A device can still work after Windows 10 end of support.

That does not make it a sensible standard for a managed business estate.

This is the point many SMEs need to separate clearly: “still runs” is not the same as “still supportable”. Once a platform falls out of mainstream support, it starts creating avoidable risk, awkward exceptions and remediation debt.

What end of support actually means

When a device reaches end of support, it does not stop turning on. But the operating assumption changes.

It becomes harder to defend as a normal business standard because you are no longer talking about a current, supported operating baseline in the same way.

Why unsupported is different from broken

Unsupported devices are often tolerated because they still seem useful.

That is understandable. But unsupported does not need to mean visibly broken to become a problem. In a structured estate, unsupported endpoints create questions such as:

• should they remain in normal user service?

• what is the exception path?

• how long is that exception acceptable?

• who signed it off?

• what is the replacement or upgrade date?

If those answers are unclear, the estate starts drifting away from a defensible baseline.

How unsupported devices affect a CE-style estate

A Cyber Essentials-style estate depends on predictable controls: supported systems, patching discipline, clearer scope and fewer unmanaged exceptions.

Unsupported machines cut against that model. They create holes in patching assumptions, complicate device standards, and leave you explaining why an older machine is still there rather than showing what the standard is.

How to triage the estate

A useful triage model is simple:

Upgrade

If the device can move to a supported operating state and remain viable, do that.

Replace

If the device is too old, uneconomical or likely to stay awkward, replacement is often the better business decision.

Isolate temporarily

If you need a short transition period, treat it as a controlled exception with an owner and removal date.

Retire

If a device no longer fits a sensible operating model, remove it from normal use.

How to talk about the risk in business terms

This is not just a technical purity argument. Unsupported devices usually cost in three ways:

• more exceptions to manage

• more uncertainty in patching and supportability

• more friction when trying to standardise the estate

That is why many SMEs need a replacement plan, not just a device list.

Final thought

Windows 10 end of support matters because it forces a management decision.

Do you want an estate built around what still happens to work, or one built around what is supportable, standardised and easier to defend? For a business trying to run a CE-style baseline, that answer should be obvious.

Book a Security Triage Call

FAQs

What happens when Windows 10 reaches end of support?

When Windows 10 reaches end of support, Microsoft will no longer provide security updates. This means your devices will be vulnerable to new threats unless you upgrade to Windows 11 or migrate to another supported platform.

How does Windows 10 end of support affect Cyber Essentials?

Cyber Essentials requires that all devices receive security updates. Devices running an unsupported operating system cannot pass Cyber Essentials certification unless a compensating control is in place.

What should SMEs do before Windows 10 end of support?

Inventory all Windows 10 devices, assess whether they can be upgraded to Windows 11 (hardware compatibility), plan the migration timeline, and ensure your Cyber Essentials certification is maintained throughout the transition.

Learn about the Security Baseline Review