Nearly one in four desktop PCs in New Zealand still run Windows 10, making Microsoft’s decision to extend its Extended Security Updates (ESU) for eligible devices until Oct. 12, 2027, a significant reprieve for New Zealand enterprises that still rely on the aging operating system.
As of the time of writing, Windows 10 still accounts for 24.27% of New Zealand’s desktop market, according to StatCounter. But while household users can easily take advantage of the extension, most enterprise PCs remain outside the program, leaving organizations to choose between two narrow options for now: either accelerate Windows 11 migration while facing the immediate cost factor.
Enterprises are still at a bigger disadvantage, but with two paths out
Microsoft’s quiet announcement largely favors consumers, but businesses still have two ways to keep Windows 10 devices protected after support ends — depending on how those PCs are managed.
Small businesses make up 97% of New Zealand’s total enterprises. Because these enterprises operate a workforce of 20 or fewer, their staff are more likely to use consumer-grade devices. That makes things easier for them, as they can choose to enroll in ESU for individual consumer laptops. However, that will mean they will forgo the centralized management, identity controls, and device policies that larger enterprises rely on.
For larger organizations with managed Windows fleets, Domain-joined, Entra-joined, and MDM devices are excluded from the free consumer offering, leaving commercial ESU as the only supported option to continue receiving security updates before a Windows 11 migration.
The distinction is particularly relevant for New Zealand organizations balancing security with budget constraints. Smaller businesses may decide that the consumer route provides enough breathing room for a handful of unmanaged PCs. At the same time, larger organizations are more likely to opt for a Commercial ESU to maintain enterprise security controls and avoid introducing unmanaged endpoints into corporate networks.
Security, software, and cost
Microsoft’s ESU program is designed to keep Windows 10 devices protected against security vulnerabilities after mainstream support ends — not to provide new operating system features. Organizations enrolled in either the consumer ESU or Microsoft’s Commercial ESU program will continue receiving security patches, giving them more time to migrate to Windows 11 without exposing legacy systems to emerging threats.
That security protection could prove particularly valuable for New Zealand businesses running specialized equipment or business-critical applications that cannot be upgraded overnight.
Security, however, is only one piece of the equation. Third-party software vendors operate on a different timeline. As Windows 10 ages, software vendors are likely to focus development and support on Windows 11, leaving organizations in the position of running secure operating systems alongside business applications that are no longer officially supported.
For businesses operating in sectors with strict compliance or operational requirements, this creates a difficult balancing act. Delaying a Windows 11 migration may reduce immediate hardware costs. But it could also mean dealing with incompatible software, operational disruptions, or even compliance taxes if regulators demand strict IT policies. In other words, Microsoft’s extension comes with its perks, but it doesn’t eliminate the difficult decisions that come with staying on Windows 10.
More Microsoft news
- Inside Microsoft’s Real-Time War Against Cybersecurity Threats
- Project Ire: Microsoft Tests AI That Autonomously Detects Malware
- Microsoft Targets ‘Critical AI Talent’ from Meta to Dominate Next AI Breakthroughs
- Windows 10 Support Ends Soon, Though Extended Security Updates Offers Are Available
Now, what?
Microsoft’s extension gives New Zealand organizations more time to plan Windows 11 migrations, not more time to ignore them. IT teams should use the additional time to identify devices incompatible with ESU, budget for Commercial ESU where necessary, and phase in hardware replacements.
Organizations should also avoid forcing Windows 11 upgrades onto incompatible hardware. While methods of bypassing the initial switch may work, for devices required for business continuity, the instability they may introduce can be worse than simply leaving them without ESU. Another option may be to switch to Linux on older hardware. However, that too has its caveats and may not work for all organizations.
Devices already on ESU need to do nothing, but for organizations that wish to get onboard using the commercial ESU license, follow this guide from Microsoft. Smaller businesses that wish to take the consumer route can check Microsoft’s official announcement.