Windows 11 24H2 Home and Pro Reach End of Support: No ESU Safety Net, Leaving Upgrade as the Only Path Forward
Microsoft has confirmed that Windows 11 24H2 Home and Pro editions have reached end of support, with affected devices no longer receiving monthly security or non-security preview updates. Critically — and unlike Windows 10 — neither edition offers an Extended Security Updates (ESU) option. Consumer and small-business licence holders cannot pay to extend the support runway; their only forward paths are upgrading to 25H2 or moving to a renewable Enterprise or Education licence (as reported by BleepingComputer).
For organisations still running Windows 10, the timing compounds the problem: Microsoft's paid ESU programme for Windows 10 and the 24H2 Home/Pro end-of-support date are falling in close succession, creating an unusual dual-EoS window. With both sides of the fleet under planning pressure simultaneously, SMEs face a compressed upgrade timeline.
Version and edition — not the "Windows 11" brand — are the compliance unit
This is the point most often misunderstood. Within the same 24H2 release, Enterprise and Education editions remain supported for 36 months through the end of 2027, while Home and Pro have been retired. The 23H2 Home and Pro editions were retired back in November 2025. In other words, "we're already on Windows 11" is not a meaningful security posture statement — a small business still running 24H2 Pro is in substantially the same position as one still on Windows 10. The lowest supported version currently available to consumer and small-business licensing is 25H2.
The 24H2-to-25H2 upgrade is an enablement package, not a full feature update
The good news is that moving from 24H2 to 25H2 in most cases requires only an enablement package — a matter of minutes, with data preserved through the restart. What typically stalls organisations is not a technical barrier but caution around driver and internal application compatibility. Measured against the risk cost of delayed patching, that caution is usually more expensive than the upgrade it defers.
The following sections are editorial analysis and commentary by HKLUG, not part of the original BleepingComputer report.
Where SMEs with slow hardware refresh cycles get stuck (Editorial analysis)
Hardware remains the real barrier. Windows 11 requires TPM 2.0 and a processor on Microsoft's supported list, and a substantial share of older business-class machines cannot meet those requirements. SMEs with longer hardware refresh cycles — including many organisations in Hong Kong — find their options narrowed to three when part of the fleet falls below this threshold:
- Continue purchasing ESU (for Windows 10 or other eligible editions) — note that pricing escalates year over year; the second year for business licences starts at US$61 and doubles from there. For machines past the fifth year of servicing, three years of cumulative ESU costs typically exceed the cost of replacing hardware outright.
- Refresh endpoint hardware — a compliant entry-level business machine often costs less than paying for ESU on ageing machines over three years.
- Cloud desktops (Windows 365 / Azure Virtual Desktop) — for the scattered legacy machines in a fleet that cannot be replaced on schedule, this is the fastest-acting solution, shifting the hardware compatibility problem to the cloud.
Compliance perspective: elevating EoS from an IT issue to a reportable item (Editorial analysis)
For organisations in regulated industries or those covered by supply-chain reviews, an unsupported operating system is not merely technical debt — it is often a direct subject of questionnaires and audits. The following is editorially compiled compliance context for readers to assess against their own circumstances:
- HKMA's TM-G-1 (Guideline on Technology Risk Management) requires supervised institutions to maintain controlled vulnerability and patch management processes. Continuously running endpoints on an operating system that no longer receives security updates would generally be regarded as a control gap in such processes, and should be documented and explained in internal risk assessments.
- The Privacy Commissioner for Personal Data (PCPD) has issued guidance on system patching and vulnerability management over the years; failing to remediate known vulnerabilities in a timely manner may be regarded as a failure to handle personal data with appropriate security safeguards. Affected organisations should review whether their patching policies already account for this kind of EoS scenario.
- Cyber insurance and supply-chain questionnaires routinely ask directly about the existence of end-of-support operating systems and the mitigations in place. The answer "there is no ESU available to buy" is typically harder to present to underwriters or key customers than "an upgrade is already scheduled."
Note: Microsoft has issued no statement linking this 24H2 Home/Pro end-of-support event to any Hong Kong regulatory body. The HKMA and PCPD references above are editorially compiled general compliance context, not regulatory pronouncements tied to this specific EoS event. Actual compliance obligations should be verified against the latest documentation from the relevant regulator for your organisation.
Action checklist (recommended for completion within the week)
- Inventory the fleet: enumerate all Windows 10 and Windows 11 24H2 Home/Pro devices on a "version + edition" basis.
- Schedule the 25H2 enablement package or a move to Enterprise/Education for 24H2 Home/Pro machines; validate drivers and applications on representative models first.
- Calculate the year-over-year cost of ESU versus hardware replacement for Windows 10 machines, and make the decision on three-year total cost rather than first-year price alone.
- Depending on your compliance scope, review EoS-related items in HKMA TM-G-1, PCPD guidance, and insurance/supply-chain questionnaires, and retain decision records for audit purposes.
Disclaimer
The ESU pricing, lifecycle dates, and regional pricing referenced in this article (Hong Kong retail and commercial licensing may differ from US-dollar list pricing) should be verified against Microsoft's official lifecycle pages and licence agreements before execution. Whether 25H2 remains the lowest supported version for consumer and small-business editions should also be confirmed against Microsoft's lifecycle pages at time of action. Individual device upgrade compatibility still requires per-device testing.
Source: BleepingComputer. Compliance context and action guidance are editorially compiled by HKLUG and do not form part of the original report.
Windows 11 24H2 家用版與專業版停止支援：無 ESU 安全網，升級成唯一出路
微軟已確認 Windows 11 24H2 的家用版（Home）與專業版（Pro）正式停止支援，相關裝置不再收到每月安全性或非安全性預覽更新。關鍵在於：與 Windows 10 不同，這兩個版本均沒有 Extended Security Updates（ESU）選項——消費者及小型商業授權持有人無法付費延長支援期限；可行的出路只有升級至 25H2，或改用可續期的 Enterprise／Education 授權（據 BleepingComputer 報導）。
對仍然運行 Windows 10 的機構而言，時機令問題更為複雜：微軟針對 Windows 10 的付費 ESU 計劃與 24H2 家用版／專業版的停止支援日期前後到期，形成罕見的雙重 EoS 時段。在 fleet 兩邊同時承受規劃壓力下，中小企的升級時間表被大幅壓縮。
版本與 edition——而非「Windows 11」品牌——才是合規的判斷單位
這一點最容易被誤解。在同樣的 24H2 版本內，Enterprise 與 Education 按 36 個月週期支援至 2027 年底，而家用版與專業版則已退役。23H2 的家用版與專業版早在 2025 年 11 月便已退役。換言之，「我們已經轉用 Windows 11」並不足以作為有意義的資安狀態陳述——仍在 24H2 Pro 上運行的小型企業，處境與仍在 Windows 10 上的機構實質相同。目前消費者及小型商業授權可用的最低支援版本為 25H2。
24H2 至 25H2 的升級是 enablement package，並非完整 feature update
好消息是，由 24H2 轉至 25H2 在多數情況下只需安裝一個 enablement package——數分鐘內完成，資料於重新啟動過程中保留。實際令不少機構卻步的往往並非技術障礙，而是對驅動程式與內部應用程式相容性的審慎觀望。相對於延遲 patch 的風險成本，這類觀望的代價通常比其所拖延的升級本身更高。
以下章節為 HKLUG 編輯部分析與評論，並非 BleepingComputer 原始報導的一部分。
硬體更新週期較長的中小企卡在哪裡（編輯分析）
硬體仍是真正的門檻。Windows 11 要求 TPM 2.0 以及處理器列入微軟支援清單，相當一部分較舊的商用機器無法符合這些要求。硬體更新週期較長的中小企——包括香港不少同類機構——若 fleet 中有一部分低於這個門檻，可行選項收窄至三個：
- 繼續購買 ESU（適用於 Windows 10 或其他合資格版本）——注意價格逐年遞增；business 授權第二年由 US$61 起跳，其後倍增。對已進入第五年維護期之後的機器，三年累積的 ESU 成本通常超過直接更換硬體的費用。
- 更新終端硬體——一部合規的入門級商用機，成本往往低過為老舊機器連續三年購買 ESU。
- 雲端桌面（Windows 365 / Azure Virtual Desktop）——對 fleet 中少數無法按時更換的零散舊機，這是見效最快的方案，把硬體相容性問題轉移至雲端。
合規視角：把 EoS 由 IT 事項提升為可申報項目（編輯分析）
對受監管行業及受供應鏈審查覆蓋的機構而言，一個不再受支援的作業系統不只是技術債——它往往是問卷與審計的直接命題。以下為編輯整理的合規背景，供讀者對照自身情況評估：
- HKMA 的 TM-G-1（《技術風險管理指引》）要求受規管機構維持受控的漏洞管理與 patch 流程。持續在已停止安全性更新的作業系統上運行終端，一般會被視為此類流程的控制缺口，宜於內部風險評估中記錄並加以說明。
- **個人資料私隱專員公署（PCPD）**歷年就系統 patch 與漏洞管理發出指引；未能及時補救已知漏洞，可能被視為未以適當保安保障處理個人資料。受影響機構宜檢視其 patch 政策是否已涵蓋此類 EoS 情境。
- 網絡保險及供應鏈問卷實務上常直接詢問是否存在已停止支援的作業系統及相應緩解措施。答案「沒有 ESU 可購買」通常比「升級已排定」更難向承保方或主要客戶交代。
注意： 微軟並未就本次 24H2 家用版／專業版停止支援事件發表任何與香港監管機構相關的聲明。上述 HKMA 與 PCPD 引用屬編輯整理的一般合規背景，並非針對本次 EoS 事件的監管表態。實際合規責任應以所屬機構之相關監管機構最新文件為準。
行動清單（建議於本週內完成）
- 盤點 fleet：以「版本 + edition」為單位，列出所有 Windows 10 及 Windows 11 24H2 家用版／專業版裝置。
- 為 24H2 家用版／專業版機器排定 25H2 enablement package 或轉用 Enterprise／Education 的時間表；先在具代表性的型號上驗證驅動程式與應用程式。
- 對 Windows 10 機器計算 ESU 逐年成本與更換硬體成本的對比，以三年總成本而非首年價格作決策。
- 視乎合規範圍，檢視 HKMA TM-G-1、PCPD 指引及保險／供應鏈問卷中的 EoS 相關條目，並保留決策紀錄以備審計。
免責聲明
本文所述的 ESU 定價、壽命週期日期及區域定價（香港零售及商業授權或與美元定價有差異），執行前應對照微軟官方壽命週期頁面及授權合約核實。25H2 是否仍為家用版及小型商業授權版本的最低支援版本，亦應於採取行動時對照微軟壽命週期頁面確認。個別裝置的升級相容性仍需逐一測試。
資料來源：BleepingComputer。合規背景及行動建議由 HKLUG 編輯整理，並非原始報導的一部分。