Windows 10 ESU Enrollment: Secure Security Updates Through Oct 2026

Microsoft will stop providing routine security updates for mainstream Windows 10 on October 14, 2025 — and if your PC isn’t ready to move to Windows 11, the single most important thing you must do right now is enroll that device in Microsoft’s Extended Security Updates (ESU) program or complete the Windows Backup/OneDrive sync that makes you eligible for the free ESU path.

---

Background / Overview​

Windows 10’s official support lifecycle is closing on October 14, 2025. After that date Microsoft will no longer ship routine feature updates, quality updates, or free security patches for consumer editions of Windows 10; devices will continue to function, but they become progressively more exposed to newly discovered vulnerabilities. Microsoft’s lifecycle page states the end-of-support date clearly and lays out the options: upgrade to Windows 11 if your hardware is eligible, buy a new Windows 11 PC, or enroll in the Windows 10 Consumer Extended Security Updates program for a limited extension.
Microsoft built the consumer ESU as a one-year, security-only bridge that runs from October 15, 2025 through October 13, 2026. The ESU option is intentionally narrow — it delivers only monthly security fixes classified as Critical or Important by Microsoft’s Security Response Center. It does not deliver new OS features, non-security quality fixes, or general technical support. Enrollment is delivered through a staged “Enroll now” experience inside Settings → Update & Security → Windows Update.
This story has been covered widely in the press and in community reporting because the rollout has been uneven: many users see a prominent enrollment prompt and can sign up immediately, while others report that the enrollment wizard has not yet appeared on otherwise-eligible PCs. That uneven rollout — and a few bugs in the early enrollment builds — have left some users frustrated in the weeks before the cutoff. (windowscentral.com, techradar.com)

---

What the ESU actually gives you — the plain facts​

• Coverage window (consumer ESU): Security-only updates for enrolled Windows 10 devices from Oct 15, 2025 through Oct 13, 2026.
• Eligible OS: Windows 10, version 22H2 (Home, Pro, Pro Education, Workstation) that has the latest updates installed.
• Enrollment channels (consumer):
• Free if you enable Windows Backup (sync PC Settings to a Microsoft account/OneDrive).
• Redeem 1,000 Microsoft Rewards points.
• One-time paid purchase of $30 USD (or local equivalent) plus applicable tax.
• Device limits: A consumer ESU license is tied to a Microsoft account and can be applied to up to 10 eligible devices associated with that account.
• Important exclusions: Consumer ESU is not available for domain-joined, MDM-enrolled, or kiosk-mode devices (those are handled by separate enterprise ESU channels).

These are operational facts you should treat as binding when you decide whether to enroll, delay, or upgrade.

---

Why this matters now (risk analysis)​

Security updates are the heart of modern OS risk management. Once Microsoft stops delivering monthly security patches to the general Windows Update channel, newly discovered vulnerabilities will remain unpatched on un-enrolled Windows 10 systems. That raises three practical risks:

• Increased exposure to actively exploited vulnerabilities and malware variants that target unpatched systems. The attack surface of a widely deployed OS like Windows 10 is large; lack of updates materially increases risk.
• Compatibility and reliability problems over time: newer applications and cloud services will prioritize Windows 11, and vendors may stop testing on an unsupported OS. Microsoft itself has warned about degraded support for Microsoft 365 Apps and other integrations over time.
• Compliance and operational risk for regulated users or small businesses: running an unsupported OS can violate internal controls and external compliance regimes (PCI, HIPAA, etc.) if vendors require supported platforms. The consumer ESU is a short-term mitigation but not a compliance panacea.

Microsoft’s consumer ESU is explicitly a bridge, not a destination. Use it deliberately to buy time to migrate, not as a strategy to stay indefinitely on Windows 10.

---

The one thing you must do now — step-by-step​

If you are still running Windows 10 and you want to stay protected after Oct. 14, 2025, follow these steps immediately:

• Confirm prerequisites:
• Check that your device is running Windows 10, version 22H2 and is fully updated. (Settings → System → About; Settings → Update & Security → Check for updates).
• Make sure you have administrator rights on the PC and are signed into or prepared to sign into a Microsoft account (local accounts will be prompted to sign in during enrollment).
• Back up now:
• Make a full backup of your important files to an external drive or an independent cloud service not tied to the Microsoft account you plan to use. Always keep at least one independent copy.
• Check Windows Update for the enrollment prompt:
• Go to Settings → Update & Security → Windows Update. Eligible devices will show an “Enroll now” link or messaging in the top-right corner. If you see it, click it and follow the wizard.
• Choose your ESU enrollment path:
• Free via Windows Backup: enable Windows Backup to sync your PC settings to OneDrive (this requires a Microsoft account). This route is free but uses your OneDrive storage.
• Redeem 1,000 Microsoft Rewards points: select the Rewards option in the enrollment wizard and follow the prompts. Note: the Rewards path has had intermittent redemption issues for some users, so expect occasional hiccups.
• Pay $30 USD: choose the paid purchase if you prefer not to tie an account to OneDrive or if you can’t redeem Rewards points. This covers up to 10 devices per Microsoft account.
• Verify enrollment and patch delivery:
• After enrollment, check Windows Update history to confirm that ESU-labeled security updates are being delivered. You will receive Critical and Important updates as they are released through the ESU window.

If the “Enroll now” link is not visible, install all pending updates, reboot, and check again; Microsoft is rolling the enrollment wizard out in phases and has deployed fixes for early registration bugs. If problems persist, check the Microsoft support ESU page or Microsoft Q&A for known workarounds. (techradar.com, support.microsoft.com)

---

Common enrollment problems and practical workarounds​

• Enrollment wizard not visible: the enrollment feature is being rolled out gradually. Keep the device up to date, reboot, and check Windows Update periodically. Microsoft says the wizard will reach eligible devices before the Oct. 14 cutoff. (support.microsoft.com, windowscentral.com)
• Rewards redemption failing: numerous reports on Microsoft Q&A show that redeeming 1,000 Rewards points sometimes fails or is declined; users who can’t redeem points have either retried successfully later or used the backup/paid path. If you have Rewards points and the wizard accepts them, the route should work but be prepared to use a backup or paid fallback.
• OneDrive storage limits: the free enrollment route requires syncing settings to your Microsoft account/OneDrive; free accounts include 5 GB of cloud storage, which may be insufficient if you also use OneDrive heavily. If you hit that limit, you may need to free OneDrive space, purchase a Microsoft 365/OneDrive plan, or use the paid or Rewards route. (support.microsoft.com, microsoft.com)
• Early bugs and update regressions: the August 2025 cumulative updates (e.g., KB5063709) fixed and caused a number of issues during the ESU rollout; Microsoft deployed follow-up out-of-band fixes to correct enrollment and recovery bugs. Keep an eye on Windows release health and consider pausing optional updates if you rely on Reset/Recovery features while troubleshooting. (support.microsoft.com, bleepingcomputer.com)

---

Alternatives and why they matter​

Even with ESU, planning a migration remains the safest long-term choice. Key alternatives:

• Upgrade to Windows 11 (if eligible): Windows 11 remains Microsoft’s supported path; upgrading delivers ongoing security updates and feature support. Check PC Health Check for hardware eligibility, and test drivers/peripherals before committing.
• Buy a new Windows 11 PC: for some older machines the cost and complexity of hardware upgrades (motherboard/CPU/RAM) will exceed the cost of replacement. Newer PCs also come with modern security features (TPM, Secure Boot, NPU/AI accelerators) that Microsoft emphasizes for future capabilities.
• Consider alternative OSes or cloud Windows: users who can’t or won’t upgrade may consider Linux distributions or ChromeOS Flex for certain workloads, or cloud-hosted Windows (Windows 365/Azure Virtual Desktop) for legacy app access without local OS patches. These options have trade-offs in usability, licensing, and peripherals.

Installing Windows 11 on unsupported hardware by using registry bypasses or modified ISOs is possible but explicitly unsupported by Microsoft and could result in blocked updates and instability. That path should be treated as a last resort with full understanding of the trade-offs.

---

Security and privacy considerations of the free ESU path​

The free ESU path requires syncing your PC Settings to a Microsoft account via Windows Backup/OneDrive. That raises two practical questions:

• Data scope: the enrollment requires syncing settings and some profile data to OneDrive; it does not automatically copy entire user folders unless you opt into OneDrive file backup features. Still, the process creates a stronger link between that PC and your Microsoft account.
• Privacy and vendor lock-in concerns: syncing settings to OneDrive increases Microsoft’s telemetry surface and ties your ESU license and recovery artifacts to an account in the cloud. For privacy-sensitive users, the paid $30 route or the Rewards route may be preferable to the free OneDrive sync. Regardless of route, always keep an independent backup outside of OneDrive.

---

Recommendations: a practical checklist you can use this hour​

• Verify you are on Windows 10 version 22H2 and install any pending updates.
• Create a full external backup (disk image or file-level backup to an external drive). Keep the external backup offline when not in use.
• Sign in to or prepare a Microsoft account (not a child account) that you control.
• Check Settings → Update & Security → Windows Update for the Enroll now prompt. If it appears, follow the wizard and pick your enrollment path (OneDrive backup, Rewards, or purchase).
• If you don’t see the link: ensure all updates are installed, reboot, then check again. If problems persist, monitor Microsoft release health and news coverage for targeted fixes (the August cumulative updates were part of that rollout and included fixes and regressions). (support.microsoft.com, bleepingcomputer.com)
• Plan migration: use the ESU year to test Windows 11 compatibility, budget hardware replacement, or migrate workloads to supported platforms. Treat ESU as a temporary safety net.

---

The broader picture — ecosystem, costs, and sustainability​

Microsoft’s consumer ESU program is a pragmatic, time-limited fix for a real problem: millions of devices that remain on Windows 10 and cannot or will not upgrade to Windows 11 immediately. The program balances several priorities: reducing a sudden security cliff, nudging the market toward modern hardware and Windows 11, and giving households an affordable option to secure legacy machines for a limited time. (support.microsoft.com, windowscentral.com)
But the program also raises systemic concerns. The push toward account-centric enrollments and cloud-backed backup nudges users into the Microsoft ecosystem, which has implications for privacy and long-term costs. The one-time $30 fee is modest for many households, but the Microsoft account/OneDrive requirement and the staging of the rollout have generated user frustration and some legitimate debate about whether a vendor-controlled EOL is the right approach to device longevity. (windowscentral.com, techradar.com)
Finally, the program does not address e-waste or hardware obsolescence directly. For many users, the safer and greener option is to evaluate whether a hardware refresh (with trade-in/recycling) or moving workloads to lighter OS alternatives is the best path forward. Microsoft’s lifecycle documentation and the ESU program give time — and that time should be used strategically.

---

Conclusion​

If you’re still on Windows 10, the one thing that stands between you and a rapidly growing security risk is enrollment in Microsoft’s Extended Security Updates program — or at minimum enabling Windows Backup/OneDrive sync so you can qualify for the free ESU path. The program is short-term, limited to security-only patches, and tied to a Microsoft account, but it is real and it works as a controlled pause to migrate safely. Act now: update to 22H2, back up your data, check for the “Enroll now” wizard in Windows Update, and pick the enrollment route that fits your privacy and storage preferences. Time is the scarce resource here; ESU buys you a year, but only if you complete the enrollment before the October 14, 2025 support cutoff. (support.microsoft.com, windowscentral.com, techradar.com)

---

Source: CNET If You're Still Running Windows 10, You Need to Do This One Thing Before Oct. 14

 

[ChatGPT]

If you plan to keep using Windows 10 beyond Microsoft’s October 14, 2025 end‑of‑support date, you can—but only if you take deliberate steps before the deadline. Microsoft has opened a one‑year, consumer‑facing Extended Security Updates (ESU) program that lets eligible Windows 10 devices keep receiving security‑only patches through October 13, 2026, but the program is narrow in scope, tied to a Microsoft account, and surfaced via a staggered enrollment wizard that many users still can’t see yet.

Background / Overview​

Windows 10 was shipped in 2015 and Microsoft has long signaled that its mainstream lifecycle would end in 2025. On the calendar, that official cutoff is October 14, 2025; after that date Microsoft will no longer deliver routine feature updates, quality updates, or standard security fixes for Windows 10 consumer editions unless a device is enrolled in an appropriate ESU program.
In response to the large installed base of Windows 10 systems—many of which are blocked from upgrading to Windows 11 by hardware requirements—Microsoft introduced a consumer ESU pathway that provides one extra year of critical and important security updates (not feature updates, not quality improvements, not technical support). Enrollment is handled on eligible machines through a new “Enroll now” flow in Settings → Update & Security → Windows Update. The consumer ESU is explicitly scoped for Windows 10, version 22H2 (Home, Pro, Pro Education and Workstation) and requires the latest updates to be installed before enrollment becomes available.

---

What Microsoft is offering — the plain facts​

• End of standard Windows 10 support: October 14, 2025. After that date, Windows 10 will still run, but it will not receive standard security updates unless the device is enrolled in ESU.
• Consumer ESU coverage window (if enrolled): through October 13, 2026. This is one year of security‑only patches.
• Eligible OS build: Windows 10, version 22H2 (consumer SKUs listed above) with the latest cumulative updates applied.
• Enrollment surface: an on‑device wizard in Settings → Update & Security → Windows Update. Microsoft has rolled this out in phases; not every PC will see it immediately. (support.microsoft.com, windowslatest.com)

Microsoft has published three consumer enrollment routes for ESU:

• Free: enable Windows Backup (settings sync) to OneDrive; Microsoft uses the account and settings sync to tie the ESU entitlement to your Microsoft account.
• Rewards: redeem 1,000 Microsoft Rewards points to sign up without paying cash. (support.microsoft.com, learn.microsoft.com)
• Paid: make a one‑time purchase (~$30 USD) (local currency equivalent and tax may apply). One purchased consumer ESU license can be applied to up to 10 eligible devices associated with the same Microsoft account.

These are security updates only; ESU does not restore access to feature releases, and it does not re‑establish general Microsoft support for Windows 10. Treat ESU as a time‑bounded bridge, not a new long‑term support model.

---

Why Microsoft structured ESU this way (short analysis)​

Microsoft faces two simultaneous pressures: (1) a huge installed base of Windows 10 devices—many of which are blocked from Windows 11 upgrades by TPM/firmware/CPU rules—and (2) the security risk of leaving that installed base unpatched en masse. ESU is a pragmatic, limited mitigation: it reduces immediate systemic risk while nudging consumers toward Windows 11 and Microsoft cloud services. The free enrollment route that requires OneDrive/settings sync performs two functions: it lowers friction for consumers while increasing cloud account linkage and retention.
Strengths of that approach:

• Rapid, vendor‑issued security fixes for high‑severity vulnerabilities for one additional year.
• A low‑cost paid option and two no‑cash options (settings sync or Rewards) that lower financial friction for households.
• On‑device enrollment via Windows Update simplifies consumer adoption—when the wizard is visible.

Trade‑offs and concerns:

• The free path requires signing into a Microsoft account and syncing settings—an unacceptable privacy trade‑off for some users.
• ESU only covers critical and important security patches, not feature updates, bug fixes, or technical support.
• The staged rollout and early enrollment wizard bugs created frustration and uneven access. KB5063709—a cumulative August 2025 update—addressed a crash bug in the enrollment wizard and widened availability, but rollout remained gradual. (support.microsoft.com, techradar.com)

---

The practical options — step‑by‑step choices and how to decide​

Every Windows 10 user has three practical paths to consider; the right one depends on hardware, budget, privacy priorities and risk tolerance.

1. Upgrade to Windows 11 (best long‑term outcome if eligible)​

If your PC meets Windows 11 minimum requirements you can upgrade for free and regain ongoing security, feature updates, and Microsoft support. Check eligibility via Settings → Windows Update or the PC Health Check app. For many users this is the cleanest choice long‑term. (support.microsoft.com, tomsguide.com)
Practical steps:

• Run PC Health Check (or Check for updates in Windows Update).
• Back up files and create a full image before upgrading.
• Update firmware (enable TPM 2.0, enable Secure Boot) if the motherboard supports it but the features are disabled.
• Test critical apps and drivers after upgrade.

2. Enroll in Consumer ESU (one‑year safety valve)​

If your machine cannot run Windows 11, ESU buys time—one year—to plan an upgrade, replace the hardware, or migrate to another OS. Enrollment appears in Windows Update; choose one of the three methods (free via settings sync to OneDrive; redeem 1,000 Microsoft Rewards points; or pay $30). You must use a Microsoft account to enroll.
Before you try to enroll:

• Confirm you’re on Windows 10 version 22H2. If not, update now.
• Install all pending updates; importantly, install the August 2025 cumulative update (KB5063709) which fixed known ESU wizard crashes and made the enrollment UI more widely available.

Enrollment steps (verified):

• Open Settings → Update & Security → Windows Update.
• If eligible, click the Enroll now link (appears on the right side).
• Sign in with a Microsoft account if prompted (local accounts aren’t eligible).
• Choose your ESU route: begin Windows Backup settings sync (free), redeem Rewards, or make the one‑time purchase.
• Confirm enrollment and verify that your machine reports ESU entitlement in Windows Update. (support.microsoft.com, learn.microsoft.com)

Important caveats:

• Consumer ESU excludes domain‑joined, Entra‑joined (in some cases), kiosk mode, and MDM‑enrolled devices; commercial and enterprise customers must use enterprise ESU channels.
• ESU entitlements are tied to the Microsoft account used during enrollment and can be applied to up to 10 eligible devices for the consumer paid option.

3. Don’t enroll — migrate off Windows 10​

If you refuse to create a Microsoft account or never want to tie settings to OneDrive, and you don’t have Rewards points or cash for the $30 route, your realistic alternatives are:

• Replace the device with a Windows 11 PC.
• Migrate to a Linux distribution (Ubuntu, Linux Mint) or ChromeOS Flex for lighter web‑centric use—acceptable for many users who mainly browse and use Office‑style apps.
• Run Windows 11 in the cloud (Windows 365 / Azure Virtual Desktop) and access it from older hardware (complex and typically for advanced users).

---

Security, privacy, and compliance — the critical tradeoffs​

ESU does reduce immediate cyber‑risk by keeping critical and important patches flowing for a year, but it’s not a full replacement for a supported OS. Patching of lower‑severity bugs, new features, or driver updates are not part of ESU. Businesses and regulated users should not treat consumer ESU as a compliance strategy; enterprise SLAs and volume licensing channels remain the correct path for organizations.
Privacy implications:

• The free ESU route requires turning on Windows Backup / settings sync and signing into a Microsoft account. That action stores configuration metadata (and potentially some credentials info used for restore) in Microsoft cloud services; for users who avoid cloud accounts for privacy reasons, the paid $30 route or Rewards option are alternatives—though both still require a Microsoft account to enroll. Be explicit about what you’re syncing: Microsoft’s ESU free path ties to settings sync, not a full file backup, but users should verify what their Windows Backup flow will store in OneDrive. OneDrive’s free tier provides 5 GB which is generally sufficient for settings but not for large file backups—plan accordingly.

Operational risks:

• The ESU enrollment rollout has been uneven and the enrollment wizard experienced bugs that were patched in August 2025 (KB5063709). Some users still reported issues redeeming Rewards; expect uneven regional availability and occasional support glitches. Don’t assume immediate availability—check Windows Update repeatedly and install the required cumulative updates first. (techradar.com, learn.microsoft.com)

Environmental and economic angles:

• Pushing consumers toward new Windows 11 hardware can create e‑waste and cost burden. ESU reduces the immediate pressure to replace devices, giving users time to plan economically sensible upgrades or redistribution of hardware. The one‑year bridge is short; use it to craft a migration budget and timetable.

---

Troubleshooting and common enrollment issues (practical guide)​

• If you don’t see the Enroll now button:
• Confirm you’re on 22H2 and have installed all updates, including KB5063709 (August 2025 cumulative). (support.microsoft.com, learn.microsoft.com)
• Make sure you’re signed in with a Microsoft account that has administrator rights. Local accounts won’t be accepted for enrollment.
• Wait: Microsoft’s rollout is phased. Many reports show the button arriving days or weeks after updates on some devices. (windowslatest.com, techradar.com)
• If Rewards redemption fails (you see “You can’t redeem this rewards offer”):
• Region, account phone verification, or temporary redemption outages are common culprits. Microsoft’s Rewards redemption rules vary by market; if you meet the criteria and still fail, try again later or consider the paid route. Microsoft Q&A threads document repeated, intermittent failures during early rollout. (support.microsoft.com, learn.microsoft.com)
• If you rely on OneDrive storage for the free route:
• Verify your OneDrive quota—free accounts get 5 GB. If Windows Backup attempts to store more than that, you may need to free space or buy storage. Do not assume the free ESU path backs up all your files—Microsoft’s free route is intended to sync settings, not act as a full file backup. Always maintain an independent backup.

---

A recommended timeline and checklist for the coming weeks​

• Immediately confirm Windows 10 build: Settings → System → About → Version (should be 22H2). If not, update now.
• Install all outstanding updates and reboot, with particular attention to the August 2025 cumulative update (KB5063709). This update fixed enrollment wizard crashes and broadens ESU availability.
• Back up critical files to at least two independent locations (external drive + a cloud or another external). Do not rely on OneDrive alone.
• Decide your migration strategy: immediate Windows 11 upgrade (if eligible), ESU for one year, or migrate to an alternate OS/hardware. Document key deadlines (October 14, 2025 and October 13, 2026).
• If you plan to enroll in ESU: prepare a Microsoft account with admin rights and ensure you have either 1,000 Microsoft Rewards points, $30 for the paid option, or willingness to enable settings sync to OneDrive. Attempt enrollment via Settings → Update & Security → Windows Update when the option appears. (support.microsoft.com, learn.microsoft.com)

---

Final assessment — what staying on Windows 10 really means​

Staying on Windows 10 past October 14, 2025 without action is risky. ESU gives you a short, tightly scoped safety net: one additional year of security updates if you enroll, with flexible—but not unconditional—entry points. The program strikes a pragmatic balance: it reduces the immediate attack surface at relatively low consumer cost, but it also nudges users into Microsoft accounts and cloud sync, and it does not replace the benefits of a supported OS. The enrollment experience has been bumpy for some users—Microsoft patched the most visible issues with KB5063709—but rollout remains gradual and, in places, unreliable. Plan as if you will need to act now rather than later: confirm your Windows build, install KB5063709, back up your data, and be ready to enroll or migrate. (support.microsoft.com, techradar.com, tomsguide.com)

---

Appendix — quick answers (concise reference)​

• Will my Windows 10 PC stop working on October 15, 2025? No, but it will stop receiving routine security updates unless enrolled in ESU.
• How long does ESU cover me? Through October 13, 2026 for consumer enrollments.
• Do I have to sign in with a Microsoft account to enroll? Yes — enrollment requires a Microsoft account with admin privileges.
• Is ESU free? There are three consumer paths: free via Windows Backup settings sync, 1,000 Microsoft Rewards points, or a one‑time paid purchase (~$30). All require a Microsoft account.
• What important update should I install now? KB5063709 (August 2025 cumulative) — it fixes ESU wizard problems and ensures the enrollment UI is available.

---

Windows 10’s end of support is a real inflection point. The ESU program is a pragmatic, time‑limited fix for consumers who can’t or won’t move immediately, but it’s not a substitute for migration planning. Use the ESU year to schedule upgrades, minimize disruption, and harden the devices you’ll intentionally keep running on that platform.

---

Source: TechRadar Want to stick with Windows 10 in 2026? You'll need to act soon - here are your options for avoiding Windows 11