Microsoft’s last-minute concession is a win for European consumers: the company will provide a one-year, no-cost extension of critical security updates for Windows 10 users inside the European Economic Area (EEA), while users elsewhere still face a mixed bag of free-but‑conditional enrollment, a modest paid option, or redeemable Microsoft Rewards points to keep receiving security fixes after the operating system’s official end-of-support date.
Windows 10 reaches its official end of support on October 14, 2025. Without security updates from Microsoft, devices that continue running Windows 10 will gradually become more exposed to unpatched vulnerabilities. Microsoft’s Extended Security Updates (ESU) program was designed to give consumers extra time to transition — but the initial enrollment mechanics and pricing raised alarms among consumer advocates and regulators.
Under the revised arrangements announced in late September 2025, consumers in the EEA will be able to enroll in ESU at no additional charge and receive Critical and Important security updates for one year beyond the October 2025 cutoff, through October 13, 2026. The EEA concession removes several previously criticized conditions — notably the requirement that European consumers purchase OneDrive storage or redeem Microsoft Rewards points as the only route to free updates. However, a Microsoft account sign‑in remains a prerequisite for enrollment in the EEA offering, and Microsoft retains stricter, paid options for commercial customers.
This concession followed sustained pressure from European consumer groups and national consumer bodies, which argued that tying access to essential security updates to extra services or payments could violate consumer-protection principles and the EU’s digital markets safeguards. The result is a narrowly tailored, legally cautious Microsoft response: free, time-limited relief for private users in a geopolitical region with stronger consumer protections.
For individual users, the immediate takeaway is clear: verify your Windows 10 build, back up important data, sign in with or create a Microsoft account if you are in the EEA and plan to enroll, and map a migration timeline that fits your device’s capabilities and your privacy comfort level. For organizations and policymakers, the episode underscores how regulatory pressure and consumer advocacy can influence platform behavior — but also how durable solutions for device longevity and software support will require broader systemic changes beyond one company’s enrollment wizard.
Microsoft’s move buys time and reduces near‑term risk for many consumers, but it does not end the underlying challenge: keeping hundreds of millions of devices secure while balancing sustainability, fairness, and the business models of the platforms that power them. The real test will be what comes after October 13, 2026 — whether companies, regulators, and the market take steps to ensure longer lifecycles and fair access to security without forcing users into unwanted upgrades or persistent vendor lock‑in.
Source: 112.ua Microsoft makes an exception for Europe: free Windows 10 updates extended - all the latest news today – 112.ua
Background: what changed and why it matters
Windows 10 reaches its official end of support on October 14, 2025. Without security updates from Microsoft, devices that continue running Windows 10 will gradually become more exposed to unpatched vulnerabilities. Microsoft’s Extended Security Updates (ESU) program was designed to give consumers extra time to transition — but the initial enrollment mechanics and pricing raised alarms among consumer advocates and regulators.Under the revised arrangements announced in late September 2025, consumers in the EEA will be able to enroll in ESU at no additional charge and receive Critical and Important security updates for one year beyond the October 2025 cutoff, through October 13, 2026. The EEA concession removes several previously criticized conditions — notably the requirement that European consumers purchase OneDrive storage or redeem Microsoft Rewards points as the only route to free updates. However, a Microsoft account sign‑in remains a prerequisite for enrollment in the EEA offering, and Microsoft retains stricter, paid options for commercial customers.
This concession followed sustained pressure from European consumer groups and national consumer bodies, which argued that tying access to essential security updates to extra services or payments could violate consumer-protection principles and the EU’s digital markets safeguards. The result is a narrowly tailored, legally cautious Microsoft response: free, time-limited relief for private users in a geopolitical region with stronger consumer protections.
Overview: the consumer ESU program — global variations and practical mechanics
What ESU covers (and what it does not)
- ESU provides only security fixes classified as Critical or Important by Microsoft’s security teams; it does not include feature updates, performance improvements, or full technical support.
- Consumer ESU runs as a one‑year safety net for eligible devices; commercial ESU subscriptions remain a paid program with renewal options of up to three years.
Eligibility checklist (what devices must meet)
- Windows 10 devices must be on the supported branch (Windows 10, version 22H2) and kept current with required cumulative updates before enrollment.
- Devices must be enrolled through the consumer-facing enrollment wizard surfaced in Settings → Update & Security → Windows Update, or via the staged enrollment experience Microsoft is rolling out.
- For EEA consumers: a Microsoft account (MSA) must be used to sign in and enroll. In practice, this means a free Microsoft account is sufficient — but staying enrolled requires periodic account activity (Microsoft has signaled periodic sign‑in checks that can be enforced).
How the options differ by region
- EEA (European Economic Area): One-year free ESU for private users through Oct. 13, 2026; enrollment via Microsoft account with fewer or no additional conditions like OneDrive backup or Rewards‑only access.
- Outside EEA (including the U.S.): Consumers generally have three enrollment choices — enable Windows Backup (sync settings/apps/credentials to a Microsoft account and OneDrive), pay a one‑time fee (roughly $30 USD per account/device bundle), or redeem 1,000 Microsoft Rewards points to receive ESU for one year. Businesses continue to purchase ESU through volume licensing with per-device pricing and multi‑year renewals.
Why this is a notable reversal — and what pushed Microsoft
The shift is significant because it demonstrates how regulatory pressure and coordinated consumer advocacy can change product decisions, especially in the EEA where the Digital Markets Act (DMA) and strong consumer-protection frameworks raise legal risks for tying core functionality to ancillary services.- Consumer groups had argued that the initial ESU enrollment structure effectively forced adoption of paid cloud storage or rewards programs to maintain security — a model that looks problematic under EU rules that bar tying essential services to other paid offerings.
- The EEA concession reads like a compliance-driven compromise: Microsoft preserves its global ESU program and pricing outside the EEA, while offering a localized, gratis path inside the EEA to reduce legal exposure and blunt public relations backlash.
- For Microsoft, the move balances two priorities: push adoption of Windows 11 and cloud services where possible, while avoiding costly litigation or regulatory scrutiny in its largest regulatory theater.
Technical verification and scope: what the official program actually guarantees
Multiple public communications and Microsoft support pages define the consumer ESU program and its restrictions. The core, verifiable technical points are:- The last day of mainstream updates and feature support for Windows 10 is October 14, 2025.
- The consumer ESU window — regardless of region — is designed to deliver security-only updates through mid‑October 2026 for enrolled machines, subject to enrollment mechanics.
- Enrollment requires the device to be on Windows 10, version 22H2 and up to date with cumulative patches before enrolling.
- ESU is not a long-term support program; it is a transition measure offering time to migrate to Windows 11, upgrade hardware, or adopt other protective strategies.
What this means for users — practical benefits and remaining risks
Benefits for European consumers
- Immediate risk reduction: EEA private users who enroll will receive security patches for an additional year, giving vulnerable households and low‑income users breathing room.
- No direct fee: The EEA concession removes the immediate monetary barrier for consumers who cannot upgrade to Windows 11 or replace hardware.
- Regulatory precedent: The concession signals that coordinated consumer advocacy can reshape how large platform companies roll out transition or paid‑support programs.
Remaining risks and tradeoffs
- Limited duration: The free EEA extension runs only through October 13, 2026. There is no guarantee of further free extensions after that date.
- Microsoft account dependency: Requiring a Microsoft account to enroll and remain signed in introduces privacy and lock‑in considerations. Users with local accounts must create or switch to an MSA or accept periodic sign-in checks to retain updates.
- Business vs consumer split: Commercial users — including small business PCs — remain charged for ESU. Enterprises will still face per‑device costs for sustained support beyond the standard retirement date.
- Partial protection only: ESU provides only Critical and Important security updates. Vulnerabilities that require deeper platform fixes or feature‑level mitigation may not be fully addressed by ESU.
- Potential for product upsell: Though the EEA concession removed some conditions, Microsoft’s broader strategy still nudges users toward Windows 11, OneDrive, and cloud services — an outcome that benefits Microsoft’s cloud and hardware ecosystem.
Privacy and account considerations: the Microsoft account tradeoff
Requiring a Microsoft account for enrollment is a practical enforcement mechanism: binding ESU entitlements to an account helps Microsoft manage licensing, track enrollments, and limit fraud. But it carries privacy implications and usability questions.- For privacy-conscious users, creating or signing into an MSA may feel like surrendering another identity to a large cloud provider. Microsoft’s account ecosystem ties into OneDrive, Microsoft 365, Edge synchronization, and telemetry flows.
- Microsoft has described periodic sign-in checks — an inactive MSA on an enrolled machine can trigger de‑enrollment and require re‑enrollment using the same account. Users should expect to sign in at intervals (reports indicate checks on the order of weeks to months) to maintain eligibility.
- Consumers who use local accounts or are reluctant to create cloud accounts must weigh the security benefit of ESU against the privacy tradeoff of account sign‑ins and potential increased telemetry.
The regulatory and environmental angle
Consumer organizations in Europe explicitly framed their fight around planned obsolescence and the environmental cost of forcing hardware refreshes. The legal argument was that making security updates conditional on extra purchases or service adoption would encourage unnecessary device replacements and generate e‑waste.- The EEA concession alleviates that immediate pressure for one year, but it does not resolve the broader ecosystem tension: Windows 11’s hardware requirements (TPM 2.0, newer CPUs) mean many older but functional PCs cannot upgrade without upgrades or replacement.
- The outcome is a partial win for sustainability activists: a temporary extension reduces near‑term e‑waste pressure, but longer‑term solutions — hardware longevity standards, vendor commitments to extended software lifecycles, or broader device repair and refurbishment incentives — remain necessary.
How to proceed: recommended steps for Windows 10 users
The next 30–60 days are critical for planning. The options below are pragmatic and reflect the new ESU conditions.- Confirm your Windows version: press Win+R, type winver, and verify you are on Windows 10 version 22H2. If not, install the latest cumulative updates first.
- Back up essential files now. Regardless of ESU enrollment, backups prevent data loss during any migration or enrollment steps.
- Decide on a migration path:
- If your device meets Windows 11 requirements and you want the long‑term supported experience, schedule the upgrade to Windows 11.
- If your device cannot run Windows 11 and you want to stay on Windows 10, plan to enroll in ESU under the regional rules that apply to you.
- For EEA users: create or verify your Microsoft account, sign in, and follow the Settings → Update & Security → Windows Update enrollment wizard when it becomes available. Expect to stay signed in periodically.
- For users outside the EEA: evaluate whether to enable Windows Backup to sync with OneDrive as the free enrollment option, redeem 1,000 Microsoft Rewards points if you have them, or purchase the one‑time ESU option if necessary.
- For businesses: budget for paid ESU subscriptions or prioritize hardware refresh cycles to Windows 11 compatible devices. Consider cloud PC options (Windows 365 or hosted environments) which may include ESU benefits depending on licensing.
- If you choose not to enroll in ESU, mitigate risk with third-party endpoint security, strict networking hygiene, and limiting exposure by disconnecting devices not in active use.
Strategic analysis: why Microsoft made this concession and what it reveals about its product strategy
Several forces came together to shape Microsoft’s concession for EEA consumers:- Regulatory pressure: The EU’s DMA and consumer-protection mood mean that tying access to security to unrelated services is legally and politically risky. Microsoft’s move reduces that risk in its largest regulatory theatre.
- Reputational cost: News cycles and advocacy campaigns had painted the original ESU mechanics as callous to low‑income and unsupported users. A public concession reduces reputational downside ahead of the October deadline.
- Market incentives: Microsoft still needs to drive Windows 11 adoption and cloud services. A targeted EEA concession allows the company to preserve its global monetization strategy while placating regulators and consumer bodies where it counts.
- Operational pragmatism: Binding enrollment to Microsoft accounts improves customer management and fraud prevention; it’s an efficient way to grant entitlements without complex manual licensing.
Broader implications: security, market fairness, and digital sovereignty
- Security: Extending ESU frees many users from immediate exposure to unpatched vulnerabilities. That is a positive for personal security and for the broader internet hygiene (fewer compromised endpoints make sprawling botnet attacks less likely).
- Market fairness: The EEA concession highlights how competition and consumer rules can limit the ability of platform owners to monetize transitions in ways that block consumers from essential protections.
- Digital sovereignty: The Microsoft account requirement underscores how consumer security is increasingly wedded to cloud identity services. That raises long-term questions for jurisdictions and organizations that prefer on‑premises or local‑only controls.
Claim-checking and verifiable facts (important verification notes)
- The authoritative retirement date for Windows 10 is October 14, 2025. This date is Microsoft’s published end-of-support cutoff for feature and quality/security updates.
- The ESU program as described — security-only updates, eligibility for version 22H2 devices, and consumer vs commercial differentiation — is defined in Microsoft’s consumer-facing ESU documentation.
- The EEA free‑for‑one‑year concession and removal of some of the previously criticized enrollment conditions is corroborated by multiple consumer groups and reporting. The EEA offer still requires a Microsoft account to enroll and maintain the entitlement; some enrollment mechanics (periodic sign-in checks) have been reported and described by Microsoft communications to media.
- Numbers about how many people remain on Windows 10 are estimates from third-party observers and consumer groups; estimates in market reporting clustered around the mid‑hundreds of millions (commonly reported figures in August–September 2025 ranged from roughly 400 million PCs that cannot upgrade to Windows 11 to 600–700 million users still on Windows 10, depending on how "users" and "devices" are counted). Those figures are estimates and should be treated as approximations rather than precise counts.
- Claims that Windows 11 is "protected against quantum computer attacks" should be read with nuance: Microsoft has integrated post‑quantum cryptography (PQC) support into core libraries (SymCrypt) and Windows Insider builds to begin transitioning to quantum‑resistant algorithms. That is an important engineering step, but it is not an impenetrable guarantee against all future quantum risks. PQC adoption is a phased migration, and practical quantum threats remain prospective rather than immediate.
What consumers and IT teams should watch next
- Enrollment rollout: watch for Microsoft’s enrollment wizard to appear in Settings → Update & Security → Windows Update; the staged rollout timing may vary by region and device.
- Sign‑in mechanics: confirm the periodic sign‑in cadence required to keep ESU active and plan for account management for household devices.
- Regulatory follow‑through: European consumer bodies may continue to press for longer, free updates or broader obligations on platform vendors to support older hardware and reduce e‑waste.
- Post‑2026 policy: Microsoft has offered one year of relief in the EEA. Whether that becomes longer or whether new programs arise will depend on policy pressure and market dynamics.
- PQC adoption: track how post‑quantum cryptography rolls into mainstream Windows releases and third‑party app ecosystems — the migration to quantum-safe crypto is an organizational effort that will affect certificates, authentication flows, and vendor compatibility over many years.
Conclusion: a pragmatic temporary fix, not a permanent solution
Microsoft’s EEA concession is an important and concrete relief for millions of European Windows 10 users. It reduces the immediate security and environmental pressure that would have followed an abrupt end of free updates on October 14, 2025. At the same time, the concession is narrowly scoped: a one‑year, account‑tethered bridge that leaves unanswered the fundamental questions about long‑term device longevity, platform economics, and privacy tradeoffs tied to cloud identity.For individual users, the immediate takeaway is clear: verify your Windows 10 build, back up important data, sign in with or create a Microsoft account if you are in the EEA and plan to enroll, and map a migration timeline that fits your device’s capabilities and your privacy comfort level. For organizations and policymakers, the episode underscores how regulatory pressure and consumer advocacy can influence platform behavior — but also how durable solutions for device longevity and software support will require broader systemic changes beyond one company’s enrollment wizard.
Microsoft’s move buys time and reduces near‑term risk for many consumers, but it does not end the underlying challenge: keeping hundreds of millions of devices secure while balancing sustainability, fairness, and the business models of the platforms that power them. The real test will be what comes after October 13, 2026 — whether companies, regulators, and the market take steps to ensure longer lifecycles and fair access to security without forcing users into unwanted upgrades or persistent vendor lock‑in.
Source: 112.ua Microsoft makes an exception for Europe: free Windows 10 updates extended - all the latest news today – 112.ua