well, as previously explained, licensing rules are complex with Microsoft, and it might be difficult to estimate the forecasted cost of a sub-perimeter we want to apply ESU on. That’s why our platform enables you to estimate that cost, make simulations, possibly draw infrastructure changes to get it at the most optimized cost. is a self-service platform, that meet customers’ self-reliant expectations.

Further Reading

Obtaining ESU updates –

This article was written by Rich Gibbons, ITAM Review, Mathieu Dufetelle,, and Damien It is also published on the ITAM Review website.

Please follow and like us:
Market news SAM Strategy Thoughts

Who is for ?

This is direct question for those who might want to know more about our positioning, and more globally to compare our tool to other tools in the market.

Let’s figure it out, positionning is close to strategy, and what we strongly believe on. So let me provide an answer in 3 sections.

Where do we stand today compared to our competitors & partners ?

The comparison matrix below shows where we stand compared to other SAM Tool providers across 10 key characteristics:

SamBox.ioSAM Tool providers like Snow, Flexera, Aspera, ServiceNow…
1) SW CoverageOnly
Windows Server/System Center,
or SQL Server,
or Oracle Database & Middleware
so far
Very Wide
(almost all SW Vendors)
2) Acquisition of SAM Tool100% Online
Public prices, online payment, immediate provisioning of service
Traditional approach
(meeting with sales, quotes, negotiation, deal, installation)
3) Technical Integration / InstallationNo need
100% SaaS, immediate use
Technical architecture depends on the number of devices to be inventoried, and scope of SW to be addressed
4) Ingestion of Acquisitions & EntitlementsFast
Only needed for the delineated SW scope being analyzed. To be filled in into Excel
Requires functional integration
(via consulting services, or training of users).
To be filled in into the SAM Tool
5) Ingestion and/or setting of licensing rulesNo need
Specific engine for each SW Product family, including all detailed licensing rules & specificities
Requires functional integration
(via consulting services, or training of users).
To be filled in into the SAM Tool
6) Discovery capabilitiesFocused on the SW Product family
Through connectors or dedicated scripts
Very Wide
(almost all SW Vendors)
7) Data QualityData quality directly driven on the delineated SW scope being analyzed
Quality can then easily be improved, directly in the Excel spreadsheet
Data quality indicators for the global SW Scope
Not necessarily easy to know what is wrong for one dedicated SW Compliance snapshot
8) Compliance calculationImmediate & fully automatedDepends on the SAM Tool
Calc can be quite long, and quite complicated to refresh if input data needs to be modified.
9) Optimized Compliance snapshot – best license allocation schemeImmediate & fully automatedDepends on the SAM Tool
Very limited capabilities; requires human being in-depth SAM knowledge to optimize
10) Support on licensing rulesIncluded
Immediate access to licensing expert
On top
via consulting services or profesionnal services

OK, and why such a positioning ? has been released late 2019 whereas SAM Tools like Snow Software, Flexera, Eracent, 1-E, Ivanti … were first introduced 5 to 10 years ago. But Elée, who is the publisher, is also a 9 year old SAM consulting company, pure player, with a very strong record of SAM projects in many customer environments, on many SW Vendors. That is the benefit of hindsight. For the past 5 years, we have worked on many SAM Tool integration projects, and we do have a good overview of key success factors for such projects, associated benefits, but also sometimes the hurdles and all the difficulties which can make such projects quite complex. That is why, before releasing, we have taken a step back and analyze the situation.

Traditional SAM Tools are very powerful because they usually embedd very extended discovery capabilities, they cover the widest scope of Softwares as possible, very large catalogs of SKU, of Software Signatures, and they are very adapted for global SAM steering within a large company (many vendors, many indicators to follow, overall performance of SAM).

The thing is that such SAM Tools are like ERP for licenses, and like for any other ERP Software, when you invest 1$ in the SW, you need to invest 5 to 10$ on integration services to make it work. ROI exist, definitely, but likely more on a 3-5 year cycle than on a 12 to 24 months expected max period. Customers are not always prepared to that, and we have faced a lot of situation where integration services budgets were then too much compressed. Unfortunate consequences are:

  • lack of reliability on license positions (with then still a high level of risk when audits raise),
  • the feeling that the company does not get the value for money…
  • … and the overall legitimacy of the SAM members being challenged into the company (versus outsourced managed services for example). has then been thought to be a tool that does not cover an area of softwares as wide of traditional tools, but that eases as much as possible the SAM cycle on very well delineated perimeters. Key characteristics of are then :

  • Built on verticals, each of them adressing one accurate and delineated scope of softwares (1 vertical for Windows Server/System Center, 1 vertical for SQL Server, 1 vertical for Oracle DB & middlewares, and other verticals to come in 2020),
  • Fast running of a full license position from data collection to optimized balance, in a couple of clicks (less than 10 clicks, 10 min computation time end to end),
  • Highest level of reliability and optimization on the vertical (including a unique easy-going data quality improvement feature),
  • No integration or consulting services needed, no hidden cost, fastest ROI in the market.

With such a differentiating approach, we know that we will never cover the same wideness of SW vendors than traditional SAM Tools, but our moto is to focus on the verticals where value for money are the highest:

  • Software scope that generally represents a large spend on IT budget,
  • Software scope that have complex licensing rules, tricky contracts that are hard to manage and control,
  • Software scope for which financial stakes are high (either to mitigate compliance risks, and/or to optimize and generate savings),
  • Software and services either on premise or delivered by Cloud providers.

Concretely, we believe that you should not need us to calculate your license position on Microsoft Visio or Projects, but for complex Microsoft metrics, Oracle licensing, IBM, SAP, Adobe…. it may be different. We will soon release early 2020 our roadmap for the begining of next year.

Who is for then ? serves both large companies as well as small and medium business. But contexts may be different:

  • For large companies that have already implemented a SAM Tool (with success or not!), can run on top ! We have indeed developed interfacing capabilities which enables to extract the data out of a SAM Tool, process them into, and even re-inject the results into the SAM Tool. Why would companies do that ? Well, main reason is the reliability and optimization seeking, and when we talk about large companies, optimization on SQL or Oracle can definitely be huge amounts of money !!
  • For large companies that have not yet purchased a SAM Tool and do not have an extended budget, is a great opportunity to get started with SAM automation. Cost is much cheaper than other SAM Tool, and it does not imply to think of it as big project.
  • For Small & Medium businesses, we are truly convinced that is the best way to go.
    • First, because SAM may not be as strategic as for large companies (because SW spend is not large enough for them, fortunately),
    • Second, because a pragmatic tactical approach may lead IT managers – with transversal responsabilities from infrastructure to applications – to only consider SAM when risks are the highest, and not for all vendors
    • Third, small and medium businesses are not used to have recourse to consulting or integration services (because IT budget are maybe more constraint than for large companies!), and offers that seamless SAM journey without any additional fees (even questions on licensing rules are included into the support of

Please follow and like us:
SAM Strategy Thoughts

Already +3 000 licensing positions!

That’s it!

I am happy to share that we have just run over +3 000 licensing positions!

So many snapshots since the first use of our compliance engine. Let’s assume that computes in ~5 min what usually require dozens of hours at least if done manually… without even the same level of reliability & optimization in the results (sorry to say that, but we’ve been through this period…)

  • we talk of ~4 500 man.days that have been saved…

What about you? Do you prefer to spend time assigning licenses, computing licensing rules, verifying, revising, starting over, again and again… Or don’t you think it would be preferable that you immediately bring added value in the roll out of optimization action plan… and maybe explain to you DBA that he may have activated some options that cause licensing issues, or validate with your infrastructure manager that he should change the config or their cluster?

Well, beyond the fact that helps you determine reliable and optimized results, basics of SAM return of investment is not to save time to reduce the SAM Workforce, but save time to better use it for actual savings purposes. We will later write a post on ROI and how to establish an efficient SAM Strategy & roadmap.

Please follow and like us: