Windows 10 keeps running – but without security updates
On 14 October 2025 Microsoft ended regular support for Windows 10. Since then most devices no longer receive free security updates. The computer still starts, Outlook opens, accounting runs. That is exactly what makes it tricky: you notice nothing until something happens.
Many small businesses I know in and around Magdeburg still have at least one Windows 10 machine: the PC next to a machine tool, the warehouse computer or the boss's old laptop. This article shows the options and how to decide calmly.
Why a computer without updates is a problem
Security updates close holes attackers already know about. After end of support, new holes keep being found but are no longer fixed for Windows 10. A single unprotected device on the network can become the entry point for all the others.
Three concrete consequences:
- Insurance: Many cyber insurers ask about current, supported operating systems.
- Data protection: The GDPR requires state-of-the-art safeguards. A system without updates hardly meets that.
- Software: Vendors of industry software, browsers and antivirus gradually drop Windows 10 support.
Your four options
1. Free upgrade to Windows 11
If the device meets the requirements, this is the easiest route. Key requirements include a TPM 2.0 chip, Secure Boot and a supported processor. Microsoft's "PC Health Check" app tells you within minutes.
Before you start: back up, check that printers, scanners and industry software work on Windows 11, and schedule the upgrade outside working hours.
2. Buy Extended Security Updates (ESU)
Microsoft offers businesses paid Extended Security Updates, renewable yearly for up to three years, with the price rising each year. ESU is a bridge, not a solution, mainly for devices tied to special software or machines not yet supported on Windows 11.
3. Replace the device
If the computer is five years or older, an upgrade often isn't worth it. Whether to buy, lease or rent is covered in a separate article on device procurement.
4. Disconnect the device
For computers that only control a machine and need no internet, strict separation from the company network can be a temporary solution: no Wi-Fi, no unchecked USB sticks, no email on the device.
Five steps
- Inventory: Which computers still run Windows 10? Name, age, user, key software.
- Check: Use PC Health Check for each device.
- Clarify software: Ask vendors which version is approved for Windows 11.
- Decide: Pick one of the four options per device. Devices with customer data first.
- Implement and document: backup, switch, test, short note in your IT documentation.
Common mistakes
- "It still works": working is not the same as secure.
- Upgrading without a backup.
- Unofficial workarounds to install Windows 11 on unsupported hardware leave you without guaranteed updates.
- Forgetting special devices such as till PCs, measurement computers or the meeting-room PC.
FAQ
Do I have to act immediately? As soon as possible. A planned switch over a few weeks is perfectly fine.
Is good antivirus enough? No. Antivirus does not replace operating-system security updates.
Conclusion
End of support is no reason to panic, but a clear task. With a device list and one decision per computer, most small businesses are done within a few weeks. If you want support, see our IT support or get in touch.
