In this article
Since 14 October 2025, Windows 10 has no longer received security updates from Microsoft at no extra cost. Workstations still switch on and Office still opens — which is why many companies have not yet acted — but every vulnerability discovered since then stays open. The right response is an IT estate management decision, taken workstation by workstation: upgrade to Windows 11, replace the hardware or buy time with extended updates. We explain how to choose and how to migrate without halting operations.
The real risk: it is not what stops working
At end of support, Windows 10 no longer gets security fixes, new features or technical support from Microsoft. It does not shut down or keep nagging; it simply becomes unprotected, and attackers know where to look.
- Collective risk — in a company, one outdated workstation on the network is enough to open the way to all the others.
- Compliance risk — processing personal data on systems known to be unsupported makes it harder to demonstrate "appropriate technical measures" under the GDPR.
The three paths, side by side
| Path | When it makes sense | Watch out for |
|---|---|---|
| Upgrade to Windows 11 | Compatible hardware: a recent processor (generally Intel 8th generation or AMD Ryzen 2000 onwards), TPM 2.0 and Secure Boot; many laptops bought since 2019 | Legacy business software, printers with discontinued drivers, card readers or barcode scanners |
| Replace | Workstations over six years old or incompatible | Concentrating the cost in a single month; prefer phased renewal |
| Extended Security Updates (ESU) | Workstations that cannot be touched yet, such as a PC connected to an industrial machine or critical software with no Windows 11 version | Up to three years, paid per device per year, with the price doubling each year |
Upgrade: test before rolling out
For compatible hardware with a valid Windows 10 licence, the upgrade carries no licence cost. What tends to fail is everything around it: applications and peripherals. The rule is to upgrade two or three workstations belonging to different users, let them work for a week and only then move ahead.
Replace: in phases and with standardised models
Most companies first renew the workstations that hold sensitive data (management, finance, human resources) and then the rest, taking the opportunity to standardise models — which lowers support costs in the years that follow. Before buying, take an inventory: the IT estate audit checklist has the hardware and operating systems section ready to fill in.
ESU: a bridge, not a destination
Buying ESU for the whole estate and postponing the decision ends up costing more than phased renewal.
The decision matrix per workstation
- Compatible and under 5 years old Upgrade, after testing the business software.
- Compatible and over 5 years old Upgrade now and budget for replacement next year.
- Incompatible Replace; if that is not possible straight away, ESU for one year and a scheduled replacement.
- Connected to specialist equipment Isolate it on its own network segment, without internet, and negotiate with the machine’s supplier.
Three mistakes to avoid
- Windows 10 workstations without ESU on the network — with access to email and shared files.
- Relying on the antivirus — it protects against malicious files, not against flaws in Windows itself.
- Migrating everything on the same day — if something goes wrong, it goes wrong across the whole company at once.
DataRoad IT Unlimited
Talk to DataRoad. We assess your operation and propose the right plan.
Servers: the same reasoning, different dates
Windows Server 2016 loses support in January 2027 and 2012 has had none since 2023. For physical servers on these versions, the choice is between replacing, virtualising or migrating to the cloud — the subject of our servers and virtualisation page.
How DataRoad runs the migration
Under IT Unlimited contracts, migration to Windows 11 is included in the service:
- Inventory — the whole estate, workstation by workstation.
- Pilot — critical software tested on one workstation before rolling out.
- Scheduling — upgrades outside working hours.
- Follow-up — user support in the first few days.
- Renewal — workstations to be replaced go into a plan with dates.
- Verification — monitoring confirms that no device has been left behind, with 24/7 coverage on the Premium 365 plan.
Frequently asked questions
Will a Windows 10 computer stop working?
No. It still boots and runs programs, but it no longer receives fixes and becomes increasingly exposed to attacks that exploit known flaws.
Is a good antivirus enough to stay on Windows 10?
No. It reduces the risk, but it does not fix vulnerabilities in the operating system.
Does the Windows 11 upgrade cost anything?
There is no licence cost on compatible hardware with licensed Windows 10. The real cost lies in migration time, testing and replacing incompatible hardware.
How long does it take to migrate 30 workstations?
Once the pilot has been validated, one to two weeks, outside working hours and without halting operations. Replacements depend on hardware delivery times.
Next step: inventory and migration plan
We tell you which workstations to upgrade, which to replace and in what order, and we carry out the migration without stopping the business. Discover our remote, on-site and telephone support for business and request a no-obligation proposal.
More than 10 workstations · support contract · remote, on-site and telephone support.
Call +351 211 459 950* or write to sales@dataroad.pt.
*Call to a Portuguese landline.
