What to Do With PCs That Can’t Run Windows 11

This post contains affiliate links. If you purchase through our links we may earn a small commission at no extra cost to you.

Windows 10 support ended October 14, 2025, and a real share of small business PCs still can’t run Windows 11 — no TPM 2.0, an 8th-generation Intel chip or older, or an AMD processor before Zen 2. If that’s some of your fleet, you have five real options, not just “replace everything.” Here’s what each one actually costs and when it makes sense.

Why these machines got locked out

Windows 11’s hardware floor is stricter than any previous Windows upgrade: TPM 2.0 (a security chip, not just a setting), Secure Boot support, and a supported CPU generation — 8th Gen Intel Core or newer, or AMD Ryzen 2000-series (Zen 2) or newer, roughly. A machine can have a perfectly capable CPU for everyday work and still fail the check purely on TPM or platform support. This isn’t a bug; it’s Microsoft using the upgrade to force a security baseline the whole fleet moves onto together.

Option 1: Windows 10 Extended Security Updates (ESU)

ESU buys time without touching the hardware. Business pricing runs $61 per device for Year One, $122 for Year Two, and $244 for Year Three — the price doubles annually, capped at three years, requiring devices on Windows 10 22H2. It’s the right call when you need a defined runway rather than an immediate decision, but budget for the doubling cost each year rather than assuming Year One’s price holds. We cover the enrollment mechanics in our Windows 10 ESU for small business guide.

Option 2: Replace the hardware

The straightforward option, and often the right one for machines already near the end of their useful life anyway. A current business-class laptop or desktop clears the Windows 11 bar automatically and comes with a fresh warranty. See our business laptop buying guide and best business desktop PCs guide if replacement is the call for a given machine — and weigh the three-year-vs-five-year TCO math before replacing the whole fleet at once rather than machine by machine.

Option 3: Redeploy as a kiosk or thin client

Not every machine needs to run a full modern OS with local applications. A PC that’s locked out of Windows 11 can often keep working as a single-purpose kiosk, a point-of-sale terminal, a reception check-in screen, or a thin client connecting to a cloud desktop or remote session where the actual compute happens elsewhere. This gets real remaining life out of otherwise-stranded hardware without touching your security posture on the machines that matter.

Option 4: ChromeOS Flex

ChromeOS Flex converts eligible older PCs into lightweight Chrome-OS-based machines — genuinely useful for a role that’s mostly browser-based work: email, web apps, video calls. It remains an actively maintained option from Google, not a discontinued dead end, though check hardware compatibility against Google’s certified models list before committing a batch of machines, since not every older PC is a clean fit. It’s a strong option for front-desk, call-center, or light-office-work roles where the user genuinely lives in a browser all day.

Option 5: Linux

A modern Linux distribution runs comfortably on hardware that Windows 11 rejects outright, and costs nothing in licensing. The real cost is elsewhere — staff familiarity, application compatibility (anything requiring Windows-only software needs a workaround or doesn’t fit), and support overhead if your team doesn’t already have Linux experience. Best suited to specific roles (a dedicated file server, a kiosk, a developer machine) rather than a wholesale desktop-fleet swap unless you have the in-house comfort level for it.

Cost per seat, roughly, for a 25-user fleet with 10 ineligible machines

ESU for those 10 machines: Year One alone runs $610, climbing to $1,220 in Year Two and $2,440 in Year Three if you ride it the full three years — a cumulative $4,270 over three years if you never replace them. Replacing all 10 with current business-class hardware runs roughly $8,000-$15,000 depending on spec, but resets the clock with new warranties and no doubling ESU bill. Redeploying as kiosks or thin clients, or converting to ChromeOS Flex, costs close to nothing beyond setup time if the role genuinely fits. The right mix, in practice, is usually not all-one-option — replace the machines people actually work on daily, and redeploy or ESU-bridge the rest based on role.

Don’t decide machine-by-machine in a vacuum

The best approach treats this as a fleet decision, not ten individual ones: which machines are near end-of-life anyway (replace), which have a genuinely narrow single-purpose role (redeploy or ChromeOS Flex), and which just need a defined bridge while you plan the next refresh cycle (ESU). Making that call machine-by-machine as each one gets flagged tends to produce a messier, more expensive outcome than deciding the fleet strategy once.

Recommended hardware and services

• Current-gen business laptop (Windows 11-ready) — the straightforward replacement option for machines nearing end of life anyway
• Mini PC / thin client hardware — for redeploying a stranded machine’s role rather than the machine itself
• USB bootable drive (32GB) — for building ChromeOS Flex or Linux installers

Related SBITG topics

Windows 10 end of life: Windows 10 ESU for small business, Windows 11 upgrade checklist. Hardware planning: business laptop buying guide, best business desktop PCs. Fleet management: managing company laptops.

Key takeaways

• Windows 11 requires TPM 2.0, Secure Boot, and roughly 8th-Gen Intel or Zen 2 AMD or newer — a capable CPU can still fail the check on TPM alone.
• Windows 10 ESU (business): $61/device Year One, doubling to $122 and $244 in Years Two and Three, capped at three years total.
• Redeploying ineligible machines as kiosks, thin clients, or ChromeOS Flex devices gets real remaining value out of hardware that can’t run Windows 11.
• ChromeOS Flex remains actively maintained by Google — not a discontinued option, but verify hardware compatibility before converting a batch.
• Treat this as a fleet-level decision (which machines to replace, redeploy, or bridge with ESU) rather than deciding reactively machine by machine.

FAQ

Can I just disable the TPM/CPU check and install Windows 11 anyway? Unsupported workarounds exist, but Microsoft doesn’t guarantee updates (including security updates) on unsupported hardware running Windows 11 this way — not a real solution for a business machine you’re relying on to stay patched.

Is ChromeOS Flex actually still supported, or is Google phasing it out? It remains an actively maintained product from Google as of 2026, despite periodic rumors to the contrary. Check the certified models list for your specific hardware before converting a batch of machines, since compatibility varies by model.

What’s the cheapest option overall? Redeploying a machine into a single-purpose role (kiosk, thin client) or converting it to ChromeOS Flex costs close to nothing beyond setup time, if the role genuinely fits. ESU is the next cheapest short-term, but the doubling annual cost makes it expensive as a long-term strategy rather than a bridge.