The clock is ticking on Windows 10 security updates and millions of perfectly good PCs won’t be joining Windows 11 when strict hardware rules take effect. Microsoft hasn’t been flexing with the compatibility bar, so Windows Update will refuse to offer you an upgrade if your hardware doesn’t pass muster. That’s not to say you are out of moves. You have five viable options — and a narrow time frame to choose one.
Why it matters: Windows 10 continues to be dominant in desktop operating system use, says StatCounter — and so a large share of households and small businesses are about to be confronted with costly security decisions.
According to industry analysts, hundreds of millions of machines do not measure up to the requirements for Windows 11, so you’re in good company.
Buy time with Extended Security Updates for Windows 10
Microsoft will continue to develop security fixes for Windows 10, but for most users, they won’t arrive automatically. Its Extended Security Updates (ESU) program keeps patches coming on a subscription basis. For consumers, a one-year ESU option is available for roughly $30; Microsoft has said it’s possible to pay that fee via Microsoft Rewards points if you have enough stashed away—meaning the cost would be zero.
Organizations can extend for three years, but at a higher price. Microsoft’s published rates are high for businesses — $61 per device in year one, doubling each year, bringing the three-year total to $427. Schools are offered a steeply discounted tier: $1, then $2, and finally, $4 per device. ESU purchases time, not an end-to-end future, so regard it as a bridge to something you can actually do.
Upgrade anyway, on “unsupported” hardware
If your PC is reasonably new, this is by a considerable margin the cheapest and fastest fix. Quite a few systems sold with Windows 10 will be able to upgrade to Windows 11 with just an onboard registry key added and Secure Boot and a Trusted Platform Module enabled. TPM 1.2 will often be good enough and lots of motherboards just need the setting enabled.
Older hardware could require a clean install with something like Rufus that enables Windows 11 media creation that gets around setup checks. That said, there are some limits: You’ll need chipsets that support the POPCNT and SSE 4.2 instruction sets, meaning no reliable Windows 11 can be installed on CPUs lacking these features. Anticipate being warned that your PC “won’t be supported” — that’s legal talk for entitlement to support, not an in-your-face block on updates, but don’t quote me. Back up or image your drive before you start.
Replace the box — or rent one in the cloud
Purchasing a new Windows 11 machine puts to rest all the compatibility wrangling and typically gives you better battery life, faster NVMe storage and security features like Pluton or enhanced TPMs.
If the on-device AI features are tempting, a new wave of PCs with neural processing units are designed for just that. Trade-in programs and depreciation can take the sting out for businesses.
You can also take a middle path: shift your workload to a Windows 365 Cloud PC, but continue to use your existing hardware as a thin client. Plans begin around the cost of a streaming subscription per month and incorporate an ESU benefit for the Windows 10 device you use to hook into, helping with patching while you phase out that legacy hardware.
Alternate operating systems: Linux or ChromeOS Flex
For web-first tasks: If you do most of your work using web tools, a distribution for Linux can make an aging machine a valuable tool while still keeping yourself in good hands. Linux Mint, Ubuntu and Zorin OS are popular with Windows switchers, gaining modern app stores, strong driver support and long-term updates. With Proton and web apps, a lot of everyday chores and even some light gaming are surprisingly doable.
ChromeOS Flex is an alternative for eligible models, but verify Google’s list of certified devices and end-of-support timelines before you commit.
It’s lightweight and secure, but not as friendly with specialized peripherals or Windows-only software. Both paths lead to a reduction in e-waste and long-term costs, which is why those who evangelize about sustainability love to mention them.
Paralysis (not advised) and risk mitigation
Doing nothing leaves you open when new vulnerabilities do arise. Unpatched systems are frequently cited in incident reports provided by recommended security agencies. If you have no choice but to stay, harden your setup: use a regular (non-administrative) account, stay fresh on browsers and drivers, turn on multi-factor authentication and keep offline versioned backup copies.
Third-party micro-patching can reduce risk. ACROS Security’s 0patch tool serves up selected repairs – the personal edition tackles chosen, crucial vulnerabilities, while the Pro build costs around €24.95 per device a year. It’s not a replacement for full vendor support, and it would be an unwise choice for regulated or business-critical environments, but it could help a lightly used home PC soldier on.
How to navigate decisions in the next three weeks
If the machine actually looks in good order and has TPM and Secure Boot, an “unsupported” Windows 11 install is generally the quickest workaround.
If Windows-only apps are your reason to stick with Microsoft but the hardware is old, a new PC — or Cloud PC — minimizes operating risk. If your workflows live in the browser, Linux or ChromeOS Flex potentially offers the best bang for the buck.
If you don’t know, buy an ESU to give you time and prevent a security cliff while you work on your plans. Whatever you choose, act now. After all, procrastination is the most expensive of all.
