Windows 10 End of Support 2025: 60-day Alert, ESU, and Windows 11 Paths

Microsoft's countdown to the end of Windows 10 support has moved from calendar date to a consumer-facing prompt: a 60‑day warning that leaves millions of PCs with a clear deadline and a narrow set of paths forward to stay protected, migrate to Windows 11, or pay to extend security updates for a limited time. (support.microsoft.com)

Background​

Microsoft set an explicit end-of-support date for Windows 10: October 14, 2025. After that date, the company will stop providing feature updates, general technical assistance, and standard security updates for Windows 10 Home and Pro. The company has repeatedly framed Windows 11 as the successor platform — its “home for AI” and the place to get hardware‑backed security and the latest features. (microsoft.com, learn.microsoft.com)
In mid‑August 2025 Microsoft began a phased rollout of a notification and enrollment pathway that will appear on qualifying Windows 10 devices, warning users they have roughly 60 days to act before the October cutoff. That alert is intended to prompt immediate decisions: upgrade the device to Windows 11 (if compatible), buy a new PC, enroll in the consumer Extended Security Updates (ESU) program, or move workloads into the cloud via Windows 365 Cloud PCs. (support.microsoft.com)

---

What Microsoft is offering: ESU, cloud, and app lifelines​

Microsoft has published a set of transitional measures aimed at reducing immediate security risk for users who cannot or will not move to Windows 11 before October 14, 2025. The most consequential are the consumer Extended Security Updates (ESU) program and continued security servicing for Microsoft apps and Defender. (support.microsoft.com)

Consumer ESU — mechanics and cost​

• What it covers: ESU provides security updates (Critical and Important classifications) for eligible Windows 10 devices running version 22H2. It does not include feature updates, new capabilities, or full technical support. (learn.microsoft.com)
• Duration: ESU for consumer devices covers security updates through October 13, 2026 (one year after Windows 10 end of support). Enterprise customers have other, multi‑year ESU options. (support.microsoft.com, learn.microsoft.com)
• Enrollment options: Microsoft offers three enrollment routes:
• Free — enable Windows Backup / sync PC settings to a Microsoft Account (no monetary cost).
• Rewards — redeem 1,000 Microsoft Rewards points to enroll.
• Pay — a one‑time purchase of $30 USD (or local equivalent) plus applicable tax. A single ESU license tied to a Microsoft account can be used across up to 10 devices. (support.microsoft.com, learn.microsoft.com)

That $30 consumer option and the free/Rewards alternatives were announced explicitly by Microsoft and explained in support documentation; the company requires enrollment through a Microsoft account and a device running Windows 10, version 22H2. For many households with multiple older PCs, the $30 one‑and‑done license covering up to 10 devices is a deliberately low‑friction fallback. (support.microsoft.com, windowscentral.com)

Microsoft 365 Apps and Defender: app‑level security extends beyond the OS​

Microsoft also adjusted support timelines for key software layers that many users depend on:

• Microsoft 365 Apps (the subscription‑based Office applications) will continue to receive security updates on Windows 10 through October 10, 2028, even though feature updates for those apps will be frozen beginning in 2026 and full feature servicing is reserved for Windows 11. This provides a multi‑year safety net for Office security on legacy endpoints. (support.microsoft.com, theverge.com)
• Microsoft Defender Antivirus (security intelligence and product updates) will continue to receive security intelligence and platform updates through at least October 2028, giving Defender customers ongoing protection even after Windows 10’s end of support — though that protection is limited to Defender’s own signature and platform updates, not OS security fixes. (learn.microsoft.com)

These app‑layer promises are important: they mean that for some threat vectors (malware detection, cloud protection telemetry, Office patching) there will be extended coverage beyond the OS lifecycle — but they are not a substitute for OS security updates. Microsoft’s position is clear: app protection plus ESU is a temporary bridge, not a permanent replacement for an up‑to‑date OS. (petri.com, learn.microsoft.com)

---

The enrollment rollout and the KB that fixed it​

A practical complication surfaced as Microsoft opened enrollment: some users reported the “Enroll in Extended Support Updates” option either missing or the enrollment wizard failing to proceed. Microsoft’s August cumulative update KB5063709 addressed a bug in the ESU enrollment wizard that had prevented some users from completing the flow. The patch is now part of the August 12, 2025 cumulative update and has been called out in Microsoft release notes and widely covered in the technical press. (support.microsoft.com, techradar.com)
That means: if a Windows 10 device is eligible but the ESU option is not visible, installing the August 2025 cumulative update and ensuring the device is on version 22H2 and signed in with a Microsoft account are the first troubleshooting steps. The enrollment experience is rolling out in phases, so visibility may still lag on some devices. (learn.microsoft.com, pureinfotech.com)

---

The migration calculus: upgrade, replace, cloud, or pay?​

For consumers and admins the decision boils down to four core choices — each with trade‑offs in cost, security, and hassle:

• Upgrade in place to Windows 11
• Pros: free if the PC meets Windows 11 hardware requirements; ongoing feature and security updates.
• Cons: strict system requirements (TPM 2.0, supported CPU families, Secure Boot) mean many older PCs are not eligible. (microsoft.com, pcworld.com)
• Replace the PC
• Pros: modern hardware, full Windows 11 support and better hardware‑based security.
• Cons: cost, environmental and e‑waste concerns, and time to migrate data and settings. (microsoft.com)
• Enroll in consumer ESU (free with backup, Rewards points, or $30 one‑time fee)
• Pros: cheap, fast, keeps critical security updates flowing until Oct 13, 2026, and can cover multiple devices per account.
• Cons: limited to Windows 10 version 22H2 devices, no feature updates, no general technical support, and only a one‑year extension for consumer accounts. (support.microsoft.com, learn.microsoft.com)
• Move to a cloud PC (Windows 365)
• Pros: run Windows 11 in the cloud on older hardware; for organizations, Windows 365 Cloud PCs and Azure VMs are eligible for ESU at no additional charge in some cases.
• Cons: ongoing subscription costs and potential latency or data governance considerations. (microsoft.com, learn.microsoft.com)

These options are not mutually exclusive — households with a mix of devices may choose a blended approach: pay to extend security on a handful of legacy machines while prioritizing critical devices for in‑place upgrade or replacement.

---

Who should worry most — and when​

The urgency is real for a handful of groups:

• Businesses and regulated users: Organizations that must maintain compliance will find unsupported OSs increasingly risky. Enterprise customers have longer ESU paths (multi‑year, volume licensing) but must budget for them and manage activation and patching. (learn.microsoft.com)
• Consumers with incompatible hardware: Many older laptops and desktops will be unable to meet Windows 11 minimums. These users face either hardware replacement, cloud PC subscription, or ESU enrollment — the latter being a stopgap rather than a long‑term plan. (microsoft.com)
• Security‑sensitive households: Users who handle financial data, small business owners, or people who host services should avoid running an unsupported OS without ESU or equivalent protections; the risk profile for newly discovered OS vulnerabilities increases once Microsoft stops issuing patches. (support.microsoft.com)

The moment of greatest risk arrives when devices stop receiving OS security updates: October 14, 2025. From that day forward, unpatched zero‑day vulnerabilities that affect Windows 10 could remain exploitable on unprotected systems unless mitigated by ESU patches or other compensating controls. (support.microsoft.com)

---

Market context: how many users are affected?​

Market telemetry shows Windows 11 overtook Windows 10 in mid‑2025, but large Windows 10 share remains. Global market trackers reported Windows 11 at roughly 53% and Windows 10 at about 43% of Windows version share in mid‑2025. That means hundreds of millions of machines remain on Windows 10 and will be impacted by the end‑of‑support timeline. (gs.statcounter.com, windowscentral.com)
A recurring figure in some coverage is “about 700 million” devices, but that number is historically anchored: Microsoft said Windows 10 had been installed on over 700 million devices several years ago (2018–2019), and the raw device totals cited in older press releases no longer map neatly to current market‑share percentages. Absolute global device counts vary by dataset and by how “device” is defined (PCs only versus all Windows‑capable devices), so treat any single global device tally as an estimate unless it is accompanied by clear methodology. In short: the percentage share from StatCounter and similar trackers is the more precise immediate indicator of how many systems remain on Windows 10 today. (techradar.com, cnbc.com)

---

Legal and public‑policy pushback​

Microsoft’s decision has spurred legal and advocacy responses. In August 2025 a lawsuit was filed alleging Microsoft is ending Windows 10 support to accelerate uptake of Windows 11 and new Copilot+ devices; the complaint seeks free extended support until Windows 10’s market share falls below a certain threshold. The case highlights broader concerns about forced obsolescence, e‑waste, and the fairness of migration policies that assume hardware upgrades are always practical. Legal outcomes remain uncertain and are unlikely to affect Microsoft’s announced support timelines in the immediate term. (windowscentral.com)
Policymakers and environmental advocates have also pointed to the migration as a potential source of increased e‑waste, arguing companies should offer more generous transitions for users with perfectly functional but incompatible hardware. Those debates may continue in regulatory and public forums even after support ends. (windowscentral.com)

---

Practical checklist: what Windows 10 users should do now​

• Confirm your device and OS build: open Settings > System > About and verify you are on Windows 10, version 22H2. If not, apply the latest quality updates and bring the machine to 22H2 before October. (support.microsoft.com)
• If you want to stay on Windows 10 with Microsoft’s ESU protection, ensure you have a Microsoft Account with admin rights on the device, because ESU enrollment is tied to the account. Microsoft requires a Microsoft account for all enrollment routes. (support.microsoft.com, windowscentral.com)
• Check Windows Update for the “Enroll in Extended Support Updates” option. If it’s missing and your device meets prerequisites, install the latest cumulative update (including KB5063709 from August 12, 2025) and reboot. Wait a few days if enrollment is still in phased rollout. (support.microsoft.com, pureinfotech.com)
• Choose an ESU path: enable Windows Backup to sync settings for free, redeem Microsoft Rewards points if you have them, or pay the $30 one‑time fee to cover up to 10 linked devices. Record the Microsoft account used — the license is account‑bound. (support.microsoft.com)
• For long‑term security, plan to upgrade to Windows 11 (if eligible) or budget for hardware replacement or Windows 365 subscriptions. Don’t rely on ESU as a permanent strategy; it’s a bridge for most consumers. (learn.microsoft.com, microsoft.com)

---

Risks and caveats: what the ESU and app extensions do — and don’t — buy you​

• ESU does not restore feature updates or bug‑fixing support: it supplies security fixes only. If an OS bug or compatibility problem emerges that requires a non‑security update, ESU customers will need to pursue other forms of support or upgrade. (learn.microsoft.com)
• App security updates are not OS security updates: continued Defender and Microsoft 365 app security updates reduce exposure to malware and app‑layer threats, but they cannot patch whole‑system vulnerabilities that exist in the Windows kernel or core components. Running an unsupported OS still increases risk over time. (learn.microsoft.com, support.microsoft.com)
• Device‑level compatibility limitations remain: upgrading in place to Windows 11 depends on hardware flags and firmware (TPM, CPU model, Secure Boot). For many older devices the only realistic paths are ESU, cloud PC, or a new machine. (microsoft.com)
• Enrollment and rollout friction: the ESU enrollment experience has been rolling out in phases and required the August 2025 cumulative update to fix enrollment bugs. Users should not assume instant availability on every qualifying PC. (support.microsoft.com, pureinfotech.com)
• Unverified or outdated absolute device counts: statements that quantify Windows 10 users by absolute millions (for example, “700 million still use Windows 10”) are often based on historical Microsoft milestones or aggregate device counts that predate the current market‑share shift. Those older figures are not a reliable indicator of the present distribution without clear methodology. Treat absolute device numbers cautiously and prioritize percentage market‑share metrics from tracking services for current snapshots. (cnbc.com, gs.statcounter.com)

---

Why Microsoft took this path — and the business logic​

Microsoft’s lifecycle policy and the Windows 11 hardware requirements are driven by a mix of security, product roadmap, and strategic objectives. Windows 11’s greater reliance on hardware‑backed security primitives (TPM, Secure Boot, virtualization‑based security) is positioned as an essential foundation for new AI features and secure consumer experiences. Shifting the user base to a platform with those capabilities simplifies long‑term support and reduces the engineering burden of maintaining multiple, diverging OS versions. At the same time, Microsoft has offered a range of migration tools and the limited ESU option to reduce abrupt security gaps. (microsoft.com, learn.microsoft.com)
Critics argue this approach pushes upgrades and hardware turnover sooner than necessary and can disadvantage users in markets with lower upgrade capacity. Legal challenges and public debate are natural consequences when a dominant platform draws a hard line on support for a widely used OS. (windowscentral.com)

---

Conclusion: a short window to act, and a long tail of consequences​

The 60‑day warning that appeared on Windows 10 devices is a practical reminder that Microsoft’s published end‑of‑support date is imminent and actionable. For most users the safest long‑term choice is to migrate to Windows 11 on compatible hardware or to replace incompatible machines. For those who need more time, Microsoft’s consumer ESU — free with backup, redeemable via Rewards, or purchasable for $30 covering multiple devices — provides a limited bridge until October 13, 2026. Meanwhile, Microsoft will continue to deliver Defender and Microsoft 365 app security updates through 2028, giving layered protection even as the OS lifecycle ends. (support.microsoft.com, learn.microsoft.com)
The technical path forward is straightforward; the social and economic challenges are not. As the Windows ecosystem moves past one of its longest‑running versions, the choices users make now — upgrade, pay, replace, or move to the cloud — will determine both their short‑term exposure and the long‑term cost of staying secure. (learn.microsoft.com, microsoft.com)

---

Source: NTD News Microsoft Sends 60 Day Warning to Windows 10 Users