Microsoft ended mainstream support for Windows 10 on 14 October 2025. Since then, computers still running it only receive security fixes if the business has paid for Microsoft’s Extended Security Updates (ESU) programme. For companies, Year 1 of ESU covers November 2025 to October 2026, and each extra year costs roughly double the previous one.
In other words, if your office still has Windows 10 machines, now is the time to decide what happens to them, before the next renewal and before an unpatched PC becomes the way into your network.
Why running unsupported Windows is a real business risk
- No new security patches unless you pay for ESU, so newly discovered vulnerabilities stay open.
- Ransomware and phishing often target older, unpatched systems first.
- Software and device compatibility gradually drops as vendors stop testing on Windows 10.
- Compliance and client audits increasingly ask whether you run supported operating systems.
Your options
1. Upgrade existing PCs to Windows 11
If a computer meets the Windows 11 requirements (including TPM 2.0 and a supported processor), an in-place upgrade is usually the most cost-effective route. We check each device, back it up and upgrade it outside working hours.
2. Replace older hardware
Many PCs bought before 2018 can’t run Windows 11. Replacing them is also a chance to move to faster, more power-efficient business laptops and desktops. See our workstations and laptops options and our laptop buying guide.
3. Pay for Extended Security Updates, as a bridge
ESU can buy time for machines that run specialised software or can’t be replaced yet. Because the price rises every year, treat it as a short-term bridge with a clear end date, not a long-term plan.
4. Move some users to cloud desktops
For some roles, a cloud PC or virtual desktop (for example Windows 365 or Azure Virtual Desktop) is a flexible alternative that lets staff work securely from almost any device. Our cloud solutions team can help you compare costs.
A simple 5-step plan
- Audit every computer: Windows version, age, specification and who uses it.
- Classify devices into upgrade, replace or temporarily extend.
- Back up data and check business applications are compatible with Windows 11.
- Schedule upgrades in batches, outside working hours, to avoid downtime.
- Secure and manage the new setup with patching, endpoint protection and monitoring.
Tecqx handles this end to end as part of our IT AMC and support services: audit, upgrades, hardware supply, data migration and ongoing patch management.
Frequently asked questions
Will my Windows 10 PC stop working?
No. It will keep running, but without security updates (unless covered by ESU) it becomes steadily more exposed to attacks.
Can every PC upgrade to Windows 11?
No. Windows 11 needs TPM 2.0, Secure Boot and a supported processor. We can check your devices and tell you which can be upgraded.
How long does an upgrade take?
Typically one to two hours per PC, including backup and checks. We schedule batches so your team isn’t disrupted.
Dates and ESU details are based on Microsoft’s published guidance at the time of writing; check Microsoft’s ESU page for the latest terms.
Filed under: Business IT
