The Windows 10 Bridge Gets Expensive This Fall

By Matt Bielak, Account Executive, Retail, IW Technologies

Last fall, the Windows 10 conversation with my retail accounts mostly landed in the same place. They’d handled it.

And technically, they had. When support ended on October 14, you could enroll your fleet in Microsoft’s Extended Security Updates program, pay the first-year fee, and keep the lanes running. No drama, no scramble. The registers still booted and the self-checkouts still rang the morning after, same as the morning before.

One of my accounts is a good example. An automotive services retailer running a few hundred locations. Most of its fleet was already Windows 11 ready, but a few hundred machines were still on Windows 10 Pro, so they enrolled those in ESU last October and moved on.

Here’s the part that’s easy to miss: that first year was the cheap one.

ESU isn’t priced to keep you on Windows 10. It’s priced to push you off it. Year one runs about $61 per device. Year two, the renewal landing this fall, doubles to $122, and year three doubles again to $244. It also stacks: skip a year and come back, and you still owe for the year you skipped. So three years of staying put runs $427 a device. For security patches. Nothing new, no added features, no real support beyond the patches themselves.

Now put that against a real fleet. This chain had about 1,200 machines in the field. Most were already Windows 11 ready but about a third, roughly 400 machines, were still on Windows 10 Pro, and those went onto ESU at $61 apiece last year, so about $24,000. When the year-two renewal doubles the per-device cost to $122, that 400-unit slice jumps to about $49,000. For the same patches, on the same aging hardware. Year three it climbs to nearly $98,000. Stretch the bridge across all three years and it's more than $170,000 to keep 400 machines standing still.

That’s the thing about ESU. It isn’t a plan. It’s a postponement. One you re-buy every year at a higher price, on hardware that’s getting older the whole time you’re paying to keep it running.

The retail wrinkle is the hardware itself. A lot of the lane terminals and back-office machines still on Windows 10 simply can’t take Windows 11. They don’t meet the processor or TPM 2.0 requirements Microsoft set. So “just upgrade” isn’t really an option when the box on the counter won’t accept the new OS to begin with. That’s the corner a lot of fleets are in: too old to upgrade in place, too embedded to rip out mid-season, and a little more expensive to renew every year they wait.

This is the part I actually like, because there’s usually more than one way out and which one is right comes down to the device in front of you. Typically it’s one of three: move to Windows 11 Pro, move to Windows 10 IoT Enterprise LTSC 2021, or keep buying ESU.

If the hardware can handle it, we can re-image the fleet remotely and bring the machines up on Windows 11 Pro. No technician standing at every register. If it can’t, Windows 10 IoT Enterprise LTSC 2021 is often the smarter landing spot; it’s a long-support build made for exactly this kind of fixed-function retail hardware, so you stop re-buying the ESU bridge every October. And the units that are genuinely done? We procure the replacement and the license together and stage them so they arrive ready to run instead of as a box of question marks.

That automotive chain is the example I keep coming back to. Rather than re-buy ESU on those 400 year after year, we imaged the units remotely and redeployed them store by store: remote imaging paired with boots on the ground in each location and got every location migrated without disrupting a day of business. The ESU dependency is gone, and we're on track to have those units retired off it entirely. And that kind of move isn’t a one-off. Between the depot and the field, we run 1,000+ rapid-scale rollouts in eight weeks or less, backed by a service network that reaches 99% of the country so the imaging happens remotely and the hands-on part happens store by store, without anyone camping at a register.

There’s also a calendar problem hiding under the cost problem, and it’s the one I’d watch most closely.

Retail doesn’t migrate during peak. You already know this. Once back-to-school ramps and the holiday freeze comes down, nobody’s pushing a new image to a thousand registers or swapping hardware in a live store. The fleet gets locked for stability and stays that way through the highest-volume weeks of the year. That’s the right call; peak season is no time to find out a re-image went sideways.

But it means the real deadline isn’t the October invoice. It’s the freeze before it. Whatever you decide to do, the work has to land in the quiet stretch before the floor goes untouchable and if you miss that window, the decision makes itself. You re-up ESU at double and carry aging hardware straight through your busiest season, because there was no safe time left to change it.

I want to be straight about one thing, though. ESU isn’t a mistake. For some devices it’s the right call for another year while you sort out the rest. And replacing everything isn’t the answer either; that’s just overspending in the other direction. The point is to actually look at the fleet, device by device, and decide what gets re-imaged, what moves to IoT, and what gets replaced before that year-two invoice decides for you.

The cheap year ends this fall. The next one costs double.

If your Windows 10 plan is still “we handled it,” the time to pressure-test it is now in the quiet window, before back-to-school turns into Black Friday turns into a frozen fleet.

No deck, no pitch. Just a look at your fleet and the real math on what each device costs to keep alive.

Curious what your floor looks like right now. How much of it is still running on Windows 10?