Windows 10 Still Running in 2026 — The ESU vs Migrate Math for Florida Small Businesses

Windows 10 hit end-of-support on October 14, 2025. Microsoft’s Extended Security Updates (ESU) program continues to ship critical security patches through October 2028, but the pricing was designed to make staying on Windows 10 progressively more expensive than migrating: $61 per device for Year 1, $122 for Year 2, $244 for Year 3 — a total of $427 per device over the full three-year ESU window. The structure is intentional. Microsoft wants you on Windows 11.

For a Florida small business still running Windows 10 in May 2026 — and there are many; medical and dental practice management vendors have been slow to certify Windows 11 — the question is whether to pay ESU through the practical replacement timeline or accelerate the migration. The answer depends on five specific inputs, none of which are the headline ESU price. Here is the actual math, the medical/dental-software lock-in problem, and the decision framework Simply IT walks Florida clients through.

What ESU Actually Covers (And What It Doesn’t)

The Windows 10 ESU program ships critical and important security updates only. It does not ship feature updates, design changes, new bug fixes for non-security issues, or driver updates. Microsoft technical support is not included — if a system breaks for a reason unrelated to a security patch, you are on your own.

Several other constraints matter for a small business decision:

• Minimum one license, no partial years. Volume Licensing now allows single-device purchase. But ESU must be purchased by full year — no six-month options.
• Cumulative. If you join ESU in Year 2, you must also pay for Year 1 retroactively. Skipping Year 1 only to pick up Year 2 is not allowed.
• Enrollment ends October 13, 2028. No fourth year. After that, Windows 10 is permanently unsupported regardless of who pays what.
• Secure Boot certificate expiration. The Microsoft-issued certificate that signs Secure Boot for Windows 10 hardware expires during the ESU window. Some devices may need firmware or replacement to keep booting securely even with ESU paid.
• Cloud-hosted Windows 10 on Azure / Windows 365 is different. ESU is included free for those tenants. Most Florida small businesses are not in that footprint.

The Migration Alternative — What Windows 11 Actually Costs

For a typical 15-person Florida professional services business in May 2026, migration looks like this:

• In-place upgrade on compatible hardware: Free for properly licensed Windows 10 systems that meet Windows 11 requirements (TPM 2.0, supported CPU, 64-bit, 4 GB+ RAM). Labor: 2–3 hours per device including pre-flight checks and rollback prep.
• Hardware refresh for ineligible devices: Most business-grade laptops or desktops from 2018 or earlier do not meet Windows 11 requirements. Refresh to a business-class machine: $700–$1,200 per device including standard imaging.
• Cloud-managed alternative: Windows 365 Business or Enterprise — cloud PCs at $30–$60 per user per month — eliminates local hardware concerns entirely and includes Windows 11 ESU-equivalents going forward.

The Math for a 15-Device Florida Office

The honest read: ESU is rarely the cheapest option over the full 3-year window once you account for labor, risk, and the fact that you still have to migrate by October 2028 anyway. ESU makes sense only as a bridge of 6–18 months for specific devices that cannot migrate yet — usually because of a software dependency, not because of cost.

The Medical / Dental / Legal Software Lock-In Problem

This is where ESU actually earns its keep. Several practice management and line-of-business platforms common in Florida small business have been slow to certify Windows 11:

• Dental imaging suites: Several intra-oral and panoramic imaging packages with bridge software certified only against Windows 10. The replacement-driver project is in vendor backlog through 2026.
• Veterinary practice management: Some older versions of common vet PIMS run on a legacy Windows 10 image; vendor-certified upgrade path is to the cloud version rather than to Windows 11 desktop.
• Construction estimating / takeoff: A few CAD-adjacent tools that small Florida contractors depend on are W11-tested but not officially supported, meaning a vendor escalation post-incident is uncertain.
• Specialty medical devices: Connected diagnostic instruments — chair-side analyzers, EKG, spirometers — tied to a Windows 10 driver that no manufacturer is updating.

For these specific scenarios, paying ESU for the affected workstations — not the entire fleet — while pressuring the software vendor for a Windows 11 path is the right play. Pay $61 for the one imaging workstation. Migrate the other 14 office machines. Plan to retire the W10 holdout by Q3 2027.

The Compliance and Insurance Angles

Three regulatory / insurance overlays make staying on Windows 10 without ESU genuinely unsafe in 2026:

• HIPAA Security Rule. The Rule requires “reasonable and appropriate” safeguards. Running an unsupported, unpatched operating system that touches PHI is increasingly hard to defend as reasonable. The proposed HIPAA Security Rule update expected May 2026 is likely to make “supported OS only” an explicit technical control. See our HIPAA cybersecurity guide for Florida medical practices.
• FTC Safeguards Rule. CPA firms, tax preparers, mortgage brokers, and insurance agencies must maintain “current security software.” Unsupported OS without ESU coverage fails that test. See our FTC Safeguards implementation guide.
• Cyber insurance underwriting. Carriers now ask explicitly about end-of-life operating systems on their renewal questionnaires. Running unpatched Windows 10 without ESU is a renewal-denial-risk question in 2026. See our cyber insurance 10-control checklist.

Decision Framework — 5 Questions

1. How many of your devices are hardware-eligible for Windows 11? Run the Microsoft PC Health Check tool. The answer is usually 60–80% of a 5-year-old fleet.
2. Which devices have a Windows-10-only software dependency? Inventory your line-of-business software. Confirm vendor stance on Windows 11 with each.
3. What is the all-in cost of the hardware refresh vs. ESU through your realistic migration date? Not the 3-year ESU number — the 12-18 month bridge number for the specific devices you can’t migrate yet.
4. Does your compliance posture allow it? HIPAA, FTC Safeguards, ABA Rule 4-1.6 — each has language about supported software.
5. Does your cyber insurance carrier allow it? Read the questionnaire. “Yes, paid ESU current” is generally OK. “No, end-of-life OS” is often a renewal blocker.