Microsoft Extends Windows 10 Support with Universal ESU Eligibility Until 2028

For PC owners clinging to Windows 10 past its official support lifecycle, Microsoft’s recent announcement on Extended Security Updates (ESU) eligibility lands as both a relief and a critical pivot point in the Windows ecosystem. Contrary to prior uncertainty, Microsoft has now formally confirmed that the Windows 10 ESU program is open to all Windows 10 PCs with a genuine license, even if they fail to meet the hardware requirements for Windows 11. This move reshapes the upgrade calculus for millions unwilling or unable to shift to Windows 11, offering a tangible timeline extension for their current devices—provided they pay for the privilege.

Unpacking Microsoft’s ESU Clarification​

Traditionally, Microsoft’s support model for consumer operating systems follows a predictable script: mainstream support, then extended support, then end of life. With Windows 10’s final security updates set for October 14, 2025, the arrival (and price structure) of ESUs fill a crucial gap for users unable or unwilling to transition immediately to Windows 11. Until recently, Microsoft’s documentation left ambiguity over whether ineligible PCs—specifically those incapable of running Windows 11—could participate in ESUs. This has now been resolved in the affirmative.
According to Microsoft’s latest official stance, detailed on the Windows Latest and confirmed in updated documentation, every device running an activated, genuine copy of Windows 10 is eligible for ESU, regardless of whether it meets Windows 11’s minimum processor, TPM 2.0, and Secure Boot requirements. The only baseline: the system runs Windows 10 version 22H2 and has the KB5046613 cumulative update applied.

Who Benefits—And Who Doesn’t​

The major impact will be felt by two groups:

• Consumers with older hardware: Devices blocked from Windows 11 by CPU, TPM, or other new requirements can now stay protected through at least October 2028 if ESU fees are paid.
• Businesses and enterprises: Larger organizations running legacy hardware can continue to receive security patches, though they face higher ESU pricing than consumers.

It’s important to note: ESUs do not provide feature updates. They deliver only critical and important security patches, mirroring Microsoft’s model for legacy Windows 7 support from 2020 to 2023.

A Closer Look at the ESU Enrollment Process​

Consumer Enrollment​

Consumers will have three options to obtain a single year of ESU coverage:

• Microsoft Account Linking: Enroll your PC by linking it to your Microsoft account and syncing local settings to the cloud.
• Microsoft Rewards Points: Exchange Microsoft Rewards points for one year of support—an innovative option for engaged Microsoft ecosystem users.
• Direct Payment: Purchase ESU directly for an upfront cost of $30 for one year.

At present, only the third option is available to business users, who cannot leverage the Microsoft account or Rewards mechanisms.

Business and Enterprise Enrollment​

Enterprise customers face a steeper price: up to $61 per device per year, paid via volume licensing. Businesses must activate ESU using a new key, following processes shaped by previous Windows 7 and Server ESU experiences.

Technical Requirements and Verification​

Before joining the ESU program, every device must meet a few requirements:

• Genuine, activated Windows 10 installation
• Running version 22H2
• KB5046613 cumulative update installed

After purchasing and applying the ESU, users can confirm installation and activation status with these commands run from an elevated PowerShell or Command Prompt:
slmgr.vbs /dlv
This command verifies the OS licensing status. For ESU verification, use:
slmgr.vbs /dlv <Activation-ID>
Activation IDs for each ESU year are as follows:

• Year 1: f520e45e-7413-4a34-a497-d2765967d094
• Year 2: 1043add5-23b1-4afb-9a0f-64343c8f3f8d
• Year 3: 83d49986-add3-41d7-ba33-87c7bfb5c0fb

When License Status displays as "Licensed," the key is confirmed as active.

ESU Is Not A Stealth Windows 11 Bypass​

Notably, the ESU system is completely decoupled from Windows 11 hardware enforcement. Enrollment, authentication, and update delivery solely depend on Windows 10 activation status—not eligibility for Windows 11 or presence of TPM/Secure Boot.

Post-ESU: No Silver Bullet​

While the ESU route gives an extra three-year buffer, it’s not endless. After exhausting Year 1 (and eventually, years 2 and 3 with associated fees), users face the familiar fork in the road:

• Buy a new PC that supports Windows 11 (or subsequent versions)
• Try to upgrade via "unofficial" Windows 11 hacks (which Microsoft could close at any time)
• Accept running unsupported, insecure Windows

The Broader Implications​

Microsoft’s willingness to sell time-limited ESUs to all Windows 10 users—regardless of hardware—reveals several strategic goals.

1. Easing the Upgrade Pain​

Acknowledging that hardware refresh cycles don’t always align with OS release cadences, Microsoft’s ESUs buy consumers and businesses valuable time to plan and budget for post-Windows 10 moves. This is especially critical for organizations burdened by legacy software or consumers whose hardware still meets their needs.

2. Security, Security, Security​

Offering ESUs universally helps curtail the appearance of large numbers of unpatched Windows devices—a security headache for the global internet. By making continued support an option (even if paid), Microsoft counters the risks of widespread orphaned, vulnerable systems that could become targets for malware and botnets.

3. Revenue and Brand Loyalty​

Instead of driving users toward rivals or open-source alternatives, a moderate ESU fee captures ongoing revenue while nurturing brand loyalty. The innovative use of Microsoft Rewards points also keeps users tied into the Microsoft digital ecosystem.

Critical Analysis: Strengths and Weaknesses of Microsoft’s Approach​

Strengths​

• Flexibility for legacy systems: There’s no “hard stop” for users with unsupported hardware—in stark contrast to some Apple and Google product policies.
• Transparency: Official documentation now clearly affirms ESU eligibility, reducing ambiguity and user confusion.
• Multiple enrollment options: By offering Microsoft Account and Rewards Points pathways for ESU acquisition, the barrier to entry is lower than in prior ESU programs.
• Security-first approach: Ongoing patch delivery reduces exposure to zero-day threats and mass exploits.
• Fair pricing for consumers: At $30 per year, the consumer ESU option is accessible for many, and allows even low-income or budget-focused users to extend the life of perfectly functional devices.

Potential Risks and Caveats​

• A ticking clock: The program is inherently temporary, designed to compel eventual migration to a newer OS. After three years, all bets are off.
• Unsupported hardware remains unsupported: ESUs don’t fix incompatibilities or lack of features (like Windows Hello or DirectStorage) introduced in newer Windows 11 builds.
• Dependency on Microsoft’s cloud: For options involving Microsoft Account or Rewards Points, a functioning cloud and account infrastructure is required.
• No feature updates: Only security fixes are supplied. Any bugs outside of “critical” or “important” scope go unresolved.
• Potential for MS to revise policy: Although the current plan covers three years, Microsoft may adjust timelines, pricing, or eligibility if uptake is lower or higher than anticipated.
• Bypass “hacks” not guaranteed: For those eyeing Windows 11 workarounds on unsupported hardware after ESU ends, Microsoft could close unofficial loopholes, cutting off that route.

Market Impact and User Guidance​

For IT administrators, home users, and small business owners, Microsoft’s fully open ESU policy should drive planning along several vectors:

• Inventory what hardware will carry past 2025
• Budget for ESU fees where necessary
• Strategically plan hardware replacements and major migrations
• Educate non-technical users on ESU limitations and next steps after 2028

For those with aging but serviceable hardware, the ESU program is a strong bridge—perhaps even an incentive to squeeze maximum value out of machines in the face of a more sustainable approach to device refresh cycles.

How the ESU Policy Compares Globally​

Microsoft’s ESU initiatives echo the model previously used for Windows 7, but the expansion to include all Windows 10 PCs (not just enterprise or education) is significant. Few major OS vendors provide similar paid support extensions for consumers, with most “end of life” dates being hard cutoffs.
In enterprise environments, the ESU-like “extended support” model is more common, but at higher price points, often tied to expensive support contracts.

Conclusion: A Lifeline for Legacy Hardware—But Not Forever​

With this latest clarification, Microsoft offers reprieve and predictability for millions leaning on Windows 10 without the means, need, or technical will to transition to Windows 11. By opening up ESUs to everyone, Microsoft balances security imperatives with commercial realities, giving users a three-year runway to adapt, plan, and eventually migrate. The cost is tangible, the process—thanks to new Microsoft Account/Rewards options—more accessible, and the intent clear: keep users safe and keep them in the Microsoft ecosystem. Still, users must remember: ESU is a bridge, not a destination. The countdown to true end-of-life for Windows 10 is ticking, and early planning is essential to ensure a secure, sustainable post-ESU computing environment.

---

Source: Windows Latest Microsoft clarifies Windows 10 extended updates still work if Windows 11 is unsupported