Windows 10 stopped receiving free security updates in October 2025. Continuing to run it requires paid Extended Security Updates (ESU), priced per year on a sliding 12/24/36-month scale. Migrating to Windows 11 Enterprise has moved from nice-to-have to mandatory across 2026.
Hardware — check before buying licenses
- TPM 2.0 (Trusted Platform Module) — required, no workaround
- CPU on Microsoft's supported list (Intel 8th gen+ / AMD Ryzen 2000+)
- Minimum 4GB RAM, 64GB storage, Secure Boot capable
- DirectX 12, WDDM 2.0 driver
- Run PC Health Check or Endpoint Configuration Manager to inventory the fleet first
Choosing a license model
For Vietnamese enterprises, CSP (Cloud Solution Provider) via a Microsoft-approved reseller is most common — monthly billing, no long-term commitment. Organizations above 500 users tend to evaluate EA (Enterprise Agreement) for a 3-year commitment with better pricing and pre-vetted compliance.
30-day pilot rollout
- Pick 1-2 departments (10-20 users) — IT plus a representative business unit
- Week 1: in-place upgrade on devices that passed PC Health Check
- Weeks 2-3: collect feedback on app compatibility, drivers, VPN/SSO
- Week 4: finalize Known Issues + FAQ docs ahead of broader rollout
Digi43 supports hardware assessment, CSP/EA planning, SCCM/Intune deployment, and the 30-day pilot. Get in touch for a sizing review.