MVT Systems — Managed IT, Microsoft 365 & Cybersecurity South Africa
All insights
Devices & IT14 October 2026

Windows 10 Is Out of Support: Planning Your Move to Windows 11

Extended Security Updates buy time, not safety. How to inventory devices, check Windows 11 readiness, decide upgrade vs replace and roll out without downtime.

Windows 10 Is Out of Support: Planning Your Move to Windows 11 — MVT Systems article illustration

Microsoft ended support for Windows 10 on 14 October 2025. The computers still switch on and still work — but without security updates, every new vulnerability found in Windows 10 stays open for good. For a business that handles client information, banking and email on those machines, that is a risk that grows every month.

What “end of support” really means

  • No more security patches unless you pay for Extended Security Updates (ESU).
  • Software vendors move on. Browsers, accounting packages, security tools and line-of-business apps gradually stop supporting Windows 10.
  • Cyber insurance and audits increasingly ask whether you run unsupported operating systems — and an honest “yes” can affect cover.

Extended Security Updates: a bridge, not a plan

Microsoft offers paid ESU for organisations, one year at a time, for up to three years — and the price rises each year. ESU delivers critical security fixes only: no new features, no general support. It makes sense for a handful of machines that cannot move yet, such as a PC running specialised equipment software. It rarely makes sense as a fleet-wide strategy.

A practical Windows 11 plan

1. Take inventory

List every Windows device, its age, processor, TPM version, disk and RAM, who uses it and what it runs. If you have a managed service provider with remote monitoring, this report already exists.

2. Check Windows 11 readiness

Windows 11 needs TPM 2.0, Secure Boot and a supported processor (broadly, Intel 8th generation or AMD Ryzen 2000 series and newer). Many business laptops bought from 2018 onwards qualify; some only need TPM or Secure Boot switched on in the firmware.

3. Upgrade or replace?

  • Upgrade in place when the device meets the requirements, has an SSD and at least 8 GB of RAM, and has a few years of useful life left.
  • Replace when the device fails the requirements, has a spinning hard drive, or is already slowing people down. New business-grade Dell, HP and Lenovo devices also bring longer warranties and better battery life.

4. Test your business apps

Pilot Windows 11 with a small group that covers your key software — accounting, ERP, printers, scanners, VPN and any specialised tools — before rolling out to everyone.

5. Roll out without downtime

With Microsoft Intune and Windows Autopilot, new laptops can ship straight to staff and configure themselves with your apps, security policies and settings when they first sign in. Upgrades can be scheduled after hours, in waves, with data safely in OneDrive first.

Use the move to tighten security

A Windows 11 refresh is the ideal moment to switch on BitLocker disk encryption, enrol devices in Intune, remove local admin rights, deploy endpoint detection and response, and bring every device under the same patching policy. Do it once, properly, and the next refresh is routine.

How MVT helps

Our managed IT services include device inventory, readiness reporting, procurement through our hardware partners, Autopilot deployment and ongoing patching. Pair it with our Microsoft 365 support for Intune and device compliance, and your devices stay current without the scramble.

Get a Windows 11 readiness report →

More insights

Let's talk

Your business future-proofing partner.

Tell us what you're building. We'll bring the strategy, the platforms and the people to make it happen.

Contact us / Book a security review

Tell us about your business

We'll get back to you within one business day.

By submitting this form you agree to MVT Systems contacting you about your enquiry. We handle your information in line with our privacy policy.