Windows 10 Is Out of Support – How SMBs Move Safely to Windows 11 Now

It is no longer a "coming soon": Windows 10 reached its end of support on 14 October 2025. Since then there have been no free security updates, no bug fixes and no technical support. The machines keep running – but every newly discovered vulnerability stays open. For businesses that is a risk that grows with every month.

Many businesses in the Ruhr region are sitting in front of exactly this question right now: is the existing PC good enough for Windows 11, or is new hardware needed? And what does the much-discussed "free extension" for the EU really mean? This post assesses the situation soberly and lays out a clear roadmap.

Note: This post is no substitute for individual legal or security advice. As of: June 2026.

Why "it still runs" is dangerous

A PC without security updates is like a door whose lock is known to be picked – and nobody replaces it. Attackers scan automatically for exactly such systems. On top of that come practical consequences:

• Cyber insurers generally require current, supported software. An incident on an end-of-life system can jeopardise your coverage.
• GDPR: Whoever processes personal data on unpatched systems risks no longer meeting the "state of the art".
• Software vendors are gradually dropping support for their applications on Windows 10.

The ESU bridge: buying time, not a permanent state

Microsoft offers an Extended Security Updates (ESU) programme – a time-limited bridge that delivers only critical and important security updates. Here is the most important distinction that gets lost in many headlines:

• Private/consumer path: For private Windows 10 devices (version 22H2), ESU runs until 13 October 2026. In the EEA – including Germany – this consumer path is free of charge, but only with a Microsoft account, and the device has to re-enrol regularly (roughly every 60 days) for the updates to keep coming. Outside the EEA it costs a one-off fee of around 30 US dollars.
• Business path: Company PCs that are centrally managed (e.g. via Active Directory or Intune) use the commercial ESU path. That one is paid per device per year, the price rises annually and the programme runs for a maximum of three years.

The message for SMBs: ESU is an emergency bridge, not a savings model. It buys time for an orderly migration – nothing more. Whoever stays on Windows 10 permanently pays extra in the end and accumulates risk.

Can my PC handle Windows 11?

Windows 11 sets higher hardware requirements than its predecessor. The main hurdles:

• TPM 2.0 (security chip) must be present and enabled – on many devices it sits in the BIOS and is merely switched off.
• UEFI with Secure Boot.
• A compatible 64-bit processor – roughly everything from Intel 8th generation or AMD Ryzen 2000 and newer.
• At least 4 GB RAM and 64 GB storage.

Rule of thumb from practice: business PCs built from around 2019 are often directly upgrade-capable, older devices usually are not. Microsoft's "PC Health Check" gives you the quick answer. Important: even though unofficial tricks can force the upgrade onto unsupported hardware – in a business environment we advise against it. Such installations may not receive updates and are not supportable.

Upgrade or replace? An honest calculation

Not every device has to be replaced – but not every one is worth upgrading either. A pragmatic decision aid:

1. Compatible and under ~4–5 years old → free in-place upgrade to Windows 11. Data and applications are preserved.
2. Compatible but noticeably slow → upgrade possible; often more RAM or an SSD is worthwhile at the same time.
3. Not compatible → plan for a replacement. A new device costs less than a security incident – and saves trouble over its service life.

Tip: don't swap everything at once. A staggered renewal over a few weeks spreads costs and effort without bringing the business to a standstill.

What a clean migration looks like

A move without data loss is routine – if it is planned:

1. Inventory: Which devices are there, which are compatible, which applications and licences have to come along?
2. Backup first: Before every migration, a verified, complete backup – ideally following the 3-2-1 principle.
3. Pilot: Switch one or two devices first and test them in daily use before all the others follow.
4. Rollout: Upgrade devices or set up new PCs, migrate data and settings, verify line-of-business software.
5. Follow-up: Take BitLocker encryption, MFA and central management (e.g. via Microsoft Intune) along in the same step – a good moment to set up the workplaces more securely than before.

Conclusion

Windows 10 has expired, and the ESU bridge buys a few months of breathing room at best. Whoever approaches the move in a structured way now avoids rush, security gaps and bad purchases – and uses the opportunity to set up the workplaces in a more modern and secure way at the same time.

Don't know which of your devices can handle Windows 11? In a free initial consultation we review your inventory and draft a realistic migration plan – without unnecessary hardware purchases, but also without open flanks.