Before Oct 14, 2025: Enroll in Windows 10 ESU or Enable OneDrive Backup

If you're still running Windows 10, the single most important action to take before October 14, 2025 is to ensure your PC is enrolled in Microsoft’s consumer Extended Security Updates (ESU) program — or to enable Windows Backup (OneDrive sync) right now so you qualify for the free ESU enrollment path — because after that date mainstream Windows 10 installations stop receiving routine security updates.

Background / Overview​

Microsoft set a firm end‑of‑support date for mainstream Windows 10 editions: October 14, 2025. That cutoff means Microsoft will stop issuing routine security fixes, quality updates, and feature updates for the consumer versions of Windows 10 unless a device is enrolled in an appropriate extended‑support program.
The company has responded to the large installed base of Windows 10 systems by offering a limited consumer Extended Security Updates (ESU) pathway that lets eligible personal devices receive security‑only patches for an additional year, through October 13, 2026. This is intentionally narrow: ESU supplies Critical and Important security updates only — it does not restore feature releases, non‑security fixes, or full technical support.
The phrase “end of support” is not a shutdown; affected PCs will continue to boot and run. The practical issue is risk: running an unpatched OS increases exposure to newly discovered vulnerabilities and can create compliance, compatibility, and operational liabilities for both consumers and organizations.

---

What Microsoft announced — the essentials​

Microsoft’s consumer ESU program gives individuals a one‑year safety net for eligible Windows 10, version 22H2 devices. There are three enrollment routes surfaced through Windows Update:

• Free route: enable Windows Backup (sync your PC settings/files with OneDrive) and sign in with a Microsoft account — this pathway can provide free ESU eligibility.
• Rewards route: redeem 1,000 Microsoft Rewards points to qualify (this route has seen intermittent issues).
• Paid route: a one‑time purchase option (reported at ~$30 USD) that can cover multiple devices tied to the same Microsoft account (terms and regional pricing may vary). Pricing and device‑count details are subject to change; check the enrollment wizard on your device for exact current terms.

Enrollment is performed from Settings → Update & Security → Windows Update, where eligible devices will see an “Enroll now” link or messaging. Microsoft rolled the enrollment experience out in phases, fixed early bugs with an August cumulative update, and warned users that the wizard might not appear immediately on every eligible PC.

---

Why this matters: the risks of doing nothing​

• Security risk: After October 14, 2025, unprotected Windows 10 installations that are not enrolled in ESU will no longer receive monthly security patches. Any new zero‑day or other exploit discovered after that date could remain unpatched on those systems.
• Compliance risk: Regulated industries and businesses that must maintain supported platforms may face contractual or regulatory exposure if they knowingly operate unpatched systems.
• Compatibility risk: Independent software vendors and hardware manufacturers may stop testing and certifying their products on outdated, unsupported Windows builds, increasing reliability problems over time.

Put simply: the longer a device runs an unsupported OS, the larger the security and operational blast radius becomes. ESU is a one‑year bridge — not a permanent solution.

---

The one thing to do now (step‑by‑step)​

The single most impactful, time‑sensitive activity for most Windows 10 users is to complete the ESU enrollment (or enable Windows Backup/OneDrive sync to qualify for the free route) well before October 14, 2025. Follow this checklist:

• Confirm you’re on Windows 10, version 22H2 and fully patched. (Settings → System → About to see your version; Settings → Update & Security → Windows Update to check for updates.)
• Sign in to (or create) a Microsoft account on the PC you want to protect. The consumer ESU enrollment requires a Microsoft account to bind eligibility.
• Back up everything now — local image + an independent cloud copy. Do not rely on a single backup method. OneDrive is convenient but should not replace a tested local backup.
• Enable Windows Backup (Settings → Accounts → Windows backup, or the Windows Backup options in Settings) so your PC settings and files are syncing to OneDrive — this path is the free ESU qualifier.
• Open Settings → Update & Security → Windows Update and look for “Enroll now”. If you see it, follow the wizard and choose your enrollment method (Free / Rewards / Paid). If you do not see the prompt, install all pending updates, reboot, and check again — Microsoft rolled the feature out in stages.
• If you prefer the paid route, be prepared to purchase the ESU license and confirm how many devices it covers under your Microsoft account before completing the transaction. Regional price and purchase flow can vary.
• After enrollment, verify that ESU‑labeled updates appear in Windows Update history and that Critical/Important patches are being applied.

Completing these steps now buys you a controlled runway to plan a long‑term strategy: upgrade eligible machines to Windows 11, replace older hardware, migrate workloads, or shift to supported alternatives.

---

How to check if your PC can upgrade to Windows 11​

Before committing to ESU for a year, check whether your PC qualifies for a direct upgrade to Windows 11:

• Run PC Health Check to confirm CPU compatibility, TPM 2.0 availability, Secure Boot, and other requirements. If TPM or Secure Boot is present but disabled in firmware, enabling it may make the machine eligible.
• If your CPU is unsupported, remember that swapping a CPU/motherboard is usually impractical for most users; in those cases, ESU or new hardware are the realistic options.

---

Enrollment gotchas and troubleshooting​

The ESU rollout has encountered real‑world friction. Keep these practical tips in mind:

• The “Enroll now” UI is being rolled out in waves. If you don’t see it, install pending updates, reboot, and check Windows Update again. Microsoft has proactively fixed several enrollment bugs via cumulative updates.
• The free route requires you to link a Microsoft account and use Windows Backup/OneDrive sync. That tradeoff can raise legitimate privacy or storage concerns; consider local backup alternatives before enabling any cloud sync.
• The Microsoft Rewards path has been unreliable for some users; if you plan to use Rewards, check your account and recognized redemption flows early.
• Paid purchases and the number of covered devices tied to an account may vary by market; confirm exact terms on the enrollment screen before paying. Treat published dollar amounts as indicative, not authoritative for every region.

If enrollment still fails, contact Microsoft support or consult the official ESU guidance in the Windows Update help pages, but do not assume resolution will be instant — plan to finish this before the October cutoff.

---

If you can’t or won’t enroll: practical alternatives​

For some users, ESU is only a temporary stopgap. Alternatives:

• Upgrade to Windows 11 on machines that meet the requirements (free upgrade for eligible devices). This gives a longer ongoing support window and continued security updates.
• Buy new hardware preloaded with Windows 11. A hardware refresh eliminates many compatibility and performance issues and may be the most sustainable option for older PCs.
• Consider virtualization for legacy apps: keep a small, isolated Windows 10 VM (patched via ESU if possible) for specialized peripherals or legacy software, while moving daily work to a supported platform.
• For technically capable users, switch to a supported Linux distro or cloud‑hosted desktop (Windows 365 / cloud PC) as a migration path. This can reduce immediate hardware pressure while maintaining support and updates.

For organizations, the choice is rarely binary: staged migrations, application compatibility testing, and enrollment in enterprise ESU (for those with volume licensing) may be necessary. Treat ESU as a time‑boxed mitigation while executing a tested migration plan.

---

Exceptions, caveats, and the wider context​

Not all Windows 10 SKUs are covered by the October 14, 2025 deadline in the same way. Windows 10 IoT Enterprise LTSC 2021 and some specialized enterprise channels follow different lifecycle policies and have extended end dates (for example, certain LTSC builds extend into the 2030s). That variability complicates headlines that treat every Windows 10 build identically.
Microsoft has also indicated that some application‑level updates (not OS patches) for products like Microsoft 365 Apps and Edge may continue for a longer period, but that does not substitute for kernel/OS security updates — the underlying platform must be supported to remain secure and compliant.
A California consumer lawsuit filed in August 2025 alleges Microsoft used the deadline to push hardware upgrades, highlighting public concerns about planned obsolescence and market leverage. That legal action is active and should be read as a claim under dispute rather than proof of wrongdoing. The broader policy debate about lifecycle management, e‑waste, and consumer choice is ongoing.

---

Critical analysis — strengths and risks of Microsoft’s approach​

Strengths:

• The consumer ESU path acknowledges a real ecosystem problem: many devices cannot upgrade to Windows 11 because of hardware limits. The one‑year ESU bridge is a pragmatic concession that reduces immediate security risk for households.
• Multiple enrollment routes (free, Rewards, paid) provide flexibility and lower the barrier for many users. Rolling the experience into Windows Update simplifies administration for non‑technical households.

Risks and tradeoffs:

• The ESU model is time‑limited and narrow: it delivers only security updates, not feature improvements or full support, and it is explicitly designed as a bridge. Relying on ESU indefinitely is not a sustainable long‑term strategy.
• The free ESU route requires a Microsoft account and OneDrive sync, which raises privacy and dependency concerns for users who prefer local control. The Microsoft Rewards path has shown unreliability, and the paid option — although modest for many households — carries regional and transactional complexity. These friction points can frustrate users and erode trust.
• For enterprises or users with legacy peripherals, upgrading to Windows 11 may be impractical: hardware changes, driver availability, and app compatibility can be significant impediments. Microsoft’s enforcement of hardware baseline requirements (TPM, Secure Boot, CPU lists) increases the footprint of devices that need replacement.

Overall: Microsoft’s ESU approach reduces immediate exposure for many households, but it also reinforces a hard tradeoff: short‑term security in exchange for account/OneDrive dependency, and a forced decision window that pushes many users toward hardware replacement or platform migration.

---

A practical, risk‑averse migration plan​

For home users and IT managers alike, convert the deadline into a short program:

• Inventory all Windows devices now (OS version, build, CPU, TPM status, backup status). Use PC Health Check and vendor firmware documentation.
• Prioritize devices that host sensitive data, run critical apps, or connect to corporate resources. Plan to upgrade or replace these first.
• Backup: create a verified full image + independent cloud copy. Test recovery at least once. OneDrive sync can be convenient, but do not make it the only copy.
• Enroll eligible devices in ESU before Oct. 14, 2025 if they cannot upgrade immediately. Use the year to test Windows 11 upgrades, pilot apps, and procure replacement hardware.
• Harden any Windows 10 machine that must remain unpatched: isolate it on the network, limit privileges, and increase monitoring. Treat it as a high‑risk endpoint.

---

Ten‑point quick checklist (do this today)​

• Mark October 14, 2025 on your calendar.
• Check Windows 10 version; update to 22H2 if needed.
• Sign into a Microsoft account on your PC (or create one).
• Make a full local image backup and an independent cloud backup.
• Enable Windows Backup / OneDrive sync if you plan to use the free ESU path.
• Open Settings → Update & Security → Windows Update and look for “Enroll now”; follow the wizard.
• If you don’t see the enrollment option, install pending updates, reboot, and check again.
• If upgrading to Windows 11, run PC Health Check and test critical apps in a lab or VM first.
• For legacy hardware, evaluate virtualization or isolated legacy machines instead of using them for daily work.
• Document your plan, procurement needs, and timelines; treat ESU as a bridge, not the destination.

---

Final verdict and conclusion​

Microsoft’s October 14, 2025 end‑of‑support deadline for mainstream Windows 10 editions is real and consequential. The consumer ESU program is the single most important lever for consumers who cannot immediately migrate: it buys one year of security‑only patches if the device is properly enrolled, and one practical way to qualify for that free path is to enable Windows Backup/OneDrive sync and sign in with a Microsoft account.That said, ESU is a time‑boxed concession. The safest long‑term strategy for most users remains moving to a supported platform — either by upgrading eligible machines to Windows 11, replacing aging hardware with Windows 11 systems, or choosing a supported alternative that fits the user’s needs. For businesses and power users, ESU should be treated as a deliberate, short‑term mitigation while staged testing, application compatibility validation, and procurement are completed.Act now: back up, check your Windows version, enable Windows Backup/OneDrive if you want the free ESU option, and complete the enrollment before October 14, 2025. Failure to take these steps will increase your exposure to unpatched vulnerabilities and the operational headaches of supporting an unsupported OS.

---

---

Source: AOL.com If You're Still Running Windows 10, You Need to Do This One Thing Before Oct. 14