Windows 10 security problems if the forced hardware upgrade is missed

Disclamer: ChatGPT and BingChat will offer some tips on how to deal with the termination of
security patches to Windows 10 on 14 October 2025. The reader accepts all responsibility
for trying any of these tips.

This is my conversation with ChatGPT and BingChat on 15 August 2023

Patrick:
Are you aware of any security-authoritative advice on what should become of all the Windows 10 PCs
that cannot be upgraded to Windows 11 due to insufficient hardware incompatibilities? Installing a
hardware upgrade to meet the Windows 11 standards might not be possible on some older PCs, and
even in those cases where it could be done, an expensive hardware upgrade to an older PC might not
be cost effective.

ChatGPT

As of my last update in September 2021, there isn't specific advice available regarding the
situation you've described, as Windows 11's hardware requirements and related issues emerged after
that point. However, I can offer some general guidance based on best practices in the cybersecurity
and IT industry that may apply to situations like this:

Evaluate the Risk: Assess the security risks associated with running unsupported software,
such as an older version of Windows that is no longer receiving security patches. Unsupported
operating systems can be vulnerable to various security threats, and the risk increases over time.

Isolate or Segment: If you have Windows 10 PCs that cannot be upgraded to Windows 11 due to
hardware limitations, consider isolating them from critical systems and sensitive data. Segmenting
such systems from the rest of your network can help minimize the potential impact of security
vulnerabilities.

Implement Additional Security Measures: Even if you can't upgrade to Windows 11, you can still
enhance security on Windows 10 systems. Implement robust security measures such as firewalls,
antivirus software, intrusion detection systems, and regular security updates for software
applications.

Consider Virtualization or Containerization: If the hardware limitations prevent upgrading, you
might explore virtualization or containerization solutions. Running older operating systems in
isolated virtual machines or containers could help maintain security to some extent.

Application Whitelisting and Least Privilege: Implement application whitelisting to control which
applications can run on these systems. Also, enforce the principle of least privilege, giving users
and processes only the permissions they absolutely need.

Plan for Replacement: While it might not be cost-effective to upgrade older hardware to meet Windows 11
requirements, you might need to budget for eventual hardware replacements. Developing a replacement
plan can help ensure a smoother transition when older systems become unusable.

Explore Alternative Operating Systems: Depending on the specific use case of these systems, you might
explore alternative operating systems that have lower hardware requirements and continue to receive
security updates. Linux distributions, for instance, might be an option in certain cases.

Regularly Back Up Data: Ensure that data from these systems is regularly backed up. This backup could
be helpful in case of hardware failures, security incidents, or when transitioning to newer systems.

Keep Abreast of Changes: Monitor developments regarding Windows 11 and its hardware requirements.
There could be changes or adaptations made by Microsoft or the community that could provide
additional options or solutions in the future.

It's important to note that the specifics of your organization's situation will greatly influence
the best course of action. Consulting with IT professionals or cybersecurity experts who are
knowledgeable about your environment and the latest developments would be advisable to make informed
decisions.

When I asked BingChat the question: "Is it possible to install Windows 11 on an older PC as a virtual
machine, even if the PC does not support TPM 2.0?" BingChat replied:

Yes, it is possible to install Windows 11 on an older PC as a virtual machine without TPM 2.0.
You can use products such as those from VMware that can inject a virtual TPM to allow Windows 11
to install. But the easier method is to just skip it altogether. Here’s how to quickly and easily
install a Windows 11 virtual machine if you’re being blocked [1]:
  1. Set up a VM and begin the Windows 11 installation process.
  2. When you reach the screen telling you that your PC can’t run Windows 11,
    hit Shift + F10 on your keyboard to open Command Prompt.
  3. Enter the following command:
    : REG ADD HKLM\SYSTEM\Setup\LabConfig /v BypassTPMCheck /t REG_DWORD /d 1
  4. When you see the operation completed message, close the Command Prompt.
  5. Go back one step in the installation process.
  6. Proceed as normal.
All you need for this is a Windows 11 ISO and some software to make a virtual machine [1].
I hope this helps!
The following reference was provided by BingChat:
[1] https://www.windowscentral.com/how-install-windows-11-virtual-machine-without-tpm-20

I haven't tried any of this myself, so I recommend that you investigate the procedure further
on whether this is the path you should take. First of all, you need a legal copy of Windows 11. Second,
BingChat's instructions are a couple years old at this point and might be out of date (and they're not entirely
clear to me). Just the same, the ideas behind the virtual machine option are interesting to me.

When I asked BingChat the Question: "What does Microsoft think about running Windows 11 as a
virtual machine?", it replied:

Microsoft has included Hyper-V as a free Windows component since the release of Windows 8 Pro.
If you want to create a virtual machine in Windows 11, the best way to do it is to use Hyper-V [1].
You can also install Windows 11 as a virtual machine using the free VMware Workstation Player or
Oracle VM VirtualBox [2]. Please note that while possible, Microsoft doesn’t officially support
running Windows 11 on a virtual machine [3].
The following references were provided by BingChat:
[1] https://www.groovypost.com/howto/create-a-virtual-machine-in-windows-11/
[2] https://www.pcmag.com/how-to/how-to-run-windows-11-in-a-virtual-machine
[3] https://www.digitaltrends.com/computing/how-to-install-windows-11-in-virtual-machine/


Warning!! I should point out that all the tips in this suggestion are a bit advanced and
risky, so be careful what advice you take from this page, and how you execute them. If you
are unsure of what you are doing, consider not doing it.