ited, the TSP expert
Menu
As of August 2025, Windows 10 still accounts for 45.65 % of active Windows devices worldwide. Despite the growing adoption of the newer version, nearly one in two computers is still running Windows 10.
Free official support for Windows 10 Pro ends on October 14 2025. After this date, your operating system will no longer receive stability updates or security patches, leaving your organization increasingly exposed to vulnerabilities and compatibility risks.
To support businesses that cannot migrate immediately, Microsoft offers the Windows 10 Extended Security Updates (ESU) program. This service allows you to continue receiving certain critical security updates, but it does not include new features or full Windows support.
In this article, our experts explain in detail how the ESU program works, its limitations, annual costs, and why it should remain only a short-term option before your Windows 11 upgrade.
The Extended Security Updates (ESU) program is a paid Microsoft offering designed for organizations with Windows 10 PCs that cannot be upgraded to Windows 11 immediately.
It is not an extension of standard support: the ESU program only provides critical and important security patches for Windows 10.
The first year of coverage begins in November 2025, but registration is already open and will remain available until October 13, 2026. Organizations can subscribe for a maximum of three years, up to October 2028.
Enrollment in the ESU program is not automatic. It must be purchased annually, and each year requires renewing the ESU licence to continue receiving updates. This yearly cycle adds extra administrative overhead for IT teams.
The Windows 10 ESU program includes:
However, the Windows 10 ESU program does not include:
💡KEY TAKEAWAY
The ESU program ensures a basic level of protection, but it does not meet long-term modernization needs.
Microsoft 365 applications installed on Windows 10 will continue to be supported long after the end of free official support.
Specifically, they will receive security updates until October 10, 2028, and feature updates until 2026, depending on the chosen update channel.
After 2026, features will be frozen, but security patches will continue until 2028. This means your productivity tools will remain usable during the ESU period, but without the latest innovations.
Source : Windows 10 end of support and Microsoft 365 Apps – Microsoft 365 Apps | Microsoft Learn
In some cases, the ESU program can help maintain a minimum level of security.
Some businesses postpone replacing their IT assets at the end of the fiscal year. ESU provides temporary protection until the budget becomes available.
Industrial, medical, or other mission-critical machines running older versions of Windows may not be compatible with Windows 11. ESU can extend their use without exposing the organization to major vulnerabilities.
Project delays, limited internal resources, or software dependencies can push back upgrades. ESU acts as a short-term bridge in these scenarios.
These situations are real and affect a meaningful number of Quebec SMBs. Still, recent data shows that most organizations are already planning a fast migration.
According to the IDC U.S. Commercial PCD Survey 2024 :
In other words, ESU should be viewed strictly as a short-term option, not a long-term strategy.
The ESU program is available for a maximum of three years, with prices increasing each year. The per-device cost is:
In total, keeping a single Windows 10 workstation under ESU amounts to $603 over three years. This steep price escalation is meant to encourage businesses to plan their Windows 11 migration early rather than delaying indefinitely.
💡KEY TAKEAWAY
If you wait until after October 2026 to purchase Windows 10 Extended Security Updates, you will still need to pay for Year 1, since Windows 10 security update fees are cumulative.
Source : Extended Security Updates (ESU) program for Windows 10 | Microsoft Learn
Obtaining ESU requires buying a specific activation key, which must be entered on each individual workstation. This process is not automatic and can require manual intervention, device by device.
However, some centralized administration solutions make it possible to automate the deployment of these keys. Companies can also choose to work with a managed cloud services provider, such as ited, who can handle provisioning and licence deployment while supporting the planning of their Windows 11 migration.
While the ESU program allows Windows 10 to be maintained temporarily, it does not meet the medium- or long-term needs of SMBs. Its limits affect three key areas: security, compatibility, and application support.
The ESU program only provides a basic level of protection. Updates address critical and important vulnerabilities, but lower-priority flaws are no longer patched. This leaves devices exposed to residual risks.
Over time, more software vendors will stop supporting Windows 10, focusing instead on applications designed and optimized for Windows 11. Businesses that continue running Windows 10 will see their options narrow as compatibility declines.
ESU delivers no new features or performance improvements. Windows 10 remains frozen while your business needs continue to evolve. In addition, Microsoft’s ESU-related support is limited to installation and activation of the updates, without full technical assistance.
The cost of maintaining ESU is also an annual expense that increases significantly for businesses year over year.
These limitations confirm that ESU is nothing more than a temporary safety net, helping organizations plan their transition to Windows 11, but never a sustainable long-term strategy.
With Windows 11, SMBs gain:
At ited, your migration is not treated as a simple technical upgrade. It is a strategic project that requires rigorous planning.
Our approach turns what could feel like a constraint—the end of Windows 10 support—into an opportunity to strengthen your IT security, compliance, and governance.
OUR IT SERVICES
KNOWLEDGE
ABOUT ITED
All rights reserved | © 2025 Solutions Ited | Privacy Policy | Terms of use
