Microsoft’s surprise consumer Extended Security Updates (ESU) window is real — and it’s urgent: Windows 10 users now have a one‑year lifeline to keep receiving security updates through October 13, 2026, but you must enroll before Windows 10’s support ends on October 14, 2025. The enrollment appears as an “Enroll now” button in Settings → Windows Update and offers three ways to claim a year of protection — a free path tied to backing up PC settings to OneDrive, a Microsoft Rewards redemption option, or a paid one‑time purchase — but the rollout is staggered, prerequisites are strict, and the process exposes tradeoffs that every user should weigh carefully. (support.microsoft.com)
Microsoft has set October 14, 2025, as the formal end‑of‑support date for Windows 10. After that date, devices running Windows 10 that are not enrolled in an ESU program will no longer receive free security updates, technical assistance, or feature fixes from Microsoft. To ease the transition for consumers (not just enterprises), Microsoft introduced a consumer ESU program that provides a single extra year of security updates through October 13, 2026 — but only if users meet the prerequisites and follow the enrollment process. (support.microsoft.com)
The story exploded across tech outlets and community forums after Microsoft’s announcement and subsequent push to make enrollment available in Settings; coverage highlighted a phased rollout (some users see the “Enroll now” toggle while others do not), instructions for claiming the free option, and user complaints about inconsistent availability and messy cumulative updates in recent months. Reports from independent outlets confirm both the official enrollment mechanics and the real‑world rollout problems. (windowscentral.com, techradar.com)
Because the enrollment UX is staggered, waiting until the last week is risky. Community reports and tech press coverage show users who did not have the toggle available until after key cumulative updates landed, which means you should: update now, then check Settings → Windows Update for the Enroll option, and act immediately when you see it. (windowscentral.com, techradar.com)
Put plainly: the macro trend that Windows 11 adoption has accelerated is verifiable via StatCounter and industry reporting, but precise claims about “700+ million” non‑upgraders are not directly verifiable from public Microsoft telemetry and should be treated as approximations unless you see direct Microsoft disclosure. Flag such figures as estimates. (gs.statcounter.com, thurrott.com)
However, the execution matters and the rollout has exposed real weaknesses. The phased enrollment, dependency on recent cumulative updates (which themselves caused some issues in August 2025), and the need for a Microsoft Account raise legitimate concerns about reliability, privacy, and user control. The ESU window should be viewed as a planning period, not a comfort blanket: administrators and consumers should use the time to test, migrate, and decide their longer‑term strategy. (support.microsoft.com, windowscentral.com)
Two practical takeaways for readers: first, act now to install updates and check for the Enroll option — don’t wait until a last‑minute panic. Second, use the year sensibly: move critical systems to supported platforms, verify backups, and keep a migration calendar that will let you exit ESU before it expires.
Microsoft’s announcement shook the Windows community because the stakes are real: an unpatched operating system is an attractive target for attackers. The ESU window is valuable — but only if you enroll correctly and use the time to migrate to a supported environment. (support.microsoft.com, techradar.com)
The instructions above explain precisely how to verify your eligibility, the updates to install, the three enrollment options, and the tradeoffs you should consider before choosing a path. If the “Enroll now” toggle is not yet present on your device, that is not unusual — Microsoft’s rollout is phased — but do the preparatory work today so you can act the moment the toggle appears. (windowscentral.com)
Source: Forbes Microsoft Issues Free Update Offer To Windows Users—How To Get It
Microsoft has set October 14, 2025, as the formal end‑of‑support date for Windows 10. After that date, devices running Windows 10 that are not enrolled in an ESU program will no longer receive free security updates, technical assistance, or feature fixes from Microsoft. To ease the transition for consumers (not just enterprises), Microsoft introduced a consumer ESU program that provides a single extra year of security updates through October 13, 2026 — but only if users meet the prerequisites and follow the enrollment process. (support.microsoft.com)The story exploded across tech outlets and community forums after Microsoft’s announcement and subsequent push to make enrollment available in Settings; coverage highlighted a phased rollout (some users see the “Enroll now” toggle while others do not), instructions for claiming the free option, and user complaints about inconsistent availability and messy cumulative updates in recent months. Reports from independent outlets confirm both the official enrollment mechanics and the real‑world rollout problems. (windowscentral.com, techradar.com)
What Microsoft is offering — the consumer ESU options
Microsoft’s consumer ESU provides the same security updates classified as critical and important by the Microsoft Security Response Center (MSRC), but it does not include feature updates, new functionality, or technical support. Enrollment methods published by Microsoft include three choices:- Free option: Back up your Windows PC settings to OneDrive (via the Windows Backup experience) and link the device to a Microsoft Account (MSA). If you already sync PC settings, the ESU can be granted at no additional cost. (support.microsoft.com)
- Microsoft Rewards: Redeem 1,000 Microsoft Rewards points for an ESU license. This is an alternative for users who do not want to start cloud sync but have an active Rewards balance. (support.microsoft.com)
- Paid option: A one‑time purchase of $30 USD (or local equivalent, plus tax) gives you an ESU license that covers up to 10 devices per Microsoft Account. This paid route is intended for consumers who prefer not to use the free cloud‑sync method. (support.microsoft.com)
Who qualifies — prerequisites and exclusions
Before you can enroll, your device must meet strict prerequisites:- Windows 10, version 22H2 (Home, Pro, Pro Education, or Workstation editions). Devices running other editions or older versions may not be eligible. (support.microsoft.com)
- All latest cumulative updates installed. Microsoft’s rollout and enrollment experience requires that your system has applied the recent servicing stack and cumulative updates (for example, the August 12, 2025 cumulative update KB5063709 is among the updates referenced in Microsoft release notes). Installing these LCUs/SSUs improves update reliability and is a practical prerequisite. (support.microsoft.com)
- Administrator Microsoft Account (MSA): The Microsoft Account used must be an administrator on the device; child accounts are not supported. The ESU license is then associated with that MSA. (support.microsoft.com)
- Domain‑joined or MDM‑managed devices: Consumer ESU is not available for devices joined to an Active Directory domain or managed by Mobile Device Management (MDM) solutions. Enterprises should use volume licensing and enterprise ESU paths. (support.microsoft.com)
- Kiosk mode / already licensed devices / certain Entra‑joined scenarios: Some deployment states are blocked from consumer ESU; the MS support pages list additional exclusions. (support.microsoft.com)
Timeline and urgency — enroll by October 13, 2025
Microsoft’s policy is explicit: enrollments must be completed before Windows 10 reaches end of support on October 14, 2025. The last “regular” Windows Update that will be offered to devices that have not enrolled is scheduled in October; to avoid a window of exposure, users must claim the ESU option before the cutoff. Microsoft’s documentation and multiple news outlets emphasize that the enrollment toggle is rolling out in waves and may not appear on all devices immediately — but Microsoft has repeatedly said the option will be available to all eligible devices before the deadline. (support.microsoft.com, windowscentral.com)Because the enrollment UX is staggered, waiting until the last week is risky. Community reports and tech press coverage show users who did not have the toggle available until after key cumulative updates landed, which means you should: update now, then check Settings → Windows Update for the Enroll option, and act immediately when you see it. (windowscentral.com, techradar.com)
Technical verification — updates you should install now
Two technical items are especially load‑bearing for the enrollment process and for update reliability:- Windows 10 version 22H2 — confirm your Windows edition and version in Settings → System → About. Devices must be on 22H2 to enroll in consumer ESU. (support.microsoft.com)
- Install the latest cumulative and servicing stack updates (LCU / SSU) — Microsoft’s August 12, 2025 cumulative (KB5063709) and subsequent fixes (including the August 19, 2025 out‑of‑band update KB5066188 that addressed reset/recovery issues) are examples of updates Microsoft highlights in release notes; ensure your device has received comparable LCUs and SSUs from Windows Update before attempting to enroll. (support.microsoft.com)
How to enroll — step‑by‑step checklist
Follow these steps in order to minimize risk and ensure eligibility:- Confirm your device is running Windows 10, version 22H2.
- Install all pending updates from Settings → Update & Security → Windows Update, including any required servicing stack updates. Reboot until no updates remain. (support.microsoft.com)
- Create a verified full disk image (recommended) plus a current system restore point. Store the image externally (USB or network). This gives you a fallback if updates or enrollment cause trouble.
- Sign into Windows with a Microsoft Account (MSA) that is an administrator. If you normally use a local account, be ready to sign in when the enrollment flow prompts. (support.microsoft.com)
- Open Settings → Update & Security → Windows Update. Look for “Enroll now” or an enrollment prompt. If it’s present, click Enroll and follow the wizard to choose Free / Rewards / Paid enrollment. (support.microsoft.com)
- If the Enroll link isn’t present immediately, run Windows Update again and ensure KB5063709 (or later) and the servicing stack updates are applied, then check again after a reboot. The rollout is phased. (support.microsoft.com, windowscentral.com)
Risks, tradeoffs, and what Microsoft’s ESU doesn’t fix
The consumer ESU is a pragmatic short‑term safety valve, but it comes with several important limitations and tradeoffs:- Limited scope — security updates only. ESU supplies security patches labelled critical/important. It does not deliver feature updates, functional fixes, or technical support. If an update is released to fix a stability problem that isn’t classified as a security vulnerability, ESU will not necessarily help. (support.microsoft.com)
- Microsoft Account and cloud dependency. The free ESU path is tied to a Microsoft Account and cloud sync to OneDrive; users concerned about privacy or cloud lock‑in may view this as unacceptable. The paid $30 option and Rewards redemption still require an MSA to attach the license. (support.microsoft.com)
- Not for enterprises or domain‑joined devices. Businesses must pursue enterprise ESU via volume licensing. Consumer ESU is not a valid enterprise remediation strategy. (support.microsoft.com)
- Rollout fragility and update side effects. The August 2025 cumulative update cycle included fixes and an out‑of‑band patch addressing reset/recovery issues, illustrating that large servicing changes can temporarily disrupt recovery workflows and update reliability. Rely on backups and don’t enroll until you’ve verified update success. (support.microsoft.com)
- Not a permanent solution. ESU buys time — one year — not forever. Plan migration, hardware replacement, or a platform change during the ESU window. (support.microsoft.com)
Marketplace context and adoption numbers — verified vs. unverifiable claims
Several coverage pieces, including the Forbes item prompting this article, reference high‑level adoption metrics (for example, claims that more than half of users were on Windows 11 by the end of July 2025, or that “more than 700 million users can’t or won’t upgrade”). Market share and installed base numbers are reported by independent measurement firms like StatCounter, and those measurements show Windows 11 recently overtook Windows 10 in global usage metrics — but month‑to‑month figures fluctuate. StatCounter and major outlets place Windows 11 roughly around the high‑40s to low‑50s percent range during mid‑2025; Windows 10 remained close behind in many regions. These third‑party measurements confirm the trend, but large rounded user counts (hundreds of millions who can’t/won’t upgrade) in popular articles are back‑of‑envelope estimates and should be treated cautiously unless Microsoft publishes exact device counts. (gs.statcounter.com, windowscentral.com)Put plainly: the macro trend that Windows 11 adoption has accelerated is verifiable via StatCounter and industry reporting, but precise claims about “700+ million” non‑upgraders are not directly verifiable from public Microsoft telemetry and should be treated as approximations unless you see direct Microsoft disclosure. Flag such figures as estimates. (gs.statcounter.com, thurrott.com)
Recommended pathways for different users
- If you rely on the device and need time to plan: Enroll in consumer ESU (free if willing to sync PC settings, or paid/Rewards option) to secure the device through October 13, 2026. Use the year to migrate critical data, test compatibility, or budget for replacement hardware. (support.microsoft.com)
- If your PC meets Windows 11 requirements: Upgrade to Windows 11 as soon as practical. That delivers ongoing support and feature updates beyond the ESU window. Use the PC Health Check app to confirm compatibility. (tomsguide.com)
- If your PC can’t run Windows 11 and you refuse cloud sync: Consider the paid ESU option or migrate workloads to an external platform (e.g., a supported Linux distribution for specific tasks, or cloud Windows instances such as Windows 365/VDI for legacy apps). Weigh cost, privacy, and logistics. (techradar.com, tomsguide.com)
Practical checklist (quick action plan)
- Verify Windows 10 edition and version (22H2).
- Install all pending Windows Updates and servicing stack updates (reboot until nothing remains). (support.microsoft.com)
- Create a full disk image and an external recovery plan.
- Sign into a personal Microsoft Account (MSA) with admin rights if you plan to use the free ESU path. (support.microsoft.com)
- Open Settings → Update & Security → Windows Update and click Enroll now as soon as it appears. Choose your enrollment option and confirm. (support.microsoft.com)
- Document the MSA used and any license details; if you paid, keep receipts and a mapping to device names.
- Plan migration or replacement before October 13, 2026 — ESU is one year, not indefinite.
Final analysis — strengths, weaknesses, and the sensible path forward
Microsoft’s consumer ESU is a pragmatic and broadly useful concession: it reduces immediate security risk for consumers who legitimately cannot upgrade to Windows 11 and it gives families and individuals a predictable, low‑cost path to stay patched for another year. The program is flexible — offering a free option, a Rewards path, and a modest paid route — and Microsoft’s support page is explicit about prerequisites and the enrollment flow. (support.microsoft.com)However, the execution matters and the rollout has exposed real weaknesses. The phased enrollment, dependency on recent cumulative updates (which themselves caused some issues in August 2025), and the need for a Microsoft Account raise legitimate concerns about reliability, privacy, and user control. The ESU window should be viewed as a planning period, not a comfort blanket: administrators and consumers should use the time to test, migrate, and decide their longer‑term strategy. (support.microsoft.com, windowscentral.com)
Two practical takeaways for readers: first, act now to install updates and check for the Enroll option — don’t wait until a last‑minute panic. Second, use the year sensibly: move critical systems to supported platforms, verify backups, and keep a migration calendar that will let you exit ESU before it expires.
Microsoft’s announcement shook the Windows community because the stakes are real: an unpatched operating system is an attractive target for attackers. The ESU window is valuable — but only if you enroll correctly and use the time to migrate to a supported environment. (support.microsoft.com, techradar.com)
The instructions above explain precisely how to verify your eligibility, the updates to install, the three enrollment options, and the tradeoffs you should consider before choosing a path. If the “Enroll now” toggle is not yet present on your device, that is not unusual — Microsoft’s rollout is phased — but do the preparatory work today so you can act the moment the toggle appears. (windowscentral.com)
Source: Forbes Microsoft Issues Free Update Offer To Windows Users—How To Get It