Windows 11 Upgrade Services & PC Refresh
Microsoft stopped issuing security updates for Windows 10 in October 2025. A machine still running it is now a known, unpatched target, and cyber-insurance questionnaires have started asking about it by name. NetSys provides Windows 11 upgrade services that sort your fleet into upgrade, replace and retire, run the upgrades in waves that do not stall the office, and refresh the hardware that cannot make the jump.
The short answer
Windows 11 upgrade services take a business from Windows 10 to a supported operating system on every machine. The work starts with an eligibility check, since Windows 11 requires TPM 2.0, Secure Boot and a processor from Microsoft's supported list. Eligible machines are upgraded in place through Intune in staged waves, with application compatibility tested on a pilot group first. Ineligible machines are replaced on a refresh plan, built through Windows Autopilot, and disposed of with drives wiped. NetSys delivers the whole cycle inside its managed agreement or as a standalone project.
The awkward part of the Windows 10 end of support is that the software is free to upgrade and many of the computers cannot take it. A perfectly good office PC from 2017 fails the processor check and has no path forward except replacement or paid extended updates. We treat it as the refresh cycle that was going to arrive anyway, and we schedule it so the spend is spread and the disruption is contained.
Joe Laboy, who handles systems and hardware at NetSys, runs the eligibility inventory and the rollout waves. Upgrades happen overnight through Intune where possible. Replacements ship straight from the supplier and build themselves through Autopilot. The people whose machines cannot change yet are covered by extended updates and kept on a dated plan.
Inventory, Pilot, Waves, Refresh
Intune and our monitoring agent give us the hardware facts for every PC: TPM version, firmware mode, processor, memory and disk. From that we produce a three-column list: upgrade now, replace this quarter, cover with extended updates until replaced. A pilot wave of volunteers runs Windows 11 with the firm's real applications for an agreed pilot period. Then departments upgrade in waves, scheduled around the business calendar. Replacement machines arrive pre-registered for Autopilot, and the old ones leave with a wipe certificate.
What Windows 11 Upgrade Services Include
Eligibility & Application Testing
Know which machines can move and which applications will complain.
- Hardware inventory from Intune: TPM 2.0, Secure Boot, supported processor, memory and storage
- Firmware fixes where TPM or Secure Boot only needs to be switched on
- Application compatibility checks for line-of-business, accounting, legal and clinical software
- Printer, scanner and peripheral driver review before the first wave
Staged Rollout
Upgrades in waves, at night, with a rollback window.
- Feature update policies in Intune that target one group at a time
- Pilot wave on real work before any department is scheduled
- Waves timed around the business calendar, with a rollback period kept open
- Help desk briefed on the visible changes so questions are answered in one call
PC Refresh for Ineligible Machines
Replacement handled as a plan, not an emergency.
- Standard device models chosen for your applications and budget, quoted in writing
- New PCs registered for Windows Autopilot so they configure themselves on first sign-in
- Data and settings moved through OneDrive and Intune rather than by hand
- Old machines wiped to a documented standard and recycled or resold, with certificates kept
Extended Security Updates Bridge
Cover for the machines that must wait.
- Enrollment in Microsoft's Extended Security Updates for Windows 10 devices that cannot move yet
- Compensating controls on bridged machines: restricted access, tighter monitoring, no admin rights
- A dated retirement plan for every bridged device, reviewed monthly
- Documentation for insurers showing which devices are covered and when they leave
Why Businesses Choose NetSys for Windows 11 Upgrades
Let The Netsys Group assess and help you resolve your exposure. Call 845-203-3914 for your complimentary risk assessment consultation today!
- Every PC is classified from real hardware data before anyone is asked to spend money
- Applications are tested by a pilot group on real work, so the first wave is not the test
- Replacements build themselves through Autopilot, so a refresh does not consume engineer days per desk
- Bridged Windows 10 machines get extended updates and a retirement date, never an indefinite pass
- The upgrade is part of the managed agreement for existing clients, month to month
Where we deliver Windows 11 Upgrade & PC Refresh
Windows 11 Upgrade & PC Refresh in New York City · Windows 11 Upgrade & PC Refresh in Nassau County, NY · Windows 11 Upgrade & PC Refresh in Westchester County · Windows 11 Upgrade & PC Refresh in New Jersey · Windows 11 Upgrade & PC Refresh in Hudson Valley — and remotely wherever your systems run. See all locations and service areas.
Windows 11 Upgrade & PC Refresh FAQs
Is Windows 10 still safe to use after end of support?
No. Since October 2025, Windows 10 no longer receives security patches unless the device is enrolled in Microsoft's paid Extended Security Updates program. Every vulnerability found from then on stays open on unenrolled machines, and attackers know it. The practical answer is to upgrade what can be upgraded, replace what cannot, and enroll anything that must wait in extended updates with a retirement date.
How do I know if my computers can run Windows 11?
Windows 11 requires TPM 2.0, UEFI firmware with Secure Boot, a processor on Microsoft's supported list, and modest memory and storage. Many machines built before 2018 fail on the processor even when everything else passes. Some newer ones fail only because TPM or Secure Boot is switched off in the firmware, which is a fix rather than a replacement. We pull these facts from Intune for the whole fleet and give you a per-machine list.
How long does a Windows 11 upgrade take for a small business?
The upgrade itself takes about an hour per machine and runs overnight. The project takes longer because the schedule is built around the business: an inventory, a pilot wave, then waves by department. A firm with a few dozen PCs is typically done within a couple of months, including replacements.
Should we upgrade old PCs or replace them?
Upgrade any machine that passes the eligibility check and still performs well on your applications. Replace machines that fail the check, and consider replacing eligible ones that are more than five years old, since they will be due soon anyway and an upgrade on tired hardware often disappoints. Our post on how often to replace business computers goes deeper. We put every machine into one of those columns in writing.
Can Windows 11 upgrade services be done remotely?
Yes, for the in-place upgrades: Intune pushes the feature update, the machine restarts, and our engineers verify it the next morning. Hardware replacements can also be handled remotely through Autopilot, with the new PC shipped to the user. On-site help is available for firms in our coverage areas that prefer a technician to swap machines and collect the old ones.
Will our applications work on Windows 11?
Most modern applications do. The risk sits with older line-of-business software, custom databases, hardware drivers and anything that has not been updated in years. We check vendor support statements, then run the firm's real applications on a pilot group before scheduling anyone else. Anything that fails is held back with compensating controls.
Related services
Protect your business before the next threat strikes.
Take control of your security today. Schedule your comprehensive cybersecurity assessment with The NetSys Group and stay one step ahead of every threat.