Windows 10 reached end of support on 14 October 2025. A year later, it’s still running on a lot of business PCs – on machines that can’t run Windows 11, on systems tied to legacy software, and on devices nobody had time to replace.
On 14 October 2026, the second year of Microsoft’s Extended Security Updates (ESU) programme began – and the price doubled. If you still have Windows 10 in your environment, now is the time to decide what happens to each of those machines.
This article summarises where things stand, what your options cost, and how to build a realistic plan.
Where things stand (October 2026)
| Date | |
|---|---|
| Windows 10 Home/Pro/Enterprise 22H2 end of support | 14 October 2025 |
| Commercial ESU Year 1 | 15 Oct 2025 – 13 Oct 2026 |
| Commercial ESU Year 2 (current) | 14 Oct 2026 – 12 Oct 2027 |
| Commercial ESU Year 3 (final) | 13 Oct 2027 – 10 Oct 2028 |
| Consumer ESU | until 12 October 2027 |
| Windows 10 Enterprise LTSB 2016 | ended 13 October 2026 |
| Windows 10 Enterprise LTSC 2021 | 12 January 2027 |
| Windows 10 Enterprise LTSC 2019 | 9 January 2029 |
| Windows 10 IoT Enterprise LTSC 2021 | 13 January 2032 |
| Microsoft 365 Apps security updates on Windows 10 | until October 2028 |
There is no ESU Year 4. After October 2028, regular Windows 10 editions receive no more security updates.
What “end of support” really means
Windows 10 machines keep working. But without ESU:
- No security updates. Every new vulnerability stays open – permanently.
- No technical support from Microsoft.
- Software and hardware vendors gradually drop support. Browsers, security tools and line-of-business applications follow.
- Compliance problems. Unsupported operating systems are a red flag for auditors, cyber insurers and regulations like NIS2, which require patch management and secure system maintenance.
Defender security intelligence updates and Microsoft 365 Apps security updates continue for a while, but they don’t protect the operating system itself.
Your options
Option 1: Upgrade to Windows 11
For hardware that meets the requirements (TPM 2.0, Secure Boot, supported CPU, UEFI), an in-place upgrade is the cheapest and fastest route. If you held back because of application compatibility, a year of Windows 11 maturity means most vendors now support it.
Tips:
- Use Windows Update for Business, Intune or Configuration Manager for staged rollouts.
- Check device readiness with the reports in Intune or Microsoft’s PC Health Check.
- Upgrade a pilot group first, including users of critical applications.
- Back up user data before upgrading – OneDrive Known Folder Move helps.
Option 2: Buy ESU – as a bridge, not a plan
Commercial ESU gives you Critical and Important security updates – no new features, no non-security fixes and no general support.
Pricing per device (commercial):
| ESU year | Price per device | Notes |
|---|---|---|
| Year 1 (2025–26) | $61 | |
| Year 2 (2026–27) | $122 | Price doubles each year |
| Year 3 (2027–28) | $244 | Final year |
Important: ESU is cumulative. If you join in Year 2, you must also pay for Year 1 – so a device enrolled now costs $183 for coverage until October 2027. Keeping a device on ESU until the very end costs $427, which is more than many new business laptops.
Discounts exist for devices managed through Intune/Windows Autopatch, and education customers pay a nominal price. Check with your licensing partner.
Free ESU is included for:
- Windows 10 VMs running in Azure and Windows 365
- Windows 10 devices used to connect to Windows 365 Cloud PCs, with an active Windows 365 subscription
For Year 2, devices need the latest servicing stack and ESU prerequisite updates installed and a Year 2 activation key applied.
When ESU makes sense: machines that will be replaced within 12 months, systems waiting for a vendor update, or specialised devices where replacement needs planning and budget.
Option 3: Replace the hardware
For devices that can’t run Windows 11, replacement is usually the most sensible long-term choice. Hardware from 2017 or earlier is typically slow, out of warranty and expensive to support anyway.
Compare a new device with ESU Year 1 + Year 2 ($183) – the numbers often favour replacement, especially when you include productivity gains and lower support costs.
Option 4: Virtualise or move to the cloud
- Windows 365 or Azure Virtual Desktop – run Windows 11 in the cloud and use old devices as thin clients. As noted above, Windows 365 includes ESU for connecting Windows 10 devices.
- On-premises VDI – host Windows 11 or legacy Windows 10 VMs on your own hypervisor, e.g. Proxmox VE or XCP-ng…
- Virtualise legacy applications instead of whole desktops, where licensing allows.
Option 5: Switch the OS
For simple use cases – browser-based work, kiosks, digital signage, information terminals – Linux or ChromeOS Flex can extend the life of hardware that can’t run Windows 11. Test peripheral support and management tools first.
Option 6: Isolate what can’t be changed
Some machines can’t be upgraded or replaced quickly: lab equipment, production machines, medical devices, PCs controlling expensive hardware. For these:
- Remove internet access and segment them in a dedicated VLAN
- Allow only necessary connections (firewall rules, allow-lists)
- Disable unnecessary services, USB storage and remote access
- Use application allow-listing
- Monitor them closely and back them up – see backup solutions for physical machines
- Ask the vendor about LTSC/IoT editions with longer support
A practical plan for the next 12 months
Step 1: Build an accurate inventory
You can’t plan what you can’t see. Collect for every Windows 10 device:
- hardware model, age, CPU, TPM version
- Windows 11 eligibility
- business owner and purpose
- critical applications and their Windows 11 compatibility
- current ESU status
Intune, Configuration Manager, Lansweeper and similar tools can produce this quickly. (See our Lansweeper review and PDQ Inventory review.)
Step 2: Sort devices into four groups
| Group | Action | Deadline |
|---|---|---|
| Eligible for Windows 11 | Upgrade | Next 3 months |
| Not eligible, replaceable | Replace (budget now) | Next 6–12 months |
| Waiting for vendor/project | ESU Year 2 as a bridge | Before October 2027 |
| Can’t be changed | Isolate, consider LTSC/IoT | Ongoing |
Step 3: Fix the blockers
Most delays come from a handful of applications or devices: old ERP clients, specialised drivers, scanners, plotters. Address them directly with vendors – or find alternatives.
Step 4: Execute in waves
Start with the easiest group (eligible hardware), then work through replacements. Communicate clearly with users and plan for data migration.
Step 5: Keep ESU to a minimum
Every Windows 10 device still running in October 2027 will either cost $244 for Year 3 or become a security risk. Aim to have no ESU devices left by then.
Don’t forget LTSC
If you use Windows 10 Enterprise LTSC 2021, note that it reaches end of support on 12 January 2027 – only a few months away – with no extended phase. ESU for LTSC 2021 has been available since September 2026 under the same pricing model. Plan the move to Windows 11 LTSC 2024 now.
Windows 10 IoT Enterprise LTSC 2021 (OEM-licensed for specialised devices) is supported until 2032, and LTSC 2019 until January 2029.
Checklist
- Inventory of all Windows 10 devices completed
- Windows 11 eligibility checked for each device
- Critical applications tested on Windows 11
- Upgrade plan for eligible devices
- Replacement budget approved for non-eligible devices
- ESU Year 2 bought only for devices with a documented exit date
- Devices that can’t be changed isolated and monitored
- LTSC 2021 devices planned for migration before January 2027
- User data backed up before upgrades or replacement
- Old devices securely wiped before disposal
FAQ
Can I still use Windows 10 in 2026?
Yes, it still runs. But without ESU it receives no security updates, which is a serious risk for any device connected to a network.
How much does Windows 10 ESU cost in Year 2?
For commercial customers, the price doubles each year: $61 for Year 1, $122 for Year 2 and $244 for Year 3. Because ESU is cumulative, joining in Year 2 means paying for Year 1 too.
Is Windows 10 ESU free?
For Windows 10 VMs in Azure and Windows 365, and for Windows 10 devices connecting to Windows 365 Cloud PCs. Consumers can enrol for free under certain conditions. Business devices joined to a domain or managed via MDM need commercial ESU.
When does Windows 10 ESU end?
Commercial ESU ends after Year 3 on 10 October 2028. Consumer ESU ends on 12 October 2027. There’s no fourth year.
Will Microsoft 365 Apps keep working on Windows 10?
Yes. Microsoft provides security updates for Microsoft 365 Apps on Windows 10 until October 2028, but the operating system itself still needs ESU to stay secure.
What should I do with old Windows 10 PCs I replace?
Wipe them securely (with a tool that meets your data protection requirements), then reuse with Linux or ChromeOS Flex, donate, or recycle through a certified partner.
Conclusion
A year after end of support, Windows 10 is no longer a “next year” problem. ESU Year 2 has started, the price has doubled, and the final deadline in October 2028 is closer than it looks.
Treat ESU as an expensive bridge, not a destination. Inventory your devices, upgrade what you can, replace what you must, isolate what you can’t change – and aim to have Windows 10 gone from your network before the next price increase arrives.
Related reading:
Leave a Reply