Still on Windows 10? The 2026 Deadline Guide for Small Businesses

Support ended in October 2025, and the extended-update safety net gets thinner — and pricier — every year. Here's a calm, practical plan for deciding what to upgrade, what to replace, and what to do this quarter.

By Eshan de Silva · July 21, 2026 · 9 min read

If your office computers still run Windows 10, you're in good company — a huge share of small businesses are in exactly the same spot. Microsoft ended free support for Windows 10 on October 14, 2025, but nothing dramatic happened that day: the machines kept booting, the software kept opening, and it was easy to file the whole thing under "later." The problem is that "later" now has a price tag that doubles every year, and every month that passes leaves those machines a little more exposed. This guide walks through what actually changed, what your realistic options are, and how to make the decision without panic-buying a fleet of new PCs.

What "end of support" actually means

End of support doesn't mean Windows 10 stops working. It means Microsoft stopped shipping free security updates for it. When researchers (or criminals) discover a new vulnerability in Windows 10, machines without a paid update plan simply never get the fix. Each individual hole might be small; the compounding effect is not. Attackers actively scan for unsupported systems precisely because they know the doors stay unlocked forever.

For a business, that's a different calculation than for a home user. Your Windows 10 machines likely touch customer records, invoices, payroll, email — and if you run a childcare center, children's enrollment and medical information. An unpatched operating system sitting behind all of that is the kind of gap that turns a routine phishing email into a very bad month. (Our small-business cybersecurity guide covers how these attacks usually start.)

The safety net: Extended Security Updates (and their doubling price)

Microsoft offers a bridge called Extended Security Updates (ESU). It keeps the security patches flowing for machines that can't move to Windows 11 yet — but it's deliberately designed to be temporary:

• Business pricing starts around $61 per device for Year 1 and roughly doubles each year, for up to three years. A PC that costs $61 to protect this year costs about $122 next year and about $244 the year after.
• Pricing is cumulative. Enroll late and you pay for the years you skipped. Waiting doesn't save money — it stacks the bill.
• Year 1 of ESU ends October 13, 2026. That's the date to circle on the calendar: after it, keeping old machines protected gets meaningfully more expensive. Microsoft has shown some flexibility on consumer enrollment windows, but planning around October 2026 is the safe move for a business.
• ESU is security-only. No new features, no bug fixes beyond security, no technical support. It buys time; it doesn't buy a future.

Read that pricing structure as a message, because it is one: ESU exists so you can migrate on a sane schedule, not so you can keep Windows 10 forever.

Step 1: Find out which machines can upgrade free

Here's the part that surprises many owners: if a PC meets the hardware requirements, the upgrade from Windows 10 to Windows 11 is free. The requirements — TPM 2.0, Secure Boot, and a supported processor — mean that, as a rule of thumb, most business PCs made in 2018 or later are eligible, and most older ones aren't. The fastest way to check is Microsoft's free PC Health Check app, which tells you machine-by-machine exactly what passes and what fails.

Before you check anything, though, you need a list. Most small businesses don't have an accurate inventory of what they own — which laptop is at the front desk, which tower in the back office is from 2014, who took the spare home during COVID and never brought it back. If your team lives in Microsoft Teams, a lightweight tool like SenAsset.app makes that inventory painless — track every device, its age, and its upgrade status right inside Teams, so the Windows 11 decision becomes a checklist instead of a scavenger hunt.

Step 2: Sort every PC into one of three buckets

• Upgrade now (eligible, working well). Free upgrade, an evening of work per machine, done. Schedule these in small batches so the office is never fully offline, and confirm your key software — childcare management platforms, QuickBooks, printer drivers — runs happily on Windows 11 first. It almost always does.
• Replace on a schedule (not eligible, or old enough that it's next). A PC that can't run Windows 11 is typically 7+ years old — near the end of its useful life anyway. Spread replacements across two or three quarters rather than buying everything at once. Business-grade desktops and laptops adequate for front-desk and admin work are far cheaper than most owners expect.
• Bridge with ESU (can't be replaced yet). Some machines are hostages — the PC that runs your door-access software, the one wired to a specialty printer, the one mid-lease. Enroll those in ESU deliberately, with a written date for when the bridge ends. ESU for five machines for one year is a rounding error; ESU for twenty machines for three years costs more than replacing half of them.

The quiet compliance and insurance problem

There's a second reason not to coast on unsupported Windows 10, and it has nothing to do with hackers. Most cyber-insurance applications ask, in some form, "Do you keep your systems patched and supported?" If you attest yes while running unsupported machines with no ESU, you've handed your insurer a reason to fight a future claim — we cover this dynamic in our guide to cyber insurance requirements.

California adds its own pressure. State law expects businesses to maintain reasonable security for personal information, and for licensed childcare centers, required child and staff records must be kept secure and readily available. "The data was on an operating system that stopped receiving security fixes a year ago" is a difficult sentence to say to a regulator, a licensing analyst, or a parent. The federal cybersecurity agency CISA lists keeping software updated among its four core protections for exactly this reason — it's the baseline everyone is measured against.

None of this requires an enterprise budget. It requires knowing what you own, having a dated plan, and having someone actually execute it — which is precisely the sort of unglamorous work a good managed IT partner handles in the background. EDCON runs this exact playbook for childcare centers and small businesses across Los Angeles, Oxnard, Ventura, and Azusa: inventory, eligibility checks, staged upgrades, and replacement budgeting spread over quarters instead of one painful invoice.

What not to do

• Don't ignore it because "everything still works." It will keep working right up until the day it very much doesn't — and by then ESU back-payments and rush replacements cost far more than a planned migration.
• Don't use registry hacks to force Windows 11 onto ineligible hardware. Unsupported installs can lose update eligibility — trading one unsupported system for another.
• Don't replace everything at once unless you have to. A staged plan over two or three quarters is easier on cash flow and on your staff's patience.
• Don't forget the old machines. Retired PCs still hold data. Wipe drives properly before donating or recycling — a step our offboarding security guide covers in detail.

Common questions about the Windows 10 deadline