On October 14, 2025, Microsoft ended mainstream support for Windows 10. That means ordinary security updates and technical help are no longer provided for most Windows 10 computers. Machines will continue to start up and run, which is why this deadline is easy to ignore. But software that no longer receives security fixes becomes a growing risk, particularly in a healthcare setting.
If your facility still has Windows 10 computers, here is a practical plan for the weeks ahead.
Computers that do not receive security patches become easier targets over time, because new weaknesses are found and published while those systems stay unfixed. Under the HIPAA Security Rule, you are expected to identify risks to electronic protected health information and put reasonable safeguards in place. Running unsupported operating systems on devices that handle resident data is a risk that is hard to justify in a risk analysis without compensating controls.
Cyber insurance applications also commonly ask whether unsupported systems remain on your network, so the answer affects your coverage conversations as well.
You cannot plan until you know what you have. Create a list of every computer, including:
Make, model and age
Operating system and version
Location and primary user
Whether it holds or accesses resident data
Which applications it runs, including EHR clients and specialty software
Do not forget less visible systems, such as computers attached to therapy equipment, kitchen or pharmacy systems, time clocks, and PCs used by outside vendors. Your IT provider can often pull this from management tools, but a walk through the building catches the strays.
Windows 11 has specific hardware requirements, including a compatible processor, a security chip called TPM 2.0 and sufficient memory and storage. Many computers purchased in the last several years qualify and can be upgraded in place. Older machines often do not and will need to be replaced. Microsoft provides a PC Health Check tool, and managed IT tools can report eligibility across many machines at once.
Before any upgrade, confirm that your EHR, billing, imaging and other key applications are supported on Windows 11. Ask each vendor in writing. Some specialty applications, medical device software or older drivers may need updates or may not work at all. Test on a small number of machines first.
Group devices into categories:
Eligible and compatible: schedule in-place upgrades
Not eligible but still useful: plan replacement as part of your budget
Dependent on legacy software that cannot move yet: isolate on a restricted network segment, limit internet access, remove email use and apply additional monitoring while you plan the transition
Microsoft offers a paid Extended Security Updates option for a limited time for organizations that need more runway. It can be a bridge for specific machines, but it is a temporary measure and does not remove the need to plan the move.
Start with computers that:
Access the internet and email regularly
Handle the most resident information
Are used by many staff, such as nurse station workstations
Sit on the main network without segmentation
Computers that are offline or limited to a single task can wait, but they should not be forgotten.
Schedule upgrades during low-activity periods, and avoid medication pass and shift changes
Upgrade in small groups so any issue affects only a few users
Back up data and settings before each upgrade
Prepare staff with a short explanation of what will look different, since the Windows 11 interface changes the Start menu and taskbar
Keep loaner devices available for users whose computers are being replaced
Have a rollback plan in case a critical application fails
Replacement costs are easier to manage if spread over a planned cycle. Include hardware, licensing, imaging, labor and training. Document your decisions in your risk management plan, including any machines you accept to run temporarily and the safeguards you applied to them.
Assuming that because the machine still works, nothing needs to be done
Upgrading without checking application compatibility
Replacing hardware without a plan to securely wipe or destroy old drives that contain resident data
Overlooking devices that are not on the main domain
Starting only after something breaks
We help care facilities inventory their computers, test application compatibility and manage upgrades with minimal interruption to staff. If you are unsure how many Windows 10 machines you have or what it will take to replace them, we can start with a simple inventory and a prioritized plan.
Call or text: 405-285-3845
New customers: start@unitycareit.com
Existing customers: support@unitycareit.com
Address: UnityCare Technologies, 2524 N Broadway Ste 554, PMB 947974, Edmond, Oklahoma 73034-4172