Back in 2015, Microsoft launched Windows 10. It quickly became the go-to operating system for businesses and individuals alike, thanks to an improved user interface, stability and compatibility with a wide range of hardware.
But as technology moves on, so too does support. With Windows 11 having now been available for four years, Microsoft has confirmed that Windows 10 will reach end of support on 14 October 2025.
Unions may still have machines that use Windows 10, and this could become a security risk. This blog looks at what the implications are for unions, and what their options could be.
What does “end of support” mean?
After 14 October 2025, Windows 10 will no longer receive security updates, bug fixes, or technical support. PCs won’t suddenly stop working, but they will become more vulnerable to cyber threats. Without regular updates, any new security flaws will remain unpatched, posing a risk to anyone using the system, especially for online tasks or handling sensitive data.
Despite the looming deadline, Windows 10 remains in heavy use. Some estimates suggest that as much as 40% of Windows devices are still running it. There are major concerns that so many devices are potentially about to become at risk.
Critics also argue that forcing upgrades could lead to the unnecessary disposal of perfectly functional hardware. This is not only a waste of resources for millions of people and organisations, but environmentally reckless as perfectly good hardware is thrown away and replaced.
Under pressure, Microsoft has recently introduced a 12-month extension to Windows 10 support. But it’s not automatic. Your union or your activists will need to take action to enable it.
Why the delays in upgrading to Windows 11?
Despite Windows 11 being available, and free to upgrade for many, adoption has been slower than expected. A key reason is hardware compatibility: older machines often don’t meet the requirements for Windows 11.
Why this matters for trade unions
Trade unions face particular challenges here. With tighter IT budgets than many private sector organisations, hardware upgrades can be slower to come about.
Also some unions still rely on very customised software that was built more than four years ago and might only run on Windows 10.
This is especially concerning given the sensitive nature of union data and the fact that unions have been targeted by cyberattacks in recent years. The risks are real and growing.
For reps and branch officials without dedicated IT support, the end-of-life deadline might not even be on their radar. Also, many activists won’t have dedicated hardware from their union, instead relying on personal devices for their duties. If these devices haven’t been updated, or can’t run Windows 11, they may be forced to risk working on insecure devices.
It’s not just the union’s hardware and data that face risks. Unions would be exposed if outdated, unsupported devices are used to interact with employers. These machines, lacking security updates, could inadvertently introduce malware into workplace systems. That doesn’t just compromise data, it could damage relationships and harm the union’s reputation.
Some employers already block unsupported devices from accessing key services like email clients or shared platforms. This means those devices could become effectively unusable in a professional setting, leaving reps unable to carry tasks on union-provided PCs.
What are your options?
For those who can’t upgrade to Windows 11, Microsoft’s answer is their Extended Security Updates (ESU) programme, which offers a way to extend support until October 2026. There are two ways to activate it:
- Free Option: Link your PC to a Microsoft account and sync settings via OneDrive (Settings > Accounts). This may already be set up by your union if you use Microsoft services. If unsure, check with your IT team. But be aware that this method nudges your users further into Microsoft’s ecosystem, and free accounts have data storage limits that will keep nagging users to take out monthly paid upgrades.
- Paid Option: For around £22, you can manually activate the ESU. To do this, first ensure your system is fully updated via Settings > Update & Security > Windows Update. ESU options will only appear of updated devices. This is also where you need to activate the extended security update, but not everyone will see this option immediately. It’s being rolled out gradually.
Other Paths Forward
Of course, upgrading your compatible Windows 10 devices to Windows 11 is one solution, as is buying new Windows 11 devices. But those aren’t viable, there’s another route, but one best reserved for the most technically comfortable users.
The End of 10 campaign group is encouraging users to adopt the Open-Source Linux system, which would allow older PCs to continue running securely without additional cost. You can learn more at endof10.org, but be aware that this option is only recommended for those who fully understand the implications of switching to Open Source.
If you’re worried about your union’s preparedness for the end of Windows 10, here are some steps you can take:
Audit your union’s internal hardware
If your union maintains an IT asset register, you should already have a record of devices and their operating systems. If not, conduct a manual audit to assess the scale of the issue. Identify which devices are still running Windows 10. Of these, you need to find out which ones:
- Can be upgraded to Windows 11
- Can be retained if they have Extended Security Updates (ESU) activation
- Can no longer be used and require replacement
Pay particular attention to devices that lack key Windows 11 requirements such as TPM 2.0, Secure Boot, or supported CPUs.
National unions often have access to automated auditing tools to streamline this process. For example:
- IT Managed Service Providers (MSPs) may use endpoint management platforms like Acronis, Datto, or Heimdal to quickly identify all Windows 10 devices. Ask your provider for details if you don’t already have access to the automated reporting.
- If your union has adopted Microsoft Cloud and you’ve got into the more advanced steps and deployed Microsoft Intune, this gives IT administrators visibility into all enrolled devices via Microsoft 365 admin controls. From here, potentially vulnerable devices can be identified.
Audit activists’ devices
Auditing devices used by branches and representatives can be more complex, especially if your union does not directly provide hardware for reps, or if your reps use employer-provided hardware. Approaches vary significantly across organisations, so your audit strategy will need to reflect your union’s specific setup.
For instance:
- If all devices are enrolled in Microsoft Intune, IT administrators can easily audit and enforce controls using Microsoft 365 admin tools.
- If your union only provides funding for hardware and reps are responsible for purchasing their own devices, then clear communications and guidance will be essential to ensure compliance and security.
- Self-checking tools: Reps can use built-in tools like Windows Security, System Information, or Settings > About to check their device’s OS version and update status.
- Questionnaire-based audit: Consider distributing a simple questionnaire to reps asking for details such as device type, operating system version, antivirus status, and update history. This can help identify at-risk devices and guide next steps.
Upgrade, Extend or Decommission
Once all potentially at-risk devices have been identified, determine the appropriate action for each:
- Upgrade to a supported operating system (usually Windows 11)
- Extend security updates via ESU (Extended Security Updates)
- Remove the device from use if it cannot be secured
Communications
Regardless of your union’s hardware policy, effective communication is critical. Where the union does not directly manage activist devices, consider providing:
- Briefings, FAQs, and safety checklists to help reps understand the risks associated with Windows 10 end-of-life.
- Template letters for reps to send to employers requesting upgrade plans, especially where employer-provided equipment may be affected.