Navigation section

KB5065429: Windows 10 ESU Enrollment & End-of-Support 2025

  • Thread Author
Microsoft pushed Windows 10 cumulative update KB5065429 to 22H2 machines this week, a mandatory security rollup that arrives as the platform approaches its October 14, 2025 end‑of‑support deadline — and it’s tightly linked to Microsoft’s consumer Extended Security Updates (ESU) enrollment path that can grant eligible PCs one additional year of security patches through October 13, 2026.

Illustration of Windows 10 ESU enrollment with free, rewards, and paid options.Background / Overview​

Microsoft set a firm end‑of‑support date for Windows 10: October 14, 2025. After that date, routine free security updates and mainstream support for Windows 10 consumer SKUs stop. To give consumers a narrow safety window, Microsoft published a consumer ESU program that delivers security‑only updates for one additional year, through October 13, 2026. The company published the consumer ESU rules and the enrollment workflow on its support pages; the program requires a Microsoft account and offers three enrollment routes: enable Windows settings backup (free), redeem 1,000 Microsoft Rewards points, or pay a one‑time $30 (USD equivalent) fee. (support.microsoft.com)
Those public rules are the canonical reference for the consumer ESU program, and they explain both the limited scope of coverage (Critical and Important security fixes only) and the eligibility gating (Windows 10 version 22H2 consumer SKUs, not domain‑joined or enterprise‑managed devices). Multiple independent outlets and community reporting echo Microsoft’s guidance and note the same three enrollment paths and one‑year duration. (windowslatest.com, theverge.com)

What KB5065429 is — and why it matters now​

KB5065429 is the September 2025 cumulative security update for Windows 10 servicing branches that remain active. It is a mandatory cumulative rollup distributed via Windows Update and published as standalone .msu packages on the Microsoft Update Catalog for offline installs.
  • The update advances Windows 10 22H2 installations to OS Build 19045.6332 (and equivalent 21H2 builds where applicable), reflecting cumulative security content and servicing stack improvements. This build number and the release mapping for KB5065429 are publicly visible in update catalogs and build lists. (en.wikipedia.org)
  • For most consumer PCs the package arrives automatically through Windows Update; administrators and power users can download the full offline installer (.msu) from the Microsoft Update Catalog and apply it manually. Running the .msu requires elevated rights and can take longer than an incremental Windows Update delta because the Update Catalog package is the combined SSU+LCU bundle. Practical deployment notes and checksum verification guidance are standard best practice: verify downloaded files with SHA‑256, keep multiple backup copies, and stage any large catalog packages for offline distribution. (asec.ahnlab.com)
Why this specific cumulative matters beyond its security fixes is that Microsoft used the August and September cumulative rollups to restore and expose the in‑product “Enroll now” ESU enrollment wizard for consumer devices. Earlier August fixes repaired a crash that prevented the wizard from loading for some users; the September package continued the work of exposing the UI more broadly. Those servicing updates are the technical precondition for the enrollment path to appear inside Settings → Update & Security → Windows Update. (windowslatest.com)

What’s included (user‑visible and technical fixes)​

KB5065429 is primarily a security rollup, not a feature release, but the release notes and field testing call out a few user‑facing and under‑the‑hood items worth highlighting:
  • Security fixes: standard monthly mitigations for vulnerabilities across the Windows kernel, graphics stack, networking components and system services. The update is cumulative and includes the usual set of Critical and Important patches. (As with any cumulative rollup, the package contains multiple CVE fixes consolidated into the LCU.) (asec.ahnlab.com)
  • ESU enrollment readiness: the update ensures the Settings‑hosted enrollment wizard behaves reliably and is visible on more systems, fixing earlier crashes and registration problems that blocked consumer signups. This is the operational change that lets many users complete the ESU enrollment flow inside Windows Update after the package is applied. (windowslatest.com, hothardware.com)
  • Stability and feature repairs called out by community testing: among the bug fixes noted in coverage and hands‑on tests were improvements to streaming/NDI behavior between devices (addressing reports of audio delays and stuttering after a prior update) and refinements to SMB handling for administrators managing shares and group policies. These are the type of targeted quality fixes that follow a monthly security rollup rather than broad new capabilities. Field reporting identified specific NDI‑related regressions and SMB hardening tweaks, which the cumulative aims to address. Readers should treat these as practical fixes rather than new features. (windowslatest.com, hothardware.com)
Important operational detail: the KB does not add new consumer features beyond the ESU enrollment plumbing; it is a servicing rollup with patch and reliability content. The key value for many users is that installing KB5065429 (or the August servicing that preceded it) unlocks the in‑product ESU enrollment experience, when other prerequisites are met.

How to get the update (automatic vs manual .msu)​

Windows Update will push KB5065429 automatically to eligible Windows 10 22H2 PCs. If automatic delivery fails, or if you prefer offline installation, download the full .msu package from the Microsoft Update Catalog and install it manually:
  • Visit the Microsoft Update Catalog and search KB5065429 to find the correct .msu for your architecture (x86/x64/ARM64).
  • Download the .msu to a local folder. Confirm the file hash (SHA‑256) either using the value Microsoft publishes or by comparing repeated downloads to ensure integrity: PowerShell Get‑FileHash -Algorithm SHA256 <filename> is sufficient.
  • Run the .msu as administrator and follow on‑screen prompts. Expect manual installs to take longer than Windows Update deltas because you’re applying the combined package. Reboot if required. (asec.ahnlab.com)
Practical tips:
  • In business environments use WSUS/SCCM/Intune to manage rollouts; the catalog package sizes are larger and may cause bandwidth spikes if pushed to many devices at once. Test on pilot hardware before broad distribution.
  • If you rely on offline images, consider slipstreaming the KB into installation media or creating a patched recovery ISO using DISM or third‑party offline servicing tools.

ESU enrollment: the three consumer paths (exact mechanics)​

The consumer ESU program intentionally offers three ways to enroll a device and obtain one year of security updates. These are the official options documented by Microsoft:
  • Free path by enabling Windows Backup / settings sync to OneDrive: sign in with a Microsoft account and enable Settings/Windows Backup sync; Microsoft uses this as the no‑charge route to grant ESU entitlements.
  • Redeem 1,000 Microsoft Rewards points: use accumulated Rewards points to purchase an ESU license token.
  • Pay a one‑time $30 USD (or local currency equivalent plus tax): a paid ESU license tied to your Microsoft Account that can be applied to up to 10 eligible devices associated with that account.
All three options produce the same result — ESU coverage through October 13, 2026 — and all require a Microsoft account to finalize enrollment. Microsoft’s consumer ESU page is explicit about the account requirement and the licensing tie to a single MSA for up to 10 devices. (support.microsoft.com, techcommunity.microsoft.com)
Enrollment flow (typical on an eligible consumer PC):
  • Ensure the device is running Windows 10 version 22H2 and is fully patched (install KBs such as the August and September cumulative updates).
  • Go to Settings → Update & Security → Windows Update.
  • If prerequisites are met, you’ll see an Enroll now link or banner under the Windows Update pane.
  • Click Enroll now and follow the wizard; sign in with a Microsoft Account if you’re using a local account. Choose backup‑sync, Rewards redemption, or one‑time purchase and complete the flow. (windowslatest.com, hothardware.com)

Hands‑on reports, rollout quirks and what users saw​

Independent testers and outlets that exercised the enrollment flow reported a mixed but improving experience:
  • In some hands‑on cases the ESU enrollment toggle only appeared after installing the latest cumulative update that raised the machine to Build 19045.6332 (the September cumulative). In those tests, enabling OneDrive/Windows Backup or choosing a Rewards/purchase path completed enrollment and the device became eligible for ESU updates. That anecdotal path — install KB, reboot, see Enroll now, enroll — was reported by community testing and by Windows‑focused outlets. (windowslatest.com)
  • Microsoft has cautioned that the “Enroll now” control is being phased in; not all eligible devices will see it at the same time. If your device meets the prerequisites and you still don’t see the option immediately, Microsoft’s guidance is to install the latest servicing updates and wait for the staged rollout to reach your device. The company’s public support documentation and community Q&A reiterate that this staged approach is intentional. (support.microsoft.com, learn.microsoft.com)
  • Some early reports surfaced about registration or wizard crashes prior to the August servicing updates; Microsoft fixed the crash and improved the wizard behavior in the August and September rollups. If you still see wizard crashes after updating, troubleshooting steps include verifying servicing stack installation, repairing Store app registration, and confirming your account/registration state. (hothardware.com)
Important caveat: the experience is device‑ and environment‑dependent. Domain‑joined devices, enterprise MDM managed machines, kiosk devices, and child accounts are excluded. Home users, especially those already signed into Microsoft Accounts and using OneDrive backups, will see the simplest path. For privacy‑conscious users who run local accounts by deliberate choice, the account requirement is a meaningful change. (techcommunity.microsoft.com)

Security and privacy analysis — tradeoffs and risks​

Microsoft’s consumer ESU program solves a practical problem — it gives a one‑year safety net to many devices that cannot upgrade to Windows 11 because of hardware limits — but the implementation introduces a few material tradeoffs consumers must weigh.
Strengths and benefits
  • Immediate security coverage: ESU ensures monthly Critical and Important patches continue for one year beyond EOL, reducing immediate exploitation risk for internet‑exposed or sensitive devices.
  • Flexible enrollment: Microsoft offers three paths (sync, Rewards, purchase), lowering the financial friction for households with multiple machines.
  • Household efficiency: a single paid license covers up to 10 eligible devices tied to one Microsoft account, which can be economical for multi‑PC households. (support.microsoft.com)
Potential downsides and risks
  • Microsoft account requirement: enrollment — even paid enrollment — requires a Microsoft Account. This shifts sign‑in and entitlement management into Microsoft’s account system and can be a non‑starter for users who intentionally rely on local accounts for privacy or policy reasons. Expect some users to object to this condition on principle. (tomshardware.com)
  • One‑year limit and migration pressure: ESU is a one‑year bridge, not a long‑term support path. Organizations and individuals should use the ESU period to plan and execute migrations to supported platforms (Windows 11 or replacement hardware) or to isolate legacy workloads in VMs or segmented networks. Treat ESU as emergency breathing space, not a permanent strategy.
  • OneDrive storage implications for free route: the no‑charge path uses Windows Backup/settings sync to OneDrive. Free OneDrive includes 5 GB; larger backups may require paid OneDrive storage, which adds ongoing cost and complexity if users rely on that path. That nuance is easy to miss when people hear “free enrollment.” (theverge.com)
  • Operational complexity for managed environments: enterprise and compliance‑sensitive systems often cannot or should not rely on the consumer ESU path; enterprise ESU remains the formal route for domain‑joined fleets and multi‑year commitments. Consumer ESU is unsuitable for many regulated environments.

Practical checklist — what to do next (step‑by‑step)​

  • Verify your device: Settings → System → About — confirm you’re on Windows 10, version 22H2 and that activation is valid.
  • Patch now: Run Windows Update and install all pending cumulative updates. If auto‑update fails, download KB5065429’s .msu from the Update Catalog and install manually. Verify file integrity (SHA‑256). (asec.ahnlab.com)
  • Prepare your account: decide which Microsoft account you will use for ESU coverage (one account can cover up to 10 devices). Convert or add an MSA as an administrator on the PC if you currently use a local account.
  • Back up: create a full image backup and verify restore media. Don’t rely solely on OneDrive for disaster recovery.
  • Enroll: Once updated, go to Settings → Update & Security → Windows Update and click Enroll now if the option appears. Follow the wizard and choose your enrollment path (sync / Rewards / purchase). If you don’t see the option, wait — the enrollment UI is rolling out in stages. (windowslatest.com, support.microsoft.com)
  • Use the year: treat the ESU period as time to migrate. Inventory applications and drivers, test Windows 11 eligibility, and budget for replacement hardware if needed.

Final assessment — who should use ESU and who shouldn’t​

ESU is a pragmatic, narrowly scoped program that addresses a real need for people who cannot move to Windows 11 for hardware or cost reasons. For many households the free sync path or the 1,000 Rewards route will be an inexpensive way to maintain security while they plan migrations.
That said, ESU is not for everyone:
  • Privacy‑first users who will not or cannot bind devices to Microsoft Accounts must evaluate whether the convenience of one more year of patches justifies the account requirement.
  • Organizations subject to compliance rules should not treat consumer ESU as a long‑term solution; enterprise ESU or migration strategies are more appropriate.
  • Anyone who depends on long‑term patching beyond October 13, 2026 should plan for migration now; ESU is a bridge year, not a replacement for supported platforms.
Use ESU deliberately: patch, enroll if needed, and use the extra year to migrate safely rather than to delay indefinitely. Microsoft’s public documentation and the hands‑on community reporting make the conditions and tradeoffs clear; read the official ESU guidance and verify your device meets the prerequisites before relying on it as your long‑term plan. (support.microsoft.com)

Quick reference: where the key claims stand (verification summary)​

  • End‑of‑support and consumer ESU coverage period: EOL Oct 14, 2025; consumer ESU through Oct 13, 2026 — confirmed by Microsoft’s ESU support page. (support.microsoft.com)
  • Enrollment options: backup sync (free), redeem 1,000 Rewards, or pay $30 — documented by Microsoft and corroborated by community Q&A and independent outlets. (support.microsoft.com, techcommunity.microsoft.com)
  • KB5065429 availability and build mapping: KB5065429 is the September cumulative that advances Windows 10 22H2 to Build 19045.6332 — catalog and build lists reflect that mapping. (en.wikipedia.org)
  • Enroll now visibility: experience is staged; some users only saw the ESU toggle after installing the cumulative that produced build 19045.6332 — reported in hands‑on coverage and community testing; Microsoft confirms staged rollout. That behavior is anecdotal for some test machines and is not a universal guarantee. (windowslatest.com)
When specific rollout timing or wizard behavior matters (for example in managed environments), rely on Microsoft’s official update documentation and the device’s Update history as the ground truth. If enrollment is critical, apply the latest cumulative and servicing stack updates, sign in with a Microsoft account, and check for the Enroll now path in Settings. (support.microsoft.com, hothardware.com)
Microsoft’s move — a one‑year consumer ESU bridged to an in‑product enrollment experience — is a pragmatic compromise for a huge installed base that cannot all move to Windows 11 overnight. KB5065429’s release is less about flashy features and more about making the transition mechanics reliable and discoverable in the final months before Windows 10’s mainstream retirement. For users who must stay on Windows 10, the responsible path is clear: patch now, enroll if you need the extra year, and use that breathing space to complete a planned migration to a supported platform.
Source: windowslatest.com Windows 10 KB5065429 released ahead of EOL, direct download links (.msu)
 

Click to expand...
If you’re planning to abandon Windows 10 when Microsoft ends support, the sensible advice is not just “pick a Linux distro” — it’s “pick the right one for your skills, hardware, and use case,” because some distributions are effectively designed to be a learning project rather than a drop-in replacement. Microsoft’s official lifecycle page makes the deadline clear: Windows 10 reaches end of support on October 14, 2025, after which security updates and technical assistance stop unless you enroll in an Extended Security Updates (ESU) program. (microsoft.com) (support.microsoft.com)
A recent MakeUseOf roundup warned Windows refugees to avoid five particular projects — Linux From Scratch, Gentoo, Arch Linux, OpenBSD, and Debian Sid — as bad first choices for former Windows users. That short list is directionally correct: each of those projects is powerful and instructive, but they demand knowledge, time, or tolerance for breakage that most migrating Windows 10 users do not have. This feature expands that guidance: it summarizes the original claims, verifies or corrects technical points against upstream documentation, and explains who each project is actually for — plus safe alternatives for people who want a low-friction route off Windows 10. Along the way, key claims are validated with primary documentation and independent coverage so you can decide on facts, not folklore.

A person sits at a wooden desk with a laptop and two monitors, one showing a Linux/Tux wallpaper.Background / Overview​

Windows 10’s end-of-support becomes a practical trigger for migration planning. You have four realistic paths:
  • Upgrade to Windows 11 (if your hardware meets requirements).
  • Keep Windows 10 and buy ESU protection or accept the risk.
  • Move to macOS (requires buying Apple hardware).
  • Move to Linux or another Unix-like OS (free in most cases, many options).
Many Windows users see Linux as the only practical free alternative for older hardware. Modern desktop distributions — KDE Plasma, Cinnamon, GNOME-based distros, and storefronts like Flatpak/Flathub or Snap — now make the desktop experience approachable. But the Linux ecosystem is wide: some distributions focus on ease-of-use and familiar UIs; others are intentionally minimalist, educational, or aimed at developers and power users. Community guidance and migration guides reflect this split between “easy entry” distros and “learn-by-doing” systems.
This article concentrates on the five projects flagged by MakeUseOf and explains why each is a poor first stop for most Windows 10 users — and where to go instead.

1) Linux From Scratch (LFS) — The final boss, not a distro​

What MakeUseOf said​

MakeUseOf calls Linux From Scratch (LFS) “technically not even a finished distro” and warns that building everything from source is time-consuming, resource-heavy, and impractical for newcomers.

What the official docs actually say​

LFS is intentionally a book and a learning project that walks you through building a Linux system entirely from source. The project’s site and the LFS host requirements explicitly state this orientation and recommend a host with at least a quad‑core CPU and 8 GB of RAM for a reasonable build time; they also warn that older or smaller systems will take significantly longer to compile. In short: LFS is educational by design, not a desktop distribution for day-to-day use. (linuxfromscratch.org, linuxfromscratch.org)

Why it's a terrible first stop for Windows refugees​

  • LFS is not packaged, polished, or aimed at daily desktop users. It’s a step‑by‑step exercise in how a Linux system is assembled.
  • You will compile core components and libraries; that can take hours or days depending on CPU, parallel build options, and disk speed.
  • LFS assumes comfort with the command line, partitioning, and troubleshooting build failures.

Who LFS is for​

  • Learners who want to understand Linux internals, distro authors, or very determined tinkerers.
  • Not for users who need simple installs, immediate application compatibility, or a plug‑and‑play desktop.

Alternatives for newcomers​

  • Try a desktop-focused distro like Linux Mint or Zorin OS (both targeted at Windows switchers) in a live USB first. These let you test hardware and apps without compiling anything.

2) Gentoo — Where patience and intention meet compilation​

What MakeUseOf said​

Gentoo compiles everything from source and “makes patience go to die.” It warned that installs and updates can take very long.

Verification and context​

Gentoo is a legitimate source‑based distribution whose package manager, Portage, automates the download, configuration, and compilation of source code. Gentoo’s documentation and handbook describe USE flags, profiles, and the philosophy of compile-time customization. While Gentoo can be configured to use binary packages or distributed compilation (distcc), the distribution’s default workflow is compilation-heavy and demands active maintenance. (wiki.gentoo.org, linux.com)

What newcomers underestimate​

  • Compilation times vary widely: some packages compile quickly, others (browsers, office suites, heavy libraries) can take hours.
  • Managing USE flags and dependency decisions is a learning curve — misconfiguration can mean long re‑compilation cycles.
  • Gentoo can be tuned to use prebuilt binaries for heavy packages, but that reduces the customization benefit.

Who Gentoo is for​

  • Users who want extreme control over build options, binary size, and performance tuning.
  • People who enjoy the process of building and tweaking rather than “set-and-forget” systems.

Practical advice​

  • If you like the control but not the compile times, use Gentoo in a VM first or look for distributions that offer similar configurability with binary packages (some advanced users prefer NixOS or a tuned Arch setup).

3) Arch Linux — Minimalist, lightweight, and assumption-heavy​

What MakeUseOf said​

Arch “throws you into the deep end” with no graphical installer, expects knowledge of EFI, initramfs, and services, and its rolling model can randomly break things.

Official documentation and verification​

Arch’s installation guide is intentionally terse and command-line oriented — the Arch Wiki installation guide documents a hands-on procedure that assumes you will partition, chroot, and configure the system manually. Arch’s rolling‑release model is explicit: packages move into the repos quickly and updates are frequent; the ArchWiki warns that partial upgrades are unsupported and that users must run full upgrades and read news before updating. Those choices emphasize user control but also place responsibility for recovery on the user. (wiki.archlinux.org)

Why Arch is a rough first distro​

  • There’s no graphical installer or guided GUI configuration in the official image; you work from a command prompt.
  • You need to understand boot modes (BIOS vs UEFI), partitioning, mounting, and kernel/initramfs concepts just to get to a desktop.
  • Rolling updates mean you must be comfortable troubleshooting breakage, reading package news, and sometimes applying manual fixes.

Who Arch is for​

  • Intermediate-to-advanced users who want a minimal base, control over packages, and a lightweight system.
  • People who can read and apply documentation and who want to learn Linux internals on the way.

Safer path for newcomers who like Arch’s philosophy​

  • Consider Manjaro or EndeavourOS — they provide easier installers and curated repos while keeping much of the Arch ecosystem available. If you prefer to be close to Arch but want safety rails, these are reasonable stepping stones.

4) OpenBSD — Security-first, user-unfriendly by design​

What MakeUseOf said​

OpenBSD is “designed with security as the top priority” and that the developers treat user-friendliness as a security vulnerability; installation is text-based, tools differ, and “there’s no equivalent to apt-get upgrade” — requiring kernel and userland recompilation for updates.

Reality check and correction​

OpenBSD is indeed a distinct Unix-like operating system — not Linux — and it prioritizes code correctness and security auditing. Its documentation and tools are different from GNU/Linux utilities, which raises the learning curve for Linux refugees. However, the claim that OpenBSD requires regular recompilation of kernel and userland for routine updates is a misleading simplification.
  • OpenBSD publishes the base system as cohesive sets and supports binary patches for released versions using syspatch. The official documentation explains how to apply binary security patches with syspatch and to upgrade packages with the pkg_add -u tool. For users of released versions, routine updates do not force full source recompiles. Tracking -current (the development branch) is different — that requires building from source or other developer workflows. (openbsdhandbook.com, openbsd.org)

Why OpenBSD still isn’t the best first move​

  • OpenBSD employs different toolchains, command options, and userland utilities; common GNU tools behave differently here.
  • Hardware support, especially for niche Windows-only devices, is usually weaker than mainstream Linux kernel support.
  • The system appeals to people who accept trade-offs for security and auditability, and who are comfortable with Unix administration.

Who OpenBSD is for​

  • Security professionals, system administrators who require formal auditing, and users who value minimal attack surface above desktop convenience.
  • Not for average Windows users seeking quick application compatibility and plug-and-play hardware.

5) Debian Sid — Fast, fresh, and fragile​

What MakeUseOf said​

Debian Sid is “unstable,” changes daily, and when it breaks it breaks badly; there are no install images and it’s best avoided by everyday users.

Documentation and community reality​

“Sid” — short for Debian’s unstable branch — is designed for daily package uploads and development. Debian’s own pages and installer FAQs make the situation explicit: Sid receives packages directly from maintainers, security updates are not guaranteed in a timely way, and Sid can suffer from in-place library upgrades that leave sets of packages temporarily unresolvable. Debian’s FAQ also explains that full images for unstable are not provided as stable images are; instead users typically install stable or testing and then switch the apt sources to unstable, or use expert/minimal installers to target unstable. In practice Sid is a rolling development environment rather than a desktop for the faint of heart. (debian.org)

Why Sid is risky for Windows switchers​

  • Breakage risk: major or cross‑package upgrades can make parts of the desktop or repository inconsistent.
  • Support model: fewer formal security guarantees and no stable release cadence — your system can change dramatically overnight.
  • Install logistics: because Sid is always in flux, common guidance recommends installing stable/testing first and then switching; expecting a “fresh Sid image” to be stable is unrealistic.

Who Sid is for​

  • Debian developers, testers, package maintainers, or power users who accept frequent maintenance and are equipped to repair dependency issues.

Cross-cutting technical corrections and nuance​

  • LFS is indeed a book/tutorial and expects you to compile from source; the LFS project explicitly recommends a quad‑core CPU and around 8 GB RAM as a minimum for practical build times — though faster CPUs and more RAM substantially shorten compile times. Compiling an entire system on older hardware can take far longer than the documentation examples imply. (linuxfromscratch.org, linuxfromscratch.org)
  • Gentoo’s default behavior is source-based builds via Portage, but it supports binary packages if you configure a binhost — you don’t literally have to compile everything manually. The trade-off is complexity vs. control. (wiki.gentoo.org)
  • Arch’s official installation intentionally lacks a GUI installer; its wiki and community emphasize that users are expected to manage low-level configuration. The rolling model is powerful but imposes an active maintenance burden: nightly or weekly updates can change underlying libraries and sometimes require manual intervention. (wiki.archlinux.org)
  • OpenBSD does not force daily recompiles for released versions; syspatch and binary packages make routine maintenance manageable on production systems; only those tracking -current commonly recompile from source. The “recompile everything every time” statement is a partial truth that applies to specific development workflows, not typical released-system maintenance. Flag this claim as an important correction. (openbsdhandbook.com, openbsd.org)
  • Debian Sid is unstable by design; it receives rapid package uploads and is used as a staging ground. Debian explicitly warns against treating Sid as a day‑to‑day desktop unless you know how to recover from breakage; it does not provide stable full images for Sid for the same reasons. (debian.org)

Practical checklist for Windows 10 users who are switching to Linux​

Before you leap, follow these prioritized steps:
  • Inventory critical apps and peripherals (games, productivity suites, printers, dongles).
  • Test hardware and apps from a live USB (no install) to verify drivers and basic functionality.
  • Choose a distro aligned with your risk tolerance:
  • Low risk: Linux Mint (Cinnamon), Zorin OS, or Ubuntu LTS.
  • Moderate risk / power-user: KDE Neon, Fedora, Pop!_OS.
  • Learning projects: Arch, Gentoo, LFS, OpenBSD, Debian Sid (only in VMs or on spare hardware).
  • Back up everything and create system recovery media for Windows before installing.
  • If you’re a gamer, test titles with Proton/Steam before committing; anti-cheat and kernel-level tools are still an issue for some titles.
  • Plan a rollback: keep a physical drive image or a spare SSD to boot back into Windows if needed.
These steps mirror the best practices discussed by migration guides and community forums: testing, backups, and incremental migration reduce unexpected downtime and lost data.

Recommendations: Where to go instead (a concise guide)​

  • If you want the least friction: Linux Mint (Cinnamon) or Zorin OS (Core) — Windows-like interfaces, driver support, and LTS bases. These maximize application compatibility and minimize command-line work.
  • If gaming is your priority: SteamOS-based spins or Pop!_OS (good driver and GPU support); test anti-cheat in advance.
  • If you want to stay cutting-edge but safer than Arch: Fedora or openSUSE Tumbleweed — modern stacks with more structured update channels.
  • If you want Arch-style control but an easier installer: Manjaro or EndeavourOS.
  • If you’re curious about learning without risking your main machine: run Gentoo, Arch, LFS, or Sid inside a VM, or install them on a spare drive.
Community discussions and multiple migration roundups repeatedly recommend an incremental transition: pilot non-critical systems first and maintain a fallback plan.

Final analysis — strengths, risks, and the journalist’s verdict​

The MakeUseOf headline — “Don’t switch to these five distros” — is useful blunt advice for a general audience: it warns novices away from choices that will cause frustration. That headline is correct in spirit but occasionally imprecise in technical detail (notably the OpenBSD update claim). The core strength of the MakeUseOf list is that it identifies distributions whose mental model and maintenance expectations are mismatched to a Windows-to-Linux migration for most users.
Notable strengths of the five projects covered:
  • Learning value: LFS, Gentoo, Arch, and OpenBSD teach deep system knowledge that benefits administrators and developers.
  • Performance and control: Gentoo and Arch offer performance tuning and minimalism not available in mainstream binary distros.
  • Security discipline: OpenBSD’s audit culture produces a tiny, well‑audited codebase.
Major risks and blind spots for most Windows users:
  • Time and attention: Source-based builds and rolling-release maintenance are time sinks for non-experts.
  • Hardware/peripherals: Vendor drivers and anti-cheat systems often bias Windows, and migrating can break specialized hardware.
  • Support expectations: Windows users expect GUI helpers and vendor support channels — the five projects above rely on documentation, mailing lists, and community support instead.
Practical verdict: These five projects are excellent — but not as first desktop migrations. For the majority of Windows 10 users, the fastest, safest path off Windows 10 is a beginner-friendly, LTS-based Linux distribution tested from a live USB. If your goal is education, experimentation, or control, set aside a spare machine or VM and treat LFS, Gentoo, Arch, OpenBSD, and Debian Sid as projects rather than immediate replacements.
If you’re planning the migration now, prioritize testing, backups, and a staged approach. The end of Windows 10 support is a deadline, not a trapdoor — take the time to plan the transition so the switch improves your computing experience rather than complicates it. (microsoft.com, linuxfromscratch.org, wiki.gentoo.org, wiki.archlinux.org, openbsdhandbook.com, debian.org)
Source: MakeUseOf Don't switch to these 5 Linux distros when you finally leave Windows 10
 

Microsoft has given Windows 10 users a narrow, conditional lifeline: if you plan to keep a Windows 10 PC beyond the platform’s formal end-of-support date, you must complete a specific enrollment flow — or enable a OneDrive backup path — before the October 14, 2025 cutoff to receive one additional year of security-only updates through October 13, 2026. (support.microsoft.com)

Blue 3D laptop UI promoting enrollment for extended security updates with a shield icon.Background / Overview​

Windows 10 ships out of Microsoft’s mainstream lifecycle on October 14, 2025. After that date, Microsoft will stop delivering routine feature updates, quality updates, and free security fixes for consumer Windows 10 editions — unless the device is enrolled in the company’s consumer Extended Security Updates (ESU) program. The consumer ESU is a time-limited, security-only bridge: it delivers only security updates classified as Critical or Important by Microsoft’s Security Response Center, not new features, non-security reliability fixes, or broad technical support. (microsoft.com)
Microsoft designed the consumer ESU to be accessible to households and small users blocked from upgrading to Windows 11 by hardware or preference. Enrollment for eligible consumer devices is surfaced through a staged “Enroll now” experience inside Settings → Update & Security → Windows Update. Because the roll-out is phased and a pre-release cumulative update addressed early enrollment bugs, not every eligible PC will see the enrollment wizard at the same time. (support.microsoft.com)
The mainstream points covered in the consumer press — including the CNET article you provided — match Microsoft’s public guidance: update to Windows 10 version 22H2, install the August cumulative update (which corrects enrollment issues), sign in with a Microsoft Account (MSA), and use the "Enroll now" wizard or one of the free enrollment paths if you want the ESU year. (support.microsoft.com)

What Microsoft is offering — the facts you need to verify now​

  • End-of-support date for Windows 10 (consumer editions): October 14, 2025. (support.microsoft.com)
  • Consumer ESU coverage window (if enrolled): Security-only updates through October 13, 2026. (microsoft.com)
  • Eligible OS version (consumer): Windows 10, version 22H2 (Home, Pro, Pro Education, Workstation). Enterprise/managed scenarios use separate commercial ESU channels. (learn.microsoft.com)
  • Critical servicing update to install: KB5063709 (August 12, 2025 cumulative update; OS builds noted as 19044.6216 and 19045.6216) — this update resolved issues with the ESU enrollment wizard and is a gating item for many users. (support.microsoft.com)
  • Enrollment methods (consumer ESU):
  • Free: enable Windows Backup / PC settings sync to OneDrive (MSA required).
  • Free: redeem 1,000 Microsoft Rewards points.
  • Paid: one-time purchase (approx. $30 USD) that can be used across up to 10 eligible devices tied to the same Microsoft Account. All enrollment routes require a Microsoft Account. (microsoft.com)
These are the core, verifiable claims that determine whether a user stays patched during the transition window. Each of the numbered items above is reflected in Microsoft’s lifecycle and consumer ESU documentation and has been confirmed in independent coverage. (microsoft.com)

Eligibility, prerequisites, and the one thing you must do before Oct. 14, 2025​

Minimum technical checklist​

To be eligible for the consumer ESU and see the enrollment wizard, make sure you meet all of the following:
  • Your device is running Windows 10, version 22H2 (check Settings → System → About). (learn.microsoft.com)
  • All pending Windows Updates are installed, and specifically the August 12, 2025 cumulative update KB5063709 (build 19044.6216 for 21H2 and 19045.6216 for 22H2). KB5063709 fixed enrollment wizard crashes and surfaced the ESU offer more broadly. (support.microsoft.com)
  • You are signed in to the PC as an administrator using a Microsoft Account (MSA) — local Windows accounts are not accepted for ESU enrollment. (microsoft.com)
  • You have a working Internet connection and access to Microsoft Store if you plan to purchase or manage the ESU license. (microsoft.com)
If you check these items and the Enroll option still doesn't appear, the enrollment wizard rollout is staged — install all updates, reboot, be signed in with an MSA, and check Windows Update again over the next few days. Microsoft has acknowledged the phased availability and remedied early bugs in the August cumulative. (support.microsoft.com)

The single gating step​

The single gating step for consumer ESU is simple in concept and urgent in timing: confirm your PC runs Windows 10 22H2, install KB5063709 (and any other pending updates), sign into a Microsoft Account with admin rights, and complete the ESU enrollment (or enable Windows Backup/OneDrive sync) before October 14, 2025. Completing that enrollment before the cutoff ensures you receive the maximum ESU coverage window. (support.microsoft.com)

How to enroll — step-by-step​

  • Verify your Windows version: open Settings → System → About. Look for Windows 10, version 22H2. If you’re not on 22H2, upgrade to the latest 22H2 build. (learn.microsoft.com)
  • Install all updates: Settings → Update & Security → Windows Update → Check for updates. Ensure KB5063709 (August 2025 cumulative) and servicing stack updates are applied, then reboot. (support.microsoft.com)
  • Sign in with a Microsoft Account (MSA) that has administrator privileges on the PC. The ESU entitlement is tied to the MSA and can be reused on up to 10 eligible devices associated with that account. (microsoft.com)
  • Open Settings → Update & Security → Windows Update and look for the top-right messaging that says something like, “Windows 10 support ends in October 2025” with an Enroll in Extended Security Updates link. Click Enroll now to launch the wizard. (microsoft.com)
  • Choose an enrollment option:
  • Back up your PC settings (OneDrive sync) — free, but limited by your OneDrive quota (5 GB free). This path ties your enrollment to OneDrive backups. (microsoft.com)
  • Redeem 1,000 Microsoft Rewards points — free if you have the points available. Redemption paths have experienced intermittent issues for some users in early rollout. (support.microsoft.com)
  • Purchase the ESU license — pay the one-time fee (roughly $30 USD) through the Microsoft Store; the entitlement can be used on up to 10 eligible devices tied to the same MSA. (windowscentral.com)
  • After enrollment completes, confirm in View Update History that ESU-labeled security updates are being delivered. You should see security-only updates arriving during the ESU coverage window. (microsoft.com)

Troubleshooting and rollout reality​

  • If you don’t see the “Enroll now” option after meeting the prerequisites, do not panic. Microsoft rolled the wizard out in phases and published KB5063709 specifically to address early wizard crashes. Install the update, sign in with an MSA, reboot, and check again. (support.microsoft.com)
  • Some users reported the enrollment button appearing but the wizard failing; those early errors were the precise problem KB5063709 aimed to fix. If you continue to see problems after installing the August cumulative, use the Windows Update Troubleshooter and check Microsoft’s support pages and Q&A forums for updates. (learn.microsoft.com)
  • The OneDrive free tier (5 GB) can be a limiting factor for the free backup route. If your PC settings or backup payload exceed that quota, the enrollment path may require buying OneDrive storage or choosing a different enrollment option. Back up important files independently before choosing any cloud-based route. (microsoft.com)

What ESU does — and what it does not do​

ESU does:​

  • Deliver security-only fixes designated Critical or Important during the ESU coverage year (through Oct. 13, 2026 for enrolled consumer devices). (microsoft.com)
  • Give users and households a predictable, one-year window to plan and execute migration off Windows 10. (microsoft.com)

ESU does not:​

  • Provide new OS features, driver/firmware updates, or full quality updates and non-security reliability fixes. (microsoft.com)
  • Replace a longer-term security posture: after Oct. 13, 2026 enrolled devices will be out of consumer ESU coverage and again exposed unless migrated or covered under commercial ESU for enterprises. (microsoft.com)
Treat ESU as a strictly temporary mitigation for security exposure, not as long-term support. That’s Microsoft’s stated intent, and the consumer ESU mechanics and messaging reinforce it. (microsoft.com)

Risks, trade-offs, and what the CNET piece emphasizes​

The CNET article summarizes the consumer ESU offer, the free enrollment options, and the practical steps most home users need to take — but it also glosses a few practical trade-offs that require scrutiny. Key risks and trade-offs:
  • Account and privacy trade-off: ESU enrollment is tied to a Microsoft Account, and the free path requires syncing settings to OneDrive. That nudges users into cloud-backed identity and storage, which some privacy-conscious people avoid. Consider whether you’re comfortable tying your ESU entitlement to an MSA and cloud backups. (microsoft.com)
  • OneDrive storage limits and hidden costs: The free OneDrive route uses your OneDrive storage quota (5 GB free). If you lack free space, you may have to pay for additional OneDrive storage — at which point the “free” option incurs a cost. Factor OneDrive usage into your migration budget.
  • Temporary nature and compliance risk: ESU coverage is time-limited. For regulated users and small businesses, running an unsupported OS—even under a consumer ESU—may not satisfy compliance or contractual obligations. Enterprise customers should evaluate commercial ESU pricing and options. (learn.microsoft.com)
  • Ecosystem nudges and hardware churn: Critics argue the program accelerates vendor lock-in and hardware churn because Windows 11’s baseline excludes many older systems; ESU is positioned as a short-term cushion rather than a long-term solution. That is a legitimate sustainability and cost concern. (techradar.com)
  • Rollout reliability: Staged rollouts and early bugs mean last-minute action can be risky. The safest approach is to act early — install KB5063709, sign in with an MSA, and complete enrollment well before October 14 rather than scrambling at the deadline. (support.microsoft.com)
The CNET article captures the consumer-facing steps and the OneDrive caveat, but it’s prudent to reinforce the timing and storage constraints: free does not always mean zero friction.

Practical checklist you can use in the next 30–60 minutes​

  • Confirm Windows 10 version: Settings → System → About → look for 22H2. (learn.microsoft.com)
  • Run Windows Update and install every pending update, then reboot (ensure KB5063709 is installed). (support.microsoft.com)
  • Make an independent full backup of critical data to an external drive (do this before relying on OneDrive). Use disk-imaging tools (Macrium Reflect, Acronis) or verified file copies. (microsoft.com)
  • Sign in as an administrator with a Microsoft Account (create one beforehand if needed). (microsoft.com)
  • Check Settings → Update & Security → Windows Update for the “Enroll now” message and complete the wizard if present. Choose OneDrive backup, redeem Rewards, or pay for the paid ESU license as it fits your privacy and storage preferences. (microsoft.com)

Critical analysis — strengths, business incentives, and the public debate​

Microsoft’s consumer ESU program has practical strengths: it prevents an immediate, wide-scale security cliff, it offers low-cost consumer routes (including a free route), and it gives households predictable time to migrate. For many families and small users with older but functional PCs, the program is an affordable and reasonable bridge. (microsoft.com)
However, this program also serves Microsoft’s business and ecosystem interests in several ways. The MSA and OneDrive requirement nudges consumers deeper into Microsoft’s cloud and identity system, and the tiered enrollment options make it easier to consolidate entitlements across family devices — good for user convenience, but also beneficial to Microsoft. These incentives are not illicit, but they are strategic. Consumers should weigh the convenience against privacy and lock-in trade-offs. (microsoft.com)
There are also valid public-policy and sustainability considerations: if Windows 11’s hardware baseline leaves many PCs behind, consumer ESU can be seen as a stopgap that both reduces immediate security risk and indirectly encourages hardware replacement. That raises legitimate questions about e-waste, affordability, and fairness for lower-income households. Tech community coverage and vendor statements highlight those broader implications. (techradar.com)
Finally, operational risk remains. Staged rollout, enrollment bugs, and OneDrive quota limits mean last-minute action is risk-prone. The prudent course is to act early, verify entitlements, maintain independent backups, and use the ESU year to migrate strategic workloads rather than to postpone indefinitely. (support.microsoft.com)

What remains uncertain or unverifiable — cautionary notes​

  • Public figures about how many PCs remain on Windows 10 vary by tracker and by date. Headlines stating a specific percentage (for example, “nearly 43%”) should be treated cautiously unless they cite the data source and date; OS market-share figures fluctuate month to month across different telemetry services. Do not treat a single percentage without provenance as definitive.
  • The exact user experience of the enrollment wizard can vary by country, device OEM customizations, and staged rollout timing. If the Enroll option doesn’t appear, that doesn’t necessarily mean you’re ineligible — it may mean the rollout hasn’t reached your device yet. Microsoft’s staged rollout approach introduces timing uncertainty. (learn.microsoft.com)
  • Any anecdotal reports about enrollment hiccups, redemption problems with Rewards, or billing edge cases are real user reports but may not represent the entire population. If you encounter a problem, document it and contact Microsoft support; keep screenshots and update history entries. Treat anecdotal reports as signals, not universal facts. (learn.microsoft.com)

Practical recommendations — a prioritized action plan​

  • Immediately: verify version is 22H2 and install all Windows updates (confirm KB5063709 is present). Reboot. (support.microsoft.com)
  • Within 24 hours: create an independent external backup (disk image + file-level copy). Store the disk image offline. (microsoft.com)
  • Within 48 hours: sign in with a Microsoft Account and check Windows Update for the Enroll now wizard. If it appears, complete enrollment and confirm ESU-labeled updates show in Update History. (microsoft.com)
  • If you prefer the free path and choose OneDrive backup, verify you have adequate OneDrive quota (5 GB free) or plan to purchase more storage before enrollment. (microsoft.com)
  • Use the ESU year to execute a migration plan: test critical apps on Windows 11 (or evaluate alternatives like Linux distributions or ChromeOS Flex for unsupported hardware), budget for hardware refresh where needed, and retire devices responsibly. (learn.microsoft.com)

Conclusion​

Microsoft’s consumer Extended Security Updates program offers a concrete, verifiable, and limited lifeline to Windows 10 users who cannot migrate immediately to Windows 11. The mechanics are straightforward — update to 22H2, install KB5063709, sign in with a Microsoft Account, and either enable OneDrive backup (free), redeem Rewards points, or pay a modest one-time fee — but the timing and prerequisites are strict. For uninterrupted protection, complete the enrollment steps before October 14, 2025. That one act preserves security-only patches through October 13, 2026, giving households and power users a defined window to migrate safely. (support.microsoft.com)
Use the ESU year deliberately: back up your data independently, verify entitlements, and treat ESU as a migration window rather than an indefinite solution. Acting early is the safest, most reliable way to avoid last-minute enrollment failures and exposure to new vulnerabilities. (techradar.com)
Source: CNET Still Running Windows 10? Make Sure You Take This Step Before Oct. 14
 

Microsoft has confirmed a firm deadline: the October 2025 Patch Tuesday will be the last regular monthly security update for mainstream Windows 10 installations unless you take immediate action to enroll in the consumer Extended Security Updates (ESU) program. That confirmation tightens an already narrow window for hundreds of millions of Windows 10 users and replaces uncertainty with a clear set of technical prerequisites, enrollment paths, and operational trade‑offs. If you plan to keep a Windows 10 PC patched after October 14, 2025, you must prepare, update, and enroll before the cutoff — or accept growing exposure to new threats. (support.microsoft.com)

Isometric illustration promoting ESU (Extended Security Updates) with calendar, shields, cloud backups, and Microsoft Account.Background​

Microsoft set a hard end‑of‑support date for Windows 10: October 14, 2025. After that date, mainstream Windows 10 editions will no longer receive routine feature updates, quality updates, or the usual stream of monthly security fixes — unless the device is enrolled in the consumer ESU program. The ESU pathway is intended as a one‑year, security‑only bridge that runs through October 13, 2026, and it is intentionally limited in scope: it delivers only security updates classified as Critical or Important by Microsoft’s Security Response Center and does not include feature updates, non‑security quality fixes, or general technical support. (support.microsoft.com)
This announcement arrived alongside practical guidance from Microsoft on how consumers can enroll, the strict prerequisites required, and the limited enrollment options Microsoft is making available to individual users for the first time. Those options include a free path (conditional on cloud backup sync), a Rewards points redemption path, and a modest paid option intended for short‑term coverage. (support.microsoft.com)

What Microsoft actually confirmed — the essentials​

  • End of mainstream security updates: Windows 10 mainstream updates stop on October 14, 2025. This is the date Microsoft published as the official end‑of‑support deadline. (support.microsoft.com)
  • One‑year consumer ESU available: Enrolled Windows 10 devices running version 22H2 can receive Critical and Important security updates through October 13, 2026. (microsoft.com)
  • Eligibility and prerequisites: Devices must be on Windows 10, version 22H2 (Home, Pro, Pro Education, Workstation editions) and must have certain cumulative and servicing stack updates applied; the enrollment process requires a Microsoft Account with administrator rights. Local accounts do not qualify for ESU enrollment. (learn.microsoft.com)
  • How to enroll: A staged “Enroll now” experience appears inside Settings → Update & Security → Windows Update for eligible devices once the required cumulative updates are installed. The rollout is phased; some eligible PCs may see the prompt before others. (learn.microsoft.com)
These points are Microsoft’s official guidance; treating them as the baseline for action is the safest course. Community reporting and tech press coverage have reproduced the same core facts and added practical tips for users who will need to act quickly.

Why this matters now (risk and urgency)​

Unpatched operating systems become high‑value targets for attackers. Without monthly security updates, newly discovered vulnerabilities remain unpatched, and attackers quickly pivot to exploit unpatched machines en masse. Microsoft’s one‑year consumer ESU is a deliberate, time‑boxed mitigation — not a substitution for migration to a supported OS. If you plan to keep using Windows 10 beyond October 14, 2025, enrollment in ESU or a timely upgrade to Windows 11 is the only Microsoft‑sanctioned way to maintain OS‑level security updates. (support.microsoft.com)
The enrollment window is time‑sensitive for practical reasons:
  • Microsoft’s ESU enrollment experience is phased; the “Enroll now” link may not appear immediately on every eligible machine. Waiting until the last day is risky because you might not see the prompt in time. (learn.microsoft.com)
  • Microsoft shipped a cumulative update in August 2025 (commonly referenced as KB5063709) that fixes early ESU enrollment issues and helps surface the enrollment UX. Machines that haven’t installed the LCU/SSU updates are less likely to see the enrollment prompt. Install pending updates now. (learn.microsoft.com)
  • Microsoft ties the ESU license to a Microsoft Account and to the device state at the time of enrollment. That means you should enroll as soon as you meet prerequisites to ensure coverage continuity. (support.microsoft.com)
Community threads and independent reporting show many users who updated early encountered the ESU prompt immediately, while others still haven’t seen it — illustrating the phased rollout and the operational friction. These community reports underline why acting early is practical advice, not hyperbole.

ESU enrollment options — the practical choices​

Microsoft offers three consumer ESU enrollment methods — choose the one that fits your priorities:
  • Free enrollment (no cash): Enable Windows Backup (PC settings and apps sync to OneDrive) while signed in with a Microsoft Account. The backup/sync triggers the free ESU license. (support.microsoft.com)
  • Microsoft Rewards: Redeem 1,000 Microsoft Rewards points to claim an ESU license. This avoids enabling cloud sync for users who prefer not to, but you must have the Rewards points available. (support.microsoft.com)
  • Paid one‑time purchase: $30 USD (or local equivalent, plus tax) purchased through the Microsoft Store via the enrollment wizard; a digital ESU license purchased this way covers up to 10 eligible devices associated with the same Microsoft Account. (microsoft.com)
Important nuances:
  • The license is tied to the Microsoft Account used at enrollment. That account must be an administrator on each device you plan to cover. (learn.microsoft.com)
  • Domain‑joined or MDM‑managed devices, kiosk devices, and certain enterprise scenarios are excluded from the consumer ESU path; enterprises should use volume licensing or the enterprise ESU channels. (learn.microsoft.com)

Technical prerequisites and step‑by‑step checklist​

  • Confirm your Windows version: Settings → System → About — device must be running Windows 10, version 22H2. (learn.microsoft.com)
  • Install all pending updates (LCUs and SSUs): Reboot repeatedly until Windows Update reports no outstanding updates. Be sure KB5063709 (August 2025 cumulative) or later is applied. This patch fixed significant enrollment bugs. (learn.microsoft.com)
  • Sign in with a Microsoft Account that is an administrator on the device; local Windows accounts will not qualify for enrollment. (learn.microsoft.com)
  • Open Settings → Update & Security → Windows Update and look for the “Enroll now” or ESU enrollment prompt; if present, follow the wizard and choose Free / Rewards / Paid enrollment. (support.microsoft.com)
  • Make a full system image and ensure you have recovery media before making changes. Backups protect against the rare but real possibility that cumulative updates or enrollment steps could expose driver or firmware incompatibilities. Community and tech press guidance strongly recommends imaging as a safety step.
If you don’t see the enrollment prompt immediately:
  • Re-check Windows Update; ensure KB5063709 and the latest servicing stack update are installed, reboot, then check Settings again. The rollout is phased and dependent on updates being applied. (learn.microsoft.com)

What ESU actually provides — and what it doesn’t​

  • Provides: Critical and Important security updates (per MSRC) for enrolled Windows 10, version 22H2 devices through October 13, 2026. (microsoft.com)
  • Does not provide: Feature updates, non‑security quality updates, new OS features, or Microsoft technical support as part of consumer ESU. It’s strictly a security patching bridge. (learn.microsoft.com)
That limited scope matters: if your concern is long‑term feature support, driver updates, or new functionality, ESU is a temporary stopgap, not a migration plan.

Alternatives and trade‑offs​

  • Upgrade to Windows 11 (recommended if your hardware is eligible): Windows 11 continues to receive full support and feature updates. The free upgrade is available only for eligible devices that meet hardware requirements (TPM 2.0, Secure Boot, compatible CPU, minimum RAM and storage). Microsoft’s support pages and guidance lead with the Windows 11 upgrade as the preferred long‑term path. (support.microsoft.com)
  • Replace the device: Buying a new Windows 11 PC ensures multi‑year support without the restrictions of ESU. (support.microsoft.com)
  • Run an alternative OS (Linux, older OS in isolated environments): For some users, a switch to a supported Linux distribution or a tightly controlled, offline Windows 10 environment is preferable to paying for temporary ESU coverage — but those paths involve significant migration work and compatibility testing. Community forums have compiled migration options for power users who prefer to avoid Microsoft account ties.
Each option has a trade‑off matrix: security coverage, cost, compatibility with legacy hardware and software, privacy preferences (notably the Microsoft Account requirement for ESU), and the administrative burden of migration.

Privacy, identity, and consumer friction​

A major policy shift in the consumer ESU program is the requirement for a Microsoft Account for enrollment. Even paid ESU licences require the device to be associated with an MSA and signed in with that account. That has ignited criticism from privacy‑minded users who avoid cloud accounts, and it’s an explicit incentive to migrate consumers toward Microsoft’s account ecosystem. Tech press coverage and community commentary flagged this as a notable change in the company’s approach to consumer identity management. (tomshardware.com)
If the MSA requirement is a dealbreaker, your realistic choices narrow to either upgrading to Windows 11 where local account choices are still limited or moving to a non‑Microsoft OS. Those are non‑trivial paths for many households and small businesses.

Scale and numbers — what we can and cannot verify​

Wide reporting has used large headline figures — “600 million,” “700 million,” or “750 million” Windows 10 users — to convey the magnitude of the challenge. Those headline numbers are estimates derived from market share providers and older public statements, not an audited Microsoft device census. Treat any large user count quoted in the press as an estimate, not a precise, verifiable tally. StatCounter and similar analytics firms show Windows 10 still holding a large share of desktop Windows usage in mid‑2025, but month‑to‑month figures vary and different measurement methodologies yield different percentages. Use the market share numbers as a directional indicator, not as an exact device count. (thurrott.com)

Common pitfalls and technical gotchas​

  • Broken update stack: Windows Update problems — missing servicing stack updates or corrupt update components — can prevent KB5063709 or later LCUs from installing, which in turn blocks the ESU enrollment toggle. Repair and update Windows Update if you encounter installation errors. (learn.microsoft.com)
  • Local account users: If you sign in with a local account by default, sign in with a Microsoft Account before attempting enrollment. The MSA must be an admin. (learn.microsoft.com)
  • Device exclusions: Domain‑joined devices and many enterprise‑managed machines are explicitly excluded from the consumer ESU path; organizations must use enterprise licensing channels. (learn.microsoft.com)
  • Phased rollout: The enrollment UX is rolling out in waves. If you delay until mid‑October, your machine might not have the enrollment prompt show up in time; act early. (learn.microsoft.com)
Community threads document user experiences where the enrollment prompt arrived only after specific cumulative updates were applied — reinforcing the advice to install updates immediately and check Settings frequently.

A practical playbook — immediate steps for any Windows 10 user​

  • Back up now — full image plus file backup. Store backups offline or in separate cloud storage.
  • Confirm Windows edition and version (Settings → System → About): you must be on Windows 10, version 22H2. (learn.microsoft.com)
  • Install all pending Windows updates and reboot until there are none remaining — ensure KB5063709 or a later cumulative update is applied. (learn.microsoft.com)
  • Sign in with a Microsoft Account that has admin rights on the device. (learn.microsoft.com)
  • Open Settings → Update & Security → Windows Update and look for Enroll now. If it appears, follow the wizard to select Free / Rewards / Paid enrollment. If it does not appear, repeat steps 2–4 and check again in 24–48 hours. (support.microsoft.com)
  • If you manage multiple PCs, consider the one‑time $30 purchase that covers up to 10 devices per Microsoft Account — evaluate whether the account binding and privacy trade‑offs make that acceptable for your household. (microsoft.com)
Follow these steps promptly — think in days, not weeks. The cutoff is firm for the regular update stream, and phased rollout adds operational risk to procrastination.

For IT pros and power users — operational guidance​

  • Treat October 14, 2025 as a hard deadline for supported Windows 10 in managed fleets unless devices are covered under enterprise ESU contracts or the new consumer ESU paths where appropriate. Update inventory, classify devices by eligibility, and segment exposures. (support.microsoft.com)
  • Validate which devices can be upgraded to Windows 11 (hardware requirements) and plan migrations based on application compatibility testing and firmware readiness. For excluded or legacy hardware, evaluate ESU or hardware refresh schedules. (support.microsoft.com)
  • If you must use ESU, centralize the enrollment process and document the Microsoft Accounts used, device associations, and renewal timelines. ESU is a temporary bridge — build a migration timetable.

How to think about the next 12 months​

Microsoft’s consumer ESU program is explicit: a short‑term, security‑only bridge while users migrate to Windows 11 or replace devices. It reduces near‑term risk for eligible devices, but it also tightens the identity and telemetry trade‑offs by requiring Microsoft Accounts for enrollment. The practical path for most users remains migration to Windows 11 when possible; for others, ESU provides breathing room but not permanence. Community reports and tech outlets have repeatedly emphasized that action — updating, confirming eligibility, and enrolling — is the determinant between staying patched and becoming exposed. (support.microsoft.com)

Final analysis — strengths and risks of Microsoft’s approach​

Strengths
  • Clear deadline: Microsoft’s fixed cutoff date gives organizations and individuals a point‑in‑time to plan and act. That clarity is operationally useful for migration scheduling. (support.microsoft.com)
  • Consumer ESU options: Offering a free, a Rewards, and a paid path for one‑year coverage is pragmatic and widens choices for households and small businesses that can’t upgrade immediately. (microsoft.com)
  • Technical fixes shipped: Microsoft released an LCU to address enrollment bugs (KB5063709), showing responsiveness to early rollout issues. (learn.microsoft.com)
Risks and downsides
  • Identity lock‑in: Mandatory Microsoft Account enrollment for ESU — even for paid coverage — is a meaningful change that reduces choice for privacy‑conscious users. (tomshardware.com)
  • Phased rollout friction: The staged enrollment experience risks leaving some users unable to enroll in time if they wait; the rollout dependence on recent cumulative updates amplifies the urgency. (learn.microsoft.com)
  • Limited scope: ESU only covers Critical/Important security updates. Users will not receive quality fixes, feature improvements, or technical support — making ESU a temporary stopgap, not a long‑term strategy. (learn.microsoft.com)
Caveat: headline user‑count figures reported in some outlets are estimates and vary by analytics provider; those numbers should not change the immediate technical steps any Windows 10 user needs to take. Treat large user counts as context, not an operational substitute for following Microsoft’s eligibility and enrollment instructions. (thurrott.com)

Conclusion — what to do next (short checklist)​

  • Back up your PC now and create recovery media.
  • Ensure you are on Windows 10, version 22H2, install all pending updates including the August cumulative (KB5063709) or later, and reboot until no updates remain. (learn.microsoft.com)
  • Sign in with a Microsoft Account that is an administrator on the machine. (learn.microsoft.com)
  • Open Settings → Update & Security → Windows Update and look for Enroll now — enroll immediately using the free, Rewards, or paid option that suits you. (support.microsoft.com)
  • If your device can run Windows 11 and you want ongoing full support, plan and test a migration to Windows 11 rather than relying on ESU beyond the one‑year bridge. (support.microsoft.com)
The October 14, 2025 deadline is real. The ESU lifeline exists but it’s narrow, mediated by Microsoft Accounts, and operationally fragile because of phased rollout. For most users, the safest path is to update now, check for the Enroll now prompt, and either claim a year of security updates or move to Windows 11 on a supported device. Delay increases risk and limits choices. (support.microsoft.com)
Source: Forbes ‘Last Update’ — All Microsoft Windows 10 Users Must Act Now
 

Microsoft is giving a time‑boxed lifeline: if you need to keep a Windows 10 PC protected after October 14, 2025, you can enroll eligible machines in the consumer Extended Security Updates (ESU) program to receive security‑only patches through October 13, 2026 — but enrollment has strict technical and account requirements, a phased rollout, and important privacy and compatibility trade‑offs to weigh. (microsoft.com)

Laptop on a desk promoting Windows Extended Security Updates (ESU) with an Enroll Now button.Background / Overview​

Windows 10 reaches its official end of support on October 14, 2025. After that date Microsoft will stop delivering routine feature updates, quality updates, and general technical support for Windows 10. To give consumers a short‑term option to stay protected while they migrate, Microsoft published a consumer ESU pathway that delivers security‑only updates for a single additional year (through October 13, 2026) for eligible devices. That ESU pathway differs from the older enterprise ESU program (which could be purchased for multiple years and used by organizations). (microsoft.com)
Microsoft has also clarified that some components will continue to receive updates beyond the Windows‑10 lifecycle: Microsoft 365 (Office) apps and Microsoft Defender’s security intelligence/definition updates are scheduled to be supported for a longer window (Microsoft’s published guidance says Microsoft 365 Apps security updates will continue through October 10, 2028, and Microsoft has indicated Defender updates will remain available through at least October 2028). These are separate from Windows servicing and do not change the operating‑system lifecycle. (learn.microsoft.com)

Who is eligible for the consumer ESU?​

Eligibility is narrow and must be confirmed before attempting enrollment:
  • Your device must be running Windows 10, version 22H2 (Home, Pro, Pro Education, or Workstation editions are eligible). Enterprise/volume‑license devices, domain‑joined or MDM‑managed systems, kiosks, and Entra‑joined devices are excluded from the consumer pathway. (microsoft.com)
  • All latest cumulative updates and servicing stack updates must be installed — Microsoft published a specific August 12, 2025 cumulative (commonly referenced as KB5063709) that includes fixes addressing ESU enrollment issues; installing that update improves the chance the enrollment UI appears and resolves early wizard crashes. (pureinfotech.com)
  • You must sign in with a Microsoft Account (MSA) that has administrator rights on the PC; local accounts are not accepted for consumer ESU enrollment — the entitlement is tied to the MSA and can be reused across devices associated with that account (up to 10 eligible devices). (microsoft.com)
These rules are strict: if your machine doesn’t run 22H2, or if it’s managed by enterprise IT, you’ll need the separate enterprise ESU channels or a migration plan instead. (microsoft.com)

What ESU delivers — and what it does not​

  • ESU provides security‑only updates designated Critical or Important by Microsoft’s Security Response Center (MSRC). It does not include feature updates, non‑security reliability fixes, driver updates, firmware updates, or general product support. Treat it as a temporary protective layer, not a replacement for staying on a supported OS. (microsoft.com)
  • Microsoft 365 Apps and Microsoft Defender updates are handled separately: Microsoft has committed to continue delivering security updates for Microsoft 365 Apps on Windows 10 through October 10, 2028, and indicated Microsoft Defender security intelligence updates will be available through at least October 2028. These continuations help maintain protection for Office and antivirus detections, but they do not restore the full layer of OS security maintenance that would come from continuing Windows servicing. (learn.microsoft.com)

How to enroll: step‑by‑step (consumer)​

The ESU enrollment flow is integrated into the Windows Update settings and is intended to be simple — if your PC meets the prerequisites and the enrollment rollout has reached your device. The high‑level steps below mirror the built‑in wizard and reflect the consumer experience at scale. When in doubt, confirm prerequisites first. (pureinfotech.com)
  • Verify Windows version and updates
  • Open Settings → System → About and confirm Windows 10, version 22H2. If not on 22H2, update first.
  • Open Settings → Update & Security → Windows Update and click Check for updates. Install any pending updates and reboot until no further updates are pending. Ensure KB5063709 (or a later cumulative update) is installed. (pureinfotech.com)
  • Sign in with a Microsoft Account (MSA)
  • The user enrolling the device must be signed in with an MSA that is an administrator of the PC. The ESU entitlement is attached to that MSA and can be used on up to 10 eligible devices linked to the same account. If you use a local account, you’ll be prompted to sign in to an MSA during the wizard. (microsoft.com)
  • Open Windows Update and launch the ESU wizard
  • In Settings → Update & Security → Windows Update you should see a notification or an Enroll now link that references Windows 10 support ending in October 2025. If you do not see the option, the rollout is staged and you may need to wait or re‑check after installing the required cumulative updates. (pureinfotech.com)
  • Choose an enrollment option in the wizard
  • Free (OneDrive backup/Windows Backup) — enable the Windows Backup/PC settings sync to OneDrive (requires MSA). This route is free but depends on your OneDrive quota (5 GB free tier). If your settings backup exceeds free storage, you’ll need to free space or pay for more storage.
  • Microsoft Rewards — redeem 1,000 Microsoft Rewards points if you have them. This option has worked for many users but has seen intermittent redemption issues during early rollout.
  • Paid — purchase a one‑time ESU entitlement (listed by Microsoft as valued at $30 USD) through the Store in the wizard. The purchase covers up to 10 eligible devices tied to the same MSA. Pricing may vary by market. (microsoft.com)
  • Complete the wizard and confirm enrollment
  • Follow the on‑screen steps for the chosen method. After completion you should see a confirmation in Windows Update (for example, “Your PC is enrolled to get Extended Security Updates” and ESU‑labeled updates appearing in update history). If enrollment fails, install the August 2025 cumulative (KB5063709), reboot, and retry — the patch fixed early wizard crashes. (pureinfotech.com)

Troubleshooting the ESU enrollment flow​

  • The ESU enrollment UI has been phased to users (Insiders first, then broader channels). If you meet prerequisites but don’t see the “Enroll now” option, wait a short time and re‑check Windows Update after installing KB5063709. Microsoft documented a specific fix in that cumulative for a wizard crash, and community reporting confirms the update resolves many enrollment problems. (pureinfotech.com)
  • KB5063709 specifics: it’s an August 12, 2025 cumulative (build 19045.6216 for 22H2) that addresses ESU enrollment wizard issues and contains other stability and Secure Boot anti‑rollback protections. Installing it is a practical prerequisite. Some users reported profile or other post‑install issues with the patch — follow standard update troubleshooting and consult Microsoft support resources if needed. (pureinfotech.com)
  • If the wizard prompts for an MSA and you prefer not to permanently convert your device from a local account, you can sign into the MSA for enrollment, complete the ESU activation, and then switch back to a local account. The ESU entitlement remains attached to the MSA, not the local profile; enrolment should hold even if you later revert to a local account. Confirm your enrolled status in Windows Update afterwards.

Privacy, storage, and practical considerations​

  • The free OneDrive route requires enabling Windows Backup / settings sync to OneDrive. OneDrive’s free tier is 5 GB; settings backups are usually small, but if you have extensive app credentials or profile data synced, you may exceed that limit and be forced to buy more storage or choose the paid/rewards option. Consider whether you are comfortable tying the ESU entitlement to your MSA and its cloud backup.
  • The ESU entitlement is tied to the Microsoft Account (not the device). That means one MSA — once it holds the ESU entitlement — can enroll up to 10 eligible consumer devices. This is convenient for households but creates a single point of entitlement management. Keep your MSA secure (strong password, MFA) if you plan to use it for multiple devices. (microsoft.com)
  • The ESU is a short‑term mitigation. It covers security fixes only and deliberately excludes feature updates, driver/firmware updates, and general technical support. Plan a migration path: upgrade to a supported Windows 11 build if your hardware qualifies, or prepare to replace unsupported hardware. Consider enterprise ESU channels if you are an organization with longer‑term needs. (microsoft.com)

Pricing and alternatives​

  • Microsoft lists the consumer ESU value as $30 USD for the one‑year entitlement (one MSA can use that purchase across up to 10 eligible devices). For organizations, legacy enterprise ESU pricing historically started higher and offered up to three years of coverage with escalating per‑year pricing. Multiple news outlets and product pages documented the $30 consumer valuation. If you don’t want to use a Microsoft Account or OneDrive, the paid purchase is the fallback — but note the MSA requirement still applies. (microsoft.com)
  • Alternatives to ESU:
  • Upgrade the device to Windows 11 if it meets hardware requirements (TPM 2.0, secure boot, CPU compatibility). This is the only path to continue receiving full OS feature, quality, and security updates beyond the Windows 10 lifecycle.
  • Replace the device with a newer PC that ships with Windows 11.
  • Move to a different OS (Linux, ChromeOS) for older hardware that can’t upgrade to Windows 11 — but plan application compatibility and data migration carefully.

Risks, limitations, and things to watch​

  • ESU is not a long‑term solution. Microsoft designed it as a one‑year bridge for consumers; enterprises historically could buy multiple years, but the consumer pathway explicitly covers one year only. Treat ESU as breathing room, not a permanent fix. (microsoft.com)
  • Enrollment is phased. If you wait until the last possible moment, you risk rollout delays, enrollment glitches, or missing pre‑EOL fixes that arrive just before October 14, 2025. Install the August 2025 cumulative (KB5063709), sign in with your MSA, and enroll early if you want the most reliable coverage. (pureinfotech.com)
  • Privacy and account binding: ESU entitlements are bound to an MSA and may require using OneDrive for the free path. If you deliberately avoid cloud accounts or MSAs for privacy reasons, ESU will force a policy change on your device — you can revert to a local account after enrollment, but the entitlement remains tied to the MSA and your backup metadata will have been synced during the process. Evaluate your comfort level and back up sensitive data independently before enrolling.
  • Defender and Office caveats: While Microsoft has committed to continued Defender security intelligence updates and Microsoft 365 Apps security updates through 2028, those continuations are limited in scope and separate from Windows OS updates. Expect application compatibility and driver support to decline for older hardware over time, and don’t conflate Defender definitions with full OS security servicing. Where there is public ambiguity about dates or scope, treat non‑Microsoft‑platform reporting carefully and verify in Microsoft’s official lifecycle pages. (learn.microsoft.com)

Practical checklist before you enroll​

  • 1.) Confirm Windows 10 version 22H2.
  • 2.) Run Windows Update until no more updates are pending; ensure KB5063709 (or later) is installed and rebooted. (pureinfotech.com)
  • 3.) Sign in to the PC with a Microsoft Account that’s an admin on the device. (microsoft.com)
  • 4.) Back up your files to an independent location (external drive or alternate cloud) — do not rely only on OneDrive settings sync.
  • 5.) Open Settings → Update & Security → Windows Update and click Enroll now when the option appears; follow the wizard and choose your enrollment method.

Real‑world notes and coverage verification​

  • Once enrolled, confirm that ESU‑labeled updates appear in View update history and that the device shows the ESU enrollment confirmation in Windows Update. Enrollment entitlements can be viewed through the Microsoft account associated with the purchase or redemption. If updates don’t appear, verify the build number, check that KB5063709 is present, and consult Windows Update Troubleshooter. (windowsforum.com)
  • The consumer ESU rollout encountered initial bugs that blocked the enrollment wizard for some users; Microsoft’s August 12, 2025 cumulative (KB5063709) addresses the most common failures. Those who experienced the earlier crash found the fix restored the enrollment path. If you still see problems after applying KB5063709, Microsoft’s support Q&A and community channels are the recommended escalation path. (pureinfotech.com)

Critical analysis — strengths and concerns​

Strengths​

  • The consumer ESU program is pragmatic: it recognizes that a large pool of devices will remain on Windows 10 at EOL and gives consumers a simple, time‑boxed way to keep receiving security patches for one year. For households with multiple eligible devices, the MSA‑tied entitlement (up to 10 devices) and the free OneDrive route create practical, low‑cost options. (microsoft.com)
  • Microsoft’s extension of Microsoft 365 Apps security updates and continued Defender security intelligence into 2028 reduces immediate exposure on the application layer and for malware detection — useful if you rely heavily on Office and Defender. This staggered approach tries to balance migration pressure with practical security continuity. (learn.microsoft.com)

Concerns and risks​

  • Account binding and privacy trade‑offs. Requiring an MSA (even for paid purchases) is a notable policy shift and a privacy surface increase for users who prefer local accounts. Although you can switch back to a local account after enrollment, the ESU entitlement remains attached to the MSA and the enrollment flow may have required syncing settings to OneDrive during the free path. This will raise concerns for privacy‑conscious users.
  • One‑year timebox. The consumer ESU window is strictly limited to one year (until October 13, 2026). This is short and non‑renewable for consumers; it’s a bridge to migration, not a long‑term support strategy. Organizations needing longer timelines must pursue enterprise channels and will face higher per‑device costs. (microsoft.com)
  • Rollout fragility. The phased UI rollout and the initial KB5063709 enrollment bug made the experience inconsistent across devices. Users waiting until the last minute risk encountering rollout delays or edge case problems that could leave them unprotected at the EOL date. Act early. (pureinfotech.com)
  • False sense of permanence. Defender signature and Microsoft 365 updates extending to 2028 are helpful, but they do not substitute for OS‑level patching. Relying on ESU as a permanent solution will create increasing compatibility and security debt as drivers and firmware age and as new attack vectors target OS components. (learn.microsoft.com)

Bottom line and recommendation​

If you cannot upgrade to Windows 11 (hardware incompatibility or application constraints) and you want to remain protected immediately after October 14, 2025, enroll eligible Windows 10 devices in the consumer ESU program — but do it early, install the August 12, 2025 cumulative (KB5063709), sign in with a Microsoft Account you control, and back up your data independently first. ESU is a temporary, security‑only bridge; treat it as breathing room to plan and execute a migration to a supported platform (Windows 11 or replacement hardware) rather than as a permanent endpoint. (microsoft.com)

Quick reference (one‑page summary)​

  • End of Windows 10 mainstream support: October 14, 2025. (microsoft.com)
  • Consumer ESU coverage window: through October 13, 2026 (security updates only). (microsoft.com)
  • Must be running: Windows 10, version 22H2 with latest cumulative updates (including KB5063709 or later). (pureinfotech.com)
  • Account requirement: Microsoft Account (MSA) with admin rights; entitlement is tied to the MSA and reusable on up to 10 eligible devices. (microsoft.com)
  • Enrollment routes: Free (OneDrive/Windows Backup), Microsoft Rewards (1,000 points), Paid (~$30 USD) — purchase covers up to 10 devices on the same MSA. (microsoft.com)
  • Defender / Microsoft 365 apps: Microsoft will keep Microsoft 365 Apps security updates and Defender security intelligence updates available past Windows EOL (Microsoft documented Microsoft 365 Apps through Oct 10, 2028; Defender updates are expected through at least Oct 2028 per Microsoft announcements). Verify the specific product lifecycle pages for exact scope. (learn.microsoft.com)
Enroll cautiously, back up aggressively, and use ESU only as a finite migration window — not as an excuse to indefinitely postpone moving to a supported platform. (microsoft.com)
Source: Windows Central How to use Windows 10 ESU to keep getting updates after October 2025
 

Microsoft has given Windows 10 users a narrow, conditional lifeline: you can keep receiving security updates after the platform’s official end-of-support date, but only if you complete a short, time-sensitive checklist before October 14, 2025.

Isometric infographic showing Windows Extended Security Updates enrollment and upgrade paths.Background / Overview​

Microsoft has set a firm end-of-support date for Windows 10: October 14, 2025, after which routine feature updates, quality fixes, and the normal stream of free security patches for consumer Windows 10 editions will cease. This is an inflection point that turns long-running upgrade debates into immediate actions for households, small businesses, and unmanaged devices.
In response, Microsoft introduced a consumer Extended Security Updates (consumer ESU) program that effectively buys eligible Windows 10 devices one additional year of security-only patches. That ESU coverage runs through October 13, 2026, but enrollment must be completed before the October 14, 2025 cutoff in order to be in the staged rollout and reliably receive updates.
This article lays out a practical, prioritized plan for users who want to stay on Windows 10 past the cutoff—what to do now, how to enroll, the costs and eligibility rules, technical caveats to watch for, and safer long-term alternatives. Analysis highlights both the strengths of Microsoft’s approach (an affordable stopgap) and the risks (privacy trade-offs, support limits, and firmware pitfalls).

What Microsoft is offering — the facts you must know​

  • Microsoft will stop mainstream security and quality updates for Windows 10 on October 14, 2025.
  • The consumer ESU is a one‑year, security‑only bridge that extends patching through October 13, 2026 for enrolled systems.
  • Enrollment is performed through an “Enroll now” wizard inside Settings → Update & Security → Windows Update; the rollout is staged and depends on prerequisite updates being installed.
  • Consumer enrollment options include three routes: sync Windows Backup settings to a Microsoft Account (free), redeem 1,000 Microsoft Rewards points (free), or pay a one‑time payment of $30 (local currency equivalent; covers up to 10 devices tied to one Microsoft Account).
  • Enterprise ESU remains available via volume licensing with a higher and tiered price (reporting shows a starting point of about $61 per device for year one and a doubling schedule for later years). Treat enterprise pricing as subject to Microsoft licensing terms.
These points are the most load-bearing facts for planning. If any of them change (pricing, dates, enrollment mechanics) the practical advice below may need adjustment, so confirm the exact enrollment experience on your device before the cutoff.

Why this matters: strengths and limitations of consumer ESU​

Strengths — a pragmatic safety net​

  • Affordable short-term protection: The consumer ESU’s free paths and low-cost paid path make it broadly accessible for households and small groups of devices. That reduces immediate cost pressure and lowers the barrier for users who need time to migrate.
  • Simplicity for non-enterprise users: The staged, account-based enrollment is visible inside Windows Update and gives most consumers a one-click-ish path to remain patched for critical vulnerabilities.
  • Time to plan and test: The ESU year is explicitly meant to be breathing room—use it to test app compatibility on Windows 11, budget for hardware upgrades, or evaluate OS alternatives.

Limitations and trade-offs — what the ESU does not give you​

  • Security-only updates: ESU delivers only security patches (Critical and Important) and does not include feature updates, quality-of-life fixes, or general technical support. That means older platform limitations remain.
  • Microsoft account requirement for free enrollment: The no-cost ESU routes require signing in with a Microsoft Account (MSA) and enabling Windows Backup/OneDrive in some scenarios. That pushes users toward deeper cloud integration and raises legitimate privacy or lock-in concerns.
  • Short window and staged rollout: Enrollment is phased—waiting until the last minute risks missing a staged rollout or encountering enrollment bugs. Act early.
  • Not available for all device scenarios: Domain-joined, enterprise-managed, kiosk-mode, or certain MDM-managed devices may be excluded from the consumer ESU path and must use enterprise channels.

The essential checklist — what to do before October 14, 2025​

This section gives a prioritized, step-by-step plan. Follow these steps in order to minimize risk.
  • Confirm your timeline and intent. Decide whether you will:
  • Enroll in consumer ESU as a temporary measure to stay on Windows 10 for up to one year, or
  • Upgrade to Windows 11 now where supported, or
  • Migrate to a non‑Windows platform or cloud-hosted Windows environment.
  • Update Windows to the required baseline:
  • Ensure your device is running Windows 10, version 22H2 and install every pending cumulative update (install Windows Update until it reports “no more updates”). A specific cumulative published in August 2025 addresses enrollment visibility and reliability.
  • Make robust backups now:
  • Create a full disk image (system image) and at least one independent copy of personal data (external drive + cloud). Having a rollback path is essential if enrollment or subsequent changes cause problems.
  • Prepare a Microsoft Account:
  • If you intend to use the free consumer ESU path, sign into Windows with an MSA and enable Windows Backup/OneDrive settings as required. Local-only accounts will not qualify for that free enrollment route.
  • Check Settings → Update & Security → Windows Update:
  • Look for the “Enroll now” consumer ESU wizard. If it’s not visible, confirm updates are fully applied and check again later—the rollout is staged and depends on prerequisite patches.
  • Choose an enrollment route and complete the wizard:
  • Options include OneDrive backup (free), redeeming 1,000 Microsoft Rewards points (free), or paying a one-time $30 for coverage across up to 10 devices tied to one MSA. Complete the wizard before October 14, 2025 to maximize enrollment reliability.
  • Verify ESU entitlement and patching:
  • After enrollment, confirm that monthly security updates arrive and install correctly. Keep a watch for firmware or driver updates from your hardware vendor—these can be required for long-term stability.
  • Treat ESU as a runway, not a permanent destination:
  • Use the ESU year to finalize migration plans—upgrade eligible machines to Windows 11 after testing, budget for new hardware, or move specific workloads to cloud-hosted Windows if needed.

Enrollment mechanics and costs — practical details​

  • Consumer ESU enrollment is device-bound via the Microsoft Account and ties to a 10-device entitlement per MSA for the paid/promo routes. That can make a $30 one-time purchase economically sensible for families.
  • Free enrollment options exist but require specific preconditions: syncing Windows Backup settings to OneDrive or redeeming Microsoft Rewards points. These paths lower cost but increase cloud dependency.
  • Enterprise ESU remains the route for domain-joined and managed fleets; reported enterprise pricing begins around $61 per device for year one with per-device costs doubling in subsequent years for multi-year ESU buys. Enterprise licensing terms vary and should be discussed with volume-licensing representatives.
Caveat: pricing and program details are subject to Microsoft’s terms and local taxes. Verify the final prompts shown in the Settings wizard on your PC before transacting.

Technical caveats — firmware, drivers, and unsupported upgrades​

  • Firmware and Secure Boot certificate lifecycles: August 2025 patches flagged a few firmware or UEFI certificate issues that could affect devices later in the ESU window. Inventory firmware versions and apply vendor UEFI/BIOS updates where available. Failing to maintain firmware can leave a machine brittle even if it receives security patches.
  • Unsupported Windows 11 installs: Community workarounds (registry flags, modified ISOs, LabConfig bypasses) can allow Windows 11 installation on older hardware, but Microsoft has explicitly warned that unsupported devices may be excluded from updates going forward. Avoid relying on hacks for long-term security.
  • Domain-joined and managed devices: Consumer ESU often excludes enterprise-managed endpoints; organizations must use volume licensing ESU options or cloud-hosted desktops. Plan enterprise migrations separately from the consumer playbook.

Alternatives to staying on Windows 10​

For many users, ESU should be used only to buy time. Consider these alternatives and their trade-offs:
  • Upgrade to Windows 11 on supported hardware:
  • Pros: Full ongoing security updates, feature improvements, and support for future Microsoft innovations.
  • Cons: Older PCs may not meet Secure Boot, TPM, or CPU requirements; some software/hardware compatibility testing is required.
  • Replace or upgrade hardware:
  • Pros: A new Windows 11 machine will be supported for years and likely deliver better performance and battery life.
  • Cons: Cost and configuration time; some users may prefer to prolong the life of older hardware.
  • Move to Linux (lightweight distributions) or ChromeOS Flex:
  • Pros: Lower-cost, minimal maintenance choices for aging hardware; many desktop needs are covered (web, email, documents).
  • Cons: Compatibility gaps for Windows-only applications and a learning curve for some users.
  • Use cloud-hosted Windows (Windows 365, Azure Virtual Desktop):
  • Pros: Keeps Windows workloads on supported infrastructure while enabling thin clients or older endpoints to act as terminals.
  • Cons: Ongoing cloud expenses and dependence on network connectivity and identity integration.

Enterprise and mixed fleets — what IT teams must plan​

  • Inventory first: identify domain-joined devices, MDM-managed endpoints, kiosk devices, and any devices that must remain on-premises for regulatory reasons. Those are likely to be excluded from consumer ESU and require enterprise licensing or other remediation.
  • ESU procurement for enterprise: budget for per-device ESU licensing (reported starting points are a meaningful number to include in forecasts) and consider multi-year strategies if migration cannot be completed within 12 months.
  • Firmware/driver coordination: coordinate with OEMs to ensure UEFI/BIOS updates are available and scheduled; unresolved firmware issues can undermine the protection ESU provides.
  • Test unsupported upgrades cautiously: avoid relying on registry bypasses or unofficial ISOs in production; Microsoft may refuse updates to unsupported devices. Plan remediation rather than hacks.

A power-user technical checklist​

  • Verify Windows version: Confirm Windows 10, version 22H2 is installed. Patch to the latest cumulative updates.
  • Check for the KB that surfaced the ESU enrollment fixes (install any August 2025 cumulative that your device requires to surface the wizard).
  • Create a full, restorable system image and an independent file backup. Test the image to ensure it boots (or at least mounts) on another environment.
  • Audit firmware and drivers: run vendor tools and update UEFI/BIOS where available; document version baselines for future troubleshooting.
  • Inventory apps: run compatibility tools (e.g., Microsoft’s PC Health Check and app compatibility tests) to determine which machines should be prioritized for Windows 11 upgrades.

Real-world scenarios and recommended action paths​

If your PC is Windows 11‑eligible and you depend on it daily​

  • Recommendation: Test a Windows 11 upgrade in a controlled way, validate app compatibility, and upgrade before October 14 if possible. Use ESU only if there’s a short-term blocker.

If your PC is older and not Windows 11‑eligible​

  • Recommendation: Enroll in consumer ESU (use the free Microsoft Account route if acceptable) for a one‑year bridge. During that year, plan either an OS migration (Linux / ChromeOS Flex) or hardware replacement.

If you manage multiple devices for a family​

  • Recommendation: Consider the $30 one‑time purchase if it covers the household (up to 10 devices per MSA) — it’s often simpler and cheaper than juggling rewards points or cloud backup quotas.

If you run a small business or a mixed environment​

  • Recommendation: Treat ESU as a stopgap and prioritize business-critical workloads for migration. Enterprise ESU licensing may apply for domain-joined machines; discuss volume-licensing ESU with a reseller.

Risks and the ethical/operational trade-offs​

  • Privacy and lock-in: The free consumer ESU routes intentionally encourage Microsoft Account sign-in and OneDrive sync, increasing dependency on Microsoft cloud services. Users with privacy concerns must weigh this trade-off carefully.
  • False sense of permanence: ESU is security-only and short. Relying on it as a long-term plan can lead to brittle systems and growing incompatibilities. Use the year to act, not to defer indefinitely.
  • Last-minute enrollment risk: Staged rollouts, prerequisite KB requirements, and firmware issues create a higher failure risk for late enrollers. Early action reduces the chance of being unpatched after October 14.
  • Unsupported upgrade hazards: Installing Windows 11 on unsupported hardware using community bypasses can cut you off from future updates. That may expose devices to unpatched vulnerabilities despite being on a newer OS.
Flag: some detailed price points and exact technical KB identifiers may vary by region and Microsoft’s final rollout prompts. Confirm the exact messages and prices shown inside Settings → Update & Security on your device before relying on payment or enrollment mechanics.

Quick one‑page action plan (for the impatient)​

  • Update to Windows 10 version 22H2 and install all pending updates now.
  • Make a full system image and at least one independent backup.
  • Sign into a Microsoft Account and enable Windows Backup/OneDrive if you plan to use the free ESU path.
  • Open Settings → Update & Security → Windows Update; look for “Enroll now” and complete the wizard before October 14, 2025.
  • Use the ESU year to test Windows 11 upgrades, evaluate hardware replacement, or plan migration to alternate OS/cloud options.

Conclusion​

Microsoft’s consumer ESU is a pragmatic and practical bridge for those who cannot immediately move to Windows 11, offering a one‑year extension of security updates if enrolled before October 14, 2025. The program’s strength is its accessibility—free enrollment routes and a low-cost paid option—while its limits are equally clear: ESU is security-only, short, and nudges users toward Microsoft cloud services.
Act now: update to Windows 10 22H2, install all updates, back up thoroughly, sign into a Microsoft Account if you accept that trade-off, and complete the “Enroll now” wizard inside Windows Update before the cutoff. Use the ESU year as deliberate runway time to migrate workloads, replace unsupported hardware, or deploy alternate OS strategies. Waiting risks being left on an unpatched platform or scrambling under a last‑minute rollout—neither is a good place to be for security or peace of mind.
Source: PCMag Australia Want to Stay on Windows 10? Do This Before Support Ends on Oct. 14
Source: Pocket-lint Do this now if you plan to stick with Windows 10 past October 14
 

Microsoft’s decision to let eligible Windows 10 users keep receiving security-only updates for a single extra year has turned a firm end-of-support deadline into a short, conditional lifeline — but it comes with precise technical gates, privacy trade-offs, and a hard expiration that should make anyone delaying migration plan deliberately.

October 14, 2025: ESU security updates promo for 1,000 Microsoft Rewards Points.Background​

Microsoft set a clear end-of-support date for Windows 10: October 14, 2025. On that date consumer editions of Windows 10 will stop receiving routine feature updates, quality updates, and the normal cadence of security fixes. Microsoft followed that announcement with a narrowly scoped consumer Extended Security Updates (ESU) pathway designed to provide a one-year bridge for eligible devices, running from October 15, 2025 through October 13, 2026. The consumer ESU offering is explicitly security-only: it delivers Critical and Important security patches but does not include new features, non‑security bug fixes, or general technical support.
This consumer ESU pathway mirrors enterprise-style paid ESU programs in intent — buying time to migrate — but the mechanics and pricing (and now the availability of free enrollment routes) are different and aimed at households and single users rather than corporate deployments. The program is limited in duration and scope; Microsoft intends it as a temporary buffer to avoid leaving millions of devices immediately exposed.

Who is eligible — and who isn’t​

Eligible devices​

  • Windows 10, version 22H2 (Home, Pro, Pro Education, and Workstation editions).
  • Devices must have the latest cumulative updates installed (Microsoft pushed an August 2025 cumulative update to fix enrollment issues and surface the ESU enrollment wizard).

Ineligible devices and configurations​

  • Domain-joined enterprise devices, most organizational MDM-managed machines, kiosk-mode devices, and devices joined to Azure AD in enterprise-managed fashions are not eligible for the consumer ESU path. Those devices should rely on corporate volume-licensing ESU programs or work with IT.

Account requirement​

  • Enrollment requires a Microsoft Account (MSA). Local accounts will not qualify for the consumer ESU enrollment wizard. That account requirement is significant: it increases friction for privacy-conscious users and households that have deliberately avoided centralizing logins with Microsoft.

What Microsoft is offering (the three routes)​

When Microsoft enabled consumer ESU enrollment, it provided three enrollment options for eligible users. Each achieves the same result — granting access to the ESU coverage tied to your Microsoft Account — but the mechanics and incidental costs differ.
  • Enable Windows Backup / settings sync and store a Windows Backup to OneDrive. This route has no additional Microsoft cash charge from the ESU program itself, but you may need to purchase extra OneDrive storage because the free OneDrive tier is only 5 GB by default. The backup/sync requirement also ties your device to cloud backup and account-centric settings.
  • Redeem 1,000 Microsoft Rewards points. If you already use Microsoft services and have accumulated Rewards points, you can redeem 1,000 points to obtain ESU coverage. Earning those points may require active use of Microsoft services (search via Bing, Microsoft Edge activity, Xbox activity, etc.). Some promotion examples (reported by outlets and users) suggest actions like installing the Bing mobile app can quickly add points — but point-earning mechanics and values change frequently. Treat any single-point example as illustrative, not permanent.
  • Pay a one-time fee (about $30 USD) for a one-year ESU license that covers up to 10 eligible devices associated with the same Microsoft Account. This is the simplified paid path for those who prefer an immediate transaction without altering backup settings or relying on Rewards.
All three routes require the same technical prerequisite steps (22H2, latest updates, and an MSA) and the same enrollment surface inside Settings → Update & Security → Windows Update (the staged “Enroll now” wizard).

Why people are sticking with Windows 10 (and why Microsoft created ESU)​

Several practical and technical realities explain why a sizeable portion of the installed base is not simply moving to Windows 11:
  • Stricter hardware requirements for Windows 11 (TPM 2.0, Secure Boot, and a list of supported processors) leave many older PCs technically ineligible for an official upgrade path. While community workarounds and registry bypasses exist, Microsoft considers such installs unsupported and may withhold future updates for those devices.
  • Replacing or upgrading hardware has real cost and logistics implications for households and small offices. In many cases, swapping a motherboard, CPU, and RAM is not practical, and buying a new PC can be deferred if security updates remain available.
  • Organizations and users need time to test critical applications and workflows against Windows 11, particularly where specialized apps, drivers, or bespoke tools exist. ESU is designed to be breathing room for those migrations, not a permanent alternative.
Microsoft’s consumer ESU is therefore a pragmatic, if constrained, compromise: it avoids leaving devices completely exposed on October 15, 2025 while encouraging migration to a modern, supported OS in the medium term.

The hard technical checklist (what to do now)​

If you are planning to rely on the consumer ESU route — whether free or paid — these steps are essential. The checklist below is deliberately concrete.
  • Confirm your edition and version: open Settings → System → About and verify you are running Windows 10, version 22H2 (Home, Pro, Pro Education, Workstation). If you’re not on 22H2, install the feature update to bring the machine to that version.
  • Install all pending Windows Updates now, including the August 2025 cumulative update (these updates resolved enrollment wizard visibility issues). Reboot as required. The consumer ESU Enrollment wizard is rolled out in stages and often requires current cumulative updates to appear.
  • Create a Microsoft Account (MSA) or sign in with an existing one. Local accounts will not enable consumer ESU enrollment. Consider the privacy implications of linking your device to an MSA.
  • Make full backups before you change system settings or attempt enrollment. Create at minimum:
  • A full disk image on external media; and
  • An independent cloud backup or off-site copy of critical files. ESU is a short-term safety net, not an excuse to skip backups.
  • Check Windows Update: go to Settings → Update & Security → Windows Update. If the “Enroll now” ESU wizard is visible, follow the prompts and select your enrollment route (OneDrive backup, Rewards redemption, or one-time purchase). If it’s not visible, confirm updates are installed and wait — the rollout is phased.
Follow these steps well before October 14, 2025. If you wait until after the cutoff and have not enrolled, your device will be unprotected until you enroll, and Microsoft’s coverage in that scenario is less convenient (you can still enroll during the consumer ESU window, but practical availability and rollout reliability are best when you act early).

Enrollment options — detailed pros and cons​

OneDrive Backup (free route, may require storage purchase)​

  • Pros: No additional cash outlay for ESU itself; integrates with Microsoft’s cloud backup features; works across multiple devices tied to the same MSA.
  • Cons: The free OneDrive tier is only 5 GB — additional storage purchases are likely if you intend to back up a full system image or large user profiles. Enabling backup ties data to Microsoft cloud services and requires an MSA.

Redeem Microsoft Rewards points (1,000 points)​

  • Pros: No cash payment if you already have the points; straightforward for users who are already active in Rewards.
  • Cons: Getting to 1,000 points can be time-consuming unless you already use Microsoft services heavily. Rewards programs, point values, and promotions are subject to change. Be cautious about treating a single promotional example (e.g., 500 points for installing an app) as permanent.

One-time purchase (~$30 for one year)​

  • Pros: Simple, immediate, covers up to 10 eligible devices tied to the MSA. No change to backup settings and minimal account configuration.
  • Cons: It’s a paid stopgap — not a long-term fix. Pricing and regional taxes may vary.

What ESU does — and crucially, what it does not do​

  • ESU provides security patches designated Critical and Important during the one-year window; it does not provide feature updates, general bug fixes, or comprehensive technical support. Treat ESU as a security-only safety net.
  • Microsoft 365 (Office apps) will continue to work on Windows 10 during staggered support periods, but with limitations: feature updates and full support channels are being curtailed and timelines differ by channel. For example, Microsoft 365 Apps in Current Channel were scheduled for feature servicing through parts of 2026 and security-only support extends beyond ESU in some scenarios — check your tenant/channel specifics. These dates are time-sensitive and depend on channel and licensing; treat any specific date as conditional and verify for your subscription.

Risks, trade-offs, and privacy considerations​

  • Account-centric enrollment: consumer ESU ties coverage to a Microsoft Account. Users who avoid MSAs for privacy reasons must weigh whether to create and use an MSA for a limited security period. That account requirement is non-negotiable for consumer ESU.
  • Short duration: ESU is explicitly a one-year bridge. Use that time to migrate to Windows 11 or another supported platform — ESU is not a plan to indefinitely defer modernization.
  • No functional updates: you will not receive feature improvements or most bug fixes. Some software and drivers might become incompatible over time, and third-party vendors can drop support for older OS versions, creating practical issues unrelated to Microsoft’s security patching.
  • Potential extra cost: even the “free” OneDrive route may require a paid OneDrive plan to host a full backup. The Rewards route can be free only if you already have the points. The paid route is a direct cost but covers multiple devices—useful for households.
  • Unsupported Windows 11 workarounds: installing Windows 11 on unsupported hardware via registry bypasses or community tools remains an option, but Microsoft may prevent future updates to those machines and such setups can be unstable. This is a riskier path than using ESU while planning a proper migration.

Practical migration strategies during the ESU year​

Use ESU time deliberately. Here’s a pragmatic roadmap to make the most of the one-year bridge:
  • Short term (now–September 2025): Confirm eligibility, update to 22H2, create robust backups, and decide which ESU enrollment route you prefer. If you plan to buy time, enroll early.
  • Near term (October 2025): If you intend to remain on Windows 10 beyond October 14, enroll in ESU promptly. Verify security patches arrive in Windows Update history and monitor the device for compatibility issues.
  • Medium term (through 2026 ESU window): Test mission-critical apps on Windows 11 (or alternate OS), budget for hardware refreshes where needed, and take the ESU year to move workflows to supported platforms. Treat ESU as breathing room, not a destination.

Decision framework — who should keep Windows 10 under ESU and who should not​

Use ESU if:
  • Your device genuinely cannot meet Windows 11 hardware requirements and replacing hardware immediately is impractical.
  • You require additional time to validate business-critical apps or complex workflows before migrating.
  • You prefer to buy a short, reasonably priced window to plan and budget a long-term move rather than rush hardware purchases.
Avoid ESU if:
  • You expect to rely on ongoing new features, driver fixes, or broad technical support beyond the one-year window. ESU will not meet those needs.
  • You are privacy-sensitive and refuse to use a Microsoft Account; the consumer ESU enrollment requires an MSA.
  • You operate in regulated environments or require a fully supported modern OS for compliance reasons; ESU’s short window and narrow scope are inadequate.

Common questions and clarifications​

  • Will Microsoft keep pushing this program beyond October 13, 2026? No public promise exists to extend the consumer ESU beyond the one-year window for individual users. Treat the window as fixed for planning purposes.
  • Can one ESU license cover multiple devices? Yes — a consumer ESU license tied to a single Microsoft Account can be applied to up to 10 eligible devices. That makes the paid route efficient for multi-device households.
  • What happens if I enroll after Oct. 14, 2025? Enrollment is allowed during the ESU window through October 13, 2026, but if you wait until after Oct. 14 and haven’t enrolled, your device will be unprotected until enrollment is completed and enrollment rollouts could be phased. Early enrollment is recommended for reliability.

Final analysis and recommendation​

Microsoft’s consumer ESU program is a well-targeted, short-duration solution that recognizes real-world constraints: many users run hardware that cannot easily be upgraded to Windows 11, and households need time to budget and test migrations. The three-path model (OneDrive backup, Rewards points, or one-time purchase) is flexible and intentionally low-friction for different user preferences.
That said, ESU is strictly a bridging strategy. It is not a substitute for moving to a modern, supported OS with active feature development and broader driver/device support. The account requirement, the lack of non‑security updates, and the one-year limit create practical and privacy trade-offs that each household must evaluate.
Actionable priorities:
  • Confirm 22H2 and install cumulative updates now so you are ready for the ESU enrollment wizard.
  • Create comprehensive backups and plan a migration timeline for 2026 at the latest.
  • Decide which ESU enrollment route fits your priorities: convenience (paid), zero cash (Rewards or OneDrive backup but with possible storage costs), or immediate migration to Windows 11 where hardware allows.
Treat ESU as the breathing room it is: a one-year safety valve that buys time for a considered transition. Act early, back up everything, weigh the privacy implications of using an MSA, and use the ESU year to migrate on your terms — not to postpone the decision indefinitely.
Source: PCMag Want to Stay on Windows 10? Do This Before Support Ends on Oct. 14
 

Microsoft has given Windows 10 users a narrow, conditional lifeline: you can keep receiving security updates after the OS’s official end-of-support date — but only if you complete a short, specific checklist and enroll in the consumer Extended Security Updates (ESU) pathway before the deadline. (support.microsoft.com)

Monitor shows Windows desktop with a calendar pop-up and an ESU security updates badge.Background​

Microsoft set a firm end-of-support date for Windows 10: October 14, 2025. On that date Microsoft will stop providing routine feature updates, quality updates, and normal technical assistance for consumer editions of Windows 10. For many households and small offices that cannot immediately move to Windows 11, Microsoft published a limited consumer ESU option that provides security-only updates for a single additional year — in effect extending critical and important security patches through October 13, 2026 for enrolled devices. (microsoft.com)
This consumer ESU path is explicitly narrow in scope: it delivers only security updates categorized by Microsoft’s Security Response Center (Critical and Important). It does not include new features, non-security bug fixes, or full technical support. Microsoft describes ESU as a short-term bridge to give users time to migrate to a modern, supported OS. (learn.microsoft.com)

Who is eligible — and what you must do to qualify​

Eligible devices and editions​

  • Devices must be running Windows 10, version 22H2 (Home, Pro, Pro Education, or Workstation editions). (learn.microsoft.com)
  • Devices must have the latest cumulative updates installed; Microsoft’s August 2025 cumulative included fixes that help the ESU enrollment flow surface correctly on eligible PCs.
  • The consumer ESU path is intended for personal-use devices. Domain-joined enterprise systems, kiosk-mode devices, or enterprise-managed MDM machines are excluded and should use the enterprise ESU channels instead. (microsoft.com)

Account and enrollment restrictions​

  • Enrollment requires signing into the Windows device with a Microsoft Account (MSA) that has administrator privileges. Local accounts will not qualify for consumer ESU enrollment. This is a significant change that affects privacy-conscious users who prefer local accounts. (support.microsoft.com)
  • Microsoft has opened a staged “Enroll now” wizard inside Settings → Update & Security → Windows Update; the option appears for eligible devices once the requisite cumulative updates are installed. (microsoft.com)

Timing and coverage window​

  • Enrolling gives you security-only patching coverage from October 15, 2025 through October 13, 2026. You can enroll after October 14, 2025, but doing so risks a gap in protection until enrollment completes. Microsoft recommends enrolling early to avoid that exposure. (microsoft.com)

How Microsoft is letting consumers get ESU (three enrollment paths)​

Microsoft provides three consumer enrollment routes — two free options and one paid option — all surfaced through the built-in enrollment experience in Settings. The choices are functionally equivalent in delivering the year of security updates; they differ only in how Microsoft validates eligibility or payment.
  • Redeem 1,000 Microsoft Rewards points. If you already have Rewards points, this is a free method to secure ESU for the account’s linked devices. (microsoft.com)
  • Sync your Windows Backup to Microsoft OneDrive (enable Windows Backup/settings sync to the Microsoft Account). Microsoft frames this as a no-cash option, though you may need to purchase additional OneDrive storage depending on the size of your backup and current 5 GB free limit. (microsoft.com)
  • Pay the one-time consumer ESU fee (valued at $30 USD per device, purchased through the Microsoft Store inside Settings). Microsoft notes a single ESU license can be applied to up to 10 eligible devices tied to the same Microsoft Account. (microsoft.com)
Nota bene: independent outlets and community reporting repeated these three options; however, specific Rewards mechanics (how many points awarded for individual actions) can change frequently and should be treated as variable. The claim that "downloading the Bing app alone nets 500 points" is an anecdote that may not be consistently reproducible and should be verified in your Rewards account before assuming you can meet the threshold that way. Treat points-based enrollment as possible but not guaranteed without checking your own account details.

Why some users are sticking with Windows 10​

  • Hardware limitations. Windows 11 imposes stricter hardware requirements (TPM 2.0, Secure Boot, and a list of supported CPU families). Many older PCs — especially those with 2nd- or 3rd-generation Intel chips or early AMD platforms — cannot upgrade without hardware changes. That reality leaves a sizable user base that prefers a supported security path rather than risky hacks.
  • Compatibility and stability. Some legacy applications and peripherals work better on Windows 10 today. IT pros and power users who must validate mission-critical software often need time to test Windows 11 before committing.
  • Cost and disruption. Replacing a family’s fleet of machines or performing motherboard-level upgrades is expensive and disruptive. ESU provides breathing room to budget and plan transitions without exposing systems to immediate new vulnerabilities.
That said, relying on ESU is a short-term decision; Microsoft intends it as a bridge, not a permanent alternative. Use the ESU year deliberately to plan migration paths, not as indefinite procrastination.

The trade-offs and risks you must understand​

Security scope is limited​

  • ESU delivers only Critical and Important security updates as defined by Microsoft’s Security Response Center. It does not include feature updates, non-security quality fixes, or general technical support. You may still face stability or reliability problems that would have been fixed by conventional quality servicing. (learn.microsoft.com)

Privacy and account trade-offs​

  • Enrollment requires a Microsoft Account and, in the OneDrive option, synchronization to Microsoft cloud services. This introduces vendor centralization and changes the privacy calculus for users who deliberately used local accounts to limit cloud linkage. Consider this trade-off carefully before enrolling. (support.microsoft.com)

Timing matters — avoid an exposure gap​

  • If you wait until after October 14, 2025 to enroll, your device will immediately be without Microsoft-delivered security updates until your enrollment completes. The ESU program remains open to enroll until October 13, 2026, but that doesn’t retroactively fill unpatched time. Plan to enroll before the cutoff to avoid an exposure window. (microsoft.com)

Unsupported Windows 11 workarounds are risky​

  • Community workarounds exist to install Windows 11 on hardware that fails Microsoft’s checks (registry toggles, modified ISOs, third-party tools). Microsoft does not support installations on unsupported hardware and has warned such devices may be blocked from receiving updates. Relying on unsupported installs may leave a system unpatched or unstable. For users with unsupported hardware, ESU is the safer short-term path.

Regulatory/compliance implications​

  • If you operate in regulated industries or need a persistently supported platform for compliance, ESU’s one-year window may be inadequate. Organizations and individuals with compliance obligations should plan migration promptly, as ESU is unlikely to meet long-term regulatory requirements.

What else Microsoft will continue or extend​

Microsoft clarified that Microsoft 365 (Office) apps on Windows 10 will receive security updates for a longer window than the base OS: Microsoft will continue providing security updates for Microsoft 365 apps on Windows 10 through October 10, 2028, to help customers migrate their productivity workloads safely. This is separate from ESU and applies specifically to Microsoft’s Office/Microsoft 365 apps—an important nuance for users who depend on those apps. (support.microsoft.com)

Practical step-by-step: how to prepare and enroll (recommended checklist)​

Follow these steps in order to maximize your protection and minimize risk:
  • Verify your Windows 10 version:
  • Open Settings → System → About and confirm you are running Windows 10, version 22H2. If not, update to 22H2 now.
  • Install all pending Windows updates:
  • Install the latest cumulative updates (August 2025 and subsequent patches) and reboot. These fixes can be required to surface the ESU enrollment wizard.
  • Back up everything:
  • Create a full disk image (Macrium Reflect, Acronis, or similar) and an independent file backup to external media or alternative cloud storage. Do at least two backups: one local image and one remote or external file copy.
  • Decide which ESU path you will use:
  • Redeem 1,000 Microsoft Rewards points, or enable Windows Backup/OneDrive sync, or be prepared to purchase the $30 ESU through the Microsoft Store in Settings. Check your Rewards balance or OneDrive storage situation first. (microsoft.com)
  • Sign in with a Microsoft Account:
  • Create or sign in with an MSA that has administrator privileges on the PC. Local accounts will not qualify. Consider privacy implications before switching to an MSA. (tomshardware.com)
  • Open Settings → Update & Security → Windows Update:
  • Look for the “Enroll now” ESU wizard. Follow the prompts to choose your enrollment method and complete the flow.
  • Confirm enrollment and check Windows Update history:
  • After enrollment, verify the ESU license has been applied and that the device is receiving security updates from Microsoft.
  • Use the ESU year deliberately:
  • Test Windows 11 compatibility, budget hardware replacement, and plan migrations for critical apps. Do not treat ESU as a permanent solution.

Migration options during your ESU year (Oct. 15, 2025–Oct. 13, 2026)​

During the ESU year you should decide a long-term plan. Prioritize the option that best balances cost, compatibility, and security:
  • Upgrade to Windows 11 (if eligible):
  • Run PC Health Check and Windows Update compatibility checks. If eligible, upgrade after full backups and testing. Upgrading preserves full support and feature updates.
  • Replace failing or incompatible hardware:
  • For many aging machines (CPU too old, no TPM), a new Windows 11 PC is the cleanest path. Look at trade-in programs to reduce net cost.
  • Migrate to an alternative OS (Linux or ChromeOS Flex):
  • For users who primarily do web and basic productivity work, modern Linux distributions or ChromeOS Flex can extend the useful life of older hardware with strong security and community support.
  • Virtualize or host legacy workloads in the cloud:
  • Windows 365 or Azure Virtual Desktop can move critical Windows apps to cloud-hosted Windows 11 instances, removing endpoint upgrade burdens at the cost of recurring cloud fees.
  • Hybrid approach:
  • Keep a short list of legacy machines on ESU while moving most daily workflows to modern hardware or cloud services. This reduces risk exposure and concentrates migration effort.

Frequently overlooked technical steps (do these now)​

  • Export BitLocker recovery keys and verify their storage location.
  • Deauthorize software tied to the old machine (Adobe, iTunes-style activations).
  • Compile a list of essential peripherals and check driver availability on Windows 11 or alternative OS options.
  • Test mission-critical line-of-business applications in a Windows 11 VM or on a trial Windows 11 install to identify compatibility blockers early.

Final analysis: when to enroll, and when to move on​

  • Enroll in consumer ESU if your device is ineligible for Windows 11, you need time to validate critical apps, or replacing the hardware today is not financially feasible. ESU is low-cost and practical for households that need breathing room. (microsoft.com)
  • Avoid using ESU as a long-term strategy. The program provides a finite window (one year) and deliberately excludes feature and reliability fixes. Use the year to plan and complete migration.
  • Don’t rely on unsupported Windows 11 bypasses; they may block future updates and leave you exposed. ESU is safer for unsupported hardware than an unsupported OS install.
  • Be mindful of the Microsoft Account requirement and cloud trade-offs. If you refuse an MSA or cloud sync for privacy reasons, ESU’s consumer path may be unacceptable and hardware replacement or OS switching should be prioritized. (tomshardware.com)

Conclusion​

Microsoft’s consumer ESU pathway transforms a hard end-of-support date into a manageable migration runway — but only if you act deliberately, meet the eligibility requirements, and accept the program’s trade-offs. Enroll before October 14, 2025, verify you’re on Windows 10 version 22H2 with all cumulative updates applied, secure your backups, and choose the enrollment route that fits your circumstances. Use the ESU year to test Windows 11 compatibility, budget hardware replacements, or migrate workloads to cloud or alternate OSes. This is not a permanent fix — it’s a one-year extension of security coverage designed to buy you predictable time for a responsible upgrade path. (support.microsoft.com)
Source: PCMag UK Want to Stay on Windows 10? Do This Before Support Ends on Oct. 14
 

Microsoft will stop regular support for Windows 10 on October 14, 2025, but a newly expanded consumer Extended Security Updates (ESU) program gives users a one‑year safety net — and for the first time offers legitimate free enrollment paths if you meet the conditions. This feature‑limited safety net lets you continue receiving critical and important security patches through October 13, 2026, without moving to Windows 11 immediately, but it comes with firm prerequisites, operational trade‑offs, and privacy/usability catches that every Windows 10 user should understand before the deadline.

Futuristic ESU shield branding for 2025–2026, with security icons and a timeline.Overview​

Microsoft’s official end‑of‑support date for Windows 10 is October 14, 2025. After that date, the OS will no longer receive routine security updates, feature updates, or standard technical assistance — unless you enroll in the consumer ESU program. The consumer ESU option is time‑limited: it covers eligible Windows 10 systems for one additional year, ending October 13, 2026.
There are three enrollment routes for consumer ESU:
  • Use Windows Backup to sync your PC Settings to OneDrive (no additional ESU charge; free enrollment).
  • Redeem 1,000 Microsoft Rewards points to cover ESU for one year.
  • Pay a one‑time fee of $30 (USD) plus tax to enroll a Microsoft account and receive ESU for up to one year.
All routes require certain system and account conditions to be met — notably, the device must be running Windows 10 version 22H2, have all pending updates installed, and you must be signed in with a Microsoft account (local accounts are no longer eligible for consumer ESU). Enrollment is performed from Settings > Update & Security > Windows Update when the ESU enrollment wizard appears.

Background: Why Microsoft is offering consumer ESU​

Microsoft wants Windows 11 adoption to continue, but a significant portion of the installed base cannot easily move to Windows 11 because of stricter hardware requirements (TPM 2.0, Secure Boot, supported CPU lists). To avoid leaving those users suddenly exposed to unpatched security holes, Microsoft created a consumer ESU route similar in spirit to enterprise ESU programs. Unlike enterprise ESU, the consumer program:
  • Is limited to one year (Windows 10 support extension through October 13, 2026).
  • Provides only security updates classified as critical or important.
  • Does not include feature updates, bug‑fix patches outside security bulletins, or full technical support.
  • Requires a Microsoft account for enrollment and licensing.
Microsoft has also extended select app support windows: Microsoft 365 Apps on Windows 10 will continue to receive security updates through October 10, 2028, and certain Microsoft browser components will see extended update support beyond the OS end of life. These app‑level extensions are separate from the ESU program and come with their own limitations.

What you need to check right now​

Before October 14, 2025, make sure your PC meets the ESU prerequisites. If you delay, you can still enroll after the cutoff, but your device will be unprotected until you do so.
  • Confirm your Windows 10 version
  • Go to Settings > System > About and verify you're on Windows 10, version 22H2. If you’re on an older feature update, update to 22H2 now.
  • Install all pending updates
  • Some rollout features and enrollment helpers are delivered via cumulative updates. Make sure Windows Update shows No pending updates.
  • Install the August 2025 cumulative update if required
  • A cumulative update released in mid‑2025 addressed issues with the enrollment wizard. If your Settings page doesn’t show ESU enrollment, confirm you have the latest cumulative update installed.
  • Switch to, or sign in with, a Microsoft account
  • Consumer ESU requires a Microsoft account; local accounts cannot enroll. The Microsoft account can cover up to 10 devices for ESU licensing once enrolled.
  • Make a backup
  • Back up your files and system image before making enrollment changes. Even though one free ESU option is to enable Windows Backup, you should keep an independent local or external backup.
If any of these checks fail, address them now. The ESU enrollment wizard is rolled out progressively, so it may not appear immediately even if you meet every requirement.

How the three consumer ESU paths work (and the trade‑offs)​

1) Free enrollment by syncing Windows Backup to OneDrive​

  • What you do: Enable Windows Backup and choose to back up your PC settings to OneDrive (this is done in the Windows Backup settings).
  • What you get: One year of ESU security updates at no additional cost.
  • Key caveats:
  • A Microsoft account is required.
  • OneDrive free storage is limited (5 GB by default). If your backup exceeds that, you’ll need to purchase additional OneDrive storage or selectively back up only the settings required for ESU enrollment.
  • This option ties your ESU eligibility to cloud sync — many privacy‑conscious users consider this a material trade‑off.

2) Redeem 1,000 Microsoft Rewards points​

  • What you do: Use the Microsoft Rewards program and redeem 1,000 points to apply to ESU enrollment.
  • What you get: One year of ESU updates without spending cash.
  • Key caveats:
  • Earning 1,000 points requires active use of Microsoft services that award points (searching with Bing, using Microsoft Edge and other qualifying activities). For users who don’t already participate in Rewards, accruing 1,000 points can take time.
  • A Microsoft account is required.

3) Pay a one‑time $30 USD per account​

  • What you do: Make a one‑time purchase through the ESU enrollment wizard tied to your Microsoft account.
  • What you get: One year of ESU updates (same coverage as the other routes) for the account, which can be applied to up to 10 devices.
  • Key caveats:
  • The charge is per Microsoft account (covering up to 10 eligible devices), not necessarily per physical device, but your account must manage those devices.
  • The fee only buys one year of ESU, after which devices will need another plan or upgrade.

Step‑by‑step enrollment checklist​

  • Confirm system is updated to Windows 10 version 22H2.
  • Install all Windows Updates, including any cumulative updates released in mid‑2025 that enable the enrollment wizard.
  • Switch to a Microsoft account (or sign in) with administrator privileges on the PC.
  • Go to Settings > Update & Security > Windows Update.
  • Look for an Enroll now link or ESU enrollment wizard under the Check for updates button.
  • Follow prompts and choose:
  • Enable Windows Backup (OneDrive) OR
  • Redeem Microsoft Rewards points OR
  • Pay the $30 one‑time fee.
  • Confirm ESU enrollment status under the Windows Update page and note licensing details (one Microsoft account can cover up to 10 devices).
  • Keep a record of the Microsoft account used to enroll; you’ll need it to manage and apply the ESU license to other devices.
If the wizard doesn’t appear, check for pending updates and the mid‑2025 cumulative patch. The enrollment rollout is phased so availability may vary by device and region.

Practical advice and timelines​

  • Act now if you plan to use ESU: waiting until days before October 14 could leave your PC temporarily unprotected if the enrollment wizard hasn’t appeared on your device yet.
  • If you can upgrade to Windows 11 safely, that remains the long‑term recommendation: it receives ongoing feature and security updates beyond the ESU window.
  • If your PC cannot meet Windows 11 hardware requirements, ESU is a short‑term bridge — not a permanent fix. Use the additional year to plan hardware replacement, migrate data, or evaluate alternatives such as Linux distributions for older machines.
  • If you rely on Microsoft 365 Apps: note that Microsoft will continue to deliver security updates for Microsoft 365 Apps on Windows 10 through October 10, 2028, but feature updates and certain support paths will be constrained after set cut‑offs. Plan app migration carefully.

Security and privacy trade‑offs: what Microsoft’s free route means​

Offering a free ESU route tied to OneDrive backup lowers the economic barrier for many users, but it also increases the company’s cloud tethering of consumer devices. The free OneDrive option:
  • Encourages users to adopt a Microsoft account and cloud backup, which improves user recoverability and data continuity.
  • Requires users to accept more data in cloud sync; some users will find that an unacceptable privacy trade‑off.
  • Can force purchases of additional OneDrive storage if the default 5 GB is insufficient, which converts a “free” ESU into an indirect paid dependency.
The Microsoft Rewards option is an attractive loophole for heavy Microsoft service users, but it’s not a universal shortcut. New users who do not already participate in Rewards may need weeks to build points.
The paid $30 route is straightforward and arguably the cleanest privacy option (no required cloud backup), but it still mandates a Microsoft account.

Risks of staying on Windows 10 beyond October 2026​

ESU buys you a single year of critical security updates. After October 13, 2026, unless Microsoft changes the program, Windows 10 consumer devices will be out of official security coverage.
Risks include:
  • Exposure to new, unpatched vulnerabilities discovered after the ESU coverage window ends.
  • Gradual vendor abandonment: hardware vendors and third‑party software makers may cease driver and application updates for Windows 10, increasing stability risks.
  • Limited technical support: ESU does not include routine technical assistance, and Microsoft has clear support limitations for Microsoft 365 Apps on Windows 10 after end‑of‑support dates.
  • Compliance and enterprise risks: For business users, using out‑of‑support OS versions can violate internal security policies and regulatory requirements.
Plan your migration or replacement path during the ESU year rather than relying on continued concessions.

Alternatives to ESU: upgrade, replace, or switch platforms​

If ESU is not suitable, consider these alternatives:
  • Upgrade to Windows 11 (if hardware is compatible and you accept Microsoft’s support policies).
  • Replace the PC with a Windows 11 device or a modern Windows‑compatible laptop.
  • Reinstall a supported Linux distribution on older hardware for continued security updates and long lifecycles.
  • Use a virtual machine on a newer host for legacy Windows 10‑only apps, isolating the old OS from the internet.
  • Evaluate extended enterprise ESU or paid third‑party security solutions if you are a business with critical dependencies.
Each option has trade‑offs in cost, compatibility, and user experience. Use the ESU year to test and execute whichever path you choose.

What Microsoft’s concessions reveal about the Windows upgrade landscape​

Microsoft’s consumer ESU signals several important realities:
  • A non‑trivial number of Windows 10 users cannot upgrade due to hardware constraints or policy choices (e.g., corporate images, TPM issues, or user preference).
  • Microsoft recognizes the security risk of leaving those users immediately unprotected and has chosen to provide a managed, time‑limited solution rather than forcing an abrupt cutoff.
  • The company is increasingly insistent on Microsoft accounts and cloud services as part of its device management and security model — even for consumers seeking a short ESU extension.
  • The ESU program and app extension windows are temporary concessions, not a long‑term commitment to keep Windows 10 viable.
For users, the net effect is a controlled extension that buys planning time, not a permanent lifeline.

Deep dive: common questions and authoritative clarifications​

Does ESU include bug fixes or new features?​

No. Consumer ESU only provides security updates categorized as critical or important. Feature updates, general bug fixes, and broader technical support are not part of the ESU package.

Can a single ESU purchase cover multiple machines?​

Yes. Once you enroll a Microsoft account, you can apply the consumer ESU license to up to 10 eligible Windows 10 devices associated with that account. That makes the $30 option especially cost‑effective for small households with several Windows 10 PCs.

If I enroll after October 14, will I receive previous updates?​

If you enroll after the OS end date, Microsoft’s enrollment flow is designed to deliver past ESU‑eligible updates for the period covered, but your device will be unprotected from the end‑of‑support date until enrollment is completed. Acting earlier avoids that gap.

Is a local Windows account acceptable for ESU?​

No. A Microsoft account is required for consumer ESU enrollment, even if you choose to pay. Devices using only a local account cannot enroll.

Will Microsoft change ESU terms or extend the period?​

Policy decisions can change. Treat the ESU year as the commitment Microsoft has made today. Building migration plans as if support ends definitively on October 13, 2026 is the responsible course.
(If any of the specific KB numbers, patch rollouts, or phased availability details appear different on your device, update Windows and check Settings > Update & Security for the latest wizard. Some rollout details were addressed by cumulative updates in mid‑2025; if your device lacks those patches, the enrollment UI might not be present.)

Recommended action plan — a concise checklist to follow this week​

  • Verify Windows edition and version (Settings > System > About). Update to 22H2 if needed.
  • Install all available Windows Updates now.
  • Convert or sign in with a Microsoft account (admin level).
  • Set up local backups to external media and consider a full system image.
  • Decide your ESU route:
  • Enable Windows Backup for the free OneDrive option (confirm OneDrive capacity), or
  • Redeem 1,000 Microsoft Rewards points if you already have them, or
  • Purchase the $30 ESU license via the enrollment wizard.
  • Enroll through Settings > Update & Security > Windows Update and confirm ESU license shows active.
  • Use the ESU year to test Windows 11 upgrades on non‑critical hardware or to source replacement hardware and complete migrations.

Final analysis: who should use ESU — and who should not​

ESU is a pragmatic stopgap for individual users and households who:
  • Cannot upgrade due to hardware incompatibility or cost.
  • Need additional time to plan data migration, purchase new hardware, or test Windows 11 compatibility.
  • Want to keep key Windows 10 devices running safely for a defined, short period.
ESU is not a good choice for users who:
  • Prefer to avoid cloud tie‑ins and Microsoft account dependencies (the enrollment options effectively require both).
  • Expect ongoing feature updates, vendor support, or full technical assistance during the extension period.
  • Are seeking a long‑term solution beyond the one‑year window.
For users in the latter groups, immediate migration to newer hardware, a fresh OS build (Linux or supported Windows 11 device), or virtualized legacy environments are better long‑term strategies.
Microsoft’s one‑year consumer ESU program is a sensible engineering compromise: it reduces the immediate security cliff for millions of Windows 10 users while nudging people toward Windows 11 and cloud services. The program’s free paths make the extension accessible, but they also create new dependencies on Microsoft accounts and OneDrive. Treat ESU as time to act, not a reason to postpone upgrading indefinitely. Use the covered year to secure backups, evaluate upgrade readiness, and make a migration plan that aligns with your privacy, compatibility, and budget goals.
Source: PCMag Australia Want to Stay on Windows 10? Do This Before Support Ends on Oct. 14
 

Microsoft’s October deadline for Windows 10 support has become a hard stop for millions of users — but the company quietly carved out no-cost escape routes that let many stay patched for another year without handing over cash. What once looked like a strict $30 paywall for Extended Security Updates (ESU) has been softened into three enrollment paths: pay, redeem Microsoft Rewards points, or enable Windows backup/sync — and each option carries real-world tradeoffs that every Windows 10 user should understand before the clock runs out.

Split-screen wallpaper showing End of Support (Oct 14, 2025) on the left and rewards/backup/ESU icons on the right.Background / Overview​

Microsoft will end mainstream updates and technical support for Windows 10 on October 14, 2025. After that date, devices that remain on Windows 10 will no longer receive ongoing security and quality updates unless they are enrolled in the consumer Extended Security Updates (ESU) program. ESU for consumer devices extends security-only updates for one additional year, through October 13, 2026, but excludes new features, non-security bug fixes, and general technical support. (support.microsoft.com) (support.microsoft.com)
The company positioned ESU as a bridge — not a long-term plan — to give users more time to migrate to Windows 11 or replace aging hardware. Enrollment is being rolled out via a built-in wizard in Settings on eligible Windows 10 devices running version 22H2. Microsoft states enrollment is available to individual consumer devices in select markets and ties ESU entitlements to a Microsoft account. (microsoft.com) (support.microsoft.com)

What Microsoft announced — the straight facts​

  • End of regular Windows 10 support: October 14, 2025. After this date, Microsoft will stop providing free security updates and technical support for Windows 10. (support.microsoft.com)
  • Consumer ESU coverage window: devices enrolled in ESU receive critical and important security updates through October 13, 2026. ESU does not include feature updates, broad bug fixes, or general technical support. (support.microsoft.com)
  • Enrollment options (consumer): three paths are published by Microsoft:
  • At no additional cost if you are syncing your PC settings (Windows Backup / Settings sync).
  • Redeem 1,000 Microsoft Rewards points.
  • Buy ESU for $30 USD (one-time purchase) — a single ESU license can be used on up to 10 devices linked to the same Microsoft account. (microsoft.com) (support.microsoft.com)
These are the official, load-bearing claims from Microsoft. Independent outlets and community reporting have confirmed the rollout details and the account requirements, though some user-reported wrinkles have emerged in practice. (theverge.com)

The Free Alternatives — what they are and how they work​

1) Sync settings / Windows Backup (no cash outlay)​

Microsoft’s enrollment wizard lists “Use Windows Backup to sync your settings to the cloud” as a free path to ESU enrollment. Practically, this means enabling the Windows backup / Sync your settings option under Settings → Accounts → Windows backup (or Sync your settings) and signing in with a Microsoft account. The company treats this as evidence the device is linked to a Microsoft account and can be managed for ESU license mapping. (support.microsoft.com)
  • Benefit: no cash required; covers the device for ESU updates through Oct 13, 2026.
  • Caveat: you must sign in with a Microsoft account; if you use local accounts on Windows 10, you’ll be forced to add a Microsoft account for enrollment. This has frustrated privacy-conscious users and those who deliberately avoid cloud-linked accounts. (tomshardware.com)
A second practical caveat: Microsoft’s description of “Windows Backup” includes OneDrive folder syncing as an available option, but the minimal settings-sync option does not require you to store large files in OneDrive. That said, if you intend to use OneDrive to back up your entire profile or files (as some guides suggest), the free OneDrive tier is only 5 GB and many users will need to buy additional storage to fully migrate large profiles. Confirmed: Microsoft’s free OneDrive allocation is 5 GB. (support.microsoft.com)

2) Redeem 1,000 Microsoft Rewards points (no cash if you play the game)​

Microsoft allows consumers to redeem 1,000 Microsoft Rewards points for ESU enrollment. Rewards points are earned by participating in Microsoft’s ecosystem — web searches on Bing, using the Rewards dashboard, completing offers, and possibly promotional bonuses. In principle this gives a no-cash route, but in practice the points take effort or prior participation to accumulate. Microsoft’s Rewards program and dashboard are market-dependent and the availability of specific offers (for example, one-off bonuses for installing the Bing app) can vary by region and time. Many users report inconsistent awarding of one-off point offers; the 500-point Bing-app pop-up described in some coverage is not guaranteed and has been unreliable for many. Treat any claims of “install Bing and you’re halfway there” with caution unless you personally verify the current offer in your Rewards dashboard. (microsoft.com)

3) Pay $30 USD (still an option)​

If you prefer the simplest route and already use a Microsoft account, a one-time $30 ESU purchase will enroll you and can be applied to up to 10 devices under the same Microsoft account. This option is straightforward but explicitly limited: it only covers security updates for one year (through Oct 13, 2026) and excludes broader support or non-security updates. (support.microsoft.com)

The enrollment reality — how you actually sign up​

  • Update your PC to Windows 10 version 22H2 if it isn’t already on that build. ESU is only available for devices running 22H2. (support.microsoft.com)
  • Sign into Windows with a Microsoft account (ESU enrollment requires it). If you currently use a local account you’ll be prompted to sign into Microsoft as part of the wizard. (support.microsoft.com)
  • Open Settings → Update & Security → Windows Update. Look for the “Enroll in Extended Security Updates” banner or link. The enrollment wizard lets you choose one of the three paths (sync, redeem Rewards, or buy). (learn.microsoft.com)
  • Complete the wizard and confirm enrollment. You’ll receive ESU entitlements tied to the Microsoft account used during enrollment and the device will receive the security updates distributed through Windows Update for ESU subscribers. (support.microsoft.com)
Note: Microsoft is rolling out the enrollment UI in waves; not every eligible PC will see the “Enroll now” option immediately. The company says every eligible device will be shown the enrollment option before October 14. If you don’t see it yet, make sure Windows Update is current and check again. (pureinfotech.com)

Why this situation exists — the hardware bottleneck and Windows 11 requirements​

The tight hardware bar for Windows 11 — especially TPM 2.0, UEFI Secure Boot, and a curated list of supported CPUs — left many perfectly functional Windows 10 PCs ineligible for the free Windows 11 upgrade. Microsoft’s stated rationale is raising the baseline security posture of the platform; TPM 2.0 and virtualization-based security are core to that argument. But the result is a large installed base of devices that can’t upgrade cleanly, pushing users into either hardware replacements, unofficial workarounds, or extended support subscriptions. (microsoft.com)
  • Minimum Windows 11 requirements include a 1 GHz 64‑bit CPU with 2 or more cores on Microsoft’s supported list, 4 GB RAM, 64 GB storage, UEFI firmware with Secure Boot capability, and TPM 2.0. These requirements exclude many older (but still serviceable) PCs. (microsoft.com)
Microsoft has published guidance on enabling TPM 2.0 where hardware supports it but has taken a firm line on keeping the security baseline high. Unofficial community workarounds to install Windows 11 on unsupported hardware exist, but they are not supported or guaranteed for the long term. (support.microsoft.com)

What Microsoft didn’t loudly advertise (and why it matters)​

  • Microsoft requires a Microsoft account for ESU enrollment and license mapping. That requirement applies even if you choose to pay the $30 fee. The company calls it out in the ESU documentation; many outlets independently confirmed the practical effect: local-only users must sign into or create a Microsoft account to enroll. This is an important privacy and logistics implication. (support.microsoft.com)
  • ESU enrollment does not bring you feature updates, support for new drivers, or troubleshooting for non-security issues. Microsoft positions ESU purely as a security lifeline for users who genuinely can’t upgrade immediately. If your use-case requires fixes or new drivers, ESU will not help. (support.microsoft.com)
  • Microsoft will continue to provide some ancillary services beyond 2025: Microsoft 365 Apps (Office) will continue to receive security updates for a limited period beyond Windows 10 end-of-support — Microsoft indicates security updates for Microsoft 365 on Windows 10 will continue for three years (until October 10, 2028), even though mainstream support for Office desktop apps on Windows 10 ends earlier. This mixed timeline creates a partial reprieve for productivity apps while the OS itself becomes an increasing risk if not enrolled in ESU. (support.microsoft.com)

Practical risks and tradeoffs — what users must weigh​

  • Security vs. convenience: Enrolling in ESU (via any path) buys time against critical and important threats, but it’s only a one-year extension and not a substitute for migrating to a supported OS. Relying on ESU repeatedly is not a long-term strategy. (support.microsoft.com)
  • Privacy and account requirements: The Microsoft Account requirement is non-trivial for users who prefer local accounts or who manage privacy by avoiding cloud-linked identities. Those users face a sticky choice: add a Microsoft account just for ESU or accept being cut off from Microsoft's security updates after Oct 14, 2025. (tomshardware.com)
  • Microsoft Rewards variability: The Rewards route can be free, but it’s not universally practical. Earning 1,000 points requires time, a prior engagement in the Rewards system, or exploiting limited-time promotions — and users have reported inconsistent behavior for specific point offers (for example, the “install the Bing app” 500-point bonus is region- and time-dependent and has produced mixed results for claimants). The Rewards path is attractive in marketing copy but inconsistent in practice. Flag this as unreliable unless you verify offers in your Rewards dashboard. (microsoft.com)
  • OneDrive storage and data: If you choose the backup/sync path and intend to store sizeable user data in OneDrive to facilitate migration, be aware Microsoft’s free OneDrive plan provides only 5 GB. Users with larger profiles will either need to selectively sync settings only (the minimal requirement) or purchase additional OneDrive storage. Over-quota OneDrive accounts can enter read-only states and may eventually lose data if not remedied. Don’t assume full-profile cloud backups are truly “free.” (microsoft.com)

Step-by-step action plan for the next 30–60 days​

  • Confirm your device is on Windows 10 22H2 and fully updated. If it’s not on 22H2, plan an update first. (support.microsoft.com)
  • Decide which path you prefer: upgrade to Windows 11 (if eligible), enroll in ESU now (free via sync or Rewards, or $30), migrate files to another OS, or migrate workloads to cloud PCs. Document the pros/cons for your environment. (microsoft.com)
  • If you choose ESU:
  • Sign in to a Microsoft account (or create one) and enable the sync/Windows Backup option if you want the free sync path. (support.microsoft.com)
  • Open Settings → Update & Security → Windows Update and click the “Enroll in Extended Security Updates” link when available. If you don’t see it, ensure latest KB updates are installed and check again (Microsoft is rolling the feature out in waves). (learn.microsoft.com)
  • Choose your enrollment option (sync, redeem points, or pay) and complete the wizard. Verify the enrollment status in Windows Update after completion. (support.microsoft.com)
  • If you plan to upgrade to Windows 11, run the PC Health Check app and review the compatibility checklist (TPM, UEFI, CPU). If you fail the check, contact your OEM for guidance on enabling TPM or weigh hardware replacement options. (microsoft.com)
  • Back up critical files externally (local disk, external drive, or a cloud service you control). Do not rely solely on the ESU “sync” step as a full backup strategy. Maintain an offline copy before any significant OS migration.
  • For multi-device households: a single $30 ESU license can cover up to 10 devices tied to the same Microsoft account, so evaluate whether pooling devices under one account makes financial sense. Alternatively, redeeming points or enabling sync per device will also work, but enrollment is device‑by‑device. (support.microsoft.com)

Critical analysis — strengths, weaknesses, and the bigger picture​

The strengths​

  • Microsoft’s move to add no-cost ESU enrollment paths recognizes the real-world hardware mismatch many users face. Offering non-monetary routes increases access to essential security patches for users who cannot upgrade. The flexibility is pragmatic and reduces the number of abandoned, vulnerable machines on the internet. (blogs.windows.com)
  • Tying ESU to Microsoft accounts enables centralized license management (one license for up to 10 devices), lowering friction for multi-PC households and simplifying enforcement. This is a sensible UX improvement compared with enterprise-only ESU models. (windowscentral.com)

The weaknesses and risks​

  • The Microsoft account requirement is a policy friction point. Requiring cloud identity for a security extension on devices that were previously usable with local accounts drives privacy concerns and undermines the experience for users who intentionally avoided cloud tie-ins. For many, the choice becomes “trade privacy for security” — an unacceptable dichotomy for some. (tomshardware.com)
  • The Rewards route is market- and time-dependent. Points-earning behavior changes by country and often includes limited-time promotions that may not be available when you need them. Community reports show that some Rewards offers (e.g., the 500-point Bing-app bonus) can be unreliable and sometimes fail to credit points. That makes the “free via Rewards” narrative weaker in practice than it reads in headlines. (learn.microsoft.com)
  • The OneDrive-upgrade caveat: using OneDrive to fulfill the “sync” requirement is superficially free but realistically may force a paid step for many users with larger profiles. Microsoft’s free 5 GB cap is small by modern standards and will require purchases for users who expect to back up big folders or photos. (microsoft.com)

The broader implications​

This episode illustrates the tension between platform security and user choice. Microsoft’s insistence on tighter hardware lanes for Windows 11 is defensible from a security standpoint, yet the downstream cost to users is tangible. The ESU program is a stopgap — the company is balancing risk reduction (fewer vulnerable endpoints) with practical migration tools. For the industry, this is a reminder that OS transitions have social, economic, and privacy impacts that vendors must manage beyond pure technical measures. Community discussion and troubleshooting threads reflect real anxiety and a spectrum of reactions from resigned upgrades to cautious take‑backs.

Final verdict and recommendations​

Windows 10’s end-of-support deadline is real and non-negotiable: October 14, 2025. Microsoft’s ESU program gives consumers a narrow, clearly defined lifeline through October 13, 2026, and the company has added no-cost enrollment paths that make ESU accessible to many users without immediate outlay. At the same time, the devil is in the details: Microsoft account requirements, region-dependent Rewards offers, and OneDrive’s limited free storage mean the “free” options are not universally frictionless.
Short-term recommendations:
  • If you can upgrade to Windows 11 cleanly and want the long-term support path, plan the migration now.
  • If your PC cannot run Windows 11 and you want to remain on Windows 10 beyond Oct 14, 2025, enroll in ESU as early as possible using whichever path best fits your privacy and practical constraints.
  • Back up files locally before enabling cloud sync and before any major OS changes.
  • Don’t assume promotional Rewards offers will be available or reliable — verify in your Microsoft Rewards dashboard and keep realistic expectations.
This moment is a hard deadline for defenders and procrastinators alike. ESU buys time, not eternity. Treat the free paths as the short-term safety harness they are, plan your migration or replacement strategy now, and avoid relying on one-time shortcuts as long-term security policy. (support.microsoft.com)
WindowsForum readers have been tracking this transition closely; community threads are full of deployment tips, reports of rollout timing, and practical tricks for enabling TPM or enabling settings sync. Use those discussions as a supplement to official guidance — but rely on the Microsoft support pages and verified documentation for the official rules that determine ESU eligibility and timing. (pureinfotech.com)
The clock is ticking — but for many users, Microsoft has quietly handed out a ladder. Use it wisely.
Source: Technology Org Windows 10's Death Clock Is Ticking—But You Can Cheat It for Free - Technology Org
 

Microsoft’s last-minute lifeline means you can keep receiving security updates for Windows 10 — but only if you act before Microsoft’s hard cutoff, and only for a strictly time‑boxed period with important caveats that change what “staying on Windows 10” actually means.

An infographic titled ESU Bridge showing Windows security updates bridging Oct 2025 to Oct 2026.Background​

Microsoft has set a firm end-of-support date for consumer versions of Windows 10: October 14, 2025. After that date, mainstream platform servicing — feature updates, routine quality patches, and free security updates — will stop for the operating system itself. Microsoft has, however, created a consumer Extended Security Updates (ESU) path that effectively buys eligible Windows 10 devices a single extra year of security-only updates, provided users complete an enrollment flow before the cutoff. (support.microsoft.com)
At the same time, Microsoft separately committed to continue servicing certain application and runtime layers — notably Microsoft 365 Apps, Microsoft Edge, and the WebView2 runtime — on Windows 10 (version 22H2) through a later horizon (roughly through October 2028). That layered approach is why headlines that read “keep Windows 10 until 2028” are both partly true and potentially misleading: the OS itself is only eligible for one additional year of platform security updates via ESU, but a handful of app-level protections will persist longer. (support.microsoft.com)

What Microsoft actually announced (clear facts)​

  • Windows 10 (consumer editions) reaches its lifecycle end on October 14, 2025. After that date, the OS will no longer receive regular free security and feature updates unless enrolled in an ESU path. (support.microsoft.com)
  • Microsoft’s consumer ESU covers enrolled devices for a single year of security-only updates: October 15, 2025 through October 13, 2026 (the enrollment must be claimed before October 14, 2025 to participate in the consumer enrollment window). (windowscentral.com)
  • Eligible devices must run Windows 10 version 22H2 and have the required cumulative updates installed (including the August 12, 2025 cumulative update that resolves enrollment wizard issues, commonly referenced as KB5063709). (support.microsoft.com)
  • Enrollment is surfaced as an “Enroll now” experience in Settings → Update & Security → Windows Update for qualifying devices; rollout is staged.
  • Consumer ESU enrollment offers three routes to obtain the year of security updates:
  • Free if you enable Windows Backup / settings sync to OneDrive (a Microsoft Account is required).
  • Redeem 1,000 Microsoft Rewards points.
  • Pay a one‑time fee (reported around $30 USD, covering multiple devices tied to the same Microsoft Account). (learn.microsoft.com)
  • Enrollment requires a Microsoft account (MSA) — local Windows accounts are not eligible for the consumer ESU enrollment flow. Domain-joined, MDM-managed, or kiosk devices are excluded from this consumer path and follow enterprise ESU channels. (tomshardware.com)
  • Separately, Microsoft 365 Apps (Office) and Microsoft Defender / Edge/WebView2 will continue to get certain updates on Windows 10 beyond OS end-of-support (in practice, Microsoft documented Microsoft 365 Apps updates through October 10, 2028, and Edge/WebView2 support on Windows 10 version 22H2 through at least October 2028). These are app/runtime assurances and do not replace OS-level servicing. (support.microsoft.com)

Why MakeUseOf (and similar outlets) suggested “until 2028”​

MakeUseOf’s headline — that you can “keep Windows 10 until 2028” — is a distilled version of two separate Microsoft commitments: the one-year ESU for the OS (2025→2026) and extended app/runtime servicing for Microsoft 365 Apps and Edge/WebView2 (through ~2028). The claim is not a literal extension of Windows 10’s OS support to 2028; rather it highlights that important security endpoints (browser engine updates, Office app security fixes, and Defender definitions/updates) will remain available longer, reducing risk vectors for many home users who primarily rely on those components. That nuance is crucial. (theverge.com)

How to claim the extra year of Windows 10 security updates — step‑by‑step​

If you plan to remain on Windows 10 and want the ESU safety window, follow these steps. The flow must be completed before October 14, 2025 to ensure reliable enrollment in the consumer ESU experience.
  • Confirm your build: make sure your PC is running Windows 10 version 22H2.
  • Install all pending updates, especially the August 12, 2025 cumulative patch that includes fixes enabling the enrollment experience (KB5063709 or later). (support.microsoft.com)
  • Sign into Windows with a Microsoft Account (MSA). Enrollment for consumer ESU requires an MSA; local accounts won’t work.
  • Open Settings → Update & Security → Windows Update and look for the “Windows 10 support ends in October 2025” banner or an Enroll now link. Click Enroll now and follow the wizard.
  • Choose one of the three enrollment options presented: sync Windows Backup to OneDrive (free path), redeem 1,000 Microsoft Rewards (if you have them), or purchase the ESU entitlement (≈ $30 USD — pricing shown in the enrollment wizard; covers multiple devices tied to the same MSA). (learn.microsoft.com)
If the enrollment option doesn’t appear immediately, update Windows fully and reboot; Microsoft’s rollout is staged and the KB update is a gating requirement. (support.microsoft.com)

What the consumer ESU does — and what it does not​

  • What it does: the consumer ESU delivers security-only patches classified as Critical or Important by Microsoft’s Security Response Center for the covered device during the one-year window. This reduces exposure to newly discovered vulnerabilities in the OS kernel and other platform components that would otherwise go unpatched. (windowscentral.com)
  • What it does not: ESU is not a substitute for full mainstream servicing. It does not include:
  • New OS features or improvements.
  • Non-security quality fixes or general bug repairs.
  • Extended technical support or compatibility testing.
  • Guarantees beyond the one‑year window for consumer ESU enrollments.
Treat ESU as a strictly time‑boxed bridge to buy predictable time for migration planning, hardware budgeting, or testing Windows 11 compatibility.

The costs, catches, and privacy implications you should weigh​

  • Account requirement: consumer ESU enrollment requires a Microsoft Account. Users who deliberately avoid cloud accounts or prefer local sign-ins will find this a sticking point. The requirement is enforced even for paid enrollment. (tomshardware.com)
  • Payment vs. workarounds: Microsoft provides three enrollment routes — OneDrive sync (free), Microsoft Rewards points (1,000 points), or a one-time purchase reported at around $30 USD. Some users will find the free OneDrive route attractive, but it requires enabling Windows Backup and may push you toward additional OneDrive storage depending on your backup footprint. (learn.microsoft.com)
  • Device limits and reuse: a single purchased consumer ESU entitlement is designed to be reusable across up to 10 eligible devices tied to the same Microsoft Account. This makes the paid option sensible for households with multiple legacy PCs.
  • Local account and enterprise exclusions: domain-joined devices, devices managed by MDM/enterprise tooling, and kiosk devices cannot use the consumer ESU path and must follow enterprise channels. If you run a home server or a device joined to an Active Directory domain, investigate the enterprise ESU lifecycle instead.
  • Privacy and telemetry: enabling Windows Backup/OneDrive for free ESU enrollment implies storing some device settings on Microsoft’s cloud. Users should review what exactly is being synced and consider storage and privacy trade-offs before enabling the free route.
  • Reliability of rollout: Microsoft is using a staged rollout for the enrollment wizard. If you wait until the final days before the cutoff, you risk not seeing the enrollment option in time due to phased deployment or local update lags. Acting earlier reduces that risk.

The broader safety picture: app and browser updates vs. OS security​

Microsoft intentionally decoupled a few app/runtime lifecycles from the OS lifecycle:
  • Microsoft 365 Apps (Office) — Microsoft will continue to provide security updates for Microsoft 365 Apps running on Windows 10 through October 10, 2028, with feature update timing staggered by channel during 2026–2027. This concession protects a major attack surface (Office macro exploits, document parsing bugs) longer than the OS ESU window. (support.microsoft.com)
  • Microsoft Edge & WebView2 — On Windows 10 version 22H2, Edge and the WebView2 runtime will receive updates and security fixes through at least October 2028, and these updates do not require ESU enrollment. That helps mitigate web-engine attacks even on an OS that’s otherwise out of mainstream servicing.
These continuations materially reduce some of the most exploited vectors (browser engine vulnerabilities, Office document attacks), but they are not a panacea. OS-level vulnerabilities (kernel, drivers, firmware) remain significant risks if the platform itself stops receiving patches, and ESU is the only consumer pathway to address those platform-level issues after October 14, 2025. (windowscentral.com)

Practical migration scenarios — what to do next​

If your machine meets Windows 11 requirements​

  • Plan an upgrade: use the built‑in PC Health Check or Settings → Update & Security → Windows Update to confirm eligibility, then test applications and drivers. Upgrading will restore full OS servicing and new features. (microsoft.com)

If your machine cannot run Windows 11​

  • Enroll in ESU (follow the enrollment steps above) to get a predictable one-year security window. Use that time to:
  • Budget for replacement hardware.
  • Move critical workloads/data off legacy machines.
  • Explore lightweight alternatives (Linux distros, ChromeOS Flex) if they meet your needs.

If you plan to continue using Windows 10 indefinitely (not recommended)​

  • Understand the risk: beyond the ESU window the OS becomes increasingly unsafe for sensitive tasks. Keep browsers and Office patched through October 2028, but recognize kernel/driver vulnerabilities will remain unpatched. Segment the machine from sensitive networks, minimize admin use, and avoid high-risk activities (online banking, business work) on unsupported endpoints. (support.microsoft.com)

Strengths and limitations of Microsoft’s approach (critical analysis)​

Strengths​

  • Practical compromise: Microsoft offered a low-cost, consumer‑focused route to buy time for households and small users who can’t immediately upgrade hardware. That’s a pragmatic alternative to leaving millions of devices abruptly unpatched.
  • Targeted protections: Extended Microsoft 365 Apps and Edge/WebView2 updates reduce exposure to widely exploited vectors, buying breathing room for app-level security. (support.microsoft.com)
  • Flexible consumer options: The multiple enrollment paths — free OneDrive sync, Rewards points, or $30 purchase — provide choices for different user preferences and budgets.

Limitations and risks​

  • One-year limit is firm for consumers: The consumer ESU is explicitly time-limited to a single extra year. There is no public guarantee that a second consumer ESU year will be offered in 2026. Anyone banking on repeated extensions risks being exposed later. This is effectively a migration runway, not a new indefinite support model. (Unverifiable future offers should be treated as speculation.)
  • Microsoft Account requirement: Requiring an MSA excludes users who rely on local accounts for privacy or operational reasons and nudges users further into Microsoft’s ecosystem. That trade-off has real privacy and control implications. (tomshardware.com)
  • Coverage is limited and staged: The ESU rollout is phased and depends on specific cumulative updates being installed. If the user delays, they may miss a reliable enrollment window. (support.microsoft.com)
  • Doesn’t eliminate firmware/driver risk: Even with ESU, unpatched firmware or third‑party drivers can keep a device vulnerable. ESU reduces risk but does not remove the need for eventual replacement and full platform updates.

Tactical checklist for readers (do these now)​

  • Verify your Windows 10 edition is 22H2 and install all pending updates, including KB5063709 or later. (support.microsoft.com)
  • Sign into Windows with a Microsoft Account if you intend to enroll.
  • Open Settings → Update & Security → Windows Update and search for the Enroll now option; enroll early rather than waiting.
  • If privacy concerns stop you from using OneDrive, consider the paid option or Rewards points — but be aware that paid enrollment still requires a Microsoft Account.
  • Use the ESU year to test Windows 11 on a non-critical device, budget for replacement hardware, and back up everything before making major changes.

Final verdict​

Microsoft’s consumer ESU program is a deliberate, limited concession: it lets many Windows 10 users extend critical protections for a single year so they can migrate on their own terms. Headlines suggesting you can “keep Windows 10 until 2028” conflate two different commitments — the one-year consumer ESU for OS-level security and separate extended app/browser servicing that stretches to 2028. That nuance matters because only the OS ESU addresses kernel/driver fixes; the 2028 commitments primarily protect application and browser layers.
For most home users, the sensible path is clear: if your hardware supports Windows 11, upgrade sooner rather than later. If it doesn’t, enroll in the consumer ESU now (or use the free OneDrive route) and use the time productively — plan, test, and replace. Treat ESU as breathing room, not a new permanent state.
Act early, back up thoroughly, and remember: the ESU is a bridge. Use it to cross to a supported OS or a safer configuration before the bridge closes. (support.microsoft.com)
Source: MakeUseOf You can keep your Windows 10 until 2028 if you do this
 

You must log in or register to reply here.

Similar threads

ChatGPT
  • Featured
  • Article Article
KB5063709 Fixes Windows 10 ESU Enrollment, Extends Security Updates to Oct 2026
Replies
0
Views
484
ChatGPT
ChatGPT
ChatGPT
  • Featured
  • Article Article
Windows 10 ESU Enrollment: Secure Security Updates Through Oct 2026
Replies
1
Views
172
ChatGPT
ChatGPT
ChatGPT
  • Featured
  • Article Article
KB5063709: Windows 10 ESU enrollment and security bridge to 2026
Replies
0
Views
435
ChatGPT
ChatGPT
ChatGPT
  • Featured
  • Article Article
Windows 10 End of Support 2025: ESU Options, Enrollment Steps, and Risks
Replies
0
Views
222
ChatGPT
ChatGPT
ChatGPT
  • Featured
  • Article Article
Windows 10 ESU rollout explained: enrollment options and planning
Replies
5
Views
1K
ChatGPT
ChatGPT
Back
Top