What to Do With Windows 10 Devices That Can't Run Windows 11

What Happened to Windows 10?

Microsoft ended mainstream support for Windows 10 on 14 October 2025. This means Windows 10 devices no longer receive free security updates, patches or technical support from Microsoft. A device running Windows 10 after this date is increasingly exposed to security vulnerabilities that will never be patched.

For businesses, this isn't just an inconvenience — it's a compliance and cyber insurance issue. Many cyber insurance policies require that operating systems receive regular security updates. Running an unsupported OS can void your cover or increase your premium.

Why Can't Some Devices Run Windows 11?

Windows 11 has stricter hardware requirements than Windows 10, most notably:

• TPM 2.0 — a security chip that has been standard in business PCs since around 2016–2018 but is absent in older hardware
• Supported processor — Intel 8th generation (2017+) or AMD Ryzen 2000 series (2018+) or newer
• UEFI firmware with Secure Boot
• 4GB RAM minimum (8GB recommended)

A device that lacks TPM 2.0 or has a processor older than the required generation simply cannot officially run Windows 11. Microsoft has removed the previous registry workarounds that allowed installation on unsupported hardware, and devices running Windows 11 via unofficial methods will not receive guaranteed security updates.

Your Options for Ineligible Devices

Option 1: Replace and dispose securely (recommended)

The cleanest solution is to replace ineligible devices with new or quality-refurbished hardware that runs Windows 11 natively, then dispose of the old devices through a certified IT disposal provider. This gives you a secure, supported operating environment and removes the compliance risk entirely.

Complianta can help with both sides of this: we can supply replacement devices — new or refurbished — and collect and certifiably dispose of the old ones in the same visit.

Option 2: Extended Security Updates (ESU)

Microsoft offered Extended Security Updates for Windows 10 at a cost — approximately $30 per device per year for up to three years. This buys time but doesn't address the underlying hardware obsolescence, and the devices will still eventually need replacing. ESU is most appropriate for businesses that need more time to plan a full hardware refresh.

Option 3: Linux for non-critical devices

Some businesses repurpose ineligible Windows 10 hardware for low-sensitivity tasks by installing a lightweight Linux distribution. This is a viable option for devices used only for specific, non-business-critical functions where data security is not a primary concern. It is not appropriate for devices used for business email, financial software or any system handling personal data.

The One Option You Should NOT Choose: Doing Nothing

Continuing to use unpatched Windows 10 devices for normal business operations after the end-of-support date is not a reasonable option. The risks include:

• Unpatched security vulnerabilities exploitable by ransomware and malware
• Potential invalidation of cyber insurance cover
• Increased risk of a notifiable data breach under UK GDPR
• Non-compliance with Cyber Essentials requirements if you hold that certification

How to Dispose of Your Windows 10 Devices Securely

Whether you are replacing one device or a fleet of fifty, the disposal process is the same. Old Windows 10 devices will contain business data — emails, documents, browser credentials, cached passwords and application data — that must be certified destroyed before the device leaves your premises.

A factory reset is not sufficient. Studies have consistently shown that data can be recovered from factory-reset drives using freely available tools. The correct process is NIST 800-88 compliant data wiping or physical destruction of the storage media, with a Data Destruction Certificate issued as evidence.

Planning Your Hardware Refresh

If you have a batch of ineligible devices to replace, a little planning makes the process much smoother:

1. Run PC Health Check on all existing devices and note which fail Windows 11 eligibility
2. Assess whether any failing devices can be remediated (e.g. TPM enabled in BIOS, RAM upgrade)
3. Get a quote for replacement hardware — consider refurbished to reduce cost
4. Schedule a single collection to retire all ineligible devices at once
5. File your destruction certificates