Published July 2026
Microsoft ended support for Windows 10 on 14 October 2025. Windows 10 PCs did not suddenly stop working, but most no longer receive free security updates, feature updates or standard technical support. For a business, that turns every remaining Windows 10 device into a risk that needs an owner and a plan.
If your organisation still has Windows 10 laptops, desktops or specialist systems, this checklist will help you move forward without disrupting staff or replacing equipment blindly.
Why unsupported Windows 10 devices matter
An unsupported computer may continue to run familiar software, but new vulnerabilities can emerge without being fixed through normal Windows Update. Over time, browsers, security tools and business applications can also reduce or end compatibility. That creates avoidable exposure and may conflict with customer, insurer or regulatory expectations.
Microsoft offers paid Extended Security Updates (ESU) for eligible Windows 10 22H2 devices. ESU can provide critical and important security updates for a limited period, but it does not add new features or replace a migration plan. It is best treated as a temporary bridge for devices that genuinely cannot move immediately.
1. Build an accurate device inventory
Start with facts. Record every Windows device, its user, location, age, model, warranty, Windows edition, storage capacity, encryption status and business purpose. Include shared reception PCs, workshop machines, meeting-room devices and laptops that rarely connect to the office.
A managed inventory is much safer than relying on staff to report what they use. MSP247’s managed IT support can give you a current view of operating systems, patch status and hardware health across the estate.
2. Check Windows 11 eligibility
Some Windows 10 computers can be upgraded to Windows 11; others do not meet Microsoft’s hardware requirements. Check processor support, TPM 2.0, Secure Boot, memory and storage. Do not force Windows 11 onto unsupported hardware: that can create another device that is difficult to support and may not receive the expected updates.
Hardware eligibility is only half the decision. A five-year-old PC that technically qualifies may still be slow, unreliable or close to the end of its useful life. Compare the cost of upgrading, testing and supporting it with the cost of a suitable replacement from a planned IT procurement programme.
3. Map critical applications and peripherals
List the software and hardware each team depends on: line-of-business applications, browser extensions, accounts packages, label printers, scanners, smart-card readers, VPN clients and specialist USB or serial equipment. Confirm vendor support for Windows 11 and test important workflows before a wide rollout.
Pay special attention to systems that are tied to old machinery or software. They may need ESU, network isolation, restricted internet access or a carefully planned application upgrade. A legacy dependency should be documented as an exception, not allowed to remain invisible.
4. Decide: upgrade, replace, isolate or retire
- Upgrade eligible, healthy devices after compatibility testing.
- Replace ageing or ineligible devices with models suited to the user’s workload.
- Isolate temporarily a specialist Windows 10 system, using ESU where eligible and additional network controls.
- Retire unused devices, securely erasing business data and recording disposal.
5. Protect data and user settings
Before any upgrade or replacement, verify that business data is stored in an approved location and backed up. Cloud synchronisation is useful, but it is not automatically a complete backup. Check browser favourites, email archives, application settings, certificates and locally stored files.
Confirm that BitLocker recovery keys and administrator credentials are available. Test at least one restore rather than assuming the backup works.
6. Pilot before the main rollout
Select a small group representing different roles and applications. Upgrade or replace their devices first, then monitor sign-in, printing, scanning, VPN access, Microsoft 365, line-of-business software and performance. Record fixes so the wider rollout is repeatable.
Schedule migrations in manageable groups and keep users informed. A clear appointment, a short checklist and a known support contact reduce downtime and frustration.
7. Apply a consistent security baseline
A new operating system is an opportunity to standardise security. Enforce multi-factor authentication, disk encryption, supported endpoint protection, automatic patching, screen locks and least-privilege access. Remove unnecessary local administrator rights and enrol devices in your management platform before they are handed to users.
8. Finish the job
After migration, check the inventory again. Every Windows 10 device should have been upgraded, replaced, formally excepted or retired. Remove old computer accounts, licences and remote-access tools, and arrange secure data destruction for disposed hardware.
Need help completing your Windows 10 migration?
MSP247 can inventory your estate, assess Windows 11 compatibility, plan procurement, migrate users and manage the finished environment across Windows, Mac, iOS and Chromebook devices. Contact us for a practical migration review.
Official references: Microsoft: Windows 10 support has ended and Microsoft Learn: Windows 10 ESU.