Windows 10 Extended Security Updates (ESU): How to Enroll and Activate

Microsoft ended support for Windows 10 on October 14, 2025. Since then, devices running Windows 10 no longer receive security fixes unless they are enrolled in the Extended Security Updates (ESU) program. This guide explains how ESU works for home users and organizations and how ESU licenses are activated.

What Is the ESU Program?

ESU is a paid or incentive-based program that delivers critical and important security updates to Windows 10 version 22H2 after the end of support. It does not include new features, non-security fixes or general technical support. Its purpose is to give people and organizations time to move to Windows 11 safely.

ESU Timelines

Because the consumer program ends in October 2026, home users should plan their move to Windows 11 or a new PC now. Always confirm current dates on Microsoft’s official ESU page.

Requirements

• Windows 10 version 22H2 with the latest cumulative update installed
• An administrator account on the device
• For consumers, a Microsoft account
• An activated, genuine copy of Windows 10

How Home Users Enroll

1. Open Settings → Update & Security → Windows Update.
2. Select Enroll now next to the Extended Security Updates notice.
3. Sign in with your Microsoft account if prompted.
4. Choose one of the enrollment options Microsoft offers in your region, such as syncing settings with Windows Backup, redeeming Microsoft Rewards points or a one-time payment.
5. Complete the wizard. The device is now enrolled and will receive ESU updates through Windows Update.

A single consumer enrollment can cover multiple Windows 10 devices signed in with the same Microsoft account, within the limit Microsoft sets.

How Businesses Activate ESU

Organizations buy ESU through Microsoft volume licensing or a cloud solution provider. Each year comes with an ESU Multiple Activation Key. Administrators deploy it on top of the existing Windows license:

1. Install the ESU key: slmgr /ipk <ESU MAK key>
2. Find the ESU activation ID for the current year with slmgr /dlv all.
3. Activate it: slmgr /ato <ESU activation ID>
4. Confirm the ESU license shows as Licensed with slmgr /dlv.

The ESU key does not replace the Windows license; it adds an add-on license. Devices managed through Windows Autopatch or Windows 365 may receive ESU automatically under certain plans.

Checking Your Upgrade Path to Windows 11

Before paying for ESU, check whether your PC can run Windows 11. Open the PC Health Check app or go to Settings → Update & Security → Windows Update, where eligible devices see a Windows 11 upgrade offer. The upgrade is free for devices with a genuine Windows 10 license, and your digital license carries over automatically. If your PC is not eligible, compare the cost of ESU with a new device that includes Windows 11.

Is ESU Worth It?

ESU is a temporary bridge, not a long-term solution. It is worth it if you need a few more months to replace incompatible hardware or test business applications. If your PC meets Windows 11 requirements, upgrading for free is usually the better option.

Frequently Asked Questions

Will Windows 10 stop working without ESU?

No. It continues to run, but without security updates it becomes increasingly vulnerable.

Does ESU include Microsoft 365 app support?

ESU covers Windows only. Check Microsoft’s separate support statements for Office apps on Windows 10.

Can I enroll a PC that isn’t activated?

No. ESU requires an activated, genuine Windows 10 installation.

Conclusion

Windows 10 ESU keeps unsupported devices protected for a limited time. Home users enroll in Settings, while businesses activate ESU keys with slmgr. Use the extra time wisely to plan your move to Windows 11.