Business IT projects · Across Québec Request a quoteFrançais

Guide

Windows 10 end of support: what should an SMB do?

Short answer

According to Microsoft Learn, Windows 10 support ended on October 14, 2025. An SMB that still runs Windows 10 computers has three options: upgrade them to Windows 11 if they are eligible, replace them, or enroll them temporarily in the Extended Security Updates (ESU) program.

This guide is for information only and is not legal advice.

Many businesses still have a few Windows 10 computers: a front desk PC, a computer connected to a machine, a laptop that is rarely used. This guide explains what end of support means according to Microsoft, how to tell which computers can move to Windows 11, what each of the three options involves and what to include in a quote request. Courtier TI is not affiliated with Microsoft; the information comes from Microsoft Learn public documentation, read on October 9, 2026.

What end of support means

Microsoft Learn states that Windows 10 reached end of support on October 14, 2025, for the Home and Pro editions as well as the Enterprise and Education editions. Version 22H2 is the final version of Windows 10. Existing LTSC releases follow their own lifecycles.

After the end of support date, Microsoft states that there are no new security updates, non-security updates, assisted support options or online technical content updates. A Windows 10 computer that is not enrolled in the ESU program, described below, therefore no longer receives security fixes.

Checking which computers can move to Windows 11

A Windows 10 computer cannot always move to Windows 11. Microsoft publishes minimum requirements that include TPM 2.0 and UEFI Secure Boot capable firmware, among others. The Desktop computers page summarizes these requirements and links to Microsoft's page.

For a direct upgrade, Microsoft Learn adds that the computer must be running Windows 10, version 2004 or later, and have the September 14, 2021 security update or a later one installed.

In practice, the device inventory provides the answer: for each computer, note whether it meets the minimum requirements, and you get three groups: eligible computers, computers to replace and computers to keep on Windows 10 temporarily.

The three options

1. Upgrade to Windows 11

For eligible computers, upgrading keeps the device. It needs planning: backing up data, checking software and drivers, the order in which computers are upgraded, and helping employees afterwards. In a business that manages its devices with a tool such as Microsoft Intune, the rollout can be part of that management.

2. Replace the computers

Computers that do not meet the Windows 11 minimum requirements need to be replaced. Replacement is a chance to review needs by employee profile: desktop or laptop, docking stations, monitors. The Desktop computers page describes what a quote request should cover, including wiping old drives according to the Canadian Centre for Cyber Security's publication ITSAP.40.006.

3. The Extended Security Updates (ESU) program

The ESU program is a paid program. According to Microsoft Learn, it lets enrolled computers keep receiving critical and important security updates through an annual subscription. For commercial organizations, it covers a maximum of three years after end of support. The annual periods end on the following dates, according to Microsoft Learn, read on October 9, 2026:

  • Year 1: through October 13, 2026
  • Year 2: through October 12, 2027
  • Year 3: through October 10, 2028

Microsoft Learn also states that:

  • eligible editions include Enterprise, Education and Pro in commercial use;
  • computers must be running Windows 10, version 22H2;
  • the program is purchased by year, with no partial periods, and the years are cumulative: a business that enrolls in Year 2 must also pay for Year 1;
  • ESUs do not include new features, and the program does not extend the product's lifecycle.

Microsoft describes the program as a last resort option: it is not intended as a long-term solution, but as a temporary bridge to stay secure while migrating to a supported platform. ESU therefore buys time to upgrade or replace computers; it does not replace that project. If you are considering it, state in your request which computers are concerned and when you plan to upgrade or replace them.

Taking an inventory of computers

The inventory is the starting point, whichever option you choose. In its publication Obsolete products (ITSAP.00.095), the Canadian Centre for Cyber Security recommends maintaining a centralized inventory of hardware and software, with product name, version, location, business owner and vendor support status. For Windows 10, note for each computer:

  • the model, year of purchase and user;
  • the Windows edition and version installed;
  • whether it meets the Windows 11 minimum requirements;
  • the software or connected devices that must work on Windows 11;
  • the option chosen: upgrade, replacement or temporary ESU.

What to include in the quote request

A clear request helps the IT services company prepare a quote that fits your situation. State:

  • the number of Windows 10 computers and the inventory results, if you have them;
  • the computers to upgrade, replace or enroll temporarily in the ESU program;
  • the line-of-business software to check with Windows 11;
  • your constraints: hours when downtime would be a problem, sites, remote work;
  • how your computers are managed today, and whether you want ongoing device management;
  • removal and wiping of old computers.

Frequently asked questions

Is Windows 10 still supported?

No. According to Microsoft Learn, Windows 10 support ended on October 14, 2025. Version 22H2 is the final version of Windows 10. Only computers enrolled in the ESU program keep receiving security updates, temporarily.

How long does the ESU program cover businesses?

According to Microsoft Learn, read on October 9, 2026, commercial organizations can receive security updates for a maximum of three years after end of support. The annual periods end on October 13, 2026, October 12, 2027 and October 10, 2028.

Is the ESU program a permanent solution?

No. Microsoft describes it as a last resort option and a temporary bridge, not a long-term solution. It does not include new features and does not extend the lifecycle of Windows 10. It buys time to upgrade or replace computers.

How can we tell whether a computer can move to Windows 11?

It must meet the minimum requirements published by Microsoft, which include TPM 2.0 and UEFI Secure Boot capable firmware, among others. The device inventory lets you check each computer.

What should we do with replaced computers?

The data must be wiped before the computers leave the business. The Desktop computers page describes the methods recommended by the Canadian Centre for Cyber Security and what to ask for in the quote.

Is Courtier TI affiliated with Microsoft?

No. Courtier TI is not affiliated with Microsoft. The Courtier TI team reviews your request and assigns it to the IT services company that will prepare your quote.

Sources

  1. Microsoft Learn, Windows 10 Home and Pro (lifecycle), read on October 9, 2026
  2. Microsoft Learn, Windows 10 Enterprise and Education (lifecycle), read on October 9, 2026
  3. Microsoft Learn, Ending Support in 2025, read on October 9, 2026
  4. Microsoft Learn, Product Lifecycle FAQ: Extended Security Updates, read on October 9, 2026
  5. Microsoft Learn, Extended Security Updates (ESU) program for Windows 10, read on October 9, 2026
  6. Microsoft Learn, Windows 11 requirements, read on October 9, 2026
  7. Canadian Centre for Cyber Security, Obsolete products (ITSAP.00.095)

Have an IT project in mind?

Describe your project in a few lines: the team will contact you to clarify your needs and send you a quote.

Get a quote