I have to keep one 2008 R2 alive in production (5 user office) for a few more months. In fact it is a SBS 2011 used mainly for AD, fileserver and running an application server. There are neither local user logons, nor RDP. As there is no enterprise agreement with MS they cannot buy ESU for monthly patching.
As an alternative I found 0patch, they offer micropatches developed on a community basis as remedy for security issues patched by Microsoft.
Sounds like a great idea, only I have no idea how these third party micropatches might affect the stability of the OS. I suppose they have not such a broad testing as MS can do (well, let’s not discuss on MSs worsening track record for patch quality… – please!).
Anybody knows how it behaves for now? From Windows 7 users I read mainly positive reports.