Endpoint management
Windows 10 support has ended: upgrade, extend or replace?
A business decision guide for inventorying Windows 10 devices and choosing a supported transition path.
Windows 10 support ended on 14 October 2025 for the mainstream editions covered by Microsoft's notice. A device continuing to start is not the same as a supported business endpoint. Decide per device whether it can move to Windows 11, needs a documented temporary extended-security path, should be isolated for a short transition, or must be replaced.
The decision
What changes the answer
- Start with a verified device inventory and reconcile it to active users.
- Include application, peripheral, warranty and user-impact testing in the decision.
- Treat extended support as a time-limited transition control with an owner and end date.
- Pilot the awkward devices and applications before scheduling the easy majority.
From day-to-day administration
Details worth settling early
Use extended support as an exception
Extended Security Updates can buy time for a device tied to a specialist application or replacement cycle. It should have an owner and an exit date rather than becoming the default fleet strategy.
Pilot the awkward devices first
Start with older hardware, specialist peripherals, virtual private network clients, line-of-business applications and shared workstations. A pilot made only from recent standard laptops proves very little about the difficult part of the move.
Where the decision commonly goes wrong
- Counting only office desktops and missing remote or shared devices
- Replacing hardware without testing business peripherals
- Leaving old devices active because one undocumented application still depends on them
A sensible way to decide
- 01
Inventory and classify
Record device model, owner, location, Windows edition, hardware compatibility, critical applications, warranty and data sensitivity.
- 02
Test day-to-day work
Confirm line-of-business applications, printers, scanners, virtual private network access, identity and security tooling on the devices most likely to cause difficulty.
- 03
Choose the path
Approve upgrade, replacement, temporary extension or retirement per device, with cost and end date.
- 04
Roll out in waves
Back up user data, pilot with supportable users, deploy controls and validate everyday work before wider rollout.
- 05
Retire safely
Remove access, retain required records, securely erase or destroy storage and update the asset register.
Check before committing
- Inventory complete
- Compatibility tested
- Decision recorded per device
- User data protected
- Security baseline applied
- Old access removed
- Retirement evidence retained
Material checked for this note
- Microsoft — Windows 10 end of support
- Australian Signals Directorate, Australian Cyber Security Centre — Essential Eight explained
- Microsoft Learn — Planning guide to move to Microsoft Intune
Links and technical details checked 2 September 2026. Corrections can be sent to info@turnstoneai.com.