Microsoft Windows 10 support ends – here’s what you need to do now – Small Business UK

As of October 14, Microsoft is wrapping up its support and it’s crucial that the estimated 46 per cent of people who still use Windows 10 take action.

“The end of Windows 10 support shouldn’t come as a surprise, yet many organisations remain unprepared. Planning gaps, legacy dependencies and budget constraints continue to delay migration, even where devices are technically capable of upgrading. Every day of delay increases risk and makes the transition harder,” said Dave Adamson, solutions director at Creative ITC.

Here’s what you should do now.

What’s changing for Microsoft 10?

There’ll be no new features for Microsoft 10, unless your device is enrolled in Extended Security Updates (ESU).

You’ll be much more vulnerable to attackers who can exploit vulnerabilities, gaining access to your business’ devices and data and infiltrate your machines to carry out more attacks.

However, Microsoft 365 apps will continue to receive security updates until October 2028 and feature updates up until August 2026. Technical support will not be provided.

Security intelligence updates for Microsoft Defender Antivirus will continue on Windows 10 to October 2028.  

What happens if I don’t act?

You’re at greater risk of attacks, such as malware, on your machines. On top of that, it may be more difficult to meet regulatory requirements with older software.

“The risks are clear: greater cyber exposure, compliance failures and operational disruption,” Adamson added. “Once Microsoft ends support, there will be no more free security updates or patches, leaving systems open to threats. Millions of devices in the UK are already at risk, as attackers continue to exploit vulnerabilities, and once support ends, those threats will only increase.

“Unsupported systems can also lead to regulatory non-compliance, especially in industries governed by strict data protection laws, and can disrupt operations through downtime, data loss or the inability to run critical applications.

It’s clear that this isn’t always a straightforward task as it often goes beyond updating a singular piece of software – especially given the increased hardware requirements demanded by Windows 11, Matt Balderstone, cybersecurity advisor at CyberArk, pointed out.

“That being said, the cost of standing still is even greater and a proactive approach to appropriately allocating resources will be critical going forwards.

“In an era of unprecedented cyber risk, with new cyberattacks targeting businesses every day, one Windows 10 machine is now too many. It’s crucial that consumers and businesses work to update their systems to avoid exposing their operations to security risks.” 

What are my options now?

If your machines are eligible, upgrade to Windows 11.

If it makes sense to your buiness to stay on Windows 10, sign up to Extended Security Updates (ESU) – this will extend the most important security updates for another 12 months. People living in the European Economic Area will be able to get it for free, but not in the UK. You’ll need to pay $61 (around £46) per machine to access ESU.

To get ESU on your Windows 10 device:

• Go to Settings > Update & Security > Windows Update. If your device meets the prerequisites, you’ll see a link to enroll in ESU
• Once you select Enroll now you’ll start the ESU enrollment. If you are signed into Windows with a local account, you will be prompted to sign into your Microsoft account. If you are already backing up your PC Settings, you will see a prompt to enroll your device
• If you aren’t backing up your Windows settings, you can choose if you want to begin backing up your settings, redeem Rewards or make a one-time purchase to enroll in ESU

Unfortunately, many are being forced into buying a new machine altogether, though it may be tax-deductible.

“Several sectors defined by the UK as critical national infrastructure (CNI) – such as government, financial services, and energy & utilities – are still dependent on legacy IT systems. And, often, the older the hardware is, the less likely its OS can be updated, meaning these companies are faced with the significant cost of purchasing new hardware. It’s no easy feat, nor is it quick. Given this, it’s likely that some will miss the end-of-life deadline,” said Scott Walker, chief architect at Orange Cyberdefense.

These tips from Avast on how your business can stay protected: 

• Run an inventory of Windows 10 endpoints, segment networks, restrict macros and unsigned drivers, turn on application allow-listing, plan hardware refresh for non-upgradable devices, and budget multi-year ESU if needed. Pricing starts around 61 USD per device for year one and increases annually
• Beware of scams – if you receive a call claiming to be from Microsoft urging you to upgrade, or suspiciously looking pop-up messages, stay cautious and do not engage. If your device is eligible for an upgrade, you will receive an official notification from Microsoft 

A constant process

“This isn’t an IT upgrade issue. It’s a business continuity issue,” said Adamson. “Firms should be auditing devices, addressing compatibility gaps and planning refreshes. For some, that may mean replacing hardware; for others, it’s an opportunity to explore more flexible infrastructure models. Virtual desktops, for instance, can help extend the life of existing devices and support secure, sustainable remote access – without the need for immediate large-scale replacements.”

Read more

What businesses need to know about emerging trends in cloud security tools – Here’s the lowdown on what cloud security tools are out there and the emerging trends you can expect to see

How to provide cybersecurity training for your home workers – Find out what cybersecurity training information to include, how to deliver it and what follow-up resources to provide for your home workers