Want to see how sales training for IT companies can help teams simplify offers without sounding pushy?
Introduction to Windows 10 Extended Security Updates: What Comes Next?
Windows 10 has already reached the end of its normal support lifecycle, but that does not mean every business has finished moving away from it. Some organisations still rely on older PCs, specialist software or hardware that is not ready for Windows 11. Windows 10 Extended Security Updates give those businesses more time, but they are designed as a temporary bridge rather than a reason to delay indefinitely.
The important question is no longer whether Windows 10 support is ending. That happened on 14 October 2025. The real question is what your business does next. Windows 10 Extended Security Updates can reduce security risk while you plan, test and complete a migration, but they do not restore Windows 10 to full support.
For most businesses, the best approach is to use the extra time deliberately. Identify which devices still need Windows 10, understand why they cannot move yet, decide what must be replaced or upgraded and put a clear timetable around the transition to Windows 11.
What are Windows 10 Extended Security Updates?
Windows 10 Extended Security Updates are Microsoft’s paid security programme for eligible Windows 10 devices that remain in use after normal support ended. For commercial organisations, enrolled devices can continue receiving critical and important security updates for a limited period. For the standard commercial programme, devices need to be running Windows 10 version 22H2 before they can receive ESU coverage.
The programme matters because unsupported operating systems become harder to justify over time. New vulnerabilities can still be discovered after mainstream support ends. Without an appropriate update route, those weaknesses may remain unpatched on a device that is still connected to company systems, cloud services or sensitive data.
The ESU programme does not turn Windows 10 back into a fully supported operating system. It provides a narrower form of protection while a business completes its transition. That distinction matters when you are assessing risk, support requirements and the remaining useful life of older PCs.
Businesses using external IT providers also need clear communication around this change. Providers selling migration, support or replacement projects may benefit from Sales Training for IT Companies that helps technical teams explain risk, value and options without making conversations sound alarmist.
Why do Windows 10 Extended Security Updates matter now?
The timing is becoming more important because the first commercial ESU year runs only until 13 October 2026. Businesses that entered the programme after Windows 10 support ended now need to decide whether remaining devices should move to Windows 11, be replaced, or continue into the next commercial ESU year.
The Windows Experience Blog describes ESU as a bridge to Windows 11 rather than a long-term solution.
That is the right way to think about ESU. It buys time. It does not remove the need for a migration decision. If the business has used the first year simply to postpone action, the same hardware, software and compatibility questions will still be waiting.
September 2026 is therefore an important planning point. A business with a meaningful number of Windows 10 devices should know exactly why each one remains in service and what happens to it next. That may mean an upgrade, a replacement device, a software change or a carefully controlled extension. This type of review should form part of wider IT Strategy Planning to Stop Reactive Tech Decisions, so technology choices are based on business priorities rather than another approaching deadline.
What do Windows 10 Extended Security Updates include?
Windows 10 Extended Security Updates are focused on security. Eligible enrolled devices receive critical and important security updates during the relevant ESU coverage period. That can reduce exposure to newly identified vulnerabilities while a business finishes its transition.
But the programme is deliberately limited. It does not provide new Windows features, general product improvements, customer-requested non-security changes or the normal level of technical support associated with a fully supported operating system.
This means businesses should not assume that paying for ESU gives them the same experience they had before October 2025. The programme is about maintaining a minimum security bridge. It is not an investment in the future development of Windows 10.
That difference should also be explained properly to customers. An IT company discussing ESU may need to separate the security conversation from the wider commercial case for modernising devices. Practical IT Sales Training Courses can help teams explain that distinction clearly without burying customers in technical language.
How long can businesses use Windows 10 Extended Security Updates?
Commercial organisations can use Windows 10 Extended Security Updates for a maximum of three annual coverage periods after Windows 10 reached end of support. Year one ends on 13 October 2026, year two ends on 12 October 2027 and year three ends on 10 October 2028.
The annual structure matters because later years are not a fresh starting point. Commercial ESU licensing is cumulative. A business moving into a later year needs the required previous-year licensing as well. The cost also increases in consecutive years, which is another reason not to treat ESU as an indefinite operating model.
For many organisations, that creates a useful decision framework. ESU may make sense for a small number of machines that cannot yet move because of genuine technical dependencies. It makes less sense when large numbers of ordinary office PCs are being retained simply because migration planning has not been prioritised.
The closer a business moves towards the later ESU years, the stronger the case becomes for checking whether the cost, operational complexity and security exposure of keeping older devices still makes commercial sense.
Which Windows 10 devices should businesses keep on ESU?
Not every Windows 10 device should automatically stay in service. The strongest candidates are usually machines that still perform an important role but cannot yet move because of a specific dependency.
That dependency might be specialist software, older peripherals, manufacturing equipment, laboratory systems, line-of-business applications or another device that has not yet been validated for Windows 11. In those situations, Windows 10 Extended Security Updates can provide valuable breathing space while the underlying issue is resolved.
By contrast, a standard laptop used for email, Microsoft 365, browser-based applications and routine office work may have little reason to remain on Windows 10 if it is fully compatible with Windows 11. The decision should be based on evidence, not habit.
A useful device review should record the hardware model, Windows edition, current Windows 10 version, business owner, applications used, upgrade eligibility, replacement date and any technical blocker. Once those facts are visible, the migration becomes far easier to manage. Businesses relying on an external provider should also make sure they avoid the Critical Managed IT Services Mistakes To Avoid, particularly where responsibility for ageing devices, updates and future replacement planning is unclear.
For IT providers, this is also a conversation about priorities rather than products. An experienced IT Sales Trainer can help technical teams ask better questions about business impact before recommending a replacement, upgrade or temporary ESU route.
What should businesses check before moving to Windows 11?
A Windows 11 migration should start with compatibility, but it should not end there. Businesses need to understand what will happen to applications, peripherals, user profiles, security tools, device management, remote access and day-to-day workflows.
Hardware eligibility is one part of the picture. Some older PCs may not meet Windows 11 requirements. Others may technically qualify but be close enough to replacement age that upgrading them provides little long-term value. In those cases, replacing the device may be more sensible than investing time in a short-lived migration.
Application testing is equally important. Businesses should identify software that is critical to operations and confirm that supported versions work correctly on Windows 11. The same applies to printers, scanners, specialist USB devices, VPN software and security tools. Where the wider project also involves Microsoft 365 or moving services into the cloud, careful Cloud Migration Support for Microsoft 365 Without Chaos can help businesses plan dependencies, users and technology changes together.
Windows 10 Extended Security Updates give businesses time to complete this work properly. But that time should be attached to deadlines. A compatibility issue without an owner or target date can easily become another year of delay.
IT companies advising business customers may also need to explain why an apparently working PC still needs attention. Strong B2B IT Sales Training can help teams connect technical facts to downtime, risk, productivity and total cost rather than relying on fear-based messaging.
What are the risks of staying on Windows 10 for too long?
The biggest risk is assuming that ESU solves every problem created by end of support. It does not. Security patches help with specific vulnerabilities, but the broader technology environment continues moving forward.
Software vendors may gradually reduce support for Windows 10. Hardware becomes older. Drivers receive less attention. New applications may be designed around Windows 11. Internal IT teams may also spend more time supporting exceptions, workarounds and ageing devices.
There is also a management risk. The longer a business carries two operating-system strategies, the more complicated patching, policy management, troubleshooting and asset planning can become. A temporary exception can quietly turn into permanent technical debt. This is one reason why Proactive IT Support Stops Costly IT Chaos: ageing devices and approaching support deadlines can be identified and planned for before they become urgent problems.
Windows 10 Extended Security Updates can be a sensible control when there is a clear reason for using them. The danger appears when the business has no defined end point. Every ESU device should therefore have an owner, a reason for remaining on Windows 10 and a planned date for upgrade or replacement.
How should a business plan its Windows 11 migration?
The easiest way to manage the transition is to separate devices into clear groups. Start with machines that can upgrade immediately. Then identify devices that need application testing, devices that should be replaced and genuine exceptions that still require Windows 10 Extended Security Updates.
From there, set a timetable. Pilot Windows 11 with a small group of users. Test important applications. Fix deployment issues. Move low-risk devices first, then progress through departments or locations in manageable stages.
Communication matters as much as deployment. Users need to know when their device will change, whether anything will look different, what they need to do beforehand and where they can get help. Poor communication can make a technically simple migration feel disruptive.
It is also worth using the migration to clean up the device estate. Remove obsolete software, retire unnecessary accounts, review security controls and replace machines that have reached the end of their useful life. That turns a forced operating-system change into a wider improvement project. Businesses undertaking several technology changes at once should also consider how the migration fits into their broader plans and avoid the Costly Digital Transformation Services Mistakes To Avoid.
For technology companies delivering these projects, In-House IT Sales Training can help account managers and technical specialists explain migration plans in a way that is structured, commercially relevant and easy for decision-makers to understand.
What should IT providers explain to business customers?
Customers do not need a lecture on operating-system lifecycles. They need a clear explanation of what has changed, what risk remains and what choices are available.
A useful conversation starts with the customer’s environment. How many Windows 10 devices remain? What do they do? Which are compatible with Windows 11? Which applications create dependencies? What would disruption cost? What is the realistic replacement cycle?
Windows 10 Extended Security Updates should then be positioned as one option within that wider plan. Some devices may need ESU. Others may be ready to upgrade now. Others may be better replaced. The recommendation should follow the evidence. Migration planning should also consider backups, recovery and how the business would continue operating if an upgrade or device failure caused disruption. Effective Business Continuity Planning: Backup Testing, Stay Running helps make those recovery arrangements part of the plan rather than something considered after a problem occurs.
This is where technical expertise and communication need to work together. Sales Training for IT Teams can help IT businesses move away from feature-heavy explanations and towards clearer conversations about business impact, priorities and value.
What comes next after the first ESU year?
For commercial organisations, the end of the first ESU year is not the end of the programme. Windows 10 Extended Security Updates can continue into year two for eligible commercial devices, with the second coverage period running from 14 October 2026 to 12 October 2027.
But the arrival of another ESU year should trigger a fresh review. Do not automatically renew every device that was covered in year one. Check whether the original blocker still exists. Some software may now support Windows 11. A replacement project may have been completed. An old peripheral may no longer be needed.
If a device still genuinely needs Windows 10, document the reason and keep the exception controlled. If it no longer needs to remain, move it. Windows 10 Extended Security Updates are most valuable when they protect a small, understood group of systems while the business completes its final migration work.
The goal is not to keep Windows 10 alive for as long as possible. The goal is to give the business enough time to move safely, without rushing important decisions or leaving unsupported systems exposed.
FAQ on Windows 10 Extended Security Updates
Are Windows 10 Extended Security Updates enough to keep a business secure?
Windows 10 Extended Security Updates can reduce security risk by providing critical and important security updates for eligible enrolled Windows 10 devices, but ESU alone is not enough to keep a business secure. Organisations still need supported business applications, endpoint protection, secure access controls, regular backups, patch management and appropriate monitoring. Every device using Windows 10 Extended Security Updates should also have a documented reason for remaining on Windows 10 and a planned route to Windows 11 or replacement hardware. ESU should therefore be treated as a temporary security measure within a wider IT security and migration strategy.
How long can a business buy Windows 10 ESU?
Commercial organisations can receive Windows 10 Extended Security Updates for a maximum of three annual coverage periods after Windows 10 reached end of support on 14 October 2025. The first commercial ESU year ends on 13 October 2026, year two ends on 12 October 2027 and the final commercial ESU year ends on 10 October 2028. Commercial ESU licensing is cumulative, so businesses moving into later years need the relevant previous-year licensing. Because the programme becomes more expensive over time, businesses should use ESU to complete a planned migration rather than treat it as a permanent alternative to Windows 11.
Does Windows 10 ESU include technical support?
No. Windows 10 Extended Security Updates are focused on providing eligible critical and important security updates. ESU does not return Windows 10 to normal support, provide new Windows features or restore the wider product development available before end of support. Businesses that need help managing Windows 10 devices, deploying security updates, testing Windows 11 compatibility or planning a migration will need to arrange that separately through their internal IT team, managed service provider or IT support company. Paying for Windows 10 ESU should not be confused with buying a complete Windows 10 technical support service.
Can every Windows 10 PC be upgraded to Windows 11?
No. Not every Windows 10 PC has a straightforward upgrade path to Windows 11. Some older computers may not meet the required Windows 11 hardware standards, while other devices may depend on software, peripherals or specialist equipment that has not yet been validated for Windows 11. Businesses should therefore assess each Windows 10 device individually. The review should consider hardware compatibility, applications, peripherals, business importance, remaining device life and replacement cost. Windows 10 Extended Security Updates can provide additional time for genuine exceptions, but compatible devices should still have a clear migration timetable.
What should businesses do before their current ESU period ends?
Before a Windows 10 Extended Security Updates period ends, businesses should review every remaining Windows 10 device and confirm why it is still required. Check whether previous compatibility problems have been resolved, whether important applications now support Windows 11 and whether older hardware should be replaced rather than extended again. Each remaining device should have an owner, documented business reason and target upgrade or replacement date. Businesses should also allow time for testing, backups, user communication and deployment planning. Windows 10 Extended Security Updates work best when each renewal decision supports a defined exit plan instead of simply postponing migration for another year.
We provide sales training for IT companies, IT service providers and technology businesses that want clearer, more effective client conversations. Our IT sales training includes practical sales workshops, team training and tailored sales coaching built around the real conversations IT professionals have with prospective and existing clients every day. We help IT sales teams ask better questions, understand the business problems clients really need to solve, explain technical solutions clearly and communicate the value of their IT services with confidence. We support IT companies across the UK that want to improve conversion rates, win more of the right clients, retain more business and grow without relying on high-pressure sales techniques.
More IT Company sales training insights
Microsoft 365 Copilot Business: Is Usage-Based AI Worth It?
Cyber Security And Resilience Bill: What Should MSPs Know?
Microsoft 365 Licensing Changes: What Should Firms Know?
Digital Sovereignty UK: Where Should Business Data Live?
AI Cost Management: Why Are AI Bills Rising So Fast?
Ready to elevate your IT Services sales techniques?
Whether you’re a B2B salesperson looking to enhance your sales skills or a leader aiming to sharpen your sales strategy in business-to-business selling, let’s work together to take your sales pitch to the next level
If you are comparing options, it helps to review a focused sales training for IT services that shows how clearer value leads to faster client decisions.
