The short answer: Windows 10 stopped receiving free security updates on 14 October 2025. Businesses can keep Windows 10 PCs patched by buying Extended Security Updates (ESU) one year at a time, for up to three years. Year one ends on 13 October 2026. ESU is cumulative, so a PC that joins in year two has to pay for year one as well. For most businesses, the better plan is to use ESU only as a bridge while moving to Windows 11.
Where things stand in September 2026
- Windows 10 Home, Pro, Enterprise and Education (version 22H2, the final version) reached end of support on 14 October 2025.
- Without ESU, a Windows 10 PC gets no security fixes. Every vulnerability found since then stays open.
- Running unsupported software also fails the Cyber Essentials requirement that software must be licensed and supported.
How business ESU works
| ESU year | Coverage | Microsoft's US price per device |
|---|---|---|
| Year 1 | 15 October 2025 to 13 October 2026 | $61 |
| Year 2 | 14 October 2026 to 12 October 2027 | Double year 1 ($122) |
| Year 3 | 13 October 2027 to 10 October 2028 | Double year 2 ($244) |
Microsoft publishes the price in US dollars and says it doubles each year. UK businesses buy through a Microsoft partner or volume licensing, so check the sterling price at the time of purchase.
Points to know:
- ESU is sold a year at a time, per device, with a minimum of one licence.
- It's cumulative. Microsoft says that if you buy in year two, you pay for year one too. From 14 October 2026, a PC joining ESU costs years one and two together.
- It only covers security updates. There are no new features and no Microsoft technical support.
- Each PC needs preparing. It must run Windows 10 22H2 with the required updates, and is activated with a key installed on each device.
Can a business use the consumer ESU?
No. Microsoft's consumer ESU (free with a synced Microsoft account, or a one-off fee) now runs until 12 October 2027, but Microsoft states it can't be used for business purposes. It also excludes devices joined to Active Directory or Microsoft Entra, and devices managed by tools such as Intune.
Ways to get ESU at no extra cost
- Windows 365 and Azure Virtual Desktop: Windows 10 virtual machines in these and other Azure services get ESU at no extra charge.
- Windows 10 PCs used to connect to Windows 365: they get ESU for all three years if the user has a Windows 365 Enterprise licence, the PC is Entra joined or hybrid joined, the user signs in at least every 22 days, and a specific policy is deployed. This suits businesses already heading for cloud PCs, not most small offices.
Moving to Windows 11 instead
Check whether each PC can upgrade
Windows 11 needs:
- a supported 64-bit processor (Microsoft's lists start at Intel 8th-generation Core and AMD Ryzen 2000-series);
- at least 4GB of memory and 64GB of storage;
- UEFI firmware with Secure Boot capability;
- TPM 2.0.
Microsoft's free PC Health Check app tells you whether a PC qualifies and what's stopping it.
Then decide PC by PC
| Situation | Sensible route |
|---|---|
| PC meets the requirements | Upgrade in place to Windows 11. Test key software first. |
| PC doesn't qualify but is otherwise sound, and replacement is planned this year | ESU as a short bridge, then replace. |
| PC doesn't qualify and is several years old | Replace now. Two years of ESU buys no new hardware. |
| Specialist software that won't run on Windows 11 | ESU while the software supplier provides an update, or run it in a Windows 365 or Azure Virtual Desktop session. |
Windows 11 Pro devices and Windows 11 Pro licences are available from the Apaxon store.
What about Microsoft 365 on Windows 10?
Microsoft 365 Apps will keep receiving security updates on Windows 10 until 10 October 2028, but new features stop after version 2608 and Microsoft's support for problems on Windows 10 is limited. It isn't a reason to stay on Windows 10.
Other Windows 10 editions
Windows 10 Enterprise LTSC and IoT editions have their own dates and aren't part of the ESU programme. Windows 10 Enterprise LTSC 2021, for example, reaches end of support in January 2027. Check the Microsoft lifecycle page for your exact edition.
A simple plan
- List every Windows 10 device, including ones in cupboards and meeting rooms.
- Run PC Health Check or a management report to find which can upgrade.
- Upgrade the eligible ones, starting with the least critical.
- Buy ESU only for PCs that genuinely need more time, before 14 October 2026 if possible.
- Budget replacements for the rest. Our guide to aligning IT budget with business goals helps.
Apaxon can audit your devices and plan the move as part of its managed IT services. get in touch.
Sources
- Microsoft: Windows 10 Home and Pro lifecycle
- Microsoft: Extended Security Updates for Windows 10
- Microsoft Partner Center: Windows 10 ESU purchase periods
- Microsoft: Consumer Extended Security Updates
- Microsoft: ESU for Windows 10 devices connecting to Windows 365
- Microsoft: Windows 11 requirements
- Microsoft: Microsoft 365 Apps on Windows 10 after end of support
Get the latest IT insights
Expert tips, infrastructure news, and product updates — delivered weekly.
