Paid extended security updates, the consumer programme, moving to Windows 11: what is allowed and what it costs
Support for Windows 10 ended on 14 October 2025. One year later, many practices still have one or two computers running Windows 10: the radiology computer, a reception computer, a laptop. They still work, but without updates, every vulnerability discovered since then remains open. Here are the remaining options, according to the rules published by Microsoft.
Option 1: move to Windows 11
It is the only lasting solution. If the computer meets the requirements for Windows 11, the upgrade is free. Otherwise, it must be replaced.
For a computer connected to a device (radiology, scanner, camera), the question is not just the computer: you must first check with the device's supplier that its software and drivers work on Windows 11.
Option 2: extended security updates for businesses
Microsoft sells organisations, practices included, Extended Security Updates (ESU) for Windows 10:
- 61 US dollars per computer for the first year, according to the price announced by Microsoft;
- the price doubles each year, for three years at most, i.e. until October 2028;
- the years are cumulative: a practice that starts in the second year must also pay for the first;
- the computer must be on Windows 10, version 22H2.
These updates contain only security fixes: no new features, no technical support. It is a transitional solution, for a computer that cannot yet be replaced, for example while waiting for a device's software to become compatible with Windows 11.
Option 3: the consumer programme, to be avoided in the practice
Microsoft also offers a programme for consumers, free under certain conditions or for 30 dollars, valid until 12 October 2027. But Microsoft specifies that it is not intended for commercial use, and it is excluded for computers joined to a domain or managed by a device management tool. For a practice's computers, it is the business programme that applies.
And a computer that can neither be replaced nor receive updates?
One protective measure remains: isolating it. A computer without updates must no longer browse the internet or open e-mails, and it must be placed in a separate part of the network, with only the access the device needs. It is a stopgap, not a permanent solution.
Note: a Windows 10 computer that no longer receives updates will not receive the new Secure Boot certificates either (see our news item on Secure Boot and the 19 October deadline).
What we do
We take an inventory of the practice's computers, check which ones can move to Windows 11 and which ones must be replaced, and prepare the migration of computers connected to a device together with their suppliers. See also our IT hardware for dental practices page, or write to us.
Sources
- Microsoft Learn, "Extended Security Updates (ESU) program for Windows 10", updated on 17 November 2025: learn.microsoft.com/windows/whats-new/extended-security-updates
- Microsoft, "Windows 10 Consumer Extended Security Updates (ESU) program": microsoft.com/windows/extended-security-updates