Windows 10 reached end of support on October 14, 2025. Since then, the only way to keep a Windows 10 PC receiving security patches has been Microsoft's paid Extended Security Updates (ESU) program.
Year 1 of that program ended on October 13, 2026. Year 2 started the next day — and the price doubled.
If you still have Windows 10 machines in your office, this is the month to decide what happens to them. Doing nothing is a decision too, and it's the most expensive one.
The Math for Year 2
The catch most businesses miss: ESU is cumulative. You can't buy year 2 on its own. If you skipped year 1, enrolling now means paying for both years — $183 per device for one year of patches going forward.
And that money buys security updates only. No new features, no fixes for non-security bugs, and less and less compatibility with the software you run every day.
What Running Windows 10 Without ESU Actually Means
A Windows 10 PC that isn't enrolled in ESU stopped receiving security patches a year ago. Every vulnerability disclosed since then is still open on that machine — and attackers know exactly which ones they are.
Unsupported operating systems are a standard question on cyber insurance applications and a common finding in NYDFS and HIPAA assessments. One unpatched Windows 10 machine can be the reason a claim gets disputed.
Your Four Options
Upgrade eligible PCs to Windows 11 — free
Machines that meet Windows 11's hardware requirements (TPM 2.0, a supported processor, Secure Boot) can upgrade at no license cost. Many businesses have more eligible PCs than they realize. Start here.
Replace PCs that can't upgrade
Older hardware that can't run Windows 11 is usually near the end of its useful life anyway. Compare the cost of a new business-class laptop against two years of ESU plus the support time an aging machine eats.
Buy ESU as a bridge — for specific machines
ESU makes sense for a short list of PCs you can't replace yet: a machine tied to legacy software, specialized equipment, or a replacement that's already budgeted for early 2027. It shouldn't be the default for the whole fleet.
Move specific workloads to the cloud
Windows 10 devices connecting to Windows 365 Cloud PCs, and Windows 10 virtual machines in Azure, receive ESU coverage at no additional cost. For a few legacy apps, that can be cheaper than keeping old hardware alive.
Renew or Replace: The Quick Test
| Situation | Usual answer |
|---|---|
| PC meets Windows 11 requirements | Upgrade — free |
| PC is 5+ years old, can't upgrade | Replace |
| Runs legacy software that won't work on Windows 11 | ESU as a bridge + plan |
| Replacement already budgeted for Q1 2027 | ESU for those months |
| No ESU, no plan, still in daily use | Fix this week |
What to Do This Month
- Inventory every Windows 10 device — including the ones in conference rooms, at the front desk, and running that one piece of equipment nobody touches
- Check Windows 11 eligibility for each one
- Upgrade the eligible machines — schedule it, test your line-of-business apps first
- Price replacements for the rest and compare against ESU at $183 per device
- Enroll only the exceptions in ESU, with a written replacement date for each
If you're building your 2027 IT budget right now, this belongs in it. A fleet refresh planned in October is a line item. One forced by a breach in February is a crisis.
Free Windows 10 Fleet Review
We'll inventory your Windows 10 devices, check which ones can upgrade for free, and give you a clear renew-vs-replace plan with real numbers.
DM us "MANAGED" on LinkedIn or schedule a free consultation · (646) 791-2137