Over two years ago, I wrote a blog article warning about the inevitable end of support for Windows 10… Well, we’re now quickly approaching the end of the line. I’ve spent the last few years working closely with companies to help transition all workstations to Windows 11 and to retire workstations that wouldn’t support the new OS.
Don’t get me wrong, I was a big fan of Windows 10, but so much of the hate and fear around Windows 11 is completely undeserved. I’ve personally been using it across all of my own devices since before it was publicly available, and I’ve hardly had any issues. My clients who have upgraded to Windows 11 tend to be really surprised at how similar it is – but their surprise is only because of all the gratuitous negative hype online.
Regardless of how you personally feel about upgrading or replacing, I hope you understand the history of Microsoft ending support for their operating systems and the mayhem that has been caused by organizations running vulnerable configurations. WannaCry exploited Windows XP vulnerabilities and caused organizations around the world to grind to a halt. In 2020, when Windows 7 went end of life, the world saw another increase in ransomware events coinciding with COVID-19. Yuck. Even today, we still find Windows 7 PCs breached by malware that would have been stopped on a newer OS.
Honestly, I believe there will be no immediate repercussions the moment that Microsoft declares the OS unsupported… But it is a ticking time bomb. According to many sources online, the global cost of cybercrime in the world is now over $10 trillion per year, making it the third largest economy in the world after the USA and China. Cybercrime is only getting worse, and if you won’t invest in your own security at such a foundational level, then I hope you can still get cyber-insurance.
At Mirazon, we always preach that security is obtained through layers. The idea is that a multi-layered approach to security should guarantee that a failure at one layer would not cause a failure of the system as a whole. For example, the failure of an employee to recognize a malicious download should not be a total “game over.” Instead, that PC’s EDR or the company’s firewall should prevent the worst-case scenario.
Running an OS that has vulnerabilities actively being exploited by bad actors is different. It’s true you could use complicated firewall policies to strictly define what an unpatched Windows 10 PC is allowed to do on the network, but the reality is that you are now missing a layer of security at the OS level that you previously took for granted. Not to mention that this requires even more work for IT to manage the security of those systems going forward. For small businesses that have no next-generation firewall or any modern EDR, the lack of OS security updates could be the last non-human layer of security being stripped away.
But enough about security—I understand that to some folks the most important thing is the compatibility of their applications. If compatibility is your primary concern, then there’s good news and bad news. The good news is that Windows 11 boasts excellent compatibility with nearly any application that was also compatible with Windows 10. Obviously, applications that were designed for Windows 7 or Windows XP may have issues running on Windows 10 or 11, so I wouldn’t expect any miracles in that regard.
The biggest issue I see with Windows 11 compatibility is with hardware, not software. Keep in mind that Windows 11 does have specific CPU and TPM requirements, in addition to all the typical minimum requirements. And here’s the kicker—there is no 32-bit version of Windows 11—and that could bite you if you are required to use a 32-bit OS to interface with some legacy hardware or software. If this is a major issue for you, the timer for Windows 11 is not the only thing ticking down—hardware manufacturers will not always make hardware for your 32-bit OS, and already it’s becoming impossible to install 32-bit Windows 10 on modern hardware.
I know that’s all a lot to digest, but hear me out for just a couple more minutes… If your PC has hardware that doesn’t support Windows 11, that likely means it’s over five years old or was a cheap PC from the start. Create a budget and replacement cycle for yourself or your organization and get into the process of regular replacements. This keeps your people happy and your systems secured. Regular replacements mean that you or your IT staff are always aware of the procedure for system replacement, and all the cogs in the machine will move more smoothly.
If your PC has software that doesn’t support Windows 11, then that means it likely didn’t support Windows 10 either or only supports a 32-bit OS. In either case, I recommend figuring out how you can move forward. It may mean buying a new version of your software, replacing your legacy hardware, or coming up with a strict plan to mitigate the risks. Regardless of what you do, you’ve got to do something.
And now we’re to the point in the letter where I fall down on my knees and beg you sincerely:
Please do not wait until the end of 2025 to decide that you’re going to replace all of your workstations at once. Please don’t wait until you’ve been hit by ransomware to decide that you’re ready to spend some money. Please don’t cause another global supply chain crisis because everyone decided to wait until the last minute.
I’ve helped so many people transition to Windows 11 over the last two years, and almost everyone says, “Well, that wasn’t bad at all” or “I can’t tell it’s any different.” My favorites are the ones that ask when they’re going to switch to Windows 11, and I remind them that they’ve already been using Windows 11 for years.
Are you trapped in the swamp of sadness regarding the last bastion of Windows 10 PCs in your environment? Give us a shout; we have worked with organizations of all shapes and sizes, and we can help you find a solution that’s best for you.
Have more questions about Windows 10 end of support? Need assistance prepping your hardware and implementing Windows 11? Reach out to us by calling (502) 240-0404 or emailing info@mirazon.com!