Microsoft has announced that Windows 10 will reach end of support on October 14, 2025. After that date, Microsoft will no longer provide free security updates, technical assistance or feature updates for standard Windows 10 editions. Computers will keep running, but any newly discovered vulnerabilities will go unpatched, which is a particular concern for devices that handle protected health information. With a few months left, care facilities have time to plan, but not much room for delay.
The computer will not stop working on October 15. The risk grows gradually. Attackers pay attention to end-of-life software because every new flaw they find stays open. Application vendors, including clinical software providers, may also stop certifying their products on unsupported operating systems. Cyber insurers may ask about unsupported systems on applications, and the HIPAA Security Rule expects you to address risks to ePHI, which includes running software that no longer receives security fixes.
Microsoft has described an Extended Security Updates program for Windows 10 as a limited, paid option for organizations that need more time. Check Microsoft's current terms and pricing before depending on it, and treat it as a bridge rather than a destination.
You cannot plan without knowing what you have. Build a list of every computer, including:
Device type and location, such as nurse station, medication cart, business office or therapy.
Make, model and age.
Operating system and version.
Whether it meets Windows 11 hardware requirements, such as a supported processor, TPM 2.0 and secure boot capability.
Critical software it runs, including clinical and vendor-supplied applications.
The person or department responsible.
Your IT provider can usually produce this list from a management tool and run Microsoft's compatibility checks.
Most fleets split into three groups:
Eligible for upgrade. Newer computers that meet hardware requirements can often be upgraded to Windows 11 at no license cost.
Not eligible, but replaceable. Older machines that cannot run Windows 11 and should be retired.
Special cases. Devices attached to equipment, such as a lab analyzer, imaging system or specialized software that depends on an older operating system.
Before upgrading anything, confirm with your EMR, pharmacy, therapy, billing and other vendors that their software is supported on Windows 11. Test with a pilot computer, including printing, scanning, barcode readers, signature pads and any peripherals. Surprises tend to appear in older printer drivers and specialty hardware.
Some devices cannot move easily. If a computer must stay on Windows 10, reduce risk by:
Placing it on an isolated network segment with limited access.
Blocking internet access and email on that machine.
Disabling unnecessary services and removable media.
Keeping strong endpoint protection and monitoring in place.
Documenting the exception, the reason, the compensating controls and a replacement date.
Ask the equipment vendor about upgrade options. They may have a roadmap, or they may be the reason a replacement should be on the budget.
Hardware refreshes take procurement time, and supply can tighten as the deadline approaches. Estimate how many machines need replacement, and spread the purchase and deployment over several weeks rather than the last few days. Consider:
Buying standardized models to simplify support.
Including replacements in an annual capital plan or a lease program.
Scheduling deployments by unit, with spare machines ready.
Allowing time for imaging, application installation, and staff orientation to the Windows 11 look and feel.
Rather than quoting a cost per machine, ask your provider for a written estimate based on your inventory.
Let staff know what is changing and when. Windows 11 looks somewhat different, and a short guide or ten-minute demonstration helps. Ask super-users on each shift to help colleagues. Plan extra helpdesk coverage in the days after each unit moves.
When computers are replaced, their drives may contain resident information. Wipe or physically destroy storage according to NIST media sanitization guidance, document the disposal and keep certificates from your vendor. The HIPAA Security Rule requires policies for final disposal of ePHI and for media reuse.
Windows 10 is not the only end-of-support item. Review servers, firewalls, switches, access points, printers and other software for upcoming end-of-life dates, and keep them on the same calendar.
UnityCare IT can inventory your Windows 10 computers, check compatibility, coordinate with your clinical vendors and manage the upgrade or replacement schedule. Starting the inventory this month leaves comfortable room before October.
Call or text: 405-285-3845
New customers: start@unitycareit.com
Existing customers: support@unitycareit.com
Address: UnityCare Technologies, 2524 N Broadway Ste 554, PMB 947974, Edmond, Oklahoma 73034-4172