Windows 10 ESU is a bridge, not a plan
Three renewable years is enough time to migrate properly and exactly enough time to keep postponing it.
Windows 10 left standard support in October 2025. Extended Security Updates carry it further: consumer coverage ends in October 2026, and enterprises can renew yearly out to October 2028.
Three years sounds generous. It is the same three years that will be gone before the hardware budget cycle comes round twice.
What ESU is and is not
It is security fixes. Not features, not quality updates, not new driver support, and no expansion of what the platform can do. The machine stops improving and keeps being patched.
That is a reasonable position for a defined period with a defined end. It is not a reasonable operating state, and the difference matters when someone in a budget meeting describes ESU as "we are covered".
Why fleets are still on Windows 10
Rarely negligence. Usually one of four things, and knowing which one you have determines whether ESU is buying you anything.
- Hardware that cannot take Windows 11. The TPM and CPU requirements exclude machines that are otherwise fine. This is a purchase, and ESU is genuinely buying the time to spread it across budget years.
- An application that will not run. Usually a vendor product with no supported Windows 11 version. ESU buys time only if somebody is actively working the vendor. If nobody is, the same conversation will happen in 2028 with less room.
- Operational risk aversion. Machines running something that must not be disturbed. These need individual plans, and they will still be here in 2028 unless someone owns them by name now.
- Nobody has started. ESU here funds delay rather than transition, and it is the only one of the four where buying the extension makes the outcome worse.
The date that actually matters
Not October 2028. The last date on which you can start and still finish comfortably, which for a fleet of any size is roughly eighteen months earlier.
Hardware procurement, image testing, application validation, and user migration do not compress well. A refresh that has to happen in the final six months happens badly, and the last six months of ESU is also when everybody else is doing the same thing to the same suppliers.
What I would put in front of a board
Two numbers. How many devices are covered by ESU and what that costs per year. How many of those devices need replacing rather than upgrading, and what that costs once.
The second number is the plan. The first is what you pay while executing it. Presenting only the first invites the reasonable response of renewing again, and renewing again is how organisations arrive at 2028 with the same fleet and no remaining options.