Somewhere in your office there is probably a PC with a sticky note on it. “Don’t update. The accounts software breaks.” Everyone knows it’s there, nobody quite owns it, and it works perfectly well, which is exactly why it’s still running Windows 10.

On 13 October, that machine’s situation changed. Nothing dramatic happened on the day, and that’s the problem. Nothing stops working, no warning appears, and the risk simply starts to build.

This post explains what changed, what your realistic options are, which ones are the best fix, the easiest and the cheapest, and how to decide machine by machine without spending more than you need to.

What Actually Changed on 13 October

Microsoft ended regular support for Windows 10 on 14 October 2025. For businesses that needed more time, it offered paid Extended Security Updates (ESU), sold one year at a time.

• Year 1 covered October 2025 to 13 October 2026. That has now ended.
• Year 2 runs from 14 October 2026 to 12 October 2027.
• Year 3 runs to October 2028.

The price doubles every year. Microsoft’s list price for business ESU is $61 per device for Year 1, $122 for Year 2 and $244 for Year 3. Those are US dollar list prices, so what you actually pay in the UK will depend on your supplier, the exchange rate, and VAT.

ESU is also cumulative. If you didn’t buy Year 1, you can’t simply start at Year 2: you pay for the earlier year as well, which would put a first-time buyer at $183 per device for Year 2 coverage (Year 1 plus Year 2). Although you’ll need to check the exact rules with your licensing supplier before you budget.

You may also have seen headlines saying Microsoft has given Windows 10 another year. That’s true, but it applies to home users. Business licences are separate, and for a business, Year 2 is a purchase you have to make.

The important limit is what ESU actually delivers. It covers critical and important security updates only. No new features, no general technical support, and it only applies to Windows 10 version 22H2. In other words, ESU keeps the known holes patched, but it doesn’t make an ageing operating system any newer. The longer a machine stays on it, the more you’re relying on a security-fix-only system, and the more exposed your business becomes if something is missed.

What Happens if You do Nothing

The PC keeps starting up. Your applications keep opening. Microsoft Defender will keep receiving its definition updates, so it doesn’t feel any different on Monday morning.

What stops is the patching of Windows itself. Every month, Microsoft fixes newly found flaws in the operating system. A Windows 10 machine without ESU stops receiving those fixes, but the flaws are still published for everyone to read. That means that over time, your PC becomes the easiest one in your office to attack.

There’s a practical side too. Cyber insurers and Cyber Essentials assessors ask about unsupported software, so it’s worth knowing your answer before they ask.

Your Options

There’s no single right answer for every machine. But here are your choices, grouped by what you’re likely to care about most: the best long-term fix, the easiest, and the cheapest.

Option 1: Move to Windows 11 (the recommended route)

If you want the answer we’d give regardless of price or convenience, it’s this one. Windows 11 is fully supported, receives regular security updates and keeps receiving new features, so you stop paying to postpone the decision.

• Where the hardware qualifies, the upgrade itself is typically free, and it can be done in batches. The main requirements are TPM 2.0 and a reasonably modern processor.
• Where it doesn’t, the machine needs replacing, which also brings a warranty and better performance. Phasing replacements across a budget year makes the cost easier to manage.

Risks to plan for: your software may not work on Windows 11, so test it first and ask the supplier to confirm support. The sticky-note PC should be tested before it’s upgraded, not after. Also remember to back up before any upgrade, and expect some staff to need a short period of adjustment. Truthfully, replacement has a real up-front cost.

Option 2: Buy ESU for the machines that need more time (the easiest route)

This is the least disruptive option. Nothing changes for staff, there’s no migration and no downtime, and the machine stays patched until 12 October 2027. It suits a small number of devices tied to older software while you plan their replacement.

Risks to plan for: Keep in mind that this is a bridge, not a plan. The price doubles each year, so you’re paying more to postpone the decision. It only delivers security fixes, only applies to version 22H2, and costs more again if you’re buying Year 1 and Year 2 together. Paying for Year 2 on a machine you’ll replace in six months is wasteful. Put an end date on every machine you bridge.

Option 3: Move the work to a cloud-hosted desktop (also easy, if your work lives in the cloud)

With a cloud-hosted desktop, the old PC becomes little more than a way to connect to a Windows desktop that is managed and patched elsewhere. For staff who mostly use cloud apps, this can be a straightforward way to take the pressure off older hardware.

Risks to plan for: there’s an ongoing monthly cost per user, it depends on a reliable internet connection, and it doesn’t suit every application. The old device still needs to be kept secure and up to date, because it’s still connecting to your systems. You’ll also need to confirm the licensing position, including whether ESU is covered, before you commit.

Option 4: Reuse the hardware with a different operating system (the cheapest route for the right machines)

For older machines that can’t run Windows 11 and only need to run a browser or cloud-based apps, an alternative operating system such as ChromeOS Flex or Linux can give you a supported life at little or no licence cost.

Risks to plan for: not all hardware is supported, and software that only runs on Windows won’t run. Staff will need to adapt, and the machines need to fit your security, management and backup tools. Check that your insurer or Cyber Essentials assessor is happy with the setup before you roll it out. This one needs a proper test on a single machine first.

How the options compare

Option	Best for	Cost	Main risk
1. Windows 11 (upgrade or replace)	Long-term fix, recommended	Free upgrade if compatible, hardware cost if not	Software compatibility
2. ESU	Easiest short-term bridge	Rises every year	Security fixes only, and it’s postponing the problem
3. Cloud-hosted desktop	Cloud-based work on older PCs	Ongoing monthly cost	Internet dependence, old device still needs securing
4. Alternative operating system	Cheapest for the right machines	Low	Hardware and software compatibility

What we’d avoid

• Bypassing the Windows 11 hardware checks. It’s unsupported and may stop a machine receiving future updates.
• Leaving Windows 10 machines online with no ESU and no plan. That’s the situation this post is trying to help you avoid.
• Relying on third-party patching tools as a long-term fix. They don’t replace a supported operating system.
• Isolating a machine from the network is sometimes used for specialist equipment that can’t be changed. It reduces the risk but doesn’t remove it, and it should be a last resort with a clear owner, not a way of forgetting about a PC.

Every business’s setup is different, and the right choice depends on your software, hardware, security requirements and budget. TYou should always test any change on a small number of machines first, back up your data before upgrading, and check compatibility with your software suppliers. Prices and support dates can change, so please confirm current details with Microsoft or your IT provider before you decide.

The Machines That Cause the Real Trouble

The awkward devices usually fall into three groups:

• Machines that fail the Windows 11 check. They need replacing, an alternative operating system or ESU.
• Machines running software that only works on a particular version of Windows. These need the software vendor to confirm Windows 11 support before anything else.
• Machines nobody can account for. An old PC under someone’s desk, or one that belonged to a person who left.

The first job is always a list. You can’t decide for each machine until you know what you have.

A Ten-Minute Self-Test

Be honest with these:

1. Can you list every PC in the business, with the version of Windows each one runs today?
2. Do you know which ones qualify for Windows 11, and which have never been checked?
3. If you bought Year 1 ESU, do you know which devices it covered and who holds the licence details?
4. Is there any software that only runs on Windows 10, and has the vendor confirmed Windows 11 support?
5. Do any of these machines hold client data or connect remotely?
6. If the sticky-note PC failed tomorrow, would you know what it does and who depends on it?

If you can’t answer two or more of these quickly, that’s your starting point.

What to Do This Month

1. Count the machines. Build a simple list of devices, Windows versions and owners.
2. Check readiness. Run a Windows 11 compatibility check on each one.
3. Decide per machine. Upgrade, replace, move to the cloud, repurpose, or bridge with ESU, and write down the reason.
4. Put a date on the bridge machines. Anything on ESU should have an end date for its replacement, otherwise it’ll be there next October.

We can help!

If you’d rather we explain where your machines stand, our Free IT Partnership Review is a no-obligation way to find out. We’ll explain what we find in plain English. No jargon, no hard sell, and no obligation to do anything with it.

Call: 01707 378455
Email: hello@tristartechsolutions.co.uk

Frequently Asked Questions

Is Windows 10 still safe to use? Not on its own. Without ESU, a Windows 10 device no longer receives new security fixes for the operating system, so the risk grows over time. With ESU, it continues to receive critical and important security updates until the end of the paid period, but nothing else.

Does the extra year Microsoft gave Windows 10 users apply to my business? No. That extension is for home users. Business ESU is a separate paid licence, sold in yearly steps.

Can all our Windows 10 PCs run Windows 11? No. Windows 11 has hardware requirements, including TPM 2.0 and a reasonably modern processor. Many machines bought in the last few years qualify, but older ones often don’t, so check each machine rather than assuming.

How much does Windows 10 ESU Year 2 cost? Microsoft’s list price for business ESU is $61 per device for Year 1, $122 for Year 2 and $244 for Year 3. ESU is cumulative, so a business that didn’t buy Year 1 may have to pay for both years. These are US dollar list prices, and UK pricing varies with exchange rates, VAT and your supplier, so check current pricing with us or Microsoft before budgeting.

Should we pay for ESU or just replace the machines? It depends on the machine. ESU suits a handful of devices you plan to retire soon. Replacement suits devices that are already old, and upgrading suits newer ones that meet the Windows 11 requirements.

What if a machine can’t run Windows 11 and we can’t afford to replace it yet? Your realistic choices are ESU as a short bridge, an alternative operating system if it only runs browser-based work, or a cloud-hosted desktop. Each has risks, so test before you commit.