How do we decommission a server safely?

Skip to main content

Last updated: 9 November 2026

The short answer

Plan it, back up and migrate, run old and new in parallel, remove the server from the network, securely erase the data, then dispose of the hardware responsibly. Do not just switch it off. Forgotten dependencies and drives cause outages and breaches. A typical small business server takes two to three weeks.

The six steps

Server decommissioning checklist
Step What to do
1. Inventory and plan Record every role, application, share, scheduled task, dependency and user. Agree milestones and a rollback plan
2. Back up and migrate Take a full, tested backup, then move data and services to their new home. Keep software licence keys and records
3. Run in parallel Where possible, switch users to the new system while the old server stays available but unused for a short period
4. Remove from the network Remove DNS entries, Active Directory objects, firewall rules, monitoring, backup jobs and service accounts
5. Securely erase the data Use certified data-erasure software or physical destruction, following NCSC guidance on secure sanitisation, and keep a certificate for each drive
6. Dispose responsibly Use a licensed recycler that complies with UK WEEE regulations and update your asset register

Why not just switch it off?

Security

Old DNS records, firewall rules, service accounts and backups that point to the server can leave openings.

Data

Shared folders, databases or application data may exist nowhere else.

Stability

Other systems may rely on the server for printing, authentication, licensing or scheduled tasks without anyone realising.

Compliance

UK GDPR requires personal data to be disposed of securely, with evidence that it has been.

When should a server be decommissioned?

Common triggers
Trigger Detail
End of support Windows Server 2012 and 2012 R2 are already out of support. Windows Server 2016 extended support ends on 12 January 2027 and Windows Server 2019 on 9 January 2029. After these dates there are no free security updates
End of hardware warranty Failures become more likely and replacement parts harder to get
Moving to the cloud File shares, email and many applications can move to Microsoft 365, SharePoint or Azure
Consolidation Several older servers replaced by one newer host or virtual machines

Common challenges include undocumented dependencies such as an old app or printer still pointing at the server, large data sets that take time to migrate, staff time pulled away from day-to-day work, and proving to auditors or clients that data was destroyed. See also what happens when software reaches end of life.

How ABCOM helps

We plan and carry out server migrations and decommissioning for businesses and charities across Sussex, including moves to Microsoft 365 and Azure. We offer certified data erasure and secure disposal through our IT recycling and asset disposal service. See our managed IT services.

Quick answers

How long does decommissioning take?

For a typical small business server the whole process usually takes two to three weeks, most of it planning, migration and testing. Complex environments can take longer.

Why do we need proof of data erasure?

UK GDPR requires personal data to be disposed of securely, with evidence that it has been. Keep a certificate for each drive.

Retiring an old server? Talk to us about a safe migration and data erasure plan.

Talk to ABCOM

Related answers and guides

Sources and further reading

Related questions

Browse all FAQs

Want this sorted for you?

Talk to our Burgess Hill team about managed IT support. Free, friendly and no obligation.

Book a free 20-minute callCall 01444 871200