Windows 10 End of Life Is Coming
Microsoft has confirmed that Windows 10 support ends on 14 October 2025. After that date, no more security patches will be released for Windows 10 â meaning every unpatched vulnerability becomes a permanent risk. For Australian businesses still running Windows 10, migration to Windows 11 is no longer optional.
The good news is that Windows 11 is a solid operating system with meaningful security improvements. The bad news is that many older business PCs do not meet the hardware requirements, which means migration may involve device replacement as well as software upgrades.
Windows 11 Hardware Requirements
Windows 11 has stricter hardware requirements than any previous version. The key requirements are a 64-bit processor with at least 1 GHz and 2 or more cores, 4 GB RAM minimum (8 GB recommended for business use), 64 GB storage minimum, TPM 2.0 (Trusted Platform Module), Secure Boot capable UEFI firmware, and a DirectX 12 compatible graphics card.
The TPM 2.0 requirement is the most common blocker. Many business laptops purchased before 2018 do not have TPM 2.0, even if they are otherwise capable. Check your fleet using the PC Health Check tool or, for larger deployments, Microsoft Endpoint Analytics in Intune.
Assessing Your Fleet
Before planning the migration, audit every device in your business. Categorise them as compatible (meets all Windows 11 requirements â upgrade in place), upgradeable (meets most requirements but needs a BIOS update or TPM enablement), and incompatible (does not meet requirements â requires hardware replacement).
For businesses using Microsoft Intune or another endpoint management platform, compatibility reports can be generated automatically across your entire fleet.
Security Improvements in Windows 11
Windows 11 is not just a cosmetic update. Key security features include hardware-based isolation through TPM 2.0 and Secure Boot, credential protection with Windows Hello for Business, Smart App Control that blocks untrusted applications, enhanced phishing protection in Microsoft Defender SmartScreen, and memory integrity (HVCI) enabled by default.
These features align with the ASD Essential Eight, particularly around application control and restricting administrative privileges. Upgrading to Windows 11 makes Essential Eight compliance easier to achieve.
Planning the Migration
A structured migration avoids disruption. The recommended approach is to start with a pilot group of 5 to 10 users from different departments. Run the pilot for two to four weeks, collecting feedback on compatibility and usability. Resolve any application compatibility issues identified during the pilot. Roll out to the broader organisation in phases â department by department. Schedule upgrades outside business hours or during low-activity periods.
For in-place upgrades (compatible hardware), the process takes 30 to 60 minutes per device. User data and applications are preserved.
Application Compatibility
Most modern business applications work on Windows 11 without issues. However, test your critical applications before rolling out widely. Pay particular attention to older line-of-business applications (especially industry-specific software), printer and scanner drivers, VPN clients, and hardware peripherals (barcode scanners, label printers, specialised equipment).
Microsoft’s App Assure programme provides free compatibility assistance for businesses encountering application issues during migration.
Hardware Replacement Strategy
For incompatible devices, plan a replacement cycle. Budget $1,200 to $2,000 per device for business-grade laptops that meet Windows 11 requirements with adequate performance for the next four to five years. Consider leasing or device-as-a-service models to spread the cost. Deploy new devices with Windows Autopilot for zero-touch provisioning â the device arrives, the user signs in, and all apps and policies are applied automatically.
Extended Security Updates
If you cannot migrate all devices before the Windows 10 end-of-life date, Microsoft offers Extended Security Updates (ESU) for a fee. ESU provides critical and important security patches only â no feature updates or non-security fixes. It is a bridge, not a long-term solution. Budget for ESU if your migration timeline extends beyond October 2025.
Get Started Now
Do not wait until the deadline. Assess your fleet, budget for replacements, and start your pilot now. Contact TechAssist for a Windows 11 readiness assessment and migration plan.
