The University of Manchester is telling staff and students to arrange their Windows 11 upgrade as soon as possible because Microsoft will end support for Windows 10 on 14 October 2025, and continuing to run an unsupported OS will expose campus machines to increased cyber risk.
Microsoft has announced a firm end‑of‑support date for Windows 10: October 14, 2025. After that date Microsoft will no longer provide security updates, feature updates, or routine technical support for Windows 10 devices; the operating system will continue to run but will become progressively more vulnerable to new threats. Microsoft’s lifecycle documentation and its end‑of‑support pages set out options for consumers and organisations, including a short‑term Extended Security Updates (ESU) route for eligible devices and the recommended path of upgrading to Windows 11 where hardware permits. (learn.microsoft.com, support.microsoft.com)
The University of Manchester’s advisory mirrors the position taken by many universities and enterprises worldwide: Windows 10 machines should be upgraded to Windows 11 or replaced, and users should not delay action because unsupported systems increase institutional cyber‑risk. The university specifically advises laptop owners to arrange upgrades with campus IT and desktop users to upgrade themselves where allowed.
A stepwise campus‑friendly checklist:
Important editorial note: ESU is a temporary bridge, not a migration plan. Reliance on ESU beyond a short planning window defers inevitable migration costs and may increase operational fragility.
Source: The University of Manchester Still using a Windows 10 laptop or desktop PC? Arrange your upgrade soon. | StaffNet | The University of Manchester
Microsoft has announced a firm end‑of‑support date for Windows 10: October 14, 2025. After that date Microsoft will no longer provide security updates, feature updates, or routine technical support for Windows 10 devices; the operating system will continue to run but will become progressively more vulnerable to new threats. Microsoft’s lifecycle documentation and its end‑of‑support pages set out options for consumers and organisations, including a short‑term Extended Security Updates (ESU) route for eligible devices and the recommended path of upgrading to Windows 11 where hardware permits. (learn.microsoft.com, support.microsoft.com)The University of Manchester’s advisory mirrors the position taken by many universities and enterprises worldwide: Windows 10 machines should be upgraded to Windows 11 or replaced, and users should not delay action because unsupported systems increase institutional cyber‑risk. The university specifically advises laptop owners to arrange upgrades with campus IT and desktop users to upgrade themselves where allowed.
What “end of support” actually means for you
- No new security patches — vulnerabilities discovered after 14 October 2025 will not receive routine Microsoft patches for Windows 10.
- No technical support — Microsoft customer support for Windows 10 issues will no longer be available.
- No feature or quality updates — Windows 10 will not get fixes, improvements, or compatibility adjustments beyond that date.
- Software and ecosystem impact — third‑party vendors may stop testing or supporting their apps on Windows 10 over time, and Microsoft 365 support alignment changes also come into play. Microsoft will, however, continue to supply security updates for Microsoft 365 Apps on Windows 10 for a limited period (through October 10, 2028). (support.microsoft.com, microsoft.com)
Who is affected — and who can upgrade for free
The short answer: every device still running Windows 10 is affected by the end‑of‑support date. The realistic next steps depend on the device’s current Windows build and hardware:- To be eligible for the free upgrade to Windows 11 a machine must be running Windows 10, version 22H2 and meet Windows 11 hardware requirements. Microsoft’s guidance is explicit about this precondition.
- Windows 10 versions older than 22H2 are not eligible for the consumer ESU and may not be eligible for the free in‑place Windows 11 upgrade until upgraded to 22H2.
- Hardware checks typically include UEFI + Secure Boot, TPM 2.0, a supported 64‑bit CPU, minimum RAM (4 GB) and storage (64 GB), and modern graphics capabilities. These requirements are stricter than Windows 10’s and are the primary reason many otherwise functional PCs are ineligible. (learn.microsoft.com, support.microsoft.com)
The technical gate: TPM 2.0, Secure Boot and the CPU list
Windows 11’s hardware baseline is designed around stronger hardware‑rooted security. The most common blockers:- TPM 2.0 (Trusted Platform Module): provides hardware cryptographic functions needed for modern features like BitLocker, secure credential storage, and hardware‑backed identity protections.
- UEFI firmware with Secure Boot: keeps unsigned or tampered boot code from running.
- Approved CPU families: Microsoft maintains lists of supported Intel, AMD, and Arm processors. Older chips — even if fast — may be excluded. (learn.microsoft.com, microsoft.com)
Options for staying supported after October 14, 2025
- Upgrade to Windows 11 (recommended when device is eligible)
- Free for eligible Windows 10 devices running 22H2 that meet the hardware checks.
- Preserves most apps and data in an in‑place upgrade when compatibility exists.
- Buy a new Windows 11 PC
- The cleanest long‑term solution; new devices ship with Windows 11 and will remain supported for years.
- Many retailers and OEMs offer trade‑in, recycling, and migration assistance to reduce cost and e‑waste.
- Enroll in Windows 10 Consumer Extended Security Updates (ESU)
- Consumer ESU provides a short, paid extension of critical and important security updates through October 13, 2026 (one year beyond EoL).
- Enrollment options include paying a one‑time fee (Microsoft has communicated pricing around US$30 per device for the consumer ESU path), redeeming 1,000 Microsoft Rewards points, or certain free enrollment methods tied to Microsoft account sync/Windows Backup — but strict prerequisites apply (device must be on Windows 10 version 22H2 and meet other criteria). ESU is a temporary stopgap, not a long‑term fix. (microsoft.com, support.microsoft.com)
- Move to an alternative OS (Linux, ChromeOS, or a cloud PC)
- For users with single‑purpose or web‑centric workloads, mainstream Linux distributions or a ChromeOS device can deliver long life and lower hardware requirements.
- Cloud PC options such as Windows 365 provide a Windows 11 desktop hosted in the cloud and can extend the usable life of older endpoint hardware at the cost of ongoing subscription fees. Microsoft actively highlights Windows 365 as a migration alternative.
- Continue running Windows 10 with third‑party mitigations (not recommended)
- Relying solely on antivirus, application sandboxing, or network isolation is fragile; without OS patches, zero‑day vulnerabilities remain exploitable. Organisations that take this path should treat it as a temporary emergency posture only.
University‑style guidance: pragmatic steps for staff and students
Institutions such as the University of Manchester recommend a practical split of responsibilities: laptop users bring machines to a support desk for assisted upgrades, while desktop owners upgrade themselves if permitted. That mirrors common campus strategies — centralised handling for portable devices (which may require driver and firmware updates) and self‑upgrade instructions for stationary desktops.A stepwise campus‑friendly checklist:
- Inventory and identify: determine whether your PC is running Windows 10 and which build (Settings → System → About). Confirm if it’s on 22H2 — machines running older builds must be brought up to date first.
- Run the Windows PC Health Check: it reports if the device meets Windows 11 requirements and highlights specific blockers (TPM, Secure Boot, CPU).
- Back up everything: use OneDrive, institutionally approved network storage, or a disk image. A full backup is essential before any in‑place upgrade or clean install.
- Plan a pilot: for departments, test the upgrade on a small set of representative machines to catch driver or application issues.
- Schedule assistance: book time with the local IT service desk if your machine is a university‑owned laptop or part of a managed fleet.
- If ineligible, choose a route: ESU (short term), buy new hardware, cloud PC, or migrate to an alternate OS — each has trade‑offs in cost, performance, and long‑term viability.
How to check compatibility and the upgrade paths (practical guide)
- PC Health Check app — the official, easiest check; it tells you exactly which requirement fails.
- Settings → Update & Security → Windows Update — Microsoft will sometimes surface the upgrade directly here if your PC is eligible.
- Windows 11 Installation Assistant — Microsoft provides an assistant for eligible PCs that aren’t being offered the upgrade through Windows Update; this is a guided in‑place upgrade tool.
- Bootable ISO / clean install — advanced users can create installation media; this is useful when an in‑place upgrade fails or a clean slate is desired. Note that bypassing hardware checks is possible with third‑party tools or registry hacks, but doing so removes Microsoft’s official support and can break updates later. Tech publications have documented unsupported upgrade workarounds, but they carry risk. (windowscentral.com, microsoft.com)
- Microsoft Endpoint Manager / Intune — cloud management for staged upgrades and policy enforcement.
- SCCM / Configuration Manager / Windows Server Update Services (WSUS) — on‑premises tooling for enterprise rollouts, driver packaging and staged deployments.
- Windows Autopatch / Windows Update for Business — vendor offerings to automate feature rollouts and ensure compatibility.
Risks, pitfalls and what can go wrong
- Application compatibility: Some legacy enterprise or lab applications may not run on Windows 11 without vendor updates. Plan compatibility testing early.
- Driver and firmware issues: OEM drivers, particularly for bespoke or older hardware, can cause instability after upgrade; vendor support may be required.
- TPM or Secure Boot toggles: Enabling TPM or Secure Boot in firmware without the right firmware version or driver support can brick certain devices — always consult vendor guidance and back up first.
- Timing and supply chain: If many users wait until just before 14 October 2025, IT teams and support desks could become overloaded; hardware procurement timelines and ESU enrolment constraints also create bottlenecks.
The ESU program: what it buys and what it doesn’t
The Windows 10 Consumer ESU program extends critical and important security updates for up to one additional year after EoL — through October 13, 2026 — for eligible consumer devices on Windows 10 version 22H2. Consumer enrollment options include a paid purchase (Microsoft lists a consumer price point around US$30 per device), redeeming Microsoft Rewards points, or certain free enrollment routes tied to Microsoft account backup sync — but there are strict eligibility rules (for example, domain‑joined or corporate‑managed devices generally are not eligible for consumer ESU). ESU does not provide feature updates, performance improvements, or full technical support; it only supplies a limited set of severity‑ranked security patches. Organisations have separate enterprise ESU agreements with different terms and durations. (support.microsoft.com, microsoft.com)Important editorial note: ESU is a temporary bridge, not a migration plan. Reliance on ESU beyond a short planning window defers inevitable migration costs and may increase operational fragility.
A pragmatic timeline for action (recommended)
- Now — August–September 2025
- Inventory all devices and identify Windows 10 22H2 installs; prioritise machines that handle sensitive data.
- Run the PC Health Check on all user devices and tag those that are compatible vs incompatible.
- Schedule upgrade clinics for laptops and managed devices; communicate clear deadlines to staff.
- By early October 2025
- Complete upgrades for all eligible devices.
- Enroll any remaining eligible consumer devices into ESU if immediate hardware replacement isn’t realistic.
- Begin procurement for replacement hardware where necessary; factor in lead times and recycling logistics.
- After October 14, 2025
- Treat remaining Windows 10 machines as high‑risk assets: isolate them, restrict access to sensitive resources, and monitor closely.
- Use ESU only as a controlled stopgap while completing migrations.
Tips for home users (simple, practical)
- Run Windows Update and install any pending Windows 10 updates; ensure you are on 22H2 before exploring ESU or Windows 11 upgrade paths.
- Run the PC Health Check and follow the guidance. If your PC is eligible, use Windows Update or the Windows 11 Installation Assistant for the upgrade.
- Back up to OneDrive (or external media) and ensure you have application licenses and installer media saved.
- If the PC isn’t eligible and you must stay on Windows 10, consider the ESU route if you need time; otherwise plan for a new device or look at Linux or a cloud PC as alternatives. (support.microsoft.com, microsoft.com)
Strengths and weaknesses of the upgrade push — critical analysis
Strengths- Security gains: Windows 11’s hardware‑anchored security model (TPM, Secure Boot, VBS features) materially reduces some attack vectors and modernises defenses.
- Clarity of timeline: Having a firm end‑of‑support date helps organisations prioritise budgets and migration projects.
- Migration tooling: Microsoft and partners provide several upgrade tools (PC Health Check, Installation Assistant, enterprise management suites) that make organised rollouts feasible.
- Compatibility gap: Strict hardware requirements create a sizeable population of still‑functional machines that will be left behind, raising sustainability and cost concerns.
- Cost and logistics: For large campuses, refreshing thousands of devices in tight windows is expensive and logistically complex; ESU can be costly for large fleets and is time‑limited.
- User friction and application risk: Legacy software often used in specialised research labs or by small departments can break migration timelines.
- Potential for hasty workarounds: Public documentation shows unsupported upgrade bypasses; while tempting, these create fragile systems and may block future updates.
Final checklist — what to do this week
- Verify whether your device is running Windows 10 version 22H2. If not, install the latest Windows 10 updates first.
- Run PC Health Check to determine Windows 11 eligibility.
- Create a full backup of your user data and a list of installed apps and license keys.
- If you are a university laptop user, follow institutional guidance and arrange a support appointment if the University offers assisted upgrades. If you manage a desktop, check whether a self‑upgrade is permitted and supported.
- If a device is not eligible for Windows 11 and immediate replacement is impossible, confirm ESU eligibility and enrolment steps as a short‑term mitigation.
Conclusion
The October 14, 2025 end‑of‑support deadline for Windows 10 is a real and immovable milestone that affects every user and organisation that still depends on Windows 10. The University of Manchester’s advisory to arrange your upgrade soon is sensible: upgrading is the safest long‑term path, while ESU or cloud alternatives provide short, controlled breathing room. Start the inventory, run the compatibility checks, back up your data, and schedule assistance now — postponing increases both the security risk and the chance of running into resource and procurement bottlenecks as the deadline approaches.Source: The University of Manchester Still using a Windows 10 laptop or desktop PC? Arrange your upgrade soon. | StaffNet | The University of Manchester