When your operating system reaches end of life.
Software vendors stop patching old operating systems on a fixed schedule. After that date, security holes don't get fixed. For a business, that's the moment your IT goes from supported to exposed. Here's what it means, where the dates fall, and what to do about it.
End of support is a security event.
When Microsoft or Apple reach an operating system's end-of-support date, three things stop, and none of them are negotiable.
Where the deadlines actually fall.
Microsoft publishes fixed end-of-support dates per version. Apple supports the current and two prior major macOS versions, with security updates rolling forward as new versions ship.
A bypass installs the OS, not the support behind it.
Tools like Rufus, registry workarounds, and modified install media will put Windows 11 on hardware that fails Microsoft's compatibility check. The OS boots. The vendor support behind it doesn't come along for the ride. The same risks apply any time you bypass a compatibility check on any operating system, so here's why we steer clients away from it.
You can't plan around what you can't see.
Tag every workstation, laptop, and server by OS version, edition, and patch level.
The exercise usually surfaces a handful of forgotten machines: a meeting-room PC, a reception kiosk, a server in a cupboard nobody opens. Those are the ones an attacker finds first.
Not every Windows 10 machine can run Windows 11.
Windows 11 requires TPM 2.0, UEFI with Secure Boot, an 8th-generation Intel CPU (or newer AMD equivalent), 64 GB of storage, and 4 GB of RAM as minimums.
Devices that miss the bar need replacement, not an in-place upgrade. We run the compatibility check as part of every Evaluation.
Pilot, then expand.
Migrate a small group of users first: enough to flush out line-of-business compatibility issues without putting the whole office at risk.
Once the pilot is stable, roll out by team or floor in stages over a quarter. We do the planning, the imaging, and the after-hours cutover.
Last-minute fleet upgrades are expensive and rushed.
Hardware lead times blow out as the deadline approaches and every other business in the country is buying at the same time.
Cyber insurance renewals can refuse to cover unsupported operating systems, and Privacy Act obligations and industry compliance regimes treat them as a control failure. Plan the work with eighteen months on the clock, not eighteen days.
An out-of-date browser is its own attack surface.
Modern browsers (Chrome, Edge, Firefox, Safari) update themselves by default, so most of this problem solves itself. The cases that bite SMBs are when something stops the auto-update from working, or when the underlying OS is too old to keep getting newer browser versions.
Don't get caught at end of support
Let's plan your upgrade.