Safeguard
Application Security•

Windows 10 end of support and the machines that still run it

Microsoft ended Windows 10 support on 14 October 2025. Operators of machines with embedded PCs should know which units run it and which editions have other dates.

Safeguard Security Team
2 min read

Microsoft's lifecycle page states that Windows 10 reached end of support on 14 October 2025. Version 22H2 was the final version, and all editions stayed in support with monthly security updates through that date. Existing LTSC releases "will continue to receive updates beyond that date based on their specific lifecycles."

Plenty of physical machines carry an embedded Windows PC: operator panels, test benches, kiosks, inspection stations. Safeguard does not control these machines. This is an inventory exercise.

What's affected

The lifecycle table for Windows 10 IoT Enterprise lists a retirement date of 10/15/2025 in its table, while the page text says end of support is 14 October 2025. Use the dated statement and confirm with Microsoft. Older versions ended earlier: for example, version 21H2 of IoT Enterprise ended on 12 June 2024. LTSC editions follow their own pages, so check the one you have.

How to check if you're exposed

  1. List every machine with an embedded PC, with its Windows edition and version.
  2. Mark the ones on 22H2 or older non LTSC builds.
  3. For LTSC, look up the specific lifecycle page.
  4. Note which machines are on a network, and which can be isolated.

What to do now

  1. Ask each machine's maker for its upgrade or replacement plan in writing.
  2. Isolate unsupported machines from the internet and from business networks.
  3. Keep application software on them scanned, since the application is often the larger part of the risk.

Quick check

Do LTSC editions end on 14 October 2025?

Not necessarily. Microsoft says existing LTSC releases continue to receive updates based on their own lifecycles.

Sources

Never miss an update

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.