Windows 10 support ends on October 14, 2025 — less than eleven months away. Your PCs won’t stop working that day, but free security fixes will, and a machine that can’t be patched becomes a standing invitation. Here’s a realistic, month-by-month migration plan that avoids both the security gap and the year-end hardware scramble.
What end of support actually means
After October 14, Microsoft stops shipping security updates for Windows 10. Every vulnerability found afterward stays open forever on those machines — and attackers routinely reverse-engineer Windows 11 fixes to find the same holes in Windows 10. Software vendors will drop support on their own schedules, and cyber-insurance and compliance questionnaires increasingly ask point-blank whether you run unsupported operating systems.
In the ransomware cases we get called into, unsupported and unpatched systems are among the most common footholds. End of life isn’t a Microsoft marketing date; it’s the day your risk starts compounding.
If this feels familiar, it should. Windows 7’s retirement in 2020 caught thousands of businesses flat-footed, paying rush prices for hardware and emergency support. The difference this time is the hardware wall — which makes early planning matter even more.
The catch: many PCs can’t upgrade
Windows 11 demands TPM 2.0 and, roughly speaking, a 2018-or-newer processor. Plenty of perfectly functional machines bought before then fail the check and cannot take the free upgrade. This isn’t a niche problem: as of this fall, roughly six in ten Windows PCs worldwide still run Windows 10. That points to a crowded upgrade season next year — expect hardware lead times and installer backlogs in the second half of 2025. Buying in the spring beats begging in September.
Your four options, machine by machine
- Upgrade in place. Eligible PCs take Windows 11 free, and the change is modest for most users.
- Replace. Ineligible machines fold into your normal refresh cycle — just compressed into the next ten months.
- Buy time with Extended Security Updates. Businesses can pay $61 per device for a first year of patches, with the price doubling each year for up to three. It’s a bridge for the genuinely stuck, not a destination.
- Rethink the endpoint. For some roles, a cloud desktop such as Windows 365 turns an old PC into a thin client and postpones the hardware question entirely.
On budgeting: a typical business laptop runs $800 to $1,200, so a 40-person office with 15 ineligible machines is looking at roughly $15,000 spread over two or three quarters — annoying, but plannable. The same replacements bought in a September panic cost more, arrive late and land on whoever screams loudest rather than whoever needs them most.
Your month-by-month plan
- Now through December: inventory every device — age, processor, TPM status, who uses it — and flag the ineligible ones.
- First quarter: set the budget, spread purchases across two quarters, and pilot Windows 11 with one team. Test your line-of-business apps now, not in September.
- Spring: roll out in waves, oldest machines first. Each wave teaches you something about the next.
- Summer: handle stragglers and make ESU decisions for the few machines that truly can’t move — the one wired to the shop-floor controller, for instance.
- September: buffer month. Plan to be done before October, because something always slips.
Our clients don’t run this alone: a dedicated account manager owns the inventory, the budget and the schedule — and you have their real cell number when a wave hits a snag, not a ticket queue.
Key takeaways
- Windows 10 security updates end October 14, 2025; unpatched machines accumulate permanent holes.
- Many pre-2018 PCs can’t run Windows 11 at all — inventory is step one.
- ESU buys time at $61 per device, doubling yearly; treat it as a bridge.
- Roughly 60 percent of Windows PCs still run version 10, so expect a late-2025 crunch.
- Waves beat big bangs: pilot in Q1, roll through spring, keep September free.
Want the inventory, budget and rollout handled for you? Our managed IT services team runs Windows 11 migrations end to end — start yours this quarter.
Turn insight into action.
Take a free cybersecurity or AI readiness assessment, or book a call with a NetSys engineer — no obligation, no runaround.