What end of support means
Since 14 October 2025 Windows 10 no longer gets free security updates, new features or technical support from Microsoft. The PC still starts and your programs still work. The problem is what you do not see: every new flaw in Windows stays open. Attackers look for exactly these devices, because they know no update is coming.
On top of that, other software slowly drops out. Vendors of accounting or till software, printers and antivirus stop supporting Windows 10 over time. And if customers or your insurer ask about your security, for example because of NIS2 in the supply chain, an operating system without updates is hard to explain.
Step 1: find the last Windows 10 devices
Many companies think they are done, until they actually look. Pay particular attention to:
- PCs not assigned to a named employee, such as at reception, in the canteen or in a meeting room;
- computers that drive a machine, camera, till system or measuring device;
- laptops that rarely come to the office or sit in a cupboard as spares;
- devices that are not managed and therefore do not show up in your overview.
If the devices are in Intune, you can see which Windows version each one runs. For anything unmanaged, walk around or check which devices sign in to your network and to Microsoft 365.
Step 2: can the PC move to Windows 11?
Windows 11 has hardware requirements. Among other things the PC needs a TPM 2.0 chip, Secure Boot and a processor Microsoft supports. Many PCs around five years old or newer meet them. Older PCs often do not. Microsoft’s PC Health Check app shows per device whether it is eligible. If it is, the upgrade to Windows 11 is free. Make a backup first and test whether the software on that PC also works on Windows 11.
There are guides around for forcing Windows 11 onto unsupported hardware. Do not do that on business PCs: Microsoft does not guarantee updates there, and you swap one problem for another.
Step 3: replace or temporarily extend
If a PC cannot move to Windows 11, replacing it is usually the best choice. A new laptop with Windows 11 is faster, uses less power and gets years of updates. Plan the replacement so the employee keeps their files and settings, and make sure the old disk is wiped securely before the device leaves the building.
Sometimes that is not possible straight away, for example for a PC that drives specific software or a machine whose vendor does not support Windows 11 yet. For that device you can buy Extended Security Updates (ESU). The PC then gets security updates for a limited period. Keep three things in mind:
- ESU runs per year and you pay per device. The price goes up each following year, and the programme ends after three years at most.
- ESU only provides security updates. No new features and no regular support.
- The first ESU year ends in October 2026. If you use ESU, you need to decide now whether to extend or replace.
So treat ESU as a bridge with an end date. Agree with the software vendor when a Windows 11 version will be available, and put that date in the calendar.
If an old PC cannot go yet, limit the damage
If a Windows 10 PC has to stay for a while, make it as small a target as possible. Use it only for that one task, not for email or browsing. Put it on a separate part of the network so an infection cannot spread to the rest. Do not give the user local admin rights. And do not let it reach Microsoft 365 and your business data without conditions: with device compliance you can require that only devices on a supported version get access.
What Floor ICT does
Floor ICT makes an overview of every device still running Windows 10, including those outside management, and checks per device whether it can move to Windows 11. You get a proposal: which PCs we upgrade, which are replaced and which need a temporary extension, with an end date. After your approval we carry out the upgrades, set up new laptops with automatic updates and encryption, and wipe the old disks securely. Which PCs you replace and when remains your decision.