Microsoft ended Windows 10 support on October 14, 2025, so machines still on it no longer receive free security updates. That leaves a firm out of vendor spec for its tax software, since Drake Tax 2026 supports Windows 11 only, and carrying an unpatched-system gap under IRS Publication 4557 and the FTC Safeguards Rule. The four realistic paths are consumer Extended Security Updates as a bridge, new Windows 11 hardware, a hosted desktop, or staying put and accepting the risk.
Key takeaways
Windows 10 support ended October 14, 2025, and free security patches ended with it.
Consumer Extended Security Updates are a short bridge: security fixes only, no path to Windows 11.
Drake Tax 2026 supports Windows 11 only, no ARM devices, 16 GB RAM recommended.
An unsupported operating system is an open finding under IRS Pub 4557 and the FTC Safeguards Rule.
A hosted desktop moves the work off aging machines from $69 per user per month.
Table of Contents
What happened to Windows 10 on October 14, 2025?
Microsoft ended Windows 10 support on October 14, 2025. The operating system keeps working, but it no longer receives free security updates, feature updates, or technical help. Every month after that date, newly found flaws stay open on any Windows 10 machine in your office, including the one running your tax software.
Microsoft’s own notice is short: Windows 10 reached its end of support on October 14, 2025 (Microsoft). The machines keep booting and the tax software keeps opening, which is exactly why the deadline is easy to ignore. What stopped is the monthly stream of security fixes. Microsoft’s guidance comes down to three doors: upgrade eligible PCs to Windows 11, replace the ones that can’t take it, or enroll in Extended Security Updates.
For a tax or accounting firm, those machines hold client returns, e-file credentials, and years of QuickBooks files. Many offices pair them with an aging closet server from the same hardware generation, facing the same decision.
Are consumer Extended Security Updates a real fix?
No. Consumer ESU keeps security patches coming for a limited window after October 14, 2025, and nothing more: no feature updates, no technical support, no path to Windows 11. It buys planning time for a machine you already intend to retire. It does not return the machine to vendor-supported status for 2026 tax software.
The published consumer end date is October 12, 2027 [VERIFY: confirm consumer ESU end date on the Microsoft lifecycle page]. If that date holds, the bridge covers at most two more filing seasons.
What ESU cannot do is make a machine current for your software vendors. Drake’s 2026 requirements sheet lists Windows 11, not Windows 10 with ESU, so an enrolled firm has patched machines that are still out of spec for the software it files with. Treat ESU as cover for the gap between today and a refresh already on the calendar, not a reason to defer the decision another year.
What does Drake Tax 2026 require?
Drake Tax 2026 supports Windows 11 only. Windows 10 is off the supported list, ARM-based devices are not supported, and Drake recommends 16 GB of RAM. A firm that stays on Windows 10 is running its 2026 tax software outside the vendor’s published system requirements before the season even starts.
The published requirements (Drake Software system requirements, PDF) are specific: Windows 11 for desktops, Windows Server 2019, 2022, or 2025 for hosted and terminal-server environments, no ARM devices, 16 GB of RAM recommended, and a 25 Mbps or faster connection. The RAM line matters too: a machine that can’t reach 16 GB fails the check twice, and it usually can’t take Windows 11 either.
Out of spec has a practical meaning: when something breaks in February, support points first at your environment. If your firm files with a different package, pull that vendor’s 2026 requirements sheet now; OS support windows get published every fall.
Is Windows 10 a compliance problem under IRS and FTC rules?
Yes, and it is a documented one. IRS Publication 4557 puts current, automatically updating security software on the preparer’s checklist, and the FTC Safeguards Rule at 16 CFR Part 314 requires safeguards that control the risks your own written assessment identifies. An operating system that no longer receives patches is a risk you can name but not fix.
Start with the IRS side, since every preparer already knows it. Publication 4557 is the IRS’s safeguarding checklist for tax professionals, and the IRS Security Six (antivirus, firewall, MFA, backup, drive encryption, VPN) all assume a supported operating system underneath. Antivirus on an OS that stopped receiving fixes in October 2025 is a lock on a broken door.
The FTC Safeguards Rule adds the paperwork dimension. It requires a written risk assessment and safeguards that address the risks that assessment identifies, plus regular testing. An unsupported OS is a risk your assessment has to name, and there is no control that closes it apart from ESU, replacement, or moving the work elsewhere. If the IRS, the FTC, or your insurance carrier asks how those machines stay patched, you want an answer with a date on it.
No panic required, just a dated plan: which machines upgrade, which retire, which get bridged, and when.
What are your four options before tax season?
Four paths: keep running Windows 10 as-is, enroll in consumer ESU as a bridge, replace the machines with Windows 11 hardware, or move the desktop itself to a hosted server and keep older machines as connection points. They differ on cost, on Drake Tax 2026 support, and on what your WISP has to record about the machines left behind.
Path
What it costs
Drake Tax 2026
Security patches
The honest trade-off
Patch and pray (stay on Windows 10)
$0 today
Out of spec (Windows 11 only)
None after October 14, 2025
Every new flaw stays open, and your WISP carries a risk you can’t remediate through filing season
Consumer ESU bridge
Low per-machine enrollment cost
Still out of spec
Security fixes only, until the program ends
Buys months of patches, not vendor support, and the same machines still age out
Hardware refresh
A new Windows 11 machine per seat, plus setup and data transfer
In spec once RAM meets the 16 GB recommendation
Full support
The biggest one-time spend, and the new machines still need patching, backup, and management every month after
$69 to $149 per user per month, plus a $500 one-time setup
In spec: Drake lists Windows Server 2019, 2022, and 2025 as supported
Server patching handled for you; the device on the desk still needs basic care
A subscription that never ends, and you still keep a device to connect from
Recommendation
Decide per machine: refresh what must stay local and put management behind it, move the desktop work to a hosted server where you can, and use ESU only as a scheduled bridge, never as the plan
None of these paths is free, including ours. A hosted desktop is a real monthly line item: $69 per user per month on VeritSpace Essentials, $99 on Pro (the tier UltraTax requires), $149 on Elite, plus the $500 setup. Over three years that can add up to more than the hardware refresh it replaces. What the subscription buys is the operating layer itself: a dedicated private server that stays patched, backed up 4x daily, and inside vendor spec every season, instead of a fleet of machines aging back out of spec.
“I run my whole 4 person virtual tax firm with them hosting Ultra Tax, all of our files, and all of our other programs.”
Skylar Dubrow · Google, Dec 2025
How does Verito cover the machines you keep and the desktop you move?
VeritGuard manages the devices you keep at $79 to $199 per device per month: patching, antivirus and EDR, backup, and sub-60-second support. VeritSpace hosts the desktop itself from $69 per user per month on a dedicated private server. VeritComplete bundles both from $129 per user per month, with hosting and IT handled by the same team.
If you refresh the hardware, the new machines still need someone behind them. VeritGuard covers that at $79, $149, or $199 per device per month (priced per device, not per user), with a $100 per-device setup: automatic patching, antivirus and EDR, device backup starting at 250 GB, and security training on Pro and above. Pro and Elite also include the full done-for-you WISP, the written plan the FTC Safeguards Rule expects, kept current as your firm changes.
If you’d rather stop owning the problem, VeritSpace moves the desktop to a dedicated private server designed to support IRS Pub 4557 and FTC Safeguards requirements, with SOC 2 Type II and ISO 27001 certification behind it. Setup on our side takes as little as 24 to 48 hours once your data is available, typically scheduled over a weekend so the office doesn’t lose working days, inside a one-to-two-week white-glove onboarding.
VeritComplete wraps both sides at $129, $199, or $249 per user per month, with the WISP included on every tier and hosting and IT answered by the same people, a real person in under 60 seconds. That’s the setup behind 1,000+ tax and accounting firms, 100% uptime since 2016, and a 4.9/5 rating across 170+ G2 reviews.
“Additionally, its automatic daily backups ensure that I don’t have to worry about data safety.”
DIANE Z., Owner, Zayechek Services, Inc. · G2, Oct 2025
When does this decision have to happen?
October and November, for most firms. White-glove onboarding to a hosted desktop takes one to two weeks, the data move itself 24 to 48 hours once your data is in hand, and new hardware needs ordering and setup time. Nobody changes systems between mid-January and April 15, so the decision belongs in this fall’s budget.
Work backward from the day your 2026 software installs: whichever path you pick should be finished before that installer touches a machine. A hardware refresh takes as long as ordering, imaging, and moving each seat. Consumer ESU enrollment is the fallback for machines that won’t make the cutoff, with a retirement date written next to each.
If the window closes on you, bridge the season with ESU and execute in May; that is a defensible plan your WISP can state plainly. Riding an unsupported OS through April with no plan fails on all three counts: vendor spec, patching, and paperwork.
Camren Majors is co-founder and Chief Revenue Officer of Verito Technologies, a cloud hosting and managed IT company built exclusively for tax and accounting firms. He is the co-author of Beyond Best Practices: Modernizing the Successful Accounting Firm (2026). His work has been featured in NATP TAXPRO Magazine and he has presented for NATP, NAEA, and NSA.
