As of October 14, 2025, Windows 10 is out of support. Security fixes have stopped unless you enroll devices into Extended Security Updates (ESU), which runs until October 13, 2026. If you still have Windows 10 PCs in production, here’s the short, practical plan.
What changed
- End of support: No more monthly security updates for Windows 10 without ESU.
- ESU option: Enroll devices to receive critical patches through Oct 13, 2026 (consumer and commercial paths available).
- Antivirus isn’t enough: Defender signatures continue for years, but without OS patches your risk grows.
What to do this month
- Inventory & segment: List all Windows 10 devices; separate upgrade-ready vs must-stay (apps/hardware constraints).
- Enroll ESU for holdouts: Activate ESU on the must-stay group to keep getting critical fixes.
- Plan upgrades to Windows 11: Prioritise modern hardware and start testing line-of-business apps on Windows 11 24H2.
- Tighten identity & access: Enable passkeys in Microsoft Authenticator and review Entra Identity Secure Score for quick wins.
- Communicate the deadline: Set internal dates (e.g., “All non-ESU Windows 10 devices retired by Q1 2026”).
Why move fast
- Audit & contracts: Many partners now require supported OS versions.
- Security: Exploits targeting unpatched Windows 10 will rise over time.
- Productivity: Windows 11 continues to ship AI/Copilot and management improvements your teams will benefit from.
How SK Consulting can help
- Rapid assessment: Full device inventory, ESU eligibility, and Windows 11 readiness.
- Migration plan: App compatibility, pilot groups, and deployment with Intune.
- Security uplift: Passkeys, Conditional Access, and baseline hardening during the move.
Need help making the move? Contact us.
