Workplace
Windows 10 has reached end of life: what should your business do?
Short answer
Microsoft ended support for Windows 10 on 14 October 2025. Computers running it still work, but they no longer get free security updates. A business has three options: upgrade the computer to Windows 11 if the hardware allows it, buy extended security updates, or replace the computer. Carrying on without updates is not a responsible choice for a business environment.
What exactly has stopped?
On 14 October 2025 Microsoft ended regular support for Windows 10. That means three things:
- no more free security updates;
- no more bug fixes;
- no more technical support from Microsoft.
The computer itself keeps working. That is also the risk: nothing visible changes, while newly found flaws stay open.
What are extended security updates?
Microsoft offers a paid programme for Windows 10 called Extended Security Updates. It gives you only the critical security updates, no new features.
| Individuals | Organisations | |
|---|---|---|
| Duration | One year, until 13 October 2026 | Up to three years, until October 2028 |
| Cost | Through a Microsoft account | Per device per year, higher each year |
| Meant as | A run-out | A bridge during a migration |
It is not a long-term plan. It buys time to plan the move properly.
What does a computer need for Windows 11?
The requirements that matter most often:
- TPM 2.0. A security chip that stores keys. It is in almost all business laptops of recent years, but is sometimes switched off.
- Processor. Only the types Microsoft has approved. Roughly from the eighth generation of Intel Core and the second generation of AMD Ryzen.
- Memory and storage. At least 4 GB and 64 GB. For comfortable work, double that is a fair minimum.
- Startup. Through UEFI with Secure Boot.
A computer that meets everything except memory can be upgraded. A computer with a processor that is too old cannot.
How does an organisation tackle it?
- Count. Which computers do you have, which still run Windows 10 and which meet the requirements.
- Sort. Three piles: upgrade, replace, keep for now with extended updates.
- Check the software. Most programs work unchanged. Old custom software and software that controls machines deserve a test.
- Roll out in groups. A few users first, then the rest. Outside working hours.
- Clear out. Replaced computers are wiped before they leave the building.
And the computers connected to machines?
In production companies Windows 10 often runs on a computer that controls a machine, with software that cannot simply move to Windows 11. Replacing it is sometimes not an option.
Put such a computer on a separate, shielded network with no access to the internet or email, and buy extended updates for as long as you can. That does not make it safe, but it makes it a lot harder to reach.