windows · reference

🪟

Windows 7

Windows 7 — end of support January 2020, ESU through January 2023, migration paths to Windows 10/11.

← All products Licensing FAQ

On this page

Editions · channels · activation · audit notes · FAQs

Editions covered

—

Edition matrix with feature differences and the right audience.

In-depth sections

Channels, activation, audit, modern management & more.

FAQs answered

Common questions buyers and IT admins ask before purchase.

Words of reference

0.2k

Plain-English, no vendor agenda, updated to current Product Terms.

Deep dive

Windows 7 — what to actually know

Windows 7 shipped in October 2009 and remained the dominant business desktop OS for nearly a decade. Mainstream support ended 13 January 2015; extended support ended 14 January 2020. A paid Extended Security Updates programme extended security patches through 10 January 2023 for Volume Licensing customers, after which all updates ceased. Any Windows 7 device in production today is unpatched.

Editions

Starter (OEM only, 32-bit only, no Aero), Home Basic, Home Premium, Professional, Enterprise (Volume Licensing only), Ultimate (Retail flagship combining Enterprise + Home Premium features). Ultimate and Enterprise shared the same feature set with different licensing channels.

Migration

Direct in-place upgrade to Windows 10 was supported during the original Windows 10 upgrade window and still completes today with a valid Windows 10 licence. Direct upgrade from 7 to 11 is not supported — go through Windows 10, or do a clean install of Windows 11 on supported hardware. For organisations still running Windows 7 in 2026, ESU is exhausted and there is no legitimate path to continued patches.

By channel

Where to buy this product

Relative fit of each licensing channel for typical buyers of this product. Calibrate against your own scale and renewal strategy.

Channel fit (typical buyer)

Retail / FPP7

OEM (pre-installed only)9

Volume Licensing9

CSP / Microsoft 3658

Retail / FPPIndividuals & small teams

Boxed or ESD keys, transferable, registered to a Microsoft account.

Volume LicensingMid-market & enterprise

MAK / KMS activation, centralized VLSC, optional Software Assurance.

CSP / Microsoft 365Subscription, per user

Monthly / annual seats, managed through partner or admin center.

OEM is not a buying channel for end users. OEM keys are supplied pre-installed by hardware manufacturers and are not sold standalone — choose Retail, Volume or CSP instead.

Support timeline

Lifecycle phases to plan against

Windows desktop licensing has three legitimate routes — Retail FPP, OEM pre-installation on new hardware, and Volume Licensing for organisations. Pick the wrong one and you either overpay (Retail for fleet) or break the rules (OEM after the fact).

Phase 1

General availability

Launch day

Edition matrix opens across Retail, OEM (system builders) and Volume Licensing channels. Initial servicing channel is the General Availability Channel (GAC).

Phase 2

Mainstream support

Years 1–5

Monthly cumulative updates, feature updates once a year, free non-security fixes, and warranty-grade incident support for organisations with the right agreement.

Phase 3

Extended support

Years 5–10

Security updates only. No new features, no design changes. Paid Unified Support is the only break-fix path for organisations.

Phase 4

End of support

Beyond year 10

Extended Security Updates (ESU) can be purchased for one to three additional years, with sharply rising per-device pricing. After ESU, every new CVE is permanent.

Procurement checklist

Do this, not that

The small set of decisions that determine whether you overpay, fail an audit, or land in the right place.

Standardise the whole fleet on the same edition (typically Pro or Enterprise) and use Volume Licensing re-image rights on top of OEM.

DON'T

Mix Home and Pro across the same office to save a few dollars — domain join, BitLocker and Intune all silently break on Home.

Verify TPM 2.0 and Secure Boot are switched on in firmware before deployment; both are required for Windows 11 and for serious BitLocker use.

DON'T

Use the unsupported registry bypass for production machines — they will not receive feature updates and Microsoft documents this explicitly.

Use a Microsoft account or Entra ID account at first sign-in so the digital entitlement is recorded against the hardware.

DON'T

Activate a Retail key on multiple machines 'just for a few days' — the entitlement migrates and the original device immediately deactivates.

For 6+ devices, move to Volume Licensing or a Microsoft 365 plan that includes Windows Enterprise per user.

DON'T

Buy stacks of Retail FPP boxes for a corporate rollout — the per-device cost and management overhead never recover.

Typical deployments

How buyers actually use Windows 7

Three reference deployments — find the closest match and adapt rather than starting from zero.

Scenario 1

Solo founder / consultant

A single laptop running client work — Pro is the floor. BitLocker, Hyper-V for testing, and the ability to join a future Entra tenant when the team grows. Retail FPP is the right channel until you cross five seats.

Scenario 2

Growing SMB (10–100 seats)

OEM Pro on every new device, Microsoft 365 Business Premium for the management layer, Intune for policy. You get Defender, conditional access and automated patching without standing up a domain controller.

Scenario 3

Enterprise fleet (500+ seats)

Enterprise Agreement with Windows Enterprise E3 or E5, Autopilot for zero-touch provisioning, Autopatch for the update train, and LTSC only for the narrow set of fixed-function devices that genuinely need it.

Cost optimisation

Where the savings actually live

None of these are tricks — they are the same levers Microsoft's own licensing specialists pull on every renewal.

💰

Layer OEM under Volume Licensing

Buy hardware with OEM Pro pre-installed (cheapest first licence) and add Volume Licensing or Microsoft 365 on top for re-imaging rights and Enterprise features. You only pay the upgrade delta, not the full retail stack.

📊

Use Microsoft 365 E3/E5 for Enterprise

Windows 11 Enterprise is included with M365 E3/E5 per-user — if you already pay for the bundle, paying again for standalone Enterprise licences is double-spend.

🎯

Plan Copilot+ rollouts around policy first

Recall and on-device AI features ship gated behind enterprise policy. Stand up the Intune policy set before rolling hardware so you do not have to retroactively disable features.

Counterfeit & risk

Red flags when buying second-hand

These four signals show up in every counterfeit-licence case we have seen. If any of them is present, walk away — no discount makes it worthwhile.

⚠ 01

Standalone OEM key sold below market

OEM keys are distributed only pre-installed on hardware and stay bound to that device for life. A separately sold OEM key is almost certainly leaked, harvested from scrapped hardware, or fully counterfeit.

⚠ 02

Lifetime key with no invoice or VLSC record

Microsoft entitlement always leaves a paper trail — a Volume Licensing Service Center record, a CSP invoice, a sealed Retail box with a COA, or a Microsoft Store order. No proof = no defence in an audit.

⚠ 03

Key works once, then 'not genuine' after the next cumulative update

Classic symptom of a MAK key that has exceeded its activation pool, or a KMS key being abused outside its volume programme. Microsoft revokes these centrally; the activation grace period is short.

⚠ 04

Seller refuses to put the entitlement in your tenant

Legitimate CSPs and LARs transfer the licence into your Microsoft 365 / Azure / VLSC tenant under your domain. If the seller insists on activating 'for you' on their account, you do not own anything.

Acronyms

Licensing terms used on this page

Quick definitions — the full glossary lives at /en/glossary if you need to dig deeper.

CSP

Cloud Solution Provider — Microsoft's primary indirect channel for subscriptions and cloud services.

VLSC

Volume Licensing Service Center — the portal where Volume Licensing keys, agreements and downloads live.

MAK

Multiple Activation Key — a Volume Licensing key with a finite activation count, used for isolated machines.

KMS

Key Management Service — an on-premises activation host that activates clients on a 180-day re-check cycle.

Enterprise Agreement — Microsoft's largest commitment-based volume contract, typically a 3-year term with annual true-ups.

Software Assurance — the upgrade-and-benefits add-on to Volume Licensing; required for new version rights and several mobility scenarios.

Browse the full glossary →

FAQ

Frequently asked questions

Is this product still supported by Microsoft?+

Mainstream support ended 13 January 2015; extended support 14 January 2020 (10 January 2023 with ESU). After extended support ends, no security updates are released through public Windows Update and the only path to continued patches is the Extended Security Updates (ESU) programme where Microsoft offers it. Running an unsupported version in production is a documented audit and compliance risk.

Where can I legitimately buy a license?+

Through Microsoft's Retail channel (where the SKU is still sold), an authorised Cloud Solution Provider (CSP), or a Volume Licensing partner (MPSA, Enterprise Agreement, Open Value, Server & Cloud Enrollment). OEM keys are distributed only pre-installed by hardware manufacturers and stay bound to that device for life — they are not sold to end users as standalone products. For end-of-sale products, second-user (transferred) Volume Licensing through a documented chain of custody is the only legitimate secondary market.

What gets checked in a Microsoft licensing audit?+

Auditors map every installed copy to a proof of purchase (VLSC record, CSP invoice, sealed Retail packaging), verify edition alignment, and confirm CAL counts cover the maximum number of authenticated users or devices during the audit window. Older products are audited the same way as current ones — being out of mainstream support does not waive the licensing obligation.

Other products in this category

🪟

Windows 11 Pro

Windows 11 Pro — editions, hardware floor, activation models, and the right licensing channel for business and power users.

Read reference →

🪟

Windows 11 Home

Windows 11 Home — the consumer edition of Windows 11: features, limitations, hardware floor, and when you should upgrade to Pro.

Read reference →

🛡️

Windows 11 Enterprise

Windows 11 Enterprise — the volume-only edition: Credential Guard, Application Guard, LTSC option, Autopatch and the Microsoft 365 E3/E5 bundle.

Read reference →