On 13 October, the first year of Windows 10 Extended Security Updates (ESU) for business devices ended. Computers whose ESU has not been renewed no longer receive security patches. For businesses, the second ESU year costs twice as much as the first.
What has changed
- For business devices ESU is purchased annually: the first year cost USD 61 per device, the second (until 12 October 2027) costs USD 122, and the third (until 10 October 2028) USD 244.
- For personal computers Microsoft has extended free ESU until 12 October 2027, but this programme does not apply to company-managed devices (joined to Active Directory, Microsoft Entra or managed via MDM).
- Microsoft 365 apps will receive security updates on Windows 10 until October 2028.
Why this matters beyond the IT department
An unpatched computer is one of the most common causes of breaches. For NIS2 entities it is also a compliance issue: vulnerability management and software updates are among the technical requirements that registered entities must implement by April 2027.
What to do now
- Make a list of all Windows 10 devices.
- Upgrade devices that meet the Windows 11 requirements – this is the cheapest route.
- For older computers, assess which is cheaper: a second year of ESU or a new device.
- If a device can be neither upgraded nor replaced yet, document the risk and apply compensating controls: restrict access, disconnect it from sensitive systems and monitor it.
Need help planning the upgrade or assessing the risk? More about IT projects and migrations or contact us.
EN 
LT