Windows 10 after end of support: upgrade, replace or use ESU?
Normal support for Windows 10 version 22H2 ended on October 14, 2025.
The computers did not stop working. Users can still open files and applications. The important change is that these devices are no longer in the normal Microsoft cycle for security updates, fixes and support.
A business now needs an explicit decision for each device:
- upgrade to Windows 11;
- replace the computer;
- keep Windows 10 temporarily with Extended Security Updates when eligible;
- retire or isolate a specialized workstation that cannot yet migrate.
The worst approach is assuming that every Windows 10 PC is the same.
Start by identifying the exact release
“Windows 10” can refer to several editions with different lifecycles.
Most business desktops run Windows 10 22H2. For them, the general end-of-support date was October 14, 2025.
Some LTSC or LTSB editions have different dates. Windows 10 Enterprise 2016 LTSB, for example, reaches the end of extended support on October 13, 2026. Other LTSC editions have their own schedules.
Before deciding, confirm:
- exact edition;
- version;
- architecture;
- patch level;
- licence type;
- commercial or specialized use.
One blanket rule across the entire fleet can create licensing and support mistakes.
Option 1: upgrade the PC to Windows 11
An upgrade is often the best choice when the hardware is compatible and still in good condition.
Check:
- supported processor;
- TPM 2.0;
- Secure Boot;
- disk space;
- memory;
- manufacturer drivers;
- application compatibility;
- security software;
- specialized peripherals;
- domain or Microsoft Entra ID sign-in method.
A PC that meets the minimum requirements is not automatically a good investment. A device that is already slow, difficult to repair or near the end of warranty may cost more to retain than to replace.
Option 2: replace the hardware
Replacement is often more practical when:
- the processor is not supported;
- TPM 2.0 is absent;
- storage is small or aging;
- the battery or power supply is unreliable;
- Windows 11 drivers are unavailable;
- performance is already inadequate;
- expected repairs approach replacement value;
- the user’s role has changed.
Replacement is more than buying a computer. Plan for:
- data backup and transfer;
- user profiles;
- Microsoft 365 and licensing;
- printers and peripherals;
- line-of-business applications;
- encryption;
- antivirus or EDR;
- policies and remote access;
- secure disposal of the old device.
A standard process saves substantial time compared with treating every device as a custom project.
Option 3: use ESU as a temporary bridge
Microsoft offers Extended Security Updates for certain Windows 10 PCs in commercial use.
ESU provides Critical and Important security updates for a limited period. It does not provide:
- new features;
- customer-requested non-security fixes;
- design changes;
- full normal Windows support.
ESU therefore does not modernize the computer. It buys time to complete a migration.
For the standard commercial Windows 10 program, eligible editions include Pro in commercial use, Enterprise and Education. Devices must also meet the applicable technical and licensing prerequisites.
ESU years are cumulative. An organization entering in a later year may also need to acquire prior years. Treat it as a transition cost, not a permanent subscription strategy.
When ESU makes sense
ESU can be reasonable when a PC:
- runs a critical application whose migration is already scheduled;
- controls specialized equipment;
- must remain online for a few months during a transition;
- cannot be replaced immediately without interrupting an essential function;
- is otherwise managed, backed up and monitored properly.
ESU is much less convincing when it merely postpones a decision without a deadline, inventory or project owner.
Applications are often the real blocker
For many SMBs, Windows itself is not the hardest part. An application or peripheral has never been tested on Windows 11.
Identify:
- application name and version;
- current vendor;
- licensing method;
- local modules;
- database engine;
- required devices or ports;
- Outlook, Excel or browser integrations;
- backup method;
- reinstallation procedure.
When a vendor says Windows 11 is unsupported, request the answer in writing and ask which release is recommended. An assumed compatibility problem should not block an entire fleet without evidence.
Remember Office and Microsoft 365
A PC upgraded to Windows 11 may still run an unsupported version of Office.
Office 2016 and Office 2019 reached end of support on October 14, 2025. Office LTSC 2021 and Office 2021 reach end of support on October 13, 2026.
A workstation migration is a good time to check:
- Office version;
- activation;
- add-ins;
- PST files;
- Outlook profiles;
- OneDrive synchronization;
- macros and templates;
- Microsoft 365 compatibility.
New hardware with old software is still an incomplete environment.
A practical wave-based approach
A business does not need to migrate every PC overnight.
A sensible sequence can be:
1. automated device inventory; 2. classification: upgrade, replace, temporary ESU or retire; 3. pilot with representative users; 4. application and peripheral remediation; 5. migration by group; 6. backup, encryption and security validation; 7. proper retirement of old devices; 8. tracking of remaining exceptions.
Every exception should have an owner, a reason and a target date.
What to record for each device
A simple decision record should include:
- user and location;
- model and serial number;
- CPU, RAM and storage;
- exact Windows release;
- Windows 11 compatibility;
- warranty status;
- critical applications;
- local data;
- backup or synchronization status;
- encryption status;
- chosen action;
- target date.
That turns a vague emergency into a manageable project.
Get a clear view of the fleet
A managed IT workstation review can quickly separate easy upgrades, replacement candidates and the limited exceptions that may justify temporary ESU.
Contact Montreal IT to plan an inventory and phased migration.