Windows 10 ESU’s (Extended Security Updates) second year begins on October 14, 2026. That means Microsoft is increasing the price to $122 per device. If your organization is still paying to keep Windows 10 PCs patched, this article explores the costs, what it does not cover, and the four ways out.
Key Takeaways
- Windows 10 ESU is a paid, temporary patch service. In its second year, the price doubles for each device.
- ESU delivers security fixes only. You don’t get any new features, nor general technical support.
- Most Windows 10 PCs can move to Windows 11 for the cost of labor. So, ESU should only cover the devices that cannot be due to technical limitations.
Table of Contents
What Will Windows 10 ESU Cost a Business in Year 2?
Windows 10 ESU for business costs $122 per device in Year 2, up from $61. It’s important to note that Microsoft:
- Requires an annual purchase (November-November)
- Caps the program at three years for commercial organizations
Here is what that looks like at two common business sizes:
ESU Year | Price Per Device | 25 Devices | 125 Devices |
|---|---|---|---|
Year 1 | $61 | $1,525 | $7,625 |
Year 2 | $122 | $3,050 | $15,250 |
Year 3 | $244 | $6,100 | $30,500 |
Three-year total | $427 | $10,675 | $53,375 |
Pro tip: If you skipped year one and enroll devices this year, you will also have to pay for the first year because ESU coverage is cumulative. That means if you enroll devices on or after October 14, the total amount you will pay this year will be $61 + $122, resulting in a total of $183 per device. So, you cannot save money by waiting to join the program later. This covers the previous year’s subscription, allowing you to receive the previous year’s security updates even though you did not enroll immediately.
What the invoice doesn’t show you is how little that $122 investment will get you.
What Windows 10 ESU Does Not Provide
ESU provides your organization with security updates, but that’s all. Microsoft states that the ESU program excludes:
- New features
- Customer-requested non-security updates
- Design change requests
- General technical support
However, you can get help with ESU activation and installation issues, but only if you hold a separate support plan.
So, how many organizations are still living with those gaps?
How Many Businesses Are Still Running Windows 10 in 2026?
About 17% of devices still run Windows 10, according to Lansweeper’s July 2026 analysis. Of them, around 21% of small and mid-sized business Windows machines remain on Windows 10. And unfortunately, they’re carrying a lot of risk.
Lansweeper found that Windows 10 devices carry nearly three times as many active vulnerabilities as their Windows 11 counterparts. Unsurprisingly, cost is the usual reason SMBs have decided to wait to complete their PC refresh.
Why You Should Make a Plan to Upgrade Soon
Aside from the greater cost you’re assuming from the ESU, there are two other reasons you should seriously consider making a concrete plan to upgrade your devices to Windows 11.
- 1. ESU does not fix the underlying age of the PC. So, any performance and/or compatibility problems remain with your business.
- 2. Lansweeper reports that cyber insurers now commonly ask whether unsupported operating systems run in your business. And, yes, that can affect your coverage. So, you should ask your broker how an ESU-covered device is treated before you renew.
Which Windows 10 PCs Can Upgrade to Windows 11?
A Windows 10 PC can upgrade to Windows 11 if it meets Microsoft’s hardware requirements. We suggest you sort your devices into three groups before you spend any money:
- Ready now – Devices that pass the Windows 11 check and can be upgraded today.
- Replace on a schedule – Devices that fail to meet the hardware requirements, but do not hold sensitive work this quarter.
- Replace first – Devices that fail to meet the hardware requirements and handle sensitive data, finance, or regulated work.
Oftentimes, the number of devices that cannot be upgraded is much smaller than most executives fear. Lansweeper puts it at 2.8% of Windows 10 devices. A tool such as Microsoft Intune can tell you which of your PCs pass the requirements.
Once you know which devices can and can’t be upgraded, you have four options.
4 Options for Handling Windows 10 Devices after October 14
| Option | Best for | Cost and trade-off |
|---|---|---|
|
Upgrade to Windows 11 |
PCs that pass the hardware requirements |
Labor only. Fastest way to stop paying for ESU. |
|
Replace the hardware |
PCs that fail the TPM or processor requirements |
Highest upfront cost, but it ends the problem for that device. |
|
Move users to Windows 365 Cloud PCs |
Older devices or remote staff |
Subscription cost. ESU is included at no extra charge for Windows 10 virtual machines in Windows 365 and Azure Virtual Desktop. |
|
Buy ESU |
Specialty hardware and short transitions |
$122 per device now, $244 next year. It should be used as a bridge only. |
How to Get off of ESU Before Year 2 Begins
Work through each step in order. Each should take a day or less for a fleet of a few hundred devices.
1. Count the devices.
Pull a list of every Windows 10 PC, including laptops that seldom connect to the office network.
2. Run the Windows 11 check.
Mark each device as ready, replace later, or replace first (see section, Which Windows 10 PCs Can Upgrade to Windows 11?).
3. Decide on whether to get ESU based on each individual device.
Only buy it for PCs that cannot be upgraded, replaced or moved to the cloud before the next budget cycle.
4. Set a stop date.
Write down when you want each ESU-covered device to be upgraded. Decide who is responsible for making that happen by the date you set.
This is where having a managed IT services provider (MSP) on your side really pays off because the team already manages your endpoints. So, they can build out the device list quickly and provide recommendations – while your staff keeps working on projects that require their specific skill set.
Make 2027 the Last Year You Pay to Stay on Windows 10
Paying double or quadruple what you were in the first year to patch aging PCs only makes sense when it buys time for you to build a migration plan.
Use this week to count devices, sort them, and put an end date on every ESU license you buy. If your in-house team cannot take on a migration alongside daily support, Teal’s managed IT services can handle everything.
Our technicians specialize in Microsoft, so they can help with the device audit, the Windows 11 rollout, and the budget forecast. Giving you predictability, stability, and, most of all, a finish line.
