Microsoft ended free support for Windows 10 in October 2025. Computers still running it keep working, but they no longer receive security fixes unless you pay for them. Each month that passes leaves more known flaws unpatched.
Why it matters
Attackers study each new Windows 11 fix to find the same flaw in Windows 10. An unsupported machine is also a problem for cyber insurance, customer security questionnaires and the Essential Eight, all of which expect supported operating systems.
Check what can upgrade
Windows 11 needs a reasonably recent processor and a security chip called TPM 2.0. Many computers bought in the last several years qualify and can be upgraded in place at no licence cost. Start with an inventory that shows which machines can and can't.
Replace what can't
A computer that can't run Windows 11 is usually old enough to be due for replacement anyway. Prioritise the ones used for finance, administration and anything holding sensitive data.
Buying time
Microsoft sells Extended Security Updates for Windows 10 for a limited period, at a price that rises each year. It is a way to cover machines that can't be replaced yet. It is not a long-term plan.
Check your applications
Most software that ran on Windows 10 runs on Windows 11. Test the business-critical applications, older printers and any specialist hardware before upgrading everyone.
The machines that can't change
Some computers run equipment or software that will never support Windows 11. Isolate them on their own network segment, remove internet and email access, and plan their replacement with the equipment vendor.
Use it as a reset
An upgrade round is a good time to bring every device under central management, encrypt the drives and remove local admin rights.
Want your IT looked after for a fixed monthly fee? Managed IT services
All resources