
TeamViewer’s recent snapshot of its remote‑support traffic paints a stark picture: a substantial portion of endpoints that still receive help via TeamViewer are running an operating system that reaches end of vendor support in days, and the vendor’s Digital Employee Experience (DEX) tooling is being positioned as a pragmatic way to manage the mass migration to Windows 11.
Background / Overview
Microsoft has set a firm end‑of‑support date for Windows 10: after October 14, 2025, mainstream technical assistance, feature updates and routine security updates for mainstream Windows 10 editions will cease. That deadline is non‑negotiable from a lifecycle perspective and changes the security calculus for any device that remains on Windows 10 without Extended Security Updates (ESU).In plain terms, an unsupported OS does not stop working — users will still be able to boot their machines and run applications — but newly discovered kernel‑ or platform‑level vulnerabilities will no longer be addressed by vendor patches. For organisations, that gap rapidly becomes a compliance, insurance and operational risk. Independent reporting and consumer polling in multiple markets underscored the urgency in the run‑up to the cutoff, noting that many households and businesses either planned to defer upgrades or faced hardware incompatibilities.
TeamViewer’s announcement — and similar telemetry from security and management vendors — turns the calendar into a practical workload: IT teams must decide which devices can be migrated in place, which can be remediated to meet Windows 11’s hardware baseline, which must be replaced, and which will require ESU or an alternative OS for a managed bridge.
What TeamViewer reported — the headline claims
- TeamViewer analysed an anonymized sample of roughly 250 million TeamViewer sessions carried out between July and September 2025 and reported that over 40% of endpoints receiving support were still running Windows 10. The vendor framed the finding as a reminder that “two in five endpoints” will become unsupported once Microsoft’s cutoff passes.
- To help IT teams manage migration at scale, TeamViewer highlighted features of TeamViewer DEX and a Windows 11 Readiness Pack that automatically checks critical compatibility signals — processor generation, TPM configuration, Secure Boot state and other preconditions — and provides post‑upgrade validation to confirm configuration and compliance. TeamViewer’s product and security executives were quoted urging organisations to upgrade promptly and use DEX to reduce the operational burden.
Why the numbers matter: security, compliance and scale
Unsupported operating systems quickly become high‑value targets for attackers because new vulnerabilities remain unpatched at scale. For organisations with regulated data, auditors and cyber insurers increasingly treat unsupported software as an adverse finding that may require remediation or insurance exclusions. The operational consequence of tens or hundreds of millions of machines moving from “supported” to “unsupported” on a fixed date is therefore both real and immediate.Telemetry sets tell different stories but point to the same operational reality:
- Web analytics and pageview trackers sometimes show a higher share of Windows 11 among browsing devices (which biases toward actively used client devices).
- Security‑vendor telemetry and remote‑support datasets more often reflect the installed base, including machines used less frequently or in constrained environments; these datasets tended to show Windows 10 remaining dominant in many enterprise fleets through mid‑2025.
What TeamViewer DEX claims to do — features and benefits
TeamViewer is positioning DEX as a single‑pane migration accelerator that bundles discovery, automated readiness checks and post‑upgrade validation. Key features called out in vendor materials and product pages include:- Real‑time device inventory and Windows 11 Readiness Pack checks (CPU/SoC generation, TPM presence and version, UEFI Secure Boot flag, RAM and storage thresholds).
- Automated remediation guidance where feasible (firmware updates, enabling TPM/UEFI settings, driver updates).
- Post‑upgrade validation to confirm that devices boot with expected security settings and to validate compliance baselines after migration.
- Integration with remote support workflows so stubborn endpoints can be triaged and fixed without requiring a physical visit.
Where DEX helps — and where it doesn’t
TeamViewer DEX and similar readiness tools offer measurable benefits, but they are not a universal solution.- What DEX can do reliably:
- Automate discovery and scoring of upgrade eligibility at scale.
- Identify common, software‑level remediations (enablement of firmware TPM, toggling Secure Boot, applying OEM BIOS/UEFI updates).
- Reduce pilot failure rates by enabling targeted remediation and preflight testing.
- Validate compliance post upgrade and integrate validation outputs with CMDBs and ticketing systems.
- What DEX cannot change:
- It cannot make unsupported hardware suddenly meet Windows 11’s baseline if the CPU, chipset or firmware truly lack necessary capabilities.
- It cannot replace application compatibility testing and staged rollouts — migration still needs governance, user acceptance testing and rollback plans.
- Tooling cannot eliminate the capital cost or e‑waste implications of hardware refresh cycles where devices must be replaced.
Verifiability and data hygiene: the limits of vendor telemetry
The TeamViewer headline number (250 million sessions; >40% Windows 10) is a useful alarm bell, but responsible IT planning requires deeper provenance:- Ask vendors for raw criteria and definitions. How did TeamViewer define an “endpoint”? Was the sample deduplicated by device? How were sessions mapped to unique machines? Were sessions weighted by geography or by account type? Those operational details materially affect whether the percentage is directionally useful for your fleet.
- Corroborate with at least two independent data sources. Examples to compare against include security‑vendor telemetry (Kaspersky and peers), web‑analytics trackers (StatCounter), and your own MDM/CMDB inventories. Each dataset has its own bias; reconciling them gives a defensible operational view.
- Treat public vendor snapshots as operational signals rather than procurement invoices. Use the vendor telemetry to prioritise and scope pilots, but convert percentages into device counts only after reconciling with internal inventories.
Practical migration playbook: a step‑by‑step checklist
The next 90 days for IT teams should focus on a surgical, measurable migration program rather than ad‑hoc upgrades. The following playbook is designed to be executable, measurable and repeatable.- Inventory and classify (days 0–7)
- Export authoritative device lists from Intune/SCCM/MDM and your RMM. Tag by OS build, device model, TPM status, UEFI firmware version, business criticality and app ownership.
- Deliverable: a single reconciled inventory (CSV/CMDB) with upgrade eligibility flags.
- Run readiness scans at scale (days 7–21)
- Use PC Health Check and DEX readiness tooling to generate per‑device results on TPM, Secure Boot and CPU compatibility. Automate report exports so outputs can feed patching and ticketing tools.
- Deliverable: prioritized remediation backlog (firmware updates, driver updates, BIOS settings).
- Pilot and compatibility testing (days 14–45)
- Select 3–5 representative hardware families and a cross‑section of core LOB apps. Validate both in‑place upgrades and image reimaging approaches. Maintain rollback images for each device type.
- Deliverable: validated migration runbook per hardware family.
- Decide ESU vs migration (days 21–60, parallel)
- For business‑critical but non‑upgradable devices, weigh ESU as a time‑limited bridge while you procure replacements or plan VDI/Windows‑as‑a‑Service alternatives. Document ESU enrolment and justify as a temporary, auditable measure.
- Scale rollout and change management (days 45–180)
- Roll out by rings (pilot → early adopters → critical apps → broad fleet), instrument with DEX for pre/post metrics and maintain a break‑glass rollback path. Track KPIs: device migration velocity, post‑migration helpdesk tickets, security posture checks.
- Post‑migration validation and decommission (ongoing)
- Revalidate compliance settings (TPM/UEFI/Secure Boot), update inventories and retire devices responsibly via trade‑in or recycling programs to reduce e‑waste.
Questions to ask vendors before you buy
When evaluating DEX, readiness tooling or managed migration partners, insist on clear, exportable answers:- What exact checks determine “readiness”? (CPU list, TPM version, Secure Boot flag, storage thresholds, driver/firmware family).
- Provide an exportable per‑device report (CSV or direct CMDB ingest) with remediation tasks and remediation difficulty estimates.
- How does the product deduplicate endpoints and correlate sessions to devices?
- Can the vendor validate post‑upgrade settings automatically and provide compliance reports?
- What visible SLAs or rollback mechanisms accompany staged rollouts?
The channel, MSPs and commercial implications
For managed service providers and the channel, the Windows 10 sunset is a programmatic revenue opportunity — but it must be packaged responsibly:- Offer fixed‑fee readiness assessments that produce an actionable remediation list.
- Sell staged migration packages (pilot + per‑device migration + post‑migration validation) rather than one‑off “upgrade” projects.
- Price ESU advisory and bridge services separately and be explicit about ESU’s time‑boxed nature.
- Add sustainability services (trade‑in, secure data erasure, refurbish/refurbishment) to manage environmental and PR risk.
Costs, sustainability and alternatives
Two realities complicate migration decisions:- Capital vs operational trade‑offs. Mass hardware refreshes are capital intensive; ESU is an operational cost that scales with the number of devices and the length of coverage. Both choices have balance‑sheet and cashflow impacts.
- Sustainability and e‑waste. Forced refreshes produce real environmental costs. Practical mitigations include refurbishing, trade‑in programs, and exploring alternative operating systems (ChromeOS Flex, mainstream Linux distros) for devices that cannot be economically upgraded. Those alternatives require driver validation and acceptance testing for peripherals and LOB apps.
Immediate technical mitigations while migration proceeds
If devices must remain on Windows 10 for a short period, prioritise layered compensations:- Enrol critical devices in ESU where necessary and document decisions.
- Enforce multi‑factor authentication and least‑privilege access across the estate.
- Harden network segmentation: isolate legacy endpoints, limit internet‑facing services and restrict administrative capability from unsupported machines.
- Apply EDR and backup/DR protections, and maintain a hardened incident response playbook.
Critical appraisal — strengths, limitations and risk flags
Strengths of the TeamViewer messaging:- The telemetry is an operationally valuable signal: devices that call support are functionally in use and therefore matter to business continuity. The TeamViewer DEX product map addresses core operational friction points — discovery, remediation and validation — which are exactly where IT teams need assistance.
- The headline 250 million session sample and the “>40% Windows 10” figure were presented without a public, machine‑readable methodology at the time of reporting; that reduces the number’s value as a budgeting input until you verify underlying methods and deduplication rules. Treat the statistic as directional, not definitive.
- DEX can reduce friction but cannot overcome immutable hardware incompatibility. Buyers who assume tools will make every device Windows 11 compatible risk surprises and budget variance.
- Migration decisions have legal, compliance and sustainability consequences that go beyond tooling: auditors and insurers will want documented, auditable choices; sustainability officers will query the environmental cost of forced refreshes. Plan for those conversations proactively.
Bottom line and recommended next steps for IT leaders
TeamViewer’s data and DEX tooling provide a practical, vendor‑backed pathway to accelerate migration to Windows 11, but the headline telemetry must be reconciled with internal inventories and at least one independent telemetry source before budgets or SLAs are locked in. The clock is real: Microsoft’s October 14, 2025 cutoff changes the default risk posture for every Windows 10 device.Recommended immediate actions:
- Reconcile your authoritative inventory against a DEX/PC Health Check pass to produce a per‑device remediation backlog.
- Pilot DEX‑driven remediation on representative hardware families and validate rollback plans.
- Use ESU only as a documented, time‑boxed bridge for critical non‑upgradable assets, and instrument these decisions for auditors.
- Prioritise internet‑facing and high‑privilege endpoints for immediate migration or isolation.
- Ask every vendor for exportable per‑device readiness data and a documented methodology before accepting topline percentages as procurement guidance.
TeamViewer’s snapshot is a powerful operational signal: many endpoints that matter to businesses remain on Windows 10 as the vendor cutoff approaches. DEX tooling — properly evaluated, scoped and integrated with a disciplined migration program — can shorten the runway, lower helpdesk load and provide the telemetry managers need to keep projects measurable. But a tool is only one part of a program: governance, procurement, compliance and sustainability choices are the remaining, unavoidable pieces that determine whether a migration succeeds or becomes a costly scramble.
Source: Newspatrolling.com Analysis Shows Significant Need for Updates as Windows 10 Nears End-of-Life; TeamViewer DEX Enables Structured Migration - Newspatrolling.com