Key takeaways
- Unsupported Windows 10 PCs no longer receive security fixes
- ESU is a paid, time-limited bridge, not a long-term plan
- Check every PC for Windows 11 hardware eligibility
- Unsupported systems are a common cyber insurance concern
What end of support means
Windows 10 still starts and runs. What stopped is the flow of security updates and technical assistance. Every flaw found since then stays open on unsupported PCs, and attackers look for exactly those flaws.
Software vendors move on as well. Over time, line-of-business apps, browsers and security tools drop support for Windows 10, which creates support and compliance problems even before anything goes wrong.
Your four options
Upgrade to Windows 11
For PCs that meet the requirements, an in-place upgrade keeps files and apps. Test critical apps on a few machines first.
Replace the PC
Many older PCs lack TPM 2.0 or a supported processor. Replacing them often makes more sense than stretching their life.
Enroll in ESU
Extended Security Updates provide security fixes only, priced per device, with the price doubling each year for up to three years for organizations.
Use a Cloud PC
Windows 365 can deliver Windows 11 to older devices, and Windows 10 virtual machines in Windows 365 or Azure Virtual Desktop receive ESU at no additional cost.
Checking Windows 11 readiness
- A compatible 64-bit processor on Microsoft’s supported list
- TPM 2.0, and UEFI firmware with Secure Boot
- At least 4 GB of memory and 64 GB of storage
- Line-of-business apps and drivers confirmed compatible by the vendor
- Peripherals such as label printers, scanners and card readers tested
Planning the move
Treat this as a project rather than a weekend. Inventory every Windows 10 device, sort them into upgrade, replace and exception lists, and confirm with each software vendor that their application supports Windows 11.
Upgrade in waves, starting with a pilot group, and fold replacements into the hardware refresh budget rather than buying everything at once. Any device that must stay on Windows 10, such as one tied to lab or production equipment, should be enrolled in ESU or isolated on its own network segment.
How we help
Each managed workstation includes asset, lifecycle and warranty tracking, so we know which devices run Windows 10 and which can upgrade. Patching, Endpoint MDR Plan I and health monitoring continue through the move. The hardware refresh roadmap and yearly IT budget from vCIO planning spread replacements over time instead of all at once.
Sources
- Microsoft: Windows 10 end of support
- Microsoft Learn: Windows 10 Extended Security Updates
- Microsoft Learn: Windows 10 Enterprise and Education lifecycle
Information on this page is general and is not legal or compliance advice.