If your business is still running Windows 10, you’re not alone, and you’re not necessarily in immediate danger. But you are on borrowed time, and the decision about what to do next has real cost and security implications either way.
This guide breaks down where things stand in 2026, what your options are, and how to decide between upgrading and buying more time.
What Windows 10 End of Support Actually Means Now
Windows 10 end of support officially arrived on 14 October 2025. Since that date, Microsoft no longer provides free security patches, bug fixes, or technical support for standard Windows 10 installations. In practice, that means every new vulnerability discovered in Windows 10 from that point on goes unpatched for any device not covered by an extended program.
That said, “end of support” hasn’t meant an abrupt cliff-edge for everyone. Microsoft has kept a safety net in place through the Windows 10 Extended Security Updates program, which lets both individuals and businesses continue receiving critical and important security patches for a defined period after the official cut-off for a fee, in most business cases. This is a bridge, not a long-term platform. It buys time; it doesn’t replace an actual migration plan.
The Risks of Staying on Windows 10 Without Protection
For any device running unpatched, unsupported Windows 10, the risks compound the longer they go unaddressed:
- Unpatched vulnerabilities: Attackers actively target software that’s known to no longer receive fixes, since any flaw found from this point on stays open indefinitely.
- Compliance and audit exposure: Auditors, insurers, and regulators increasingly expect evidence that business technology environments are current and supported. Running unsupported operating systems can trigger audit findings, insurance complications, or breach-of-contract issues with clients who require baseline security standards.
- Rising remediation costs: The longer a business waits, the more it typically costs to catch up, since ESU pricing increases each year and unsupported hardware becomes harder to source parts or specialist support for.
- Reduced compatibility: New software, cloud tools, and integrations are increasingly built and tested against Windows 11, meaning Windows 10 environments will gradually see more friction adopting new business tools.
None of this means panic is warranted, but it does mean doing nothing has a real, growing cost attached to it.
The Windows 11 Upgrade Path
For eligible devices, upgrading to Windows 11 from Windows 10 remains free and is the permanent fix rather than a temporary bridge. It resolves the support issue entirely rather than deferring it.
Eligibility basics: Windows 11 requires a compatible 64-bit processor (generally 8th-generation Intel or equivalent AMD/Qualcomm chips and newer), TPM 2.0, UEFI with Secure Boot support, at least 4GB of RAM, and 64GB of storage. Many business devices purchased in the last four to five years will meet these requirements; older fleets often won’t, particularly on the TPM 2.0 requirement.
How to upgrade to Windows 11:
- Check device compatibility using Microsoft’s PC Health Check tool or your IT provider’s fleet-wide compatibility scan.
- Back up critical data before starting any upgrade.
- For eligible devices, upgrade via Windows Update, or use a managed deployment tool for multiple devices across the business.
- For ineligible devices, the realistic options are hardware replacement or a temporary ESU bridge while replacement is planned.
Should I upgrade to Windows 11? For most SMBs with reasonably current hardware, yes; it’s the more sustainable long-term option since it removes the recurring cost and administrative overhead of managing ESU enrolments. That said, a fleet-wide upgrade isn’t always the immediate right call for every business; where a large portion of your fleet is ineligible, a short, deliberate ESU bridge while you plan a phased hardware refresh is often the more financially sensible route than a rushed, disruptive mass replacement.
Extended Security Updates (ESU) Program and Costs
The Extended Security Updates (ESU) program is where the real decision-making happens for businesses with devices that can’t move to Windows 11 immediately, or that need more time to plan a proper migration.
For business and commercial devices, ESU pricing is structured to escalate each year, deliberately encouraging migration rather than long-term reliance on the program:
- Year 1 (15 October 2025 – 13 October 2026): approximately $91.50 AUD per device
- Year 2 (14 October 2026 – 12 October 2027): approximately $183 AUD per device
- Year 3 (13 October 2027 – 12 October 2028): approximately $366 AUD per device
Businesses that delay enrolment don’t get to skip earlier years. Organisations entering the program late are generally required to pay for prior missed years before receiving current coverage, so waiting rarely saves money in practice.
ESU also comes with an important limitation: it delivers security patches only. No new features, no general technical support, and no functional improvements. It’s designed explicitly as a temporary bridge, capped at three years, after which Windows 10 will no longer receive any updates at all.
For home users and very small operations, Microsoft has offered lower-cost or no-cost consumer enrolment paths, but these terms differ meaningfully from the commercial program and shouldn’t be assumed to apply to business devices.
Windows 11 Upgrade vs ESU: How to Decide
|
Factor |
Upgrade to Windows 11 |
Extended Security Updates (ESU) |
|
Cost |
Free for eligible devices; hardware replacement cost for ineligible devices |
Recurring per-device fee, escalating each year (~$61 → $122 → $244) |
|
Duration of fix |
Permanent. Resolves the support issue |
Temporary. Capped at 3 years, then support ends entirely |
|
Security coverage |
Full ongoing updates, features, and support |
Security patches only; no new features, no general support |
|
Best suited to |
Devices meeting Windows 11 hardware requirements |
Devices not yet eligible, or businesses needing time to plan a phased migration |
|
Administrative overhead |
One-time upgrade or replacement project |
Ongoing licence management and annual cost increases |
|
Long-term risk |
Low. Aligned with Microsoft’s current supported platform |
Rising. Cost and complexity increase each year until forced migration |
In short: Windows 11 is the destination. ESU is, at best, a well-managed delay for the devices that genuinely need one.
Getting Migration Help
Whichever path fits your business, the practical work is the same: know exactly which devices are eligible for Windows 11, which aren’t, and what each path costs across a realistic timeline, not just Year 1.
A managed IT partner can help by:
- Running a fleet-wide compatibility audit to separate Windows 11-ready devices from those needing ESU or replacement
- Coordinating licensing, deployment, and staff training to keep disruption to a minimum
- Building a phased plan that prioritises highest-risk or highest-value devices first
- Managing ESU enrolment correctly where it’s genuinely the right short-term choice, so the business isn’t caught out by escalating costs or missed enrolment windows
The goal isn’t to rush every device onto Windows 11 overnight. It’s to make sure every device in your business is on a deliberate, cost-aware path rather than sitting exposed by default.
Not sure whether your business is ready for Windows 11, or where ESU makes sense as a bridge? Get in touch with us today for further advice.
Frequently Asked Questions
When did Windows 10 end of support happen?
Windows 10 end of support officially took effect on 14 October 2025. Since then, standard Windows 10 devices no longer receive free security updates or technical support from Microsoft.
What is the Extended Security Updates (ESU) program?
The Extended Security Updates (ESU) program is a paid Microsoft offering that provides critical and important security patches for Windows 10 devices after the official end-of-support date, for a maximum of three years for commercial customers.
How much do Windows 10 Extended Security Updates cost for a business?
Commercial ESU pricing starts at approximately $91.50 AUD per device for Year 1. This price doubles to AU$183.00 for Year 2 and doubles again to AU$366.00 for Year 3.
Should I upgrade to Windows 11 or pay for ESU?
If your device hardware is eligible, upgrading to Windows 11 is generally the more cost-effective long-term choice since it’s free and permanent. ESU makes sense as a short, deliberate bridge for devices that aren’t yet eligible or where replacement needs to be phased.
How do I upgrade to Windows 11 from Windows 10?
Check hardware compatibility first, back up your data, then upgrade via Windows Update for eligible single devices, or through a managed deployment tool for multiple business devices.
What happens if I do nothing after Windows 10 end of support?
Devices left unpatched and unenrolled in ESU will accumulate unpatched vulnerabilities over time, increasing the risk of compromise and potentially creating compliance or insurance issues for the business.
Is every Windows 10 device eligible to upgrade to Windows 11?
No. Windows 11 requires specific hardware, including TPM 2.0 and a supported processor generation, so older devices may need replacement rather than a straightforward upgrade.
