Still on Windows 10? What Small Businesses Should Do Now

If some of the computers in your office still run Windows 10, you're not alone. They probably still work fine, which makes it easy to put off. But Windows 10 is no longer a supported product, and that changes the risk of keeping it on a business network.

This article explains what end of support actually means, what your options are, and a simple plan to get every computer onto a supported version of Windows without disrupting your team.

What "end of support" means

Microsoft ended support for Windows 10 on October 14, 2025. Since then, Microsoft no longer provides security updates, software updates or technical support for it (Microsoft: Windows 10 support has ended).

Your PCs won't shut off or lock you out. The problem is quieter: when a new security flaw is found in Windows, Windows 10 PCs without extended coverage don't get the fix. Criminals know this, and unpatched computers are one of the easiest ways into a business network. One weak PC can put your email, your files and your customers' data at risk.

There are knock-on effects too. Microsoft says the Microsoft 365 apps are no longer supported on Windows 10, although it will keep sending security updates for those apps until October 10, 2028. Other software vendors and hardware makers also tend to stop testing on, and supporting, systems that are past their end of life.

Your three options

1. Upgrade to Windows 11 (free on PCs that qualify)

If a computer meets the Windows 11 requirements, the upgrade is free. The most common reason a PC doesn't qualify is the security chip: Windows 11 requires TPM 2.0 (Microsoft: Enable TPM 2.0 on your PC), and some older PCs also have a processor that isn't on Microsoft's supported list. You can check a single PC under Settings, Windows Update, or with Microsoft's PC Health Check app.

2. Replace PCs that can't upgrade

For computers that fail the requirements, replacement is usually the better long-term choice. A new business-class PC comes with Windows 11 and the security hardware it relies on, such as TPM 2.0 for BitLocker drive encryption.

3. Buy Extended Security Updates as a short bridge

Extended Security Updates (ESU) keep critical and important security fixes flowing to Windows 10 for a limited time. There are two programs, and the difference matters for businesses:

• Consumer ESU runs until October 12, 2027, and can be free for home users. But Microsoft says it can't be used in commercial scenarios, and it isn't offered on PCs joined to an Active Directory domain or Microsoft Entra ID, or enrolled in a device management tool (Microsoft: Windows 10 Extended Security Updates).
• Commercial ESU is the program for businesses. It is bought per device, one year at a time, for a maximum of three years. The years are cumulative, so joining late means paying for the years you missed. It only works on Windows 10 version 22H2, and it includes security fixes only: no new features and no general technical support (Microsoft Learn: Extended Security Updates for Windows 10).

ESU makes sense for a computer you truly can't replace yet, for example one that runs specialized software or controls a piece of equipment that hasn't been certified on Windows 11. It is not a reason to keep a whole office on Windows 10.

A simple plan to finish the move

1. Make a list. Write down every Windows computer in the business, including the one at the front desk, the laptop in the owner's bag and the PC that runs the label printer in the back. Note the Windows version on each.
2. Check each one against the Windows 11 requirements. Sort them into three groups: can upgrade, must replace, needs a special exception.
3. Check your software. Ask the vendors of your key business applications (accounting, practice management, point of sale, design tools) whether they support Windows 11, and which version you need.
4. Back up first. Before upgrading or replacing any PC, make sure the files on it are backed up or already saved in OneDrive or SharePoint. If you're not sure what Microsoft protects on its own, see Does Microsoft 365 back up your data?
5. Upgrade in small batches, after hours if possible, starting with one or two PCs so you find any problems before they affect everyone.
6. Budget for replacements and schedule them, oldest and most critical first.
7. Cover the stragglers with commercial ESU and set a firm date to retire them.
8. Turn on the security you get with Windows 11: BitLocker drive encryption, automatic updates, and your endpoint protection.

If you can't move a PC right away

Sometimes a computer has to stay on Windows 10 for a while. Reduce the risk while you plan:

• Enroll it in commercial ESU so it keeps getting security fixes.
• Limit what it's used for. No general web browsing or personal email on a PC that only needs to run one application.
• Keep endpoint protection running and monitored.
• Separate it on the network if it doesn't need to reach everything else.
• Check your cyber insurance. Read your policy and application for anything about unsupported software, and answer those questions accurately.

Unsupported systems are only one item on a longer list. Our small business cybersecurity checklist covers the other protections that stop most attacks.

How CyberArm can help

Our IT support team can inventory your computers, check which ones qualify for Windows 11, test your key software, and handle the upgrades and new PC setups so your staff can keep working. For PCs that need more time, we can set up and track commercial ESU and keep them patched and monitored until they're retired. Patching for operating systems and apps is also part of every one of our cybersecurity packages.

The bottom line

Windows 10 PCs still work, but without security updates they get riskier every month. Make a list, upgrade what qualifies, replace what doesn't, and use Extended Security Updates only to buy time. If you'd like a clear picture of where your computers stand, our free IT and security assessment checks your devices and updates and gives you a written Executive Summary with the fixes that matter most.