IT Guide · 2 April 2026
Windows 11 migration guide for UK businesses
Hardware readiness, Autopilot, security baselines and a phased roll-out plan before end of Windows 10 support.
Windows 10 support ends in October 2025 and Extended Security Updates are expensive by design. If you haven't started Windows 11 planning, now is the time.
Hardware readiness
- Windows 11 needs TPM 2.0, Secure Boot and a supported CPU
- Devices older than about four years often can't upgrade
- Use Intune or a lightweight readiness scanner to audit your estate
Deployment options
- Autopilot for zero-touch provisioning of new devices
- Configuration Manager or Intune for in-place upgrades
- Fresh install for devices that will be redeployed
Security baselines to apply on day one
- Microsoft security baseline for Windows 11 via Intune
- BitLocker encryption enforced on every device
- Defender for Endpoint or equivalent EDR enabled
- Local admin rights removed and application control in place
A phased 90-day plan
- Weeks 1-2: audit hardware and application compatibility
- Weeks 3-4: pilot with IT and a friendly business team
- Weeks 5-10: roll out by department with clear comms
- Weeks 11-13: mop up exceptions and decommission old devices
