Windows 10 end of life: what to do with business PCs in 2026

Windows 10 end of life for businesses: dates, the price of paid updates and how to decide whether to upgrade, replace or isolate each PC.

On October 14, 2025, Microsoft ended support for Windows 10. The Windows 10 end of life does not switch computers off, but the system no longer receives security patches on them, unless you subscribe to extended updates. A year later, your company may still have a few computers on Windows 10: an accounting computer, a PC that controls a machine, a laptop that was never replaced. For businesses, however, the first year of this program ended on October 13, 2026. The second began the next day, and it costs twice as much.

Here is where things stand as of October 21, 2026, based solely on Microsoft’s own publications, along with a method for deciding what to do with each computer.

Windows 10 end of life: where things stand on October 21, 2026

Microsoft offers an annual subscription called ESU (Extended Security Updates), which allows a Windows 10 computer to keep receiving “critical” and “important” security patches. It provides neither new features nor general technical support. Microsoft presents it as a paid, last-resort and temporary option.

There are two programs:

The program for organizations covers the Pro, Enterprise and Education editions in business use. According to Microsoft’s FAQ, its first year ended on October 13, 2026, the second runs until October 12, 2027 and the third, the last, until October 10, 2028.
The consumer program, reserved for devices in personal use, was due to end on October 13, 2026. On June 25, 2026, Microsoft announced a one-year extension: according to its page for consumers, it ends on October 12, 2027, and devices already enrolled remain covered automatically until then.

This extension does not apply to businesses: according to Microsoft, the consumer program “cannot be used in commercial scenarios”. It also excludes computers joined to a company directory (Active Directory or Microsoft Entra domain) and those managed by a device management tool. An SME therefore falls under the program for organizations.

Windows 10 ESU year 2: what it costs a business

For organizations, Microsoft lists a price of US$61 per computer for the first year and states that the price doubles every consecutive year, for a maximum of three years. That means $122 for the second year, then $244 for the third. These are reference prices: the amount in euros depends on the purchasing channel (volume licensing or a Microsoft partner reseller).

Three rules matter:

The years add up. If you did not subscribe in the first year, covering a computer today means paying for year 1 as well: $183 for the two years, under the same rule. Covering it until the end of the program comes to $427 in total.
Coverage is bought by the full year: Microsoft rules out shorter periods, such as six months.
Each year is a separate license, valid for its own period only and activated on the computer with its own activation ID: activating the first year therefore does not cover the second.

Finally, these updates are provided at no extra cost for Windows 10 running remotely in Windows 365 or Azure Virtual Desktop, two Microsoft services, and for a Windows 10 computer connected to a Windows 365 Cloud PC, as long as the subscription is active.

Take inventory of your computers

Before spending anything, list the computers concerned. For each one, note at least:

who uses it and for what: office work, accounting, controlling a machine, shared workstation;
the exact version of Windows 10, because only version 22H2 can receive these updates;
the edition and how it is managed (company directory, device management tool); the “long-term” LTSB and LTSC editions, which follow their own schedule, are excluded;
the business software installed and what its vendor says about its compatibility with Windows 11;
the computer’s age and general condition.

Upgrade to Windows 11 or replace the computer

When the hardware allows it, upgrading to Windows 11 remains the simplest route, and it is the one Microsoft recommends. Its hardware requirements include a compatible 64-bit processor with at least two cores at 1 GHz, 4 GB of memory, 64 GB of storage, boot firmware (UEFI) that supports Secure Boot and a TPM 2.0 security module. On an older computer, first check that its processor is on the list of supported models.

For each computer, there are three possible cases:

the computer and its software are compatible: plan the upgrade to Windows 11, after a backup and a trial on a first computer;
the computer is not compatible but is used for everyday tasks: compare the cumulative cost of the paid updates with the price of a replacement, bearing in mind that no coverage is planned after October 10, 2028;
the computer is not compatible and cannot be replaced in the short term, for example because it controls equipment whose software only exists for Windows 10: you then need to pay for the extended updates and isolate it.

Protect the computers that stay on Windows 10

A computer kept on Windows 10 remains an at-risk device. Regarding third-party tools that control which applications are allowed to run, Microsoft points out that they “do not replace the product’s security patches”. Isolation follows the same logic: it reduces exposure, it does not replace updates. The usual measures:

place the machine on a separate part of the network, limited to strictly necessary traffic;
remove email, web browsing and general internet access when its use allows;
remove users’ administrator rights, delete unnecessary accounts, disable USB ports and network shares that are not essential;
back it up, so it can be rebuilt quickly;
monitor it, so that an alert is raised in case of unusual behavior.

A computer cut off from the internet must still receive patches: give it limited access to Microsoft’s update services only, or distribute them from an internal update server. To activate the license without internet access, Microsoft provides a phone procedure.

Finally, keep a record of these exceptions (computers, reason for keeping them, measures, planned retirement date): this register helps you make decisions and will be useful in the event of an audit or incident. Our article on how to secure your IT without holding back growth explains this approach of proportionate measures in detail.

A concrete example

Take, as an illustration, a 20-person SME whose inventory reveals six computers still on Windows 10. Three are compatible with Windows 11: they are upgraded after the payroll software has been tested on a first computer. Two old laptops are not: rather than paying up to $427 each with no solution at the end, the company replaces them within the quarter’s budget. The last computer controls a cutting machine whose software only exists for Windows 10. It receives the year 1 and year 2 licenses, moves to an isolated network with no web browsing or email, and its patches reach it through an internal server. Replacing the equipment is included in the budget before the end of the third and final year of coverage.

Frequently asked questions

Will my Windows 10 computers stop working?

No, they keep working. But without the extended updates, they have not received any security patches since October 14, 2025, and flaws discovered since then remain open.

Microsoft 365 is still updated on Windows 10: is that enough?

No. Microsoft will keep providing security updates for Microsoft 365 apps on Windows 10 until October 10, 2028, but they only cover those apps. Windows 10 itself is only patched if the computer is covered by the extended updates.

Can we pay for the second year only?

No. The years add up: covering a computer in the second year means buying the first year as well, then activating the second-year license on the computer.

411bit supports small businesses and SMEs with this type of project: inventory of computers, compatibility checks, a plan to upgrade to Windows 11 or to replace computers, then isolation and monitoring of the computers kept on Windows 10, as part of an audit or a managed IT services contract (management of your IT by an outside provider). We provide a fixed-price quote per deliverable, with a single technical contact and a response to every request within 24 business hours. To review your computers, contact us. See also our article on choosing between managed IT services and in-house IT.