I hope we migrate our stack to Linux soon, but I think that’ll take few years.

I know big company that run their core on Windows Server 2012, I’ve no idea how they manage the software assurance and compliance

Actually Windows Server 2012 or just Windows Domain functional level? https://learn.microsoft.com/en-us/windows-server/identity/ad...