Windows 10 end of support arrived on 14 October 2025. For most home users the answer was simple: upgrade to Windows 11 or buy a new laptop. For businesses it has been messier. Somewhere in the office or on the workshop floor there is often a PC still running Windows 10, because one important program has never been tested on anything newer, or because the person who set it up left years ago.
A year on, Microsoft’s paid Extended Security Updates have bought many organisations time, but that time is limited and it costs more every year. This guide explains what Windows 10 end of support really means, where Extended Security Updates stand now, and how to deal with the old business software that is usually the real reason a Windows 10 machine is still in service. If you already know the software is the problem, our legacy system modernisation service exists for exactly this situation.
What Windows 10 end of support actually means
Microsoft’s lifecycle information confirms that Windows 10 Home and Pro reached the end of support on 14 October 2025, and that version 22H2 was the final release. Your PC did not stop working that day, and it will not stop working on any particular date in the future. What stopped was everything that keeps it safe and fixable:
- Security updates. New vulnerabilities found in Windows 10 are no longer patched, unless the machine is enrolled in Extended Security Updates.
- Bug fixes and new features. Problems are not fixed and nothing new is added.
- Technical support. Microsoft no longer helps with Windows 10 problems.
Over time, software vendors stop testing on Windows 10 and new hardware stops shipping with drivers for it. The machine keeps running, but the ground underneath it slowly erodes. Microsoft’s own Windows 10 end of support page makes a point worth repeating: antivirus alone is not enough to protect a system that no longer receives security updates.
Where Extended Security Updates stand in late 2026
Extended Security Updates, usually shortened to ESU, are Microsoft’s paid safety net. They deliver critical and important security fixes for Windows 10 version 22H2, and nothing else: no new features, no general bug fixes and no technical support. Microsoft’s guide to Windows 10 Extended Security Updates sets out how the commercial programme works:
- it runs for a maximum of three years after end of support, so October 2028 is the absolute limit;
- the price for organisations was set at $61 per device for the first year, and it doubles each year after that;
- it is cumulative, so a business that joins in the second year also pays for the first;
- it is bought through Microsoft’s volume licensing and cloud partner channels, with a minimum of one licence;
- it is included at no extra cost for Windows 10 machines running in Windows 365 or Azure Virtual Desktop.
Microsoft quotes the commercial price in US dollars, so what you pay in pounds depends on your reseller. A consumer version, now extended to 12 October 2027, is designed for personal devices. Microsoft excludes devices managed by an organisation or enrolled in business licensing, so it is not a route for company PCs. If you are a sole trader working on a personal laptop, read the eligibility terms carefully rather than assuming either way.
The practical message is that ESU is a bridge, not a destination. Every year you stay on it costs more than the last, and the bridge ends in October 2028 regardless.
Why old business software is the real blocker
For most businesses, Windows 11 itself is not the hard part. If a PC meets Microsoft’s minimum specification, the upgrade from Windows 10 is free. The machines still running it a year after Windows 10 end of support tend to be there for one of a handful of reasons:
- An old Microsoft Access database that runs quoting, job costing or stock, often built by someone who has since moved on.
- A line-of-business program from a vendor that has closed or stopped updating it, sometimes written in Visual Basic 6 or a similar older tool.
- A PC attached to machinery, such as a CNC router, a lab instrument or a label printer, where the control software or driver only supports older Windows.
- A licence dongle or hardware key with no driver for newer systems.
- Hardware that fails the Windows 11 checks, usually because of the processor or the TPM 2.0 security chip.

Microsoft’s published minimum for Windows 11 is a compatible 64-bit processor with at least two cores, 4GB of memory, 64GB of storage, UEFI firmware with Secure Boot, and TPM 2.0. Older office PCs often fail on the processor or TPM alone, so the free upgrade can mean new hardware.
Office versions matter too. Office 2016 and Office 2019, including Access 2016, reached the end of support in October 2025. Office 2021 and Office LTSC 2021, which include Access 2021, reach the end of support on 13 October 2026, according to Microsoft’s list of products ending support in 2026. Microsoft 365 apps on Windows 10 continue to receive security updates until October 2028, but that is a separate subscription product. A business running an Access 2016 database on Windows 10 now has two unsupported layers, not one.
Step one: find out what you actually have
Before deciding anything, make a list. In most small businesses nobody has a complete picture of which programs run where. For each Windows 10 machine still in use, note down:
- What it is for. Which tasks would stop if it disappeared tomorrow?
- Which software it runs, with version numbers, and whether the vendor still exists and still supports it.
- Where the data lives. On the PC itself, on a shared drive, or in a database file that several people open at once?
- What it connects to. Printers, scanners, machinery, licence dongles, other systems and the internet.
- Who knows how it works. If the answer is one person, write that down too.
- Whether it can be upgraded. Microsoft’s PC Health Check app, or a look at the processor and TPM, will tell you whether it meets the Windows 11 requirements.

This list usually sorts itself into three piles quickly: machines that can simply be upgraded, software that has a supported newer version or a modern equivalent, and a small number of awkward systems that need a proper decision. That last pile is where most of your time and money should go.
Will it run on Windows 11?
Often the answer is yes, and it is worth testing before assuming otherwise. Windows 11 only comes in a 64-bit edition, but 64-bit Windows runs most 32-bit programs through a built-in compatibility layer, so a 20-year-old 32-bit application frequently installs and works without fuss.
The exceptions are worth knowing:
- 16-bit programs will not run at all on 64-bit Windows. If part of your system dates from the Windows 3.1 era, it will need replacing or running in a virtual machine.
- Old drivers for scanners, label printers and machine interfaces are the most common failure. A program may install happily but then fail to talk to the device it controls.
- Licence dongles and copy protection sometimes rely on low-level drivers that newer Windows blocks.
- Access databases usually open in newer versions of Access, but older file formats, add-ins and code written for 32-bit Office can break under 64-bit Office.
The sensible approach is to test on one machine first. Take a copy of the data, set up a Windows 11 PC, install the software and work through a normal day with the person who uses it most. An afternoon of testing beats weeks of guessing.
Your options for old business software
Upgrade to a supported version
If the vendor still exists, ask whether a current version supports Windows 11. This is usually the quickest route, although it may mean paying for an upgrade you have put off for years.
Replace it with an off-the-shelf product
Plenty of tasks that once needed a custom database are now covered by subscription software: job management, stock control, CRM and booking. If a standard product fits most of how you work, it is often the cheapest long-term answer. Just be honest about whether the parts it does not fit are what make your business different.
Rebuild it as a web application
When the old system captures how your business genuinely works, rebuilding it as a browser-based application removes the Windows dependency for good. Staff can use it on any up-to-date device, and data lives in one secure place rather than on a single PC. We weigh up the trade-offs in our guide to whether to rebuild, refactor or replace legacy software, and if the system in question is an Access database, replacing a Microsoft Access database covers that case in detail.
For Eastern Procurement, a not-for-profit framework provider owned by social housing providers in the East of England, we built a React website and a back-end admin dashboard that gives the team an easy way to keep things up to date. It is used through a web browser, so it does not depend on which version of Windows sits on anyone’s desk.
Isolate the machine
Some systems cannot be replaced quickly, particularly PCs that drive expensive machinery. The National Cyber Security Centre’s guidance on managing obsolete products is blunt that “the only fully effective way to mitigate this risk is to stop using the obsolete product”. It also sets out ways to reduce the risk in the meantime: block email, web browsing and removable media on the device, put it on a separate part of the network, treat it as untrusted, re-image it regularly and monitor it.
A PC that only talks to one machine and never touches the internet is a very different risk from a reception PC that opens email all day.
Run it in the cloud for a while
Windows 10 machines running in Windows 365 or Azure Virtual Desktop get Extended Security Updates at no extra cost, so hosting an old application there can buy time. It is a stopgap with its own monthly cost, and no help for software that needs a physical connection to machinery.
The cost of standing still
Ignoring Windows 10 end of support is not against the law, but it has consequences that tend to land at the worst possible moment.
- Cyber Essentials. The Cyber Essentials requirements for IT infrastructure say software in scope must be licensed and supported, and unsupported software must be removed or moved into a separate sub-set with no internet access. Critical and high-risk updates must be applied within 14 days. If you need the certification for contracts, an unsupported PC on the main network is a problem. Ask your certification body whether a device on ESU counts as supported before your assessment, not after it.
- Data protection. UK GDPR requires appropriate security for personal data. A machine holding customer records that no longer receives security patches is hard to defend as appropriate if something goes wrong.
- Single points of failure. Old PCs fail. If the only copy of your job history lives on a ten-year-old hard drive, the risk is not only about security.
The same principle applies beyond the desktop. Our guide to keeping your website secure makes the same case for websites and plugins: unpatched software is the easiest way in.
An illustrative example: a workshop’s job-costing database
Here is an illustrative example. The business is made up, but the situation is a common one.
A fabrication workshop near Hull has eight staff. Quotes, job costing and timesheets run on an Access database built in 2009 by a former office manager. It sits on a Windows 10 PC in the office, and three other PCs open the same file over the network. Two of those PCs cannot run Windows 11. The database mostly works, but only one person really understands it, and it occasionally corrupts when two people save at once.
After making the list, the owner finds that the accounts and email are already in the cloud, the CNC machine’s control PC never connects to the internet, and the Access database is the only real blocker. The plan looks like this:
- buy ESU for the one office PC that must keep running the database for now, as a stopgap with an end date;
- replace the two PCs that fail the Windows 11 checks, and upgrade the rest;
- move the CNC control PC onto its own network segment with no internet access, following the NCSC guidance;
- rebuild quoting and job costing as a small web application, migrating years of jobs and customers, with the aim of switching off the Access database before the next ESU renewal.
The result is more than a supported operating system. Quotes can be produced on a tablet on the shop floor, the corruption problem disappears, and nobody depends on one person’s memory of a 2009 database.
A 12-month plan after Windows 10 end of support
Whatever your situation, a year is enough time to deal with Windows 10 and your old business software properly if you start now. A sensible sequence looks like this:
- This month: complete the list, upgrade every PC that can be upgraded and check your Office versions, especially anything on Office 2021, which loses support on 13 October 2026.
- Within three months: decide what happens to each awkward system, buy ESU only for machines that genuinely need it, and isolate anything that cannot be fixed quickly.
- Within six months: start replacing or rebuilding the systems that matter most. If you run Windows Server 2016 in the office, plan for its extended support ending on 12 January 2027 at the same time.
- Within twelve months: retire the last Windows 10 machines, or write down why each remaining one is isolated and when it will go.

The aim is to use ESU as breathing space for planned work, not as a growing annual bill for putting off a decision.
Windows 10 end of support: common questions
Will my Windows 10 PC stop working?
No. It will carry on starting up and running your programs. It simply stops receiving fixes, so each new vulnerability discovered in Windows 10 stays open on that machine unless it is enrolled in ESU.
Can a business still buy Extended Security Updates?
Yes. Commercial ESU is still available through Microsoft’s licensing channels and partners. Because it is cumulative, joining late means paying for the earlier years too, and coverage ends in October 2028 whatever you pay.
We only use one old program on one PC. Is that really a problem?
It depends on what that PC can reach. If it is cut off from email, the web and the rest of your network, the risk is much lower. If it sits on the main network and someone checks email on it, it is the weakest point in your business and worth fixing first.
The bottom line
Windows 10 end of support was never really about Windows. It is about the business software that has quietly outlived the systems it was built for. ESU buys time, at a rising price, until October 2028 at the latest. Used well, that time is enough to replace or rebuild the awkward systems properly, so you are not facing the same problem with the next version of Windows.
If old business software is the reason you are still on Windows 10, tell us what it does or call us on 01482 212499. We will tell you honestly whether it can simply move to Windows 11, whether an off-the-shelf product would do the job, or whether it is worth rebuilding.


