Still Running Windows 10? What End of Support Actually Means

Windows 10 reached end of support on October 14, 2025. Nearly a year later, a surprising number of business PCs are still running it. Quietly, reliably, and completely unpatched.

That last word is the problem. The machines still boot. Applications still open. Nothing looks broken, which is exactly why this risk is so easy to defer. But every month that passes adds to a growing pile of vulnerabilities that Microsoft has documented, attackers have studied, and nobody is fixing.

If you still have Windows 10 in your environment, here is what actually changed, what your realistic options are, and how to work through it without a disruptive all-at-once replacement project.

What End of Support Actually Means

End of support is not a kill switch. Microsoft did not disable anything, and your Windows 10 machines will keep running indefinitely. What stopped is the flow of security updates.

Concretely, that means:

• No more security patches. Newly discovered vulnerabilities in Windows 10 will not be fixed on unenrolled machines.
• No technical support from Microsoft for issues on the platform.
• Gradually thinning software support. Vendors test against supported operating systems. Over time, new versions of the tools you rely on stop being validated on Windows 10, and eventually stop installing.
• Hardware and driver drift. New peripherals increasingly ship without Windows 10 drivers.

Why This Is a Compliance Problem, Not Just a Security One

For many businesses, the sharper deadline is not technical but contractual. Running unsupported software can put you offside with obligations you have already signed up to:

• Cyber insurance. Policies increasingly ask whether you run supported, patched operating systems. An inaccurate answer can jeopardise a claim at the worst possible moment.
• Regulatory frameworks. Regimes covering healthcare, financial services and payment card data generally expect security patches to be applied. An OS that cannot receive patches is difficult to defend in an audit.
• Client contracts. If you handle customer data, your agreements may already commit you to maintaining supported systems.

These obligations do not care that the machine still works. They care whether it can be patched.

Your Four Realistic Options

Every Windows 10 device in your environment ends up in one of four buckets. The work is deciding which, and being honest about the cost of each.

Working Through It Without a Crisis

Start with an accurate inventory

You cannot plan around machines you do not know about. Before anything else, establish how many Windows 10 devices you actually have, who uses them, what runs on them, and which ones meet the Windows 11 hardware requirements. This step routinely surprises people, both in the count and in how many turn out to be upgradeable at no hardware cost.

Sort by exposure, not by age

The natural instinct is to start with the oldest machines. Risk is the better sort order. A laptop that travels, handles email and browses the web is far more exposed than a fixed workstation on a segmented network. Prioritise the devices that touch the internet, handle sensitive data, or belong to users with elevated access.

Pilot before you commit

Upgrade a small, representative group first, ideally including your most demanding line-of-business application. Windows 11 is not a dramatic departure, but driver issues and application compatibility surprises are easier to absorb across five machines than fifty.

Budget replacements across quarters

For the machines that genuinely need replacing, spreading purchases across quarters is far easier to absorb than a single capital request. It also lets you standardise on fewer models over time, which pays back in support and imaging effort for years.

The businesses that handled this well did not move faster than everyone else. They simply started with an accurate inventory, so they knew how much of the problem was a free in-place upgrade and how much was a real purchase.

What to Do This Quarter

If Windows 10 is still in your environment, the useful next steps are small and concrete:

1. Count them. Get a definitive list of Windows 10 devices and their hardware eligibility.
2. Check your insurance application. Confirm what you told your carrier about supported operating systems, and whether it is still true.
3. Upgrade the easy ones now. Eligible machines are a free fix; there is no reason to leave them exposed while you plan the rest.
4. Price the remainder. Turn the leftover devices into a real number so it can be scheduled and budgeted rather than deferred.
5. Document anything that must stay. If a machine cannot move, write down why, what compensating controls are in place, and who accepted the risk.

None of this needs to happen in a single weekend. What it does need is to stop being invisible, because the one thing an unpatched operating system will not do is tell you when its luck runs out.