Short answer: Microsoft ended support for Windows 10 on October 14, 2025, so a business PC still on Windows 10 only gets security fixes if it is enrolled in the paid Extended Security Updates (ESU) program. Microsoft's commercial ESU price started at $61 per device for year one and doubles each year, and year one coverage ended on October 13, 2026. Microsoft's cheaper consumer ESU option can't be used on business devices. For most small businesses, the right move now is to upgrade the computers that qualify for Windows 11, replace the ones that don't, and use ESU only as a short bridge.
If you still have Windows 10 machines on your network, you are not alone, and the computers still turn on and work. The problem is what happens behind the scenes: every month Microsoft fixes new security holes in Windows, and an unsupported PC doesn't get those fixes.
What does Windows 10 end of support mean for a business?
Since October 14, 2025, Microsoft no longer provides security updates, software updates or technical support for Windows 10. Microsoft's own end of support page is direct about it: the PC keeps running, but it is more exposed to viruses and malware, and antivirus software alone is not enough to make up for missing operating system updates.
For a business, that shows up in a few practical ways:
- Security risk. New Windows vulnerabilities are found all the time. On an unpatched PC, they stay open.
- Software and vendor support. Line-of-business software vendors, banks and payment processors eventually stop supporting old operating systems. Microsoft's own newer Office versions (Office 2021 and Office 2024) still run on Windows 10 but aren't supported there.
- Insurance and compliance questions. Cyber insurance applications and security reviews often ask whether you run end-of-life systems. An unsupported operating system is an easy thing for an insurer or auditor to flag.
One piece of good news: Microsoft says the Microsoft 365 apps will keep getting security updates on Windows 10 until October 10, 2028. That protects Outlook, Word and Excel. It doesn't protect Windows itself.
What does Windows 10 Extended Security Updates cost for businesses?
ESU is Microsoft's paid program that keeps sending critical and important security updates to Windows 10 PCs after end of support. It doesn't add features, fix non-security bugs or include technical support. Here is how the commercial program works, based on Microsoft's published terms:
| ESU year | Coverage ends | Microsoft's price per device |
|---|---|---|
| Year 1 | October 13, 2026 | $61 |
| Year 2 | October 12, 2027 | $122 (doubles from year 1) |
| Year 3 | October 10, 2028 | $244 (doubles from year 2) |
A few rules matter a lot when you budget:
- It's cumulative. Microsoft says you can't skip a year. If you enroll a PC now, in year two, you also pay for year one. That makes the cost to cover one PC through October 2027 about $183, and about $427 to reach October 2028.
- Three years is the hard limit. Commercial ESU ends after year three, in October 2028. There is no year four.
- Whole years only. Microsoft doesn't sell partial periods, such as six months.
- Version requirement. PCs must be running Windows 10, version 22H2.
- Where the price comes from. The $61 figure is Microsoft's published year one price, and the year two and three amounts are calculated from Microsoft's statement that the price doubles each year. What you pay through a reseller or cloud provider can vary, so get a quote for your exact device count.
Microsoft also includes ESU at no extra cost for Windows 10 virtual machines in Windows 365 and Azure Virtual Desktop, and for Windows 10 PCs used to connect to Windows 365 Cloud PCs with an active subscription. That can make sense for some businesses, but it is a bigger change than buying a few licenses.
Can a business use the free consumer ESU?
No. Microsoft offers a separate consumer ESU program for personal PCs (free with Windows Backup, 1,000 Microsoft Rewards points, or a one-time $30), and in June 2026 Microsoft extended it to October 12, 2027. But Microsoft states that the consumer program can't be used in commercial scenarios. It also isn't offered for PCs joined to an Active Directory domain, joined to Microsoft Entra ID or enrolled in a device management (MDM) tool, which describes most business computers. Business PCs need commercial ESU.
Can your current computers run Windows 11?
Many Windows 10 PCs can upgrade to Windows 11 at no cost for the license, if the hardware qualifies. Microsoft's minimum requirements are:
- Processor: 1 GHz or faster, 2 or more cores, on a compatible 64-bit processor
- Memory: 4 GB of RAM
- Storage: 64 GB or more
- Firmware: UEFI with Secure Boot capability
- TPM: Trusted Platform Module version 2.0
- Graphics: DirectX 12 compatible with a WDDM 2.0 driver
- Display: 720p, larger than 9 inches diagonally
The two that most often block older business PCs are the processor list and TPM 2.0. A computer from roughly the last several years usually passes. Older machines often don't, and there is no supported workaround for a business. Keep in mind that the minimum isn't the same as comfortable: a PC with 4 GB of RAM will technically run Windows 11, but staff will feel it.
Should you upgrade or replace each PC?
Go machine by machine. A simple rule set covers most offices:
- Upgrade PCs that meet the requirements, have a solid-state drive and enough memory for your software, and still have a few years of useful life.
- Replace PCs that fail the processor or TPM check, are slow already, or would need a new drive and more memory to be usable. Spending money on ESU or upgrades for a machine you'll replace in a year rarely pays off.
- Cover with ESU only the PCs you truly can't move yet, such as a computer running specialized software that hasn't been certified on Windows 11, or a machine that runs equipment. Set a date to retire each one.
- Isolate what's left. If a PC truly has to stay on Windows 10 without ESU, keep it off email and web browsing and separate it from the rest of the network.
Our business computers page covers replacement machines for your office.
What's a practical plan to finish the move?
If you're starting now, here is an order that keeps the business running:
- Inventory every Windows device. Include the front desk PC, the computer in the shop and any machine that runs a printer, scanner or piece of equipment. Note the Windows version, age and model of each.
- Check compatibility. Run Microsoft's PC Health Check or have your IT provider pull the data for every device at once.
- Test your software. Confirm that your accounting, practice management, design or industry software supports Windows 11, and check printers and scanners for Windows 11 drivers.
- Decide and budget. Sort each PC into upgrade, replace or ESU. Compare the cost of ESU through 2027 with the cost of replacing the machine now.
- Back up before you touch anything. Make sure files that live only on local PCs are backed up.
- Schedule the work in batches. Upgrade or swap a few machines at a time, after hours if possible, so no department goes down at once.
- Clean up. Wipe and retire old drives properly, update your device list, and set a date for the last ESU machine to go.
This is the kind of project that goes faster with help. TechCore's technology consulting can map out the plan and budget, and our managed IT services for small businesses keep patching, upgrades and device tracking on a schedule after the move is done.
FAQ
Will my Windows 10 computers stop working?
No. They keep turning on and running your software. They just stop receiving security fixes unless they are enrolled in ESU, which raises the risk every month they stay in use.
Is antivirus enough to keep Windows 10 safe?
Microsoft says no. Antivirus helps, but it can't fix holes in the operating system itself. Only Windows updates do that.
How long can a business pay for Windows 10 security updates?
Commercial ESU can run for up to three years after end of support, ending October 10, 2028. After that, there are no more security updates for those PCs.
Is the Windows 11 upgrade free?
For PCs that meet the hardware requirements and are running a licensed copy of Windows 10, the upgrade to Windows 11 is free. Hardware that doesn't qualify needs to be replaced.
Get a Windows 11 plan for your office
If you aren't sure how many Windows 10 machines you still have or which ones can upgrade, TechCore can help. We support businesses in Nashville, Middle Tennessee and Chattanooga, and our help desk handles many upgrade issues remotely. Request a free IT assessment and we'll inventory your computers, sort them into upgrade, replace or ESU, and give you a clear plan and budget.
