Windows 10: The Free Extension Does Not Apply to Businesses

Since June 2026, the report has been circulating that Microsoft has “extended Windows 10 support until October 2027.” For businesses this is a dangerous shorthand: the free extension until October 12, 2027 applies exclusively to the Consumer ESU program – that is, to privately used Home and Pro devices. For commercially used devices it does not apply.

For businesses, it remains the case: regular Windows 10 support ended on October 14, 2025. Without Extended Security Updates (ESU), there have been no security updates since then. And in October 2026 the first commercial ESU year expires – anyone who wants to keep using the bridge then pays double the price. A good moment to take an honest inventory of your own fleet.

The facts

End of support for Windows 10: October 14, 2025. After that only security updates via ESU.
Commercial ESU: USD 61 per device in the first year (Volume Licensing), start November 2025. The price doubles in each following year; a maximum of three years. ESU is cumulative: anyone who joins only in the second year pays for the first as well. The prerequisite is Windows 10 22H2.
Scope: exclusively security updates classified as “critical” or “important.” No new features, no other bug fixes, no technical support.
Consumer exception: the free additional year until October 12, 2027 (a silent update to the Microsoft documentation on June 25, 2026) applies only to private use – free within the EEA with a Microsoft account; outside it, via settings backup, Rewards points, or a one-time USD 30 for up to ten devices.
Cloud exceptions: for Windows 10 VMs in Windows 365, Azure Virtual Desktop, and Azure, ESU is free. Windows 10 endpoints that access Windows 365 Cloud PCs receive ESU with an active W365 license for up to three years.

How large the remaining problem is can only be quantified indirectly: in January 2026, ESET counted about 21 million PCs (~48%) with Windows 10 in German private households. That is a household figure, not a statement about German corporate fleets – but it shows: Windows 10 is far from having disappeared.

The cost mechanics calculated to the end

For a fleet of 200 devices, the ESU price staircase (61 → 122 → 244 USD per device per year) means: the third year alone costs four times the first. Over three years, USD 427 accumulates per device – money that buys no single new feature but only conserves the status quo. At the latest here, the convenience decision becomes an economic calculation against new procurement.

Decision matrix for fleets of 50 to 500 devices

a) Hardware Windows 11-capable: migrate now

If the devices meet the Windows 11 requirements, migration is the clearly cheapest option – and a project with real lead time: inventory, application tests, drivers, pilot group, rollout in waves. Anyone who wants to be finished in October 2026 should have started now, not in September.

b) Hardware not capable: calculate replacement against the ESU bridge

For non-upgradeable devices, the sober comparison is worthwhile: remaining useful life and replacement procurement against the ESU staircase 61 → 122 → 244 USD. ESU is legitimate as a planned, time-limited bridge – as a permanent solution it is, by design, the most expensive variant, with a hard-coded end date after three years.

c) Legacy applications: isolate instead of hope

Almost every grown environment has them: the machine control, the industry software, the measurement system that runs only under Windows 10. Such systems do not belong unprotected in the flat company network, but in cleanly segmented network zones with minimal, documented communication relationships. Segmentation does not replace updates, but it effectively limits what a compromised legacy system can do.

d) Examine the cloud path

Where Windows 365 or AVD is being considered anyway, the free ESU coverage for cloud VMs and W365 endpoints shifts the calculation. For partial fleets – for example rotating workstations or external staff – the Cloud PC can ease the migration without paying the ESU staircase.

The compliance and insurance angle

An operating system without security updates is more than a technical risk. Anyone who falls under NIS-2 must, per § 30 BSIG, run a risk management program that includes handling known vulnerabilities; ISO 27001 requires functioning patch management; and cyber insurers regularly ask explicitly about handling of end-of-life systems. An unpatched Windows 10 base without a documented plan – migration, paid ESU, or isolation – is hard to defend at all these points. Conversely: a documented, time-limited transition plan is a dependable position also toward auditors and insurers.

Conclusion

The headline “Windows 10 extended until 2027” applies to the living room, not the business. For companies, the first ESU year ends in October 2026, after which the price doubles. The decision – migrate, replace, bridge, isolate – should be made and documented per device class. Not deciding is also a decision, only the most expensive one.

How sector7 supports you

We plan and accompany Windows 11 migrations for mid-sized fleets – from inventory through application tests to rollout – and, as a network engineering house (Juniper, Cisco, HPE, F5, Fortinet, Palo Alto Networks), segment the legacy systems that have to stay. Ongoing operation is monitored by our NOC around the clock, on request at flat monthly rates. The compliance documentation of the transition plan we build in from the start.