Windows 10 reached end of life on October 14, 2025. Seven months in, the businesses that made the move to Windows 11 or to a managed hardware refresh have largely forgotten about it. The businesses that didn't are now starting to feel the consequences in places that have nothing to do with operating systems.
This is not a 2025 problem any more. The patches stopped. The risk window has been open for over half a year. And in that time, three things have happened across the Canadian SMB market: insurance carriers have started to flag unsupported operating systems on renewals, software vendors have begun dropping Windows 10 from their support matrices, and the security gap between patched Windows 11 endpoints and unpatched Windows 10 endpoints has widened with every Patch Tuesday that Windows 10 missed.
If your business is still running Windows 10 in May 2026, this post is for you. It covers what end of life actually means in 2026, where the costs are already showing up, what the Microsoft Extended Security Updates program really costs, and the three migration paths Canadian SMBs are choosing with realistic numbers.
Microsoft's end-of-life designation is more than a marketing term. As of October 14, 2025, Microsoft stopped providing four things to standard Windows 10 customers: security updates, quality and reliability fixes, technical support, and feature enhancements. Each of those has a separate consequence.
Microsoft is no longer issuing security patches for Windows 10 outside the paid Extended Security Updates program. Each Patch Tuesday that passes adds new vulnerabilities to Windows 11 many of which exist in Windows 10 as well, and remain unpatched. Attackers actively diff Windows 11 patches against Windows 10 source to identify exploitable gaps. By May 2026, seven monthly Patch Tuesday cycles have produced a meaningful unpatched vulnerability backlog on every Windows 10 endpoint.
Bugs that emerge in Windows 10 are no longer being fixed. Driver compatibility issues with new hardware are no longer being addressed. The OS is, in software-engineering terms, a frozen artifact and a frozen artifact gradually drifts out of compatibility with everything around it.
Microsoft will not assist with Windows 10 issues outside the ESU program. For Canadian SMBs that have Microsoft Premier or Unified Support contracts, Windows 10 incidents are now out of scope unless the device is enrolled in ESU.
Capabilities being added to Windows 11 including Copilot+ features, recall improvements, AI-assisted accessibility, and modern security primitives will not be backported to Windows 10. The platform divergence between supported and unsupported Microsoft estates is widening every quarter.
Seven months past EOL, the financial and operational fallout has moved from theoretical to observable. Five categories of cost are already hitting Canadian SMBs that stayed on Windows 10.
Cyber insurance underwriters have begun flagging unsupported operating systems on renewal questionnaires. The most common outcomes in 2026: a premium loading of 10–25% for tenants with material Windows 10 footprint, sub-limited ransomware coverage, or in some cases a quote refusal entirely until the estate is remediated. Some carriers are now writing explicit exclusions for losses arising from incidents traced to unsupported operating systems.
PCI-DSS, the payment card security standard, became non-compliant on Windows 10 the moment EOL hit, because the standard requires actively-supported software with security patches available. Canadian businesses that process card payments and run point-of-sale or back-office terminals on Windows 10 are now technically out of compliance. PIPEDA, PHIPA, and Loi 25 don't reference operating systems by name, but each requires demonstrable safeguards over personal information a standard that's hard to meet on an unpatched OS.
Major business software vendors began dropping Windows 10 from their support matrices through late 2025 and into 2026. Microsoft 365 Apps still install on Windows 10 but are no longer being tested against it. Many vertical-specific applications accounting platforms, CRM clients, ERP modules, healthcare line-of-business apps have either dropped Windows 10 support or notified clients of a sunset date. The result: when something breaks, the vendor's first answer is often "upgrade to Windows 11."
Without quality fixes, accumulated Windows 10 bugs no longer get resolved. Driver issues with new monitors, printers, and peripherals manifest more often. Performance degrades because new third-party software is increasingly tuned for Windows 11. None of this is dramatic in any single instance but in aggregate across a 50-person business, it's measurable in lost time. We've seen estimates ranging from 30 minutes to 2 hours per user per month, depending on the role.
The most consequential cost is the one that hasn't happened yet until it does. Unpatched Windows 10 endpoints are an attractive target. Several of the high-profile Canadian SMB ransomware incidents reported in 2026 have involved estates with material Windows 10 presence. The cost of one such incident typical Canadian SMB recovery is $250,000 to $1.5M including business interruption eclipses the cost of a complete migration by an order of magnitude.
Microsoft offers a paid Extended Security Updates program for Windows 10. It's not a strategy it's expensive runway. Here's the reality.
ESU pricing for commercial customers starts at approximately $61 USD per device for year one. The pricing doubles each subsequent year: roughly $122 USD per device in year two, and roughly $244 USD per device in year three. Maximum program duration is three years, after which no further updates are available at any price.
For a 50-device fleet, the three-year ESU total runs approximately $21,350 USD roughly $29,000 CAD at current exchange. That's per fleet, on top of existing licensing, and assumes you sign up for all three years and pay full retail. It also assumes Microsoft does not change pricing or program terms during that window, which is not guaranteed.
ESU provides critical and important security updates only. It does not include: technical support, quality fixes, feature enhancements, or compliance attestation. Vendors who require "actively supported" Windows do not consider ESU equivalent to a supported OS. Insurance carriers may or may not the trend is toward not.
ESU is rational only as a transition mechanism typically 6 to 12 months while a structured migration is underway, often for specific hardware that cannot be replaced immediately due to specialized peripherals or vertical software constraints. As a "we'll deal with it later" strategy, it stops paying back after year one and becomes a recurring tax with no ending.
Every business that needs to move off Windows 10 has the same three options. The right one depends on hardware age, budget rhythm, and operational tolerance.
Best for: hardware that meets Windows 11 minimum requirements (typically devices purchased in 2019 or later), with adequate RAM and storage.
Process: Microsoft's free in-place upgrade preserves applications and user data. For a managed environment, the upgrade is scripted, scheduled outside business hours, and validated before users return. Typical effort: 30–60 minutes per device, plus pre-flight verification. Cost: licensing already covered for Windows 10 Pro to Windows 11 Pro within the same SKU, so the upgrade itself is free; the labour is the only spend.
Constraint: roughly 30–40% of Windows 10 devices in typical SMB fleets do not meet Windows 11 hardware requirements particularly the TPM 2.0 and CPU generation thresholds. Those devices need Path 2 or Path 3.
Best for: hardware older than 5 years, devices that fail Windows 11 compatibility, or estates where the productivity drag of aging hardware has independently justified replacement.
Process: scope, procure, image, deploy, decommission. A managed deployment for a 50-person business typically runs 4–6 weeks end to end and costs $850–$1,500 CAD per device for business-class hardware (Dell Latitude, Lenovo ThinkPad, HP EliteBook), plus deployment labour of approximately $150–$250 per device.
Total cost for a 50-device refresh: approximately $50,000–$87,500 CAD. This is real money, but it's a one-time spend that produces 4–5 years of production life and resets your security and warranty posture.
Best for: businesses that want to convert capital expenditure into predictable operating expenditure, refresh hardware on a defined cycle without lump-sum purchases, and offload procurement, deployment, warranty, and end-of-life disposal to their managed IT provider.
Process: per-device monthly fee (typically $60–$120 CAD per device per month depending on spec) covering hardware, deployment, warranty, security patching, and end-of-life refresh. Refresh cycle is typically 36 or 48 months.
For the same 50-device fleet: approximately $36,000–$72,000 CAD per year, with hardware refreshed continuously rather than in disruptive 5-year waves. Cash flow predictable; no surprise capital event in 2030 when the same problem repeats. This is the path most GAM Tech clients chose through 2025 and 2026.
Before assuming any device can take an in-place upgrade, verify against Windows 11 minimum requirements. The most common compatibility blockers in 2026 are:
• TPM 2.0 — required for Windows 11; many pre-2018 business devices lack it or have it disabled in firmware
• Secure Boot — required and must be enabled in UEFI
• CPU generation — Intel 8th-gen or newer, AMD Ryzen 2000-series or newer (devices older than this are unsupported)
• RAM — 4GB minimum (Microsoft); 8GB realistic minimum for business productivity
• Storage — 64GB minimum; 256GB realistic minimum
• Display — 720p minimum; modern business class typically exceeds this comfortably
Microsoft's PC Health Check tool produces a per-device compatibility report. For a managed environment, your IT provider can run an estate-wide compatibility scan via Intune, RMM tooling, or Active Directory queries and produce a device-by-device report typically within a day for a 50-device fleet. That report is the foundation of every migration plan.
GAM Tech has run dozens of Windows 10 to Windows 11 migrations for Canadian businesses through 2025 and into 2026. Our approach is built around four phases:
Migrations are typically delivered under a defined-scope project pack included in our managed IT services for clients on Gold and Platinum, and available as a standalone project for clients on Silver. With 24/7 internal staff across Calgary, Edmonton, Red Deer, Vancouver, Victoria, Toronto, Ottawa, and Montréal, GAM Tech can deliver Windows 11 migrations anywhere in Canada with the same standards: SOC2 certified, B-Corp certified, never outsourced, 5-minute response guarantee for managed clients.
Microsoft ended mainstream support for Windows 10 on October 14, 2025. After that date, Windows 10 no longer receives security updates, quality fixes, technical support, or feature enhancements outside the paid Extended Security Updates program. Devices still run, but they no longer receive patches against newly discovered vulnerabilities.
Technically yes — Windows 10 devices still boot and run. Practically, running Windows 10 in 2026 carries material security, compliance, insurance, and vendor compatibility risk. Each month past October 2025 adds new unpatched vulnerabilities. For a business, continuing on Windows 10 without ESU enrollment is generally not advisable.
ESU starts at approximately $61 USD per device for year one. The price doubles each subsequent year roughly $122 USD in year two and $244 USD in year three. Maximum program duration is three years. For a 50-device fleet, the three-year total runs approximately $21,350 USD, or roughly $29,000 CAD at current exchange.
No. PCI-DSS requires actively-supported software with security patches available. Windows 10 ceased to be actively supported on October 14, 2025. Canadian businesses processing card payments on Windows 10 endpoints are technically out of compliance and may face acquirer pressure or audit findings as a result.
Windows 11 requires TPM 2.0, Secure Boot, an Intel 8th-generation or newer CPU (or AMD Ryzen 2000-series or newer), 4 GB of RAM, 64 GB of storage, and a 720p display. Devices purchased in 2019 or later typically meet these requirements. Older devices often don't, particularly because of TPM 2.0 and CPU generation thresholds. Microsoft's free PC Health Check tool produces a per-device compatibility report.
Yes, if your device is compatible. Microsoft's in-place upgrade from Windows 10 Pro to Windows 11 Pro (or Home to Home) is free of licensing cost. The labour to plan, schedule, validate, and support the upgrade across a business fleet is a separate cost typically delivered by a managed IT provider as part of a structured migration.
Most Canadian cyber insurance carriers in 2026 are flagging unsupported operating systems on renewal questionnaires. Common consequences include premium loadings of 10–25%, sub-limited ransomware coverage, or in some cases a quote refusal until the Windows 10 footprint is remediated. Several carriers have begun writing explicit exclusions for losses arising from incidents on unsupported operating systems.
ESU is appropriate as a short transition bridge typically 6 to 12 months while a migration is in progress for specific devices that cannot be replaced immediately. As a long-term strategy, ESU compounds in cost (doubling annually), expires after three years, and does not satisfy compliance or insurance expectations of "actively supported" software. For most Canadian SMBs, a structured migration in 2026 is the more economical path.
Buying new hardware is a capital expenditure: a one-time purchase, depreciated over 4–5 years, with the business responsible for procurement, deployment, warranty, and end-of-life disposal. Hardware-as-a-Service converts that to operating expenditure: a monthly per-device fee covering hardware, deployment, warranty, security patching, and end-of-life refresh on a defined cycle (typically 36 or 48 months). HaaS produces predictable cash flow and avoids the lump-sum hardware events that recur every 5 years.
GAM Tech runs structured Windows 10 to Windows 11 migrations across Canada through a four-phase approach: estate assessment, migration plan with three options costed in CAD, execution outside business hours, and post-migration hardening. Migrations are typically delivered as a project pack included in managed IT services for clients on Gold and Platinum plans, and available as standalone projects for clients on Silver. We are SOC2 certified, B-Corp certified, with 24/7 internal teams in Calgary, Edmonton, Red Deer, Vancouver, Victoria, Toronto, Ottawa, and Montréal.
Windows 10 isn't getting safer over time. Every Patch Tuesday widens the gap. Every renewal cycle gives carriers more reason to load premiums or restrict coverage. Every vendor sunset narrows the supported software stack on Windows 10 further. The cost of staying on Windows 10 in 2026 is no longer a future cost it's a present one, and it compounds.
If your business is still running Windows 10 in May 2026, GAM Tech can produce a written estate assessment, a costed migration plan, and a recommendation between in-place upgrade, hardware refresh, and Hardware-as-a-Service usually within 5 business days. With offices in Calgary, Edmonton, Red Deer, Vancouver, Victoria, Toronto, Ottawa, and Montréal, and a 24/7 internal Canadian team, we deliver migrations anywhere in the country.
Book a Windows 11 migration assessment to find out what your fleet actually needs and what it will cost.
.jpg)
1 min read
Adrian Ghira : Aug 6, 2026, 9:00:00 AM
It's 6:52 a.m. on a Monday. Your clinic manager calls: the EMR won't load, the front-desk workstations are showing ransomware notes, and patients are...
1 min read
Adrian Ghira : Apr 17, 2026, 9:00:01 AM
Introduction: The Cost Nobody Calculates Correctly Every business owner knows that IT downtime is bad. But very few have actually sat down and...
.jpg)
1 min read
Adrian Ghira : Jan 28, 2026, 11:55:45 AM
Non-human identities are digital entities that require identity and access management (IAM) to function securely within a network. These can include...
Adrian Ghira
