Windows 10 support has ended: the options that remain and the ESU deadline

What the Extended Security Updates programme is

Microsoft opened the Extended Security Updates programme so machines that have not migrated can keep receiving security updates rated Critical and Important by the Microsoft Security Response Center. Enrolment stays open until the programme ends on 12 October 2027, and machines belonging to a commercial or educational organisation can receive updates for up to three years past the end-of-support date.

Conditions to know before planning around it

• Devices must be running Windows 10, version 22H2 to be eligible.
• ESU covers security updates only — no other fixes, no feature improvements, no product enhancements.
• ESU does not come with technical support, so a support case is no longer an option if something breaks.
• ESU buys time rather than solving the problem; the programme has a published end date of its own.

What to do in the meantime

Organisations that plan this well rarely start from the question of whether to buy ESU. They start by knowing how many machines they have, which of them can run Windows 11, and which need replacing. With those numbers in hand, both the budget request and the migration order can be argued from facts.

• Keep a current inventory of every machine with its version and hardware capability.
• Group machines by business criticality so the migration order is not arbitrary.
• Check specialist line-of-business software against the newer operating system before committing to dates.
• Segment the network around machines that must stay on the old system, to limit the damage if one is compromised.