Windows 11 is now five years old, yet Windows 10 is still not behaving like an operating system on its way out. The latest reporting from Windows Latest points to a stubborn reality for Microsoft, PC makers and IT administrators: many users who were easy to move have already moved, while the remaining Windows 10 estate is increasingly made up of machines that cannot upgrade, will not upgrade, or are tied to workflows where change is expensive.

For technology teams, that makes Windows 10 less of a product-preference debate and more of a risk-management problem. The practical takeaway is simple: treat every remaining Windows 10 device as a named exception, not background noise.

What the latest Windows 10 numbers imply

Windows Latest cites enterprise asset data from Lansweeper indicating that Windows 10 still accounts for roughly 16.9% of Windows client devices in scanned business environments. That is no longer the mass of easily upgraded machines that existed before Windows 10 reached the end of mainstream support. It is the harder remainder: older PCs, specialized endpoints, neglected devices, and systems that are still considered “good enough” by their owners.

The same report notes that Windows 10’s share dropped sharply as the support deadline approached, but the decline has now slowed. That pattern matters. When a migration curve flattens after the deadline pressure has already done its work, the leftovers tend to require manual attention rather than broad messaging campaigns.

HP’s comments to investors, as reported by Windows Latest, tell a similar story from the hardware side. HP still sees a meaningful portion of its installed base on Windows 10 and views that as a future refresh opportunity. But “opportunity” for an OEM can be “project backlog” for an IT department. If those devices have not moved yet, there is probably a reason.

Why holdouts remain

There are several common explanations, and they often overlap. Some Windows 10 systems fail Windows 11 hardware requirements, especially around TPM, CPU generation and security baselines. Others run legacy peripherals, niche line-of-business software or validated configurations that an organization is reluctant to disturb. In consumer and small-business environments, the explanation may be simpler: the PC still works, Windows 10 feels familiar, and the owner sees no benefit in paying for a replacement.

That attitude is understandable, but it should not be confused with safety. A stable user interface does not equal a safe endpoint. The longer Windows 10 sits outside the normal support path, the more its risk profile separates from Windows 11.

Windows Latest highlights Lansweeper’s warning that Windows 10 devices carry a much larger average vulnerability burden than Windows 11 devices. Exact exposure varies by environment, installed software and patching discipline, but the direction is not surprising. Once an operating system stops receiving the same regular security fixes as its successor, the gap grows.

ESU helps, but it is not a strategy by itself

Extended Security Updates can buy time, and for some organizations they are the correct short-term choice. If a device cannot be replaced before a business deadline, paying for security updates is better than pretending the problem does not exist.

However, ESU should be treated as a bridge, not a destination. It does not modernize old hardware, solve driver limitations, improve manageability or remove the need to test applications on a supported platform. It also does not help unmanaged devices that never enroll.

A useful IT policy is to tag Windows 10 machines in three groups:

- Upgradeable now: hardware supports Windows 11 and applications have no known blocker.
- Replace on schedule: hardware or performance makes the machine a refresh candidate.
- Isolate and justify: the device must remain temporarily because of a specific business dependency.

The third group deserves the most scrutiny. Those machines should have owners, dates, compensating controls and a retirement plan. If nobody can explain why a Windows 10 PC is still required, it should not be treated as required.

Advice for enthusiasts and home users

If you are staying on Windows 10 because you prefer it, take an honest inventory. Is the machine used for banking, work email, remote access, password management or family documents? If yes, security should outweigh interface preference. Consider a Windows 11-compatible PC, a supported alternative operating system, or at minimum every available ESU and application update.

If the PC is offline or used for a narrow purpose, the risk may be lower, but it is still worth reducing browser exposure and removing unnecessary software. Old operating systems become especially dangerous when paired with modern internet use.

Bottom line

Microsoft can continue warnings, OEMs can continue refresh campaigns, and Windows 11 can remain the default on new PCs. But the remaining Windows 10 base is likely to shrink slowly because it is no longer the easy part of the migration. That means organizations should stop thinking about Windows 10 as a general population and start managing it as an exception list.

The best next step is not another reminder email. It is a device-by-device decision: upgrade, replace, isolate or retire.

Source: Windows Latest source