| Windows 10 end of life is the point at which Microsoft stopped providing free security updates, bug fixes, and technical support for the operating system. That date was 14 October 2025, and any business still running it without paid extended cover is now exposed to unpatched security risks. |
Is your business still running Windows 10? Plenty are, and the deadline has already passed.
Microsoft ended support for the operating system on 14 October 2025. The machines still switch on, the software still loads, and most days nothing seems wrong. That is what makes it easy to ignore. The protection underneath has been removed while everything on the surface looks normal, and the risk grows each month across security, compliance, and your insurance cover.
The fix is manageable once you have a clear picture. This guide explains what the end of support means for your business, the risks of carrying on as you are, the options open to you, and a simple plan to move forward without overspending.
What Does Windows 10 End of Life Mean?
Windows 10 end of life means Microsoft no longer releases free security updates, feature updates, bug fixes, or technical support for the operating system. The cut-off was 14 October 2025, and it applies to every standard edition, including Home, Pro, and Enterprise running version 22H2.
Your computers will keep working after this date. Nothing switches off overnight. The danger is slower and quieter. Each month that Microsoft would normally have closed newly discovered security holes, those holes now stay open on your machines. Attackers know this, and unsupported systems become an easy target.
This is different from a device simply ageing. A five-year-old laptop running a supported operating system still receives protection. A brand-new build running unsupported Windows 10 does not. The risk is tied to the software lifecycle, not the hardware age.
Is Windows 10 Still Safe to Use After End of Support?
Windows 10 is not safe to use for business purposes after end of support without extra protection in place. The operating system still functions, but it no longer receives the security patches that defend against new threats. Think of the one ageing machine in the corner that nobody has looked at in months. Every vulnerability found since October 2025 sits open on it, and it only takes one staff member clicking one bad link on that device for the problem to spread.
What Is the Difference Between End of Support and End of Life?
In practice the two terms describe the same outcome for your business. End of support is the date Microsoft stops maintaining the product, and end of life is the broader term for a product that has reached the end of its supported lifespan. For planning purposes, treat 14 October 2025 as the date that matters.
Why Windows 10 End of Life Is a Serious Business Risk
Running an unsupported operating system creates risk across security, compliance, and insurance at the same time. It is not only an IT issue. It touches your legal obligations, your cyber insurance cover, and your ability to win and keep clients who expect their data to be handled safely.
How Does Unpatched Software Increase Cyber Risk?
Unpatched software increases cyber risk because every known vulnerability stays open for attackers to exploit. Most breaches do not rely on clever new techniques. They rely on flaws that already have a fix, applied to systems where the fix was never installed.
Once Microsoft stops releasing patches, that list of open doors only grows. Strong endpoint security and layered defences help, and they are worth having, but they cannot make up for an operating system that no longer gets fixed. The protections sitting on top are only as good as the system underneath them.
Does Running Windows 10 Affect Compliance?
Yes. Running unsupported software can put you at odds with your obligations under the Privacy Act. The Act requires businesses to protect personal information with reasonable security safeguards, and an unpatched operating system is difficult to defend as reasonable if a breach is investigated. Our guide to NZ Privacy Act compliance covers what your IT setup needs to have in place.
Will Cyber Insurance Still Cover Unsupported Systems?
Many cyber insurance policies now ask whether your systems are supported and patched. Continuing to run an unsupported operating system can reduce your cover or give an insurer grounds to decline a claim, which is the last thing you want after an incident has already cost you time and money. It is worth reading that section of your policy closely, because the honest answer to one tick-box question may be different today from when you first signed up.
How to Check if Your Devices Can Run Windows 11
The first practical question after the end of support is really a budget question: which of your machines can move to Windows 11 for free, and which will cost you to replace? The answer sorts every device into upgrade, extend, or replace, which turns a general worry into a figure you can plan around.
What Are the Windows 11 Hardware Requirements?
Windows 11 sets a higher hardware bar than Windows 10. To be eligible, a device generally needs the following:
- A compatible 64-bit processor from Microsoft’s approved list, usually 8th generation Intel or newer.
- A TPM 2.0 security chip, which handles encryption and secure sign-in.
- UEFI firmware with Secure Boot capability.
- At least 4 GB of RAM and 64 GB of storage, though more is sensible for business use.
The TPM 2.0 requirement is the one that catches most businesses out. Many otherwise capable machines bought before around 2018 simply do not have it, or have it disabled in firmware, which puts them in the replace or extend category.
How Do You Run the Compatibility Check?
Microsoft provides a free PC Health Check tool that tells you in seconds whether a specific device meets the Windows 11 requirements. For a handful of computers this is quick to run yourself. Across a larger fleet, an IT provider can audit every device at once and return a single list grouped by upgrade status, which is far faster than checking machines one by one.
What Are Your Options After Windows 10 End of Life?
You have three realistic paths: upgrade eligible devices to Windows 11, enrol in Extended Security Updates as a short bridge, or replace hardware that cannot make the jump. Most businesses use a mix of all three across their fleet rather than a single approach.
Should You Upgrade to Windows 11?
Upgrading to Windows 11 is the cleanest long-term answer for any device that meets the hardware requirements. It is a free upgrade for eligible Windows 10 machines and restores full security support, updates, and feature development. Beyond security, Windows 11 brings stronger built-in protection, better performance on modern hardware, and a more streamlined interface that most staff adapt to quickly.
What Are Extended Security Updates?
Extended Security Updates, or ESU, are paid security patches Microsoft offers for Windows 10 after end of support. They cover critical and important security fixes only, with no new features and no general technical support. For businesses, ESU is best understood as a temporary bridge that buys planning time, not a long-term home.
Commercial ESU can be purchased for up to three years beyond the October 2025 cut-off, with the price rising each year to encourage migration. It makes sense when a specific device or application genuinely cannot move yet, for example a machine tied to legacy software. It is a way to stay patched while you plan a proper transition, rather than a reason to delay one.
Is ESU Cheaper Than Replacing a Device?
Often it is not. Because ESU is charged per device and the cost rises each year, paying to extend an old machine can end up costing more than replacing it, and you will likely replace it later anyway. Replacement is usually the right call when a device fails the Windows 11 check and is already several years old. Spreading that cost through Device as a Service or IT hardware leasing turns a large one-off bill into a predictable monthly cost.
What Happens to Your Business Apps on Windows 10?
Your applications do not stop working the moment support ends, but they gradually become harder to maintain. Software vendors stop testing and supporting their products on unsupported operating systems, so over time new versions, security fixes, and help-desk cover for your everyday tools begin to drop away as well.
Will Microsoft 365 Keep Working?
Microsoft 365 apps continue to run on Windows 10 for now, but Microsoft has confirmed it will no longer support them on the unsupported operating system over time. You may keep receiving some security updates for the apps for a limited period, but running current Office software on an out-of-date operating system is not a setup Microsoft recommends or guarantees. The safest position is to have the operating system supported underneath the apps you rely on.
Why Secure Boot Adds Urgency in 2026
There is a second deadline that many businesses have missed. Microsoft has confirmed that the Secure Boot certificates used by most Windows devices begin expiring from June 2026. Devices on Windows 11, or on Windows 10 enrolled in ESU, receive updated certificates automatically. Standard, unsupported Windows 10 machines may not, which means they lose another layer of trusted protection on top of missing security patches. This makes early planning more important, not less.
How to Plan Your Windows 10 End of Life Migration
A smooth migration starts with knowing exactly what you have. Rushing to replace every machine at once is expensive and disruptive. A phased plan, based on a clear device audit, spreads the cost and keeps your business running throughout.
Step One: Audit Your Devices
Start by listing every device in your business and its current operating system. Record which machines run Windows 10, which already run Windows 11, and which are eligible to upgrade. This audit turns a vague worry into a clear, costed action list you can budget against.
Step Two: Group Devices by Action
Sort your Windows 10 devices into three simple groups: ready to upgrade now, fixable with a small firmware change, and too old to upgrade at all. Start your planning with that last group. Those machines carry the most risk and take the longest to sort out, whether that means buying replacements or arranging extended cover.
Step Three: Roll Out in Waves
Deal with the riskiest machines first, such as the ones holding sensitive client data or used by staff working online all day. Then schedule the rest in waves, so your team is never all stuck waiting on a rebuild at the same time. A structured IT roadmap lets you fold this into your wider technology budget and spread the spend, rather than getting hit with one big bill in a single quarter.
Move Off Windows 10 Without the Stress
Exodesk has helped South Island businesses plan and run smooth operating system migrations since 1989. Whether you need a device audit, a Windows 11 rollout, or managed IT services to handle the whole transition for you, our Christchurch and Dunedin teams can take the pressure off.
Contact us today to discuss how we can help your business or connect with us on LinkedIn to stay updated with more insights.
Frequently Asked Questions
When did Windows 10 reach end of life?
Windows 10 reached end of life on 14 October 2025. After this date Microsoft stopped providing free security updates, bug fixes, and technical support for all standard editions. Devices keep working, but they no longer receive the patches that protect against new threats.
Is it safe to keep using Windows 10 for business?
It is not safe to keep using Windows 10 for business without extra protection in place. Each new vulnerability found after October 2025 stays unpatched on standard machines, leaving devices increasingly exposed. Businesses should upgrade, enrol in Extended Security Updates, or replace affected machines.
What is the difference between end of support and end of life?
End of support is the date Microsoft stops maintaining the product, and end of life is the broader term for a product that has reached the end of its supported lifespan. For Windows 10 the practical date for both is 14 October 2025. From that point standard Windows 10 no longer receives updates.
Can I upgrade from Windows 10 to Windows 11 for free?
Yes, eligible Windows 10 devices can upgrade to Windows 11 at no cost. The device must meet Microsoft’s hardware requirements, including a TPM 2.0 security chip and a supported processor. Machines that fail the hardware check cannot upgrade and will need replacement or Extended Security Updates.
How do I check if my computer can run Windows 11?
Microsoft offers a free PC Health Check tool that confirms in seconds whether a device meets the Windows 11 requirements. For a few computers you can run it yourself, while an IT provider can audit a whole fleet at once. The most common blocker is a missing or disabled TPM 2.0 chip.
What are Extended Security Updates for Windows 10?
Extended Security Updates, or ESU, are paid security patches Microsoft offers for Windows 10 after end of support. They cover critical and important fixes only, with no new features or general technical support. Commercial ESU is available for up to three years and works best as a short bridge while you plan a full migration.
Is ESU cheaper than replacing an old device?
Often not. ESU is charged per device and the price rises each year, so extending an old machine can cost more over time than replacing it, especially as you will likely replace it eventually anyway. ESU is most cost-effective for specific machines that genuinely cannot move yet.
Will Microsoft 365 still work on Windows 10?
Microsoft 365 apps continue to run on Windows 10 for now, but Microsoft will not support them on the unsupported operating system over the long term. You may receive some app security updates for a limited period, but running current Office software on an out-of-date system is not recommended.
Does running Windows 10 affect cyber insurance?
It can. Many policies now ask whether systems are supported and patched, and running unsupported Windows 10 can reduce your cover or give an insurer grounds to decline a claim. Check your policy wording carefully and confirm your answer is still accurate.
Where should a business start with Windows 10 end of life?
Start with a full device audit that lists every machine, its operating system, and its Windows 11 eligibility. From there you can group devices into upgrade, replace, and ESU buckets and build a phased plan around your budget. An IT partner can run the audit and manage the transition for you.
