Beijing, not Redmond, now sets the retirement date for Windows 10's China build

China's Ministry of State Security recently told some state-linked entities to uninstall a customised government edition of Windows 10, citing data security concerns without naming the vulnerabilities involved, Bloomberg reported, citing people familiar with the matter ^[1][2]. The build was already scheduled for discontinuation in February 2027, and the directive pulls that in by several months ^[3][4], which means the removal now lands in 2026 rather than on the vendor's published date ^[5].

The product being pulled is not retail Windows. It is built by C&M Information Technologies, or CMIT, a joint venture Microsoft set up in 2016 with the state-owned China Electronics Technology Group Corporation specifically to make Windows 10 compliant with Beijing's security requirements ^[6][7]. The edition adds cybersecurity features developed in China and switches off certain native functions to satisfy national security rules ^[8]. That is close to the maximum accommodation a platform vendor can make: a separate corporate entity, a separate code path, a local partner with state ownership. It bought roughly a year of extra runway beyond the late-2025 end of support for standard Windows 10 ^[9][10], and it did not survive contact with a security agency's judgement about a decade later ^[11].

Microsoft's position is that there is nothing to fix. "Microsoft is not aware of a security incident affecting this product, which continues to receive regular security updates," a spokesperson told Bloomberg, adding: "We have nothing further to share" ^[12]. CMIT did not respond to a request for comment, and China's State Council Information Office, approached because the Ministry of State Security does not publish contact details, also did not respond, according to Bloomberg ^[13][14]. CMIT had set no removal deadline for this year, and Bloomberg reported the schedule change caught some state agency employees off guard ^[15][16]. The order also arrived weeks before a planned meeting between Donald Trump and Xi Jinping ^[17].

The market read it as a transfer of demand. Hunan Kylinsec Technology and Archermind Technology both rose by their 20 percent daily limit, and China National Software & Service climbed 10 percent ^[18][19]. Domestic replacements already exist from Kylin Software and Tongxin Software Technology ^[20]. None of this is a departure. Beijing has ordered central government agencies to replace foreign-branded PCs, iPhones have been barred from at least some sensitive state entities ^[21][22], and the substitution push extends to sensitive sectors including the military and state-owned firms ^[23]. On silicon, China is cut off from Nvidia's most advanced accelerators and leaning on Huawei and Cambricon ^[24], with China Telecom handing Huawei a $1.7bn Kunpeng-based server deal this summer ^[25]. Apple's response to similar pressure was to hand its China AI model to Alibaba ^[26].

The operating lesson is narrow and expensive: in that market, the de-risking clock is set by a regulator that does not have to publish its reasoning, and a localisation joint venture is a delay, not an exemption. Microsoft has not exited, and still sells AI models to Chinese firms including ByteDance ^[27].

Watch whether a specific vulnerability is ever named, whether the instruction widens from state-linked entities to state-owned enterprises, and whether other localised joint-venture products get the same treatment on the same notice.