Insight

ProTips: five steps to complete your move from Windows 10

Name: Yep Digital
Price range: $

With the second year of Extended Security Updates (ESU) approaching, organisations should focus on reducing the number of devices that require another year of cover.

Most organisations will have already migrated the straightforward devices. The Windows 10 endpoints that remain are more likely to be affected by hardware limitations, legacy applications, operational dependencies or incomplete asset data.

Reducing reliance on ESU therefore requires more than accelerating deployment. Organisations need a controlled way to identify, prioritise and remove the exceptions.

These five steps provide a practical starting point.

1. Establish the true size of the estate

Reconcile information from asset records, endpoint management platforms and security tools. Do not assume that one system provides a complete and accurate picture.

Do not underestimate the importance of this stage. On one migration, thorough baselining uncovered 460 stale records and 250 devices that users had quietly been hanging on to.

2. Segment the remaining devices

Every Windows 10 device should be placed into a clear category: upgrade, replace or retire.

This makes it easier to identify where activity is being delayed and direct investment towards the issues preventing progress. Assign a budget, timeline and owner to each category as needed to help keep the project on track. Every device remaining on ESU should also have a documented reason and target exit date.

3. Prioritise according to risk

Not all Windows 10 devices present the same level of risk. Priority should take account of factors such as internet exposure, user privilege, access to sensitive data and operational importance.

Devices that cannot be migrated immediately may require additional mitigating security controls while they remain in service.

4. Understand the complete cost

ESU is only one element of the financial decision, but its cost will increase in the second and third years and it is scheduled to end in 2028. Organisations should also consider hardware replacement, application remediation and user support.

The cheapest short-term option may not offer the best value over the full migration period.

5. Track the reduction across the estate

Progress should be monitored at least monthly. Technology leaders need to know whether the number of Windows 10 devices is falling quickly enough to reduce the organisation’s exposure to ESU charges before the renewal date.

Commercial ESU is scheduled to end in 2028. Paying for another year may be the right short-term decision for some devices, but it cannot be the long-term plan. Every remaining exception needs a clear and controlled route out.