THX for the replies -- clearly the sbs2011 is no longer supported, and must get upgraded somehow .. the client would prefer the exchange feature, which I suspect is one reason they haven't done anything ... need to read the riot act about security etc ...
given the current state of sbs, what are the 'normal' migration paths ? Maybe run AD locally and hosted exchange via Office/Microsoft 365 ...