A Windows 10 workstation has not received any security patches since 14 October 2025, unless the company pays for Microsoft’s Extended Security Updates programme. Three options remain: upgrade, isolate the workstation, or pay for these updates until it is replaced.
The three options
- Upgrade to Windows 11. If the hardware is compatible, this is the simplest solution. Business applications must be tested first.
- Isolate the workstation. For a workstation that has to stay on Windows 10, for example to control a machine or run older software: cut it off from the internet and the rest of the network, or virtualise it.
- Pay for Extended Security Updates. Microsoft sells them to businesses by the year, for up to three years after the end of support, and the price doubles each year. It is a stopgap while the workstation is replaced.
To check this week
- How many workstations are still running Windows 10, and which ones are compatible with Windows 11?
- For each of the others: replacement, isolation or Extended Security Updates, with a date?
Questions about your situation? Describe my needs
Sources consulted on 19 October 2026: Microsoft Learn – Programme de mises à jour de sécurité étendues (ESU) pour Windows 10.
Article written by IT CyberWall.
