• Thread Author
Microsoft set a hard deadline for Windows 10 support — October 14, 2025 — and has offered a narrowly scoped lifeline for holdouts: the consumer Extended Security Updates (ESU) program that extends security-only patches for one additional year, through October 13, 2026. This article explains exactly what that means, who qualifies, how to enroll, the technical and privacy trade‑offs, important gotchas (including a critical August patch you must install), and a practical checklist to protect your PC before the deadline. (support.microsoft.com) (support.microsoft.com)

Background / Overview​

Windows 10 has served as the default Windows desktop for a decade, but Microsoft’s lifecycle calendar is unambiguous: regular security updates, feature updates, and standard technical support end on October 14, 2025. Microsoft recommends upgrading eligible machines to Windows 11; for machines that cannot or will not upgrade, the consumer ESU program buys an additional year of critical and important security updates only. That consumer ESU window runs until October 13, 2026. (support.microsoft.com) (learn.microsoft.com)
Microsoft designed the consumer ESU path to be simple and broadly accessible: enrollment appears in Settings → Update & Security → Windows Update for qualifying devices, and consumers can choose one of three enrollment routes — free (sync your PC settings to a Microsoft account/OneDrive), redeem 1,000 Microsoft Rewards points, or one-time purchase for $30 (USD) that can cover up to ten devices tied to the same Microsoft account. The free path and rewards option make this an unusually consumer-friendly approach for what was historically an enterprise-only program. (support.microsoft.com)

Why this matters now​

Running an operating system that no longer receives security updates is a material security risk. Unpatched vulnerabilities are attractive to attackers and are often weaponized rapidly after disclosure; businesses with compliance obligations could find themselves exposed legally or financially if they keep unpatched Windows 10 machines in production. ESU is security-only — it does not deliver new features, non-security bug fixes, or broad technical support — but it does reduce immediate exposure for machines that need time to migrate. (learn.microsoft.com)
Independent outlets and community reporting have documented rollout friction: users in some regions have not yet seen the enrollment wizard, and early testers encountered a crashing enrollment UI that Microsoft addressed via the August 2025 cumulative update KB5063709. That patch both delivers fixes and prepares the enrollment experience in Windows Update, so installing it is a critical prerequisite. (support.microsoft.com, techradar.com)

Who is eligible — the rules, spelled out​

Eligibility for the consumer ESU is tightly scoped. To enroll a device you must meet all of the following:
  • Device is running Windows 10, version 22H2 (Home, Pro, Pro Education, or Workstation editions). (support.microsoft.com)
  • All pending updates are installed — specifically the August 2025 cumulative (commonly referenced as KB5063709), which fixes enrollment bugs and adds the “Enroll now” flow to Settings → Windows Update. (support.microsoft.com)
  • You sign into the device with a Microsoft account (MSA) with administrative privileges during enrollment; the ESU license is bound to that account. Local-only accounts are not supported for consumer ESU enrollment. (support.microsoft.com)
  • The device must not be domain‑joined (Active Directory), Entra‑joined in some enterprise modes, in kiosk mode, or managed by enterprise MDM — those devices must use commercial ESU channels instead. (support.microsoft.com)
Important limitations: ESU provides only critical and important security updates. It does not include feature updates, design changes, or general technical support beyond ESU activation and update installation assistance. Treat ESU as a time‑limited bridge, not a permanent solution. (learn.microsoft.com)

What Microsoft fixed (and why KB5063709 matters)​

The August 2025 cumulative update KB5063709 is the practical gatekeeper for most consumer enrollments. It:
  • Installs the updated servicing components that enable the ESU enrollment option in Settings. (support.microsoft.com)
  • Fixes a crash that prevented the ESU enrollment wizard from completing in early rings. (igorslab.de)
  • Includes release-health advisories — notably, Microsoft called out a Secure Boot certificate expiration lifecycle item in the update documentation that owners should review because it may affect certain devices in mid‑2026 if firmware updates are not applied. Administrators and power users should inventory firmware updates now. (support.microsoft.com)
In short: install Windows updates now, verify your OS build matches Microsoft’s published values for 22H2 after August’s rollup (for example Build 19045.xxxx for 22H2), reboot, then check Settings → Windows Update for the ESU enrollment link. If the link still does not appear, the rollout may be staged; wait, verify prerequisites, and retry. (support.microsoft.com)

How to enroll — step-by-step (consumer)​

Follow these steps exactly to enroll a consumer device in ESU. Complete them before Oct 14, 2025 if you want continuous coverage into the ESU window.
  • Confirm Windows 10 version: open Settings → System → About and verify Windows 10, version 22H2. If not, install the 22H2 update first. (support.microsoft.com)
  • Install all pending updates: Settings → Update & Security → Windows Update → Check for updates. Ensure KB5063709 (August 2025 cumulative) or later is installed. Reboot if prompted. (support.microsoft.com)
  • Back up everything: create a full disk image and copy critical files to at least one independent destination (external drive or another cloud), then verify the backup by restoring a few files. Do not rely on a single copy.
  • Sign in with a Microsoft account (MSA) with admin rights on the PC. The enrollment flow is tied to the MSA. If you use a local account, the wizard will prompt for sign‑in during enrollment. (support.microsoft.com)
  • Open Settings → Update & Security → Windows Update. Look for messaging that reads something like “Windows 10 support ends in October 2025” and an Enroll in Extended Security Updates link in the upper right. Click Enroll now to start the wizard. (support.microsoft.com)
  • Choose how to enroll:
  • Start Windows Backup and sync PC settings to OneDrive (free).
  • Redeem 1,000 Microsoft Rewards points (if available).
  • Pay a one‑time $30 USD purchase (covers up to 10 devices tied to the same MSA). (support.microsoft.com)
  • Complete the wizard and confirm your account shows the ESU entitlement. The enrolled device will receive security updates from Microsoft Update during the ESU window (Oct 15, 2025 through Oct 13, 2026).
If you don’t see the enrollment link after meeting prerequisites, the rollout is staged — Microsoft has started with Windows Insiders and is moving outward — so check again after a short wait. Don’t assume you’re excluded; check build numbers and update history first. (support.microsoft.com, techradar.com)

What the free OneDrive/Backup route actually requires (and its limits)​

The free enrollment option requires enabling Windows Backup (the PC Settings sync) and linking that backup to a Microsoft Account and OneDrive. A few practical notes:
  • OneDrive free storage is 5 GB — if your settings backup is large you'll either need to free space or pay for additional OneDrive storage. Don’t rely on the free tier if you have extensive app credentials or settings to preserve.
  • The free path ties your ESU license and backups to the MSA, which some privacy‑conscious users may not want. If you prefer not to use an MSA or OneDrive, the paid $30 option or redeeming Microsoft Rewards are alternatives — but the enrollment process still requires signing in to an MSA to attach the ESU license. (support.microsoft.com)
  • The OneDrive route is convenient for households with multiple machines: once the MSA holds an ESU license it can be used to enroll up to 10 devices. That’s especially useful for families or small, non-domain environments. (support.microsoft.com)

Enterprise customers and businesses — different rules and pricing​

Businesses cannot use the consumer ESU path. Commercial organizations have separate ESU channels available through Volume Licensing, Cloud Solution Providers (CSP), or as part of Windows 365/Azure offerings. Key enterprise facts:
  • Pricing for commercial ESU begins at $61 per device for Year 1, and historically Microsoft’s model doubles the price for Year 2 and Year 3 (Year 2 = $122, Year 3 = $244 per device) to encourage migration. Cloud-based activation options and Windows 365/Azure pathways may offer discounted or included ESU activation for eligible subscriptions. (learn.microsoft.com, theverge.com)
  • Enterprises can obtain ESU coverage for up to three years beyond the official end‑of‑support date via the commercial program. That is an explicitly time‑bound option and intended for organizations needing a longer migration runway. (learn.microsoft.com)
If you run a small business or manage fleets, consult your licensing portal or Microsoft CSP partner now — waiting until the last minute will add procurement risk and administrative overhead. (techcommunity.microsoft.com)

Risks, trade‑offs, and practical concerns​

The ESU program solves an urgent security problem, but it introduces trade‑offs you must consider.
  • Privacy and account entanglement. The consumer ESU ties active security coverage to a Microsoft account. For users who intentionally avoid MSAs, this is a meaningful shift. If privacy is paramount, consider migrating to a supported OS, switching to a non‑Windows OS for older hardware, or paying the $30 option while recognizing account binding occurs at enrollment. (support.microsoft.com)
  • Not a long‑term fix. ESU is security-only and lasts one year for consumers. Plan migrations or hardware refreshes during the ESU window; do not treat it as indefinite support. (learn.microsoft.com)
  • Rollout reliability. Microsoft shipped KB5063709 to address early wizard failures, but the staged rollout means some users still don’t see the enrollment prompt. Don’t procrastinate. Update now and enroll as soon as the option appears. (support.microsoft.com, techradar.com)
  • Firmware and boot risk. The August cumulative includes guidance about Secure Boot certificate lifecycles; older machines may require vendor firmware updates to avoid future boot issues. Inventory firmware and ensure OEM updates are applied where available. This is especially important for PCs that will remain on Windows 10 into 2026. (support.microsoft.com)
  • Third‑party impacts. Some third‑party software vendors may tie continued support to Microsoft’s lifecycle cadence. Over time, you may find drivers, apps, or services no longer tested on Windows 10. That increases maintenance burden even with ESU in place.
A notable real‑world example of layout fragility: the August 2025 security update triggered performance issues with some NDI streaming workflows for a subset of users; Microsoft acknowledged and documented the problem, underscoring why you should test updates in a controlled environment before applying broadly on mission‑critical machines. (bleepingcomputer.com)

Alternatives to ESU — practical migration options​

If you decide ESU isn’t right for you, your main alternatives are:
  • Upgrade the PC to Windows 11 if it meets the hardware requirements (TPM 2.0, UEFI Secure Boot, supported CPU, 4 GB RAM, 64 GB storage). Use the PC Health Check tool or Windows Update to determine eligibility. Upgrading typically preserves apps and files but test critical applications and drivers first. (support.microsoft.com)
  • Replace the PC with a new Windows 11 machine — often the most future‑proof route and recommended for long-term reliability. Factor trade‑in or recycling programs to lower net cost. (support.microsoft.com)
  • Migrate older machines to a supported Linux distribution or ChromeOS Flex for machines that don’t require Windows‑only apps. For users who primarily browse and use web apps, this can be a low‑cost, secure alternative.
  • Use cloud-based Windows instances (Windows 365, Azure Virtual Desktop) to run a supported Windows environment from older hardware; some cloud plans include ESU activation for Windows 10 virtual machines. This is more complex and often better for organizations than individual consumers. (learn.microsoft.com)

A pragmatic checklist — what to do this week​

  • Verify Windows 10 version (Settings → About). If not 22H2, update now. (support.microsoft.com)
  • Install all pending updates, especially KB5063709 (August 2025 cumulative). Reboot. (support.microsoft.com)
  • Create a verified backup (full disk image + important files to an independent medium). Don’t rely on a single cloud copy.
  • Decide: will you upgrade to Windows 11, buy/replace hardware, enroll in consumer ESU, or migrate to an alternate OS? Prioritize machines that handle sensitive data.
  • If using ESU: sign in to a Microsoft account and go to Settings → Update & Security → Windows Update for the Enroll now wizard. Choose OneDrive backup (free), Rewards points (1,000), or the $30 purchase. Confirm entitlements across devices if you plan to enroll multiple PCs. (support.microsoft.com)
  • If you manage multiple devices, document which machines are enrolled, which are upgraded, and which will be retired. For businesses, contact your licensing partner about commercial ESU if needed. (techcommunity.microsoft.com)

Final assessment — the tradeoff in one paragraph​

Microsoft’s consumer ESU program is a practical, time‑boxed safety valve: it substantially reduces immediate systemic risk from mass unpatched Windows 10 devices, and the options (free via OneDrive backup, Rewards, or a modest $30 fee) are consumer-friendly. But it ties you to a Microsoft account, is explicitly security-only, and is short — one year for consumers — so it must be used as a migration window, not a destination. The rollout was imperfect, and early update bugs and firmware lifecycle issues underscore why the safest approach is to update, back up, and plan migration now rather than wait for last‑minute enrollment hassles. (support.microsoft.com)

Quick reference — essential dates and numbers​

  • Windows 10 end of support (no more free security updates): October 14, 2025. (support.microsoft.com)
  • Consumer ESU coverage window (if enrolled): through October 13, 2026. (support.microsoft.com)
  • Consumer ESU cost options: free (Windows Backup/OneDrive sync), 1,000 Microsoft Rewards points, or $30 USD one‑time purchase (one license covers up to 10 devices tied to the same Microsoft account). (support.microsoft.com)
  • Enterprise ESU pricing (Year 1 starting point): $61 USD per device (cloud activation and Windows 365 pathways may offer different pricing and discounts). Commercial ESU can extend support up to three years. (learn.microsoft.com, theverge.com)
  • Critical update to install for consumer ESU enrollment: KB5063709 (August 2025 cumulative). (support.microsoft.com)

Microsoft has provided a realistic, if limited, bridge for Windows 10 users who need time — but that bridge is short and not without strings. Install updates now, back up your data, and decide whether to upgrade to Windows 11 (if eligible), purchase replacement hardware, migrate to an alternative platform, or enroll in ESU before the October 14 cutoff. The one‑year window buys time; use it to move to a supported platform rather than to postpone the inevitable. (support.microsoft.com, learn.microsoft.com)

Source: CNET If You're Still Running Windows 10, You Need to Do This One Thing Before Oct. 14
 
Microsoft’s surprise move to offer a one‑year safety net for Windows 10 users has become the most time‑sensitive Windows story of the moment: a consumer Extended Security Updates (ESU) path is available, enrollment is controlled through a new “Enroll” option in Settings → Windows Update, and the enrollment rollout is phased — meaning millions will need to update, check, and claim the extension before the October cutoff or risk falling off Microsoft’s security stream. (support.microsoft.com) (techradar.com)

Background / Overview​

Microsoft has long pinned October 14, 2025 as the formal end‑of‑support date for Windows 10. After that date Microsoft will stop providing routine security and feature updates for Windows 10 devices — a hardline change that forces a choice for users: upgrade to Windows 11 (if your hardware supports it), replace the device, or enroll in a short‑term ESU plan. The company’s official support documentation spells out the options and the new consumer ESU program, including its eligibility rules and enrollment choices. (support.microsoft.com) (support.microsoft.com)
This news comes at a sensitive moment: Windows 11 overtook Windows 10 in market share in July 2025, but Statcounter and other trackers show meaningful month‑to‑month shifts that reflect users’ mixed willingness and ability to move to Windows 11. That market tug‑of‑war is central to why Microsoft offered a consumer ESU option in the first place: hundreds of millions of PCs will still be on Windows 10 at the end of mainstream support, and many of those machines either can’t or won’t upgrade. (gs.statcounter.com, windowscentral.com)

What Microsoft is offering: the consumer ESU explained​

Microsoft’s consumer ESU is a one‑year, time‑boxed program that delivers security updates only for eligible Windows 10 devices through October 13, 2026. It is explicitly not a full support or feature‑update program — ESU delivers only the critical and important security patches defined by Microsoft’s Security Response Center (MSRC). Enrollment is performed from the Windows Update panel in Settings, where eligible devices will see a new “Enroll now” option when the rollout reaches them. (support.microsoft.com)
Key facts to know right now:
  • Coverage window: Security updates delivered through October 13, 2026 (consumer ESU). (support.microsoft.com)
  • Enrollment path: Settings → Update & Security → Windows Update → Enroll now (when visible). (support.microsoft.com)
  • Eligibility: Device must be running Windows 10, version 22H2 (Home, Pro, Pro Education, or Workstation), must have latest updates installed, and the enrolling user must be a device administrator with a Microsoft Account (no child accounts). Domain‑joined, MDM‑managed, and kiosk devices are excluded from the consumer program. (support.microsoft.com)
  • How to pay / qualify: There are three consumer enrollment options:
  • Free: Sync your PC settings with OneDrive via the Windows Backup app (Microsoft account required).
  • Microsoft Rewards: Redeem 1,000 Microsoft Rewards points.
  • Paid: One‑time purchase of approximately $30 USD (price may vary by locale) for one‑year ESU coverage — usable across up to 10 devices tied to the same Microsoft Account. (support.microsoft.com)
These are not gray‑area promises: Microsoft’s ESU support page states the prerequisites, the three enrollment options, device limits, and the length of coverage clearly. (support.microsoft.com)

Why you should act now — deadlines and the enrollment rollout​

  • Windows 10 end of support: October 14, 2025. After that date, unprotected Windows 10 installations will no longer receive security updates unless enrolled in ESU. (support.microsoft.com)
  • To have uninterrupted protection at the moment support ends: enroll before October 14, 2025. Microsoft’s documentation shows the consumer ESU program runs through October 13, 2026; however, many outlets warn that to ensure you don’t miss the final pre‑EOL updates and to activate the ESU path in time, you should complete enrollment before October 14, 2025. This is a practical deadline if you intend to keep receiving updates immediately after EOL. (support.microsoft.com, techradar.com)
Important operational detail: the “Enroll now” button is being rolled out in waves, and many users have reported that the option does not appear right away. Microsoft has acknowledged phased availability, and Windows update KBs released in August were intended to surface the enrollment experience and fix early enrollment bugs. That means you must (a) update to the latest cumulative patches, (b) check Windows Update repeatedly, and (c) be ready to enroll as soon as the option appears for your device. (support.microsoft.com, techradar.com)

Step‑by‑step: how to check, prepare and enroll​

Follow these steps to maximize your chance of a smooth ESU enrollment and avoid being left without patches on October 14:
  • Verify Windows 10 version: Open Settings → System → About and confirm you are on Windows 10, version 22H2. If not, upgrade to 22H2 first. (support.microsoft.com)
  • Install pending updates (especially the August 2025 cumulative fixes): Make sure Windows Update has applied the latest cumulative updates (Microsoft released KB5063709 in August 2025 to address rollout issues and to enable enrollment visibility for many devices). Some users needed that patch to see the ESU toggle. (support.microsoft.com, techradar.com)
  • Back up everything: Create a full disk image and verify recovery media. ESU is a security band‑aid, not a cure for a failed upgrade. Community and press guidance emphasizes full backups before making any major update or enrollment changes. (techradar.com)
  • Sign into a Microsoft Account (admin): The free enrollment route requires a Microsoft account and that account must be an admin on the device. If you use a local account, be prepared to sign in or convert. (support.microsoft.com)
  • Open Settings → Update & Security → Windows Update: Look for an Enroll now link. If it’s missing, repeat the check after installing the latest patches — rollout is phased. (support.microsoft.com)
  • Choose your ESU option at the prompt: Enable Windows Backup to qualify for the free year, redeem Rewards, or make the one‑time purchase. Follow the on‑screen enrollment wizard to tie up to 10 devices to the same ESU license. (support.microsoft.com)
If you rely on community checklists and admin tips, the common consensus is to treat ESU as a bridge and to use the time to plan an orderly migration to Windows 11, a new PC, or an alternate OS.

The rollout problems and patch‑related headaches you need to know about​

This summer’s update cycle was bumpy. Two related but distinct sets of user reports circulated widely: (A) problems with the ESU enrollment experience — crashes of the enrollment wizard or the Enroll link not appearing — and (B) higher‑profile reports that a separate August Windows 11 cumulative update caused SSDs to “disappear” during heavy writes.
  • For enrollment visibility and crashes, Microsoft released cumulative fixes (notably KB5063709) and an out‑of‑band update to address reported problems. The August update explicitly included fixes intended to make the ESU enrollment option visible and to resolve wizard issues for users who had encountered failures. If your Enroll link isn’t present, install the latest cumulative patches and check again. (support.microsoft.com)
  • For the SSD disappearance reports tied to Windows 11 updates, an amplification cycle on social platforms led to intensive lab investigations by Microsoft and SSD vendors (notably Phison). Some community reproducible cases and vendors’ internal test reports were published; after partner testing Microsoft and Phison stated they could not reproduce a systemic failure and reported no widespread drive failure trend in their telemetry. That said, several reputable outlets covered the issue and advised caution: don’t perform large sustained disk‑write workloads without a full backup until you confirm patch stability for your device. In practice, the consensus advice remains: back up, avoid heavy writes during initial patch windows, and monitor official release‑health advisories. (bleepingcomputer.com, theverge.com, techradar.com)
Because those incidents are complex and partially conflicting, treat claims about “bricked drives” as reported but not definitively proven as a universal result of Microsoft’s updates; ongoing vendor and Microsoft telemetry investigations did not confirm a reproducible global failure mode. Still — the practical response is the same: back up now. (bleepingcomputer.com, theverge.com)

Who should enroll — and who should not​

Consider these scenarios:
  • Enroll if:
  • You have a device that cannot upgrade to Windows 11 for hardware reasons and you plan to keep using it beyond October 14, 2025. ESU buys one more year of security patches and reduces immediate cyber risk. (support.microsoft.com)
  • You manage a small number of home devices and want a low‑friction path (free via Windows Backup or $30 for up to 10 devices) to avoid an abrupt security exposure. (support.microsoft.com)
  • Don’t rely on ESU as a long‑term plan:
  • ESU supplies security updates only; it does not deliver new features, ongoing technical support, or fixes for non‑security bugs. It’s explicitly a one‑year stopgap. If you need continued functional fixes or new features, plan to migrate. (support.microsoft.com)
  • Be cautious if:
  • Your device is domain joined, MDM‑managed, or in kiosk mode — the consumer ESU is not available in these scenarios and enterprises must use the established commercial ESU channels. (support.microsoft.com)

Privacy, account and policy trade‑offs — what Microsoft doesn’t loudly advertise​

The free ESU pathway is convenient — but it relies on cloud sync of Windows Backup and a Microsoft Account. For privacy‑conscious users the trade‑offs are real:
  • Free ESU requires enabling Windows Backup to OneDrive, which stores settings and some attributes in Microsoft’s cloud. That is the condition for the no‑cost ESU option. If you’re uncomfortable with that cloud dependency, the alternative is the paid one‑time $30 purchase or using Microsoft Rewards. (support.microsoft.com)
  • The ESU license is tied to the Microsoft Account you use to sign into the device. That account linkage makes license transfers easier, but it also binds your device coverage to Microsoft’s account ecosystem. This is operationally simple but philosophically important to note for users who prefer local accounts. (support.microsoft.com)
  • ESU’s limited scope means third‑party software and services may still diverge in support — vendors will move forward with Windows 11 as the supported platform, and some apps may stop working reliably on older Windows 10 builds over time.
These are not hypothetical concerns — community posts and early adopter threads flagged the account requirement and the cloud sync condition as the primary reasons some users reject the free option, even when cost is the driving factor for others. (support.microsoft.com)

Market dynamics: why Microsoft did this, and what it means​

Microsoft’s consumer ESU is a pragmatic concession. The company needs to manage a twofold problem:
  • avoid a catastrophic security vacuum that would put hundreds of millions of personal devices at risk the day Windows 10 loses mainstream support, and
  • keep the upgrade funnel flowing to Windows 11 and the new Copilot+ PC ecosystem.
By offering a modest, limited ESU, Microsoft reduces short‑term security fallout while continuing to encourage migration to Windows 11 or to new hardware. The rollout’s rough edges and the necessity of a Microsoft account — and dosing a $30 paid option alongside a free OneDrive‑backed route — illustrate how Microsoft is balancing access, revenue, and control. (support.microsoft.com, forbes.com)
The market data underscores the urgency: StatCounter’s July 2025 snapshot showed Windows 11 taking the lead, but August numbers shifted again and continue to fluctuate as users decide and vendors push updates. Those month‑by‑month swings explain why Microsoft is both encouraging upgrades and offering the ESU lifeline. (gs.statcounter.com, windowscentral.com)

Practical guidance — a checklist to follow this week​

  • Install all pending Windows 10 updates now (start with cumulative patches and the latest servicing stack update). (support.microsoft.com)
  • Create a full disk image and verify recovery media (Macrium, Acronis, built‑in image tools). Don’t rely solely on file‑level backups.
  • Sign into your device with a Microsoft Account (admin) if you plan to take the free ESU route. (support.microsoft.com)
  • Check Settings → Update & Security → Windows Update for the Enroll now option repeatedly after installing updates. If you don’t see it, wait for the phased rollout or install any required KBs such as the August 2025 cumulative updates. (support.microsoft.com)
  • If you depend on critical applications or are hardware constrained, plan to upgrade hardware or migrate to an alternate OS in the coming 12 months — ESU is temporary. (support.microsoft.com)

Risks, unknowns and the things Microsoft hasn’t fixed​

  • Rollout fragility: The enrollment rollout has been buggy and phased; relying on a last‑minute enrollment risks being cut off by server delays, a missing Enroll button, or a crashed wizard. Early August fixes improved the experience, but the rollout fragility remains a real operational risk. (techradar.com, support.microsoft.com)
  • Limited coverage: ESU covers only security updates — it won’t fix functional regressions or deliver new features required by contemporary apps. Long‑term reliance is therefore dangerous for users who run modern apps that will evolve around Windows 11. (support.microsoft.com)
  • Privacy and account requirements: The free option requires cloud sync and a Microsoft Account. That trade‑off will push some users to pay the $30 fee or to plan an alternative. (support.microsoft.com)
  • Update side‑effects: Separate August updates in 2025 prompted high‑profile reports of SSDs vanishing or experiencing data corruption under heavy writes. Microsoft and major controller vendors investigated and reported no reproducible systemic failure in partner labs, but some community cases remained unresolved and drove the recommendation to be extra conservative around patching and large disk writes until you’ve backed up. This remains a technically contested area: reports exist, investigations concluded no broad fault, yet community reproducible tests suggest risk under narrow heavy‑write workloads. Treat SSD‑related claims as reported and partially investigated — back up your data now. (bleepingcomputer.com, theverge.com, techradar.com)

Final analysis: what this means for Windows users and IT pros​

Microsoft’s consumer ESU is an unvarnished, pragmatic move: it avoids a security free‑fall on October 14, 2025 while nudging users toward Windows 11. For most consumers the program is a useful, short‑term bridge — but it is not a replacement for migration planning.
The most notable strengths of the ESU program are:
  • Accessibility: A free route via OneDrive backup lowers cost barriers for home users. (support.microsoft.com)
  • Simplicity: Enrollment via Settings aims to be consumer friendly compared with enterprise ESU procurement processes. (support.microsoft.com)
The principal weaknesses and risks are:
  • Limited scope and duration: One year of security patches only; no long‑term support or feature updates. (support.microsoft.com)
  • Operational fragility: Phased rollout, early bugs, and dependence on recent cumulative updates create timing and visibility risks that could strand users who wait. (techradar.com)
  • Privacy and vendor lock‑in: The free option ties coverage to a Microsoft Account and cloud backups, exposing users to privacy trade‑offs they may not accept. (support.microsoft.com)
For IT professionals and power users, ESU should be treated as a budgeting and migration planning tool — not the long‑term answer. For consumers, ESU buys a manageable interval to plan hardware replacement, a clean Windows 11 migration (if compatible), or a tested move to an alternate platform.

Bottom line — exactly what to do right now​

  • Update Windows 10 to the latest cumulative patches (install KBs such as the August 2025 cumulative where applicable). (support.microsoft.com)
  • Make a full disk image and verify your recovery plan.
  • Sign into Windows with a Microsoft Account (admin) if you might use the free ESU path. (support.microsoft.com)
  • Check Settings → Update & Security → Windows Update for Enroll now and complete enrollment if present; repeat checks after installing patches if the option is not yet visible. (support.microsoft.com, techradar.com)
  • If your device is eligible for Windows 11 and you want long‑term security, run the PC Health Check and plan an upgrade to Windows 11 or purchase a Windows 11‑ready PC. (support.microsoft.com, windowscentral.com)
Microsoft has given users breathing room — but it is both limited and conditional. The responsible course is immediate preparation: update, back up, and claim ESU if you need it. Then use the year wisely to migrate, upgrade hardware, or plan a supported alternative. (support.microsoft.com)

This is a live, evolving situation: Microsoft’s official ESU pages and the Windows release‑health dashboard are the definitive guides for eligibility and enrollment, and the patch‑by‑patch status may change as Microsoft and hardware partners publish follow‑ups or hotfixes. The immediate action that protects you today is simple and urgent — install updates, back up, and enroll if you intend to remain on Windows 10 after October 14, 2025. (support.microsoft.com)

Source: Forbes Microsoft Issues Free Update Offer To Windows Users—How To Get It
 
Microsoft has given Windows 10 users a clear-but-limited escape hatch: you can keep using Windows 10 after the platform’s official end-of-support date, but only if you act before October 14, 2025 and complete the specific enrollment steps Microsoft requires. The company’s consumer Extended Security Updates (ESU) program provides a one-year bridge of security-only updates through October 13, 2026 — no new features, no quality (non‑security) fixes, and limited technical support — and it comes with important prerequisites, privacy trade-offs, and practical deadlines that every Windows 10 user should understand before taking a decision. (support.microsoft.com) (support.microsoft.com)

Background / Overview​

Windows 10’s lifecycle ends on October 14, 2025. On that date Microsoft will stop delivering routine feature updates, quality updates, and standard security updates to consumer editions (Home, Pro, Pro Education, Workstation) unless a device is enrolled in an appropriate ESU program. A machine running Windows 10 will continue to operate after that date, but without regular security patches it becomes progressively more vulnerable to threats and compliance problems. Microsoft’s official guidance strongly encourages upgrading eligible PCs to Windows 11; for devices that can’t or won’t upgrade, the company introduced a consumer-facing ESU to provide one additional year of critical and important security updates. (support.microsoft.com)
The consumer ESU is explicitly time-boxed: coverage for enrolled devices runs through October 13, 2026. Microsoft has emphasized that ESU is a stopgap — a way to buy controlled time to migrate, not a substitute for staying on a supported OS. That distinction matters because ESU does not include new feature releases, non-security reliability fixes, device driver updates, or broad technical support. (support.microsoft.com)

What Microsoft Is Offering — The Essentials​

  • Coverage window: Enrolled consumer Windows 10 devices will receive Critical and Important security updates from Oct. 15, 2025 through Oct. 13, 2026. This is security-only patching, delivered monthly via Windows Update for enrolled devices. (support.microsoft.com)
  • Eligible OS: Windows 10, version 22H2 (Home, Pro, Pro Education, Workstation) that has been updated to the latest cumulative updates. You must be on 22H2 and current to see the enrollment option. (support.microsoft.com)
  • Enrollment channels: Microsoft gives consumers three enrolment methods:
  • Free if you enable Windows Backup (sync PC settings to OneDrive).
  • Free by redeeming 1,000 Microsoft Rewards points.
  • Paid one‑time purchase (about $30 USD per license) that covers up to 10 devices associated with the same Microsoft Account. All consumer enrollment routes require a Microsoft Account. (support.microsoft.com)
  • Per‑account reuse: A single consumer ESU license can be applied to up to 10 eligible devices tied to the same Microsoft Account, which helps families and small households manage cost. (support.microsoft.com)
Multiple independent outlets and community reports confirm these mechanics alongside Microsoft’s guidance, and Microsoft published a staged “Enroll now (ESU)” wizard inside Settings → Update & Security → Windows Update to handle enrollment for eligible machines. That wizard was rolled out gradually and required a patch (KB5063709) in August 2025 to fix early enrollment crashes — a reminder that real-world rollouts can produce friction and that preparation matters. (windowslatest.com)

Why Some People Will Stay on Windows 10​

Several practical reasons keep users on Windows 10 beyond the deadline:
  • Hardware compatibility: Windows 11 enforces stricter hardware requirements (TPM 2.0, UEFI Secure Boot, compatible CPUs). Many perfectly functional older PCs cannot upgrade without firmware hacks or hardware replacement, leaving owners to choose between replacing hardware or staying on Windows 10. ESU is a practical bridge for those users.
  • Application and driver stability: Long‑running workflows, legacy apps, or vendor‑specific drivers may work better on Windows 10. Organizations and advanced home users often prefer minimal change when stability is mission-critical.
  • Privacy and control: Some users prefer Windows 10’s lower integration with newer cloud‑centric and AI features found in some Windows 11 builds. Those who want to avoid further Microsoft account or AI telemetry integration see ESU as a way to delay migration while retaining a more familiar OS environment.
These are legitimate motives, but they come with measurable trade-offs. ESU buys time; it does not restore feature parity or supply indefinite maintenance.

Enrollment Prerequisites — What You Must Do Now​

Before you can enroll an eligible device in consumer ESU, complete the following checklist:
  • Confirm the device runs Windows 10 version 22H2 and has the latest cumulative updates installed. The enrollment wizard is gated to updated systems. (support.microsoft.com)
  • Create or confirm a Microsoft Account and ensure it is available to sign in on the PC. Enrollment requires a Microsoft Account even for the paid $30 option; local accounts alone are not supported for consumer ESU. (tomshardware.com)
  • Back up your data — locally and externally. Enabling Windows Backup to OneDrive is one free enrollment path, but relying only on cloud sync without a separate, full local backup is unwise. Create a full image or external backup before enrolling or changing backup settings.
  • If you plan to use the OneDrive backup route, confirm you have sufficient OneDrive storage (the free tier is 5GB). You may need to purchase more storage depending on your backup needs.
  • If you intend to redeem Microsoft Rewards, verify you have 1,000 Microsoft Rewards points available or start accumulating them immediately. Earning points can take days to weeks depending on activity.
  • Check Windows Update and install the August 2025 cumulative update (or any later patches) if your system hasn’t received it; updates addressed initial ESU enrollment bugs. If the “Enroll now” option isn’t visible, installing pending updates and rebooting is often the fix. (windowslatest.com)

Step‑by‑step: How to Enroll (consumer ESU)​

  • Update Windows 10 to the latest cumulative updates and confirm you are on 22H2. Restart if updates are pending. (support.microsoft.com)
  • Sign into Windows with your Microsoft Account or be ready to sign in during the flow. Local-only sign-ins will prompt you to add a Microsoft Account. (tomshardware.com)
  • Open Settings → Update & Security → Windows Update. Wait for the page to populate; if eligible, you should see an “Enroll now” (ESU) link beneath the Check for updates button. The rollout is staged, so the option may appear later for some devices. (support.microsoft.com) (windowslatest.com)
  • Select Enroll now and follow the wizard. When prompted, pick one of the three enrollment methods: enable Windows Backup (OneDrive), redeem Rewards points, or make the one-time $30 purchase. The wizard will guide you through any OneDrive storage steps, Rewards redemption, or the checkout experience for the paid option. (support.microsoft.com)
  • After successful enrollment, verify Windows Update history to confirm ESU security updates are being delivered to the device. Periodically check Update history to ensure monthly security patches arrive.
If the enrollment option never appears despite meeting prerequisites, install the latest cumulative updates (including KB5063709 where applicable), reboot, and monitor Windows Update over several days — Microsoft rolled the wizard out in stages and fixed early issues via cumulative updates. (windowslatest.com)

The Cost Equation — Money, Time, and Points​

  • One‑time $30 fee: The paid route remains the simplest for those who prefer a monetary transaction. The fee covers up to 10 devices on the same Microsoft Account, which makes it cheap for families with multiple older PCs. Taxes or local equivalents may apply depending on region. (support.microsoft.com)
  • OneDrive backup route: Free in money but may require buying additional storage if your backup needs exceed the free 5GB allowance. For users with large profiles or lots of app/credential backups, this can create a recurring cost if you choose subscription storage.
  • Microsoft Rewards: Free in cash but requires earning 1,000 Rewards points per device, which takes time and sustained use of Microsoft services. Not an instant solution unless you already have accrued points.
From a pure dollars-and-cents perspective, the $30 option is modest and, given the limit of 10 devices, can be cost-effective. However, the $30 is neither a permanent fix nor inclusive of non-security issues that may arise (driver, firmware, or compatibility problems remain unaffected). ESU is designed to buy planning time, not to be a discounted multi-year maintenance contract.

Privacy and Control — The Tradeoffs​

The consumer ESU model pushes users into Microsoft Account use and (for the free path) OneDrive backups. That introduces a few practical consequences:
  • Microsoft Account required: Even if you pay, you must have a Microsoft Account tied to the devices you want covered. This removes the purely local-account option for ESU enrollment and binds the account to the ESU license. Privacy‑conscious users who avoid Microsoft Accounts will face a trade-off. (tomshardware.com)
  • OneDrive storage pressure: The free backup route shifts some responsibility to Microsoft’s cloud storage model. The free tier is 5GB; users with large backups may need to purchase storage as part of the workaround.
  • Longer-term vendor lock: The enrollment design nudges users toward remaining inside Microsoft’s account-and-cloud ecosystem. That may have cost, privacy, and policy implications for households that value offline or local-only control. Independent coverage and community forums have documented discomfort with this direction.
These trade-offs are real but practical: for many households the convenience and low cost of a one‑year safety net will outweigh privacy concerns. For others — particularly organizations subject to data-protection rules or privacy-minded users — ESU will feel like an unacceptable compromise.

Risks and Limits You Must Accept​

  • Security-only scope: ESU delivers only Critical and Important security updates. It does not include non-security quality updates, driver fixes, or firmware patches. Hardware and software compatibility issues that appear in the year after support ends may not be resolved by ESU. (support.microsoft.com)
  • One‑year horizon: Consumer ESU is explicitly a one-year bridge ending October 13, 2026. This is not a long-term maintenance plan; you should use the year to migrate, replace hardware, or put an alternative plan in place. (support.microsoft.com)
  • Operational friction: Microsoft rolled the enrollment wizard in waves and fixed early bugs; real-world enrollment has been uneven. Expect some troubleshooting and allow time for resolution if the toggle does not appear immediately. (windowslatest.com)
  • Compliance and regulatory exposure: For regulated businesses (even small ones), running an unsupported OS — or relying on a temporary ESU — may pose compliance issues. ESU is not a substitute for proper enterprise lifecycle planning. Use ESU only as a bridge while implementing a longer-term compliant strategy.
  • Potential for future policy change: Microsoft’s consumer ESU program and enrollment mechanics represent a response to a specific lifecycle event. While facts cited here reflect Microsoft’s public positions at the time of writing, product lifecycles and programs can change; verify final details at enrollment time. Where claims could change, treat them as time-sensitive. (support.microsoft.com)
If your device is critical (handles sensitive data, business workflows, or regulated information), the conservative course is to plan migration off Windows 10 as soon as practical and use ESU only to avoid abrupt downtime during the transition.

Migration Alternatives — Use ESU as a Bridge, Not a Destination​

ESU is useful, but it should be part of a migration plan. Consider and evaluate these alternatives now:

Upgrade to Windows 11 (if eligible)​

  • Run the PC Health Check or Upgrade Assistant to confirm eligibility (TPM 2.0, Secure Boot, supported CPU).
  • If eligible, the Windows 11 upgrade is free and gives long-term support and feature updates. Budget time to test drivers and critical apps on a pilot device first.

Replace hardware with a Windows 11 PC​

  • For machines that fail Windows 11 requirements, a hardware refresh avoids long-term compromise and reduces compatibility risk. Use trade-in and recycling programs where possible to mitigate e-waste. (support.microsoft.com)

Consider Linux for older hardware​

  • Modern Linux distributions can extend the useful life of older PCs with strong security updates and lower resource needs. This requires application compatibility assessment and some user training. For some users, Linux is the most sustainable option.

Cloud and virtual desktops​

  • Services like Windows 365 Cloud PC or remote VDI let you run a supported Windows environment from older local hardware. This is a practical option for users who primarily need productivity apps and can tolerate subscription costs.

Windows 10 LTSC / IoT Enterprise (specialized cases)​

  • Long-Term Servicing Channel editions receive long security support but are aimed at specialized devices and often require volume licensing. Not practical for mainstream individual consumers, but relevant for specialized workflows.

Practical Timeline: What to Do and When​

  • Today (immediate): Verify your Windows 10 edition and that you’re on version 22H2. Back up all data externally (image plus files). Create or confirm a Microsoft Account if you don’t have one. (support.microsoft.com)
  • Within days: Install any pending Windows Updates and reboot. Confirm the presence of the Enroll now link in Settings → Update & Security → Windows Update. If it’s not present, watch for it over the coming days and ensure the latest cumulative updates (including fixes for enrollment bugs) are installed. (windowslatest.com)
  • Before Oct. 14, 2025: Enroll any machines you need protected after the official Windows 10 cutoff. If you plan to use the OneDrive backup option, ensure your backups complete and you have adequate storage. If you intend to use Rewards points, accumulate them well in advance. If you prefer the paid route, make the purchase and confirm enrollment. (support.microsoft.com)
  • Through Oct. 13, 2026: Treat ESU as a temporary bridge. Use the year to complete migrations, test Windows 11 on your systems, budget for hardware refreshes, or implement alternate OS strategies. Do not rely on ESU beyond this window.

Final Assessment: Strengths, Weaknesses, and Recommendation​

Microsoft’s consumer ESU program is a pragmatic, targeted response to a real problem: millions of useful Windows 10 PCs face a hard support cutoff. The program’s strengths include flexible enrollment paths, affordable pricing (the $30 license covering multiple devices is family‑friendly), and the safety of continued monthly security-only patches to reduce immediate exploitation risk. Several independent outlets confirm the program mechanics and staged rollout, and Microsoft’s official documentation defines the scope and timeline clearly. (support.microsoft.com) (techradar.com)
However, there are material weaknesses and potential risks:
  • Account and cloud lock-in: Enrollment requires a Microsoft Account and the free path requires OneDrive backup, which pushes users further into Microsoft’s ecosystem. (tomshardware.com)
  • Limited scope: Security-only updates do not guarantee overall system stability; driver and firmware problems can still occur. ESU is not a substitute for a modern, supported platform. (support.microsoft.com)
  • Rollout friction: The staged rollout and initial enrollment bugs created practical confusion; plan for troubleshooting. (windowslatest.com)
  • Sustainability and e‑waste concerns: The broader policy decision driving Windows 11’s strict requirements raises sustainability questions; ESU alleviates immediate pressure but does not remove the underlying incentive to refresh hardware. (windowscentral.com)
Recommendation (clear, practical): If your Windows 10 device is critical or connected to sensitive data, do not gamble with the Oct. 14, 2025 cutoff — enroll in ESU or migrate to a supported platform immediately. If you are comfortable with a one‑year bridge and the privacy/account trade-offs, choose the enrollment route that best matches your constraints: OneDrive backup for zero cash cost (but possible storage purchases), Rewards points if you already have them, or the $30 paid route for a quick, simple transaction covering up to 10 devices. Use the ESU period to complete a responsible migration plan; ESU is breathing room, not a destination. (support.microsoft.com)

Microsoft’s offering is narrow but real: you can stay on Windows 10 beyond October 14, 2025 — but only if you understand the limitations, accept the privacy and account trade-offs, and complete enrollment before the cutoff so the ESU patch cadence can protect your device through October 13, 2026. Act deliberately: confirm 22H2 status, secure robust backups, prepare a Microsoft Account, decide which enrollment path fits your needs, and treat the ESU year as an explicit migration window. (support.microsoft.com) (support.microsoft.com)

Source: PCMag UK Yes, You Can Stay on Windows 10. But You Need to Do This Before Oct. 14
 
Microsoft’s end-of-life countdown for Windows 10 has sharpened an upgrade question from abstract future planning into an immediate buying decision: replace the aging PC now, enroll in short-term Extended Security Updates, or try to stretch an older machine into irrelevance. The short, practical answer is this — if your device shows the usual signs of wear (sluggish performance, shrinking battery life, noisy fans) or it doesn’t meet Windows 11 / Copilot+ hardware requirements, it’s time to start shopping. Windows 10 will stop receiving security and feature updates on October 14, 2025, and Microsoft has laid out upgrade paths and a one-year consumer Extended Security Updates option to ease the transition. (support.microsoft.com)

Background / Overview​

Windows 10’s end of support is an inflection point. After October 14, 2025, Microsoft will not provide security patches, technical support, or feature updates for mainstream Windows 10 editions — they will continue to function, but without further official protections. Microsoft recommends upgrading eligible devices to Windows 11 or enrolling in the Windows 10 Consumer ESU program as a temporary safety net. The company’s guidance reiterates that buying a Windows 11-capable PC is the long-term path forward. (learn.microsoft.com, microsoft.com)
At the same time, Microsoft is pitching a new generation of AI-accelerated PCs — Copilot+ PCs — which promise on-device AI features such as Windows Recall, Windows Studio Effects and GPU/NPU-accelerated experiences. These features require modern hardware: an NPU capable of 40+ TOPS, at least 16 GB RAM, and 256 GB or more of local storage (among other requirements), which effectively rules out many older machines. If you care about local AI features — not just a vanilla Windows 11 upgrade — then hardware replacement may be the only realistic route. (support.microsoft.com, microsoft.com)

What Engadget recommended — and why it matters​

Engadget’s buyer-focused roundup of devices to replace Windows 10 PCs highlights a mix of ultraportables, premium clamshells, and small-form desktops worth considering if you don’t want to be left on an unsupported OS. The list includes:
  • Microsoft Surface Laptop 13.8-inch (Snapdragon X-powered Copilot+ model)
  • Dell 14 Premium (rebranded XPS 14)
  • ASUS ZenBook S 14 (Intel Core Ultra / Lunar Lake)
  • Apple MacBook Air (M4)
  • Dell Slim Desktop (compact Inspiron-style machine)
  • Apple Mac mini (M4)
  • Geekom A6 Mini (Ryzen 7 6800H mini-PC)
Engadget’s picks skew toward devices that either qualify as Copilot+ systems (better for using Windows Recall, Studio Effects and other on-device AI) or offer superior battery life and modern connectivity — both practical gains for users moving off older Windows 10 hardware. Those editorial picks are sensible: they balance portability, battery life, future-proofing and price across common use cases. (This aligns with wider industry coverage advising early upgrades for security and AI compatibility.) (engadget.com)

Copilot+ PCs: What they deliver — and what they require​

The promise: smarter local computing​

Copilot+ PCs are intended to make AI-native workflows feel like a native capability of Windows. Flagship experiences include:
  • Windows Recall — local activity snapshots and searchable history of on-screen work.
  • Studio Effects — enhanced camera/microphone/video features for meetings.
  • Paint Cocreator, Automatic Super Resolution, Live Captions — fast, on-device media and text features.
These are not “lightweight” features; many are computationally expensive and designed to leverage local NPUs for speed, privacy and offline capability. (microsoft.com)

The hard requirements​

Microsoft’s published Copilot+ hardware baseline is non-negotiable for full functionality: an NPU capable of 40+ TOPS, 16 GB DDR5/LPDDR5 RAM, and 256 GB or more of SSD/UFS storage, plus platform security elements (TPM, secure boot, etc.). Many early Copilot+ PCs used Qualcomm’s Snapdragon X-series, but Intel and AMD’s AI-capable chips now make x86 Copilot+ options widely available. If your current Windows 10 machine is more than a couple of years old, it’s unlikely to support the full Copilot+ experience without new silicon. (support.microsoft.com, support.hp.com)

Why this matters practically​

  • Devices that technically meet Windows 11 specs can still lack the NPU and RAM needed for Copilot+ features.
  • Copilot+ features like Recall require storage and encryption policies that may need BIOS and TPM support, plus modern device encryption (e.g., BitLocker or Device Encryption).
  • Microsoft’s Copilot+ requirements mean that the "free Windows 11 upgrade" path is only step one; to enjoy the full AI experience, you’ll often need brand-new hardware.
When weighing replacement vs. ESU, consider whether you plan to adopt on-device AI now or later — that determines whether a basic Windows 11-capable refurb is enough, or whether a Copilot+ PC is a better long-term buy. (pureinfotech.com, microsoft.com)

Laptops to consider (practical takeaways and verification)​

Microsoft Surface Laptop 13.8-inch — ultralight, long battery life, but watch for app compatibility​

  • Why it’s on the list: very long battery life, light chassis, and being a Copilot+ device with Snapdragon X silicon gives it excellent standby and media runtime.
  • Engadget’s hands-on battery test recorded a video-streaming runtime of ~17 hours and 38 minutes, which aligns with real-world endurance reports from other reviewers. PCMag and The Verge also found the Snapdragon-based Surface Laptop series to be class-leading for battery life, with some lab tests reporting even longer runtimes depending on configuration and test method. If battery longevity and portability matter most, the Surface Laptop is a strong candidate. (engadget.com, pcmag.com)
Caveats: Windows on ARM still faces software compatibility wrinkles — emulation overhead can trim performance and battery life for legacy x86 apps. If you rely on niche or legacy Windows programs, confirm compatibility before buying. (theverge.com)

Dell 14 Premium (formerly XPS 14) — premium build and display, unusual keyboard choices​

  • Why it’s on the list: top-tier OLED options, premium fit-and-finish, and strong overall performance. Dell replaced the traditional function-row with capacitive touch keys and uses an “invisible” haptic trackpad that some reviewers love and others find divisive.
  • Review consensus: critics praise the screen and hardware polish, while cautioning that the capacitive function row may slow down power users who rely on tactile keys. It’s still one of the best Windows 14-inch clamshells on the market if you prioritize display quality and overall refinement. (engadget.com, pcworld.com)

ASUS ZenBook S 14 — efficiency, top-tier OLED, and excellent battery life​

  • Why it’s on the list: Lunar Lake (Core Ultra) efficiency, great OLED 3K display and a chassis material (cera‑aluminum / “Ceraluminum” in marketing) that’s light and stiff.
  • Verified performance: Engadget’s testing recorded ~16 hours and 8 minutes on PCMark’s battery benchmark for the ZenBook S 14, and OEM documentation shows a large 72Wh cell and LPDDR5x configurations that support strong run times in light-to-moderate workloads. ASUS positions the model as an AI‑ready Copilot+ PC in many SKUs. (engadget.com, asus.com)
Caveats: real-world battery life will vary a lot with display refresh rate, brightness, and workload; synthetic results (PCMark) often outpace heavy mixed-use days. (ign.com)

Apple MacBook Air (M4) — the Mac alternative that’s too good to ignore​

  • Why it’s on the list: Apple’s M-series SoCs retain leadership in power efficiency, real-world battery life, and a high-quality macOS ecosystem that integrates well with iPhones.
  • Review consensus: multiple outlets report very long battery life (14–18 hours depending on the test), fanless operation, and superior single-threaded performance per watt versus many Windows ultraportables. For users who want fewer software headaches and maximum battery life, switching platforms is a defensible option. (tomshardware.com, theguardian.com)
Caveats: switching to macOS has a learning curve and requires checking availability of your key apps; virtualization options (Parallels, VMware) permit running Windows apps but require additional licensing and disk space. (howtogeek.com)

Desktop replacements worth considering​

Dell Slim Desktop — straightforward, upgradeable, and affordable​

  • The Dell Slim (Inspiron-style small desktop) offers sensible CPU options, upgrade paths for RAM and storage, and compact footprint. For most users who primarily need reliable office performance, the entry-level configurations are cost-effective and much quieter and cooler than old tower PCs. Dell’s current specs show modern Core i3/i5/i7 options, DDR5 support and up to PCIe expansion slots — enough for basic to moderate workloads. (dell.com)

Apple Mac mini (M4) — powerful mini‑desktop, strong value with sales​

  • The Mac mini M4 punches above its weight for creative tasks and general desktop work. It’s a good desktop alternative if you’re comfortable in Apple’s ecosystem; it uses common peripherals and often outperforms similarly priced Intel/AMD desktops for single-threaded tasks and content workflows. Watch for periodic sales that reduce effective cost. (theverge.com)

Geekom A6 Mini — compact Windows desktop with surprising power​

  • The Geekom A6 Mini earns praise as a very capable mini‑PC with AMD Ryzen 7 6800H, Radeon 680M graphics, and a flexible port selection. Reviews from Tom’s Guide and TechRadar confirm strong performance for productivity and light creative workloads, and the device is a solid budget-oriented Windows mini-desktop alternative when space is at a premium. If you need a Windows desktop replacement that’s small, reasonably priced, and upgradeable, the A6 is worth a look. (tomsguide.com, techradar.com)

Practical upgrade pathways (step-by-step)​

  • Confirm your current PC’s status
  • Run the Microsoft PC Health Check app to check Windows 11 eligibility.
  • If in doubt, document current data and software dependencies.
  • Decide how long you need to remain on Windows 10 (if at all)
  • Enroll in the Windows 10 Consumer ESU if you need a controlled, temporary extension (Microsoft has a consumer ESU path). Treat ESU as a bridge — not a permanent solution. (support.microsoft.com)
  • Choose replacement vs. upgrade
  • If you need full Copilot+ features, target Copilot+ PCs (40+ TOPS NPU, 16 GB RAM, 256 GB SSD).
  • If you only need Windows 11 compatibility for security and longevity, a certified Windows 11 PC or a well-configured refurbished machine may suffice.
  • Plan the migration
  • Use Windows Backup or cloud-based backups to migrate files and settings.
  • For enterprise or heavy users, plan staged rollouts and test application compatibility first.
  • Consider trade-in and recycling programs to limit e-waste and recoup some value. (microsoft.com)

Security, privacy and environmental considerations​

  • Security: Running an unsupported OS increases exposure to unpatched vulnerabilities. ESU buys time, but long-term security requires migration to a supported platform. (support.microsoft.com)
  • Privacy & Recall: Windows Recall stores snapshots of local activity — it’s encrypted and opt-in by default, but it introduces new privacy surface area. Organizations and privacy-conscious users should evaluate policies and storage allocations for Recall before enabling it. (microsoft.com)
  • E‑waste: Large-scale replacement waves raise environmental concerns. Where possible, favor refurbish/repurpose routes (Chromebook or Linux repurposing for older hardware), or choose vendors with robust recycling programs. Community repair and trade-in options can also extend device lifespans responsibly. (windowscentral.com)

Who should replace now — and who can wait​

  • Replace now if:
  • Your PC is already unreliable (hardware failing, battery dead).
  • You need Copilot+ AI features for productivity or creativity now.
  • Security posture requires staying on a supported OS without delay.
  • Consider waiting or using ESU if:
  • Your PC is recent enough to run Windows 11 and you don’t need Copilot+ features immediately.
  • Budget constraints make immediate replacement impractical — ESU and careful network isolation can buy crucial time.
  • You intend to switch platforms (e.g., macOS or Linux) and need time to plan and migrate.

Gaming and high-performance use cases​

If you have a large library of PC games or need high-end local rendering:
  • Desktop gaming rigs remain the best value for raw GPU power. For future-proofing, 32 GB RAM is a sensible minimum for heavy, modern titles, along with an NVIDIA RTX 40-series or AMD Radeon RX 9000-series GPU.
  • For CPUs, Intel Core 13th-gen or AMD Ryzen 8000-series (or newer) remain sensible baselines for demanding workloads.
  • High-performance laptops now come closer to desktop power, but thermals and battery life are trade-offs — carefully check cooling design and sustained performance benchmarks. (windowscentral.com)

Final assessment — strengths, trade-offs and risks​

  • Strengths of upgrading now:
  • Security: a modern Windows 11 machine receives active security patches and feature updates.
  • Battery and performance gains: Copilot+ and AI-capable chips deliver real improvements in battery life and responsiveness in many workloads.
  • Future-proofing for on-device AI: Copilot+ hardware unlocks a growing set of local features that will better respect privacy and reduce cloud dependency.
  • Risks and trade-offs:
  • Cost: buying Copilot+ hardware or modern high-end systems is a meaningful expense for many households and small businesses.
  • Compatibility: Windows on ARM has improved but still carries potential application compatibility issues; Copilot+ NPUs are not required for all users and may be overkill for someone who primarily uses web apps.
  • E‑waste & sustainability: mass replacement without repair/refurbishment programs risks environmental harm; balance replacement with recycling and reuse initiatives. (windowscentral.com, support.microsoft.com)

Quick shopping checklist (what to verify before you buy)​

  • Does the laptop/desktop meet Windows 11 minimum requirements (TPM 2.0, Secure Boot)?
  • If you want Copilot+ features, does it meet Microsoft’s Copilot+ baseline (40+ TOPS NPU, 16 GB RAM, 256 GB SSD)? (support.microsoft.com)
  • Are your essential apps compatible (native ARM/x64 availability vs. emulation)?
  • What is the vendor’s trade-in or recycling program?
  • For desktops: can you upgrade RAM, storage, GPU later to extend lifecycle?

Conclusion​

Microsoft’s October 14, 2025 end of support for Windows 10 is a firm pivot point, not a cliff you must immediately jump from — but it is an actionable deadline. For many users, especially those with older hardware, the decision to replace is already made by symptoms: failing batteries, sluggish responsiveness, and the desire for modern security and AI features. For those who want the newest Windows AI experiences — Recall, Studio Effects, and the full suite of Copilot+ tools — replacement with Copilot+ hardware is the realistic path forward because of strict NPU, RAM and storage demands. For users primarily seeking stability and security without on-device AI, a thoughtful Windows 11 upgrade or a modern refurb will do.
Whether you follow Engadget’s shortlist (Surface Laptop, Dell 14 Premium, ASUS ZenBook S 14, MacBook Air, Geekom A6 Mini) or favor other options in the market, the core upgrade priorities remain the same: security, compatibility, and a device that supports your workflow for years, not months. Confirm specs, test compatibility, and factor in trade-in and recycling options to reduce waste and total cost of ownership before you buy. (engadget.com, tomsguide.com)


Source: Engadget The best new computers to replace your old Windows 10 PC
 
Microsoft has quietly given Windows 10 users a lifeline: you can keep receiving security patches for one more year after the official end‑of‑support date — but only if you act before October 14, 2025 and complete Microsoft’s new enrollment flow. The company’s consumer Extended Security Updates (ESU) program delivers security‑only updates through October 13, 2026, and can be obtained either for free by meeting one of two non‑cash conditions or by paying a modest one‑time fee. This article explains exactly how the consumer ESU works, who qualifies, what you get (and won’t), the practical and privacy trade‑offs, and the migration choices every Windows 10 user should make during the ESU year. (support.microsoft.com)

Background​

Microsoft set a hard cutoff for Windows 10 mainstream support: October 14, 2025. After that date, devices running Windows 10 will no longer receive routine feature updates, quality updates, or standard security patches unless enrolled in an appropriate Extended Security Updates program. That timeline pushed Microsoft to design a consumer ESU option — a short, explicit bridge that gives individuals one additional year of critical security updates while encouraging migration to Windows 11. The official guidance and rollout details are published in Microsoft’s Windows 10 lifecycle and Consumer ESU documentation. (support.microsoft.com)
Why a consumer ESU? Many home users and households have devices that cannot meet Windows 11’s stricter hardware requirements (TPM, newer CPU families, Secure Boot, and — increasingly — on‑device AI NPUs). Microsoft’s consumer ESU is a pragmatic response: it prevents an immediate security cliff for older but still useful machines while nudging users toward supported Windows 11 systems. Independent outlets and Microsoft’s own pages confirm the program’s timing, scope, and enrollment methods. (techradar.com, tomsguide.com)

What the ESU actually covers — and what it doesn’t​

  • Scope: The consumer ESU delivers Critical and Important security updates as defined by Microsoft’s Security Response Center. It does not include new features, non‑security reliability fixes, or broad technical support. Think of ESU as a security patch stream only. (support.microsoft.com)
  • Duration: One year. Coverage runs through October 13, 2026. The ESU is explicitly time‑boxed — it’s a pause button, not a long‑term support plan. (support.microsoft.com)
  • Technical support: General Microsoft troubleshooting and feature support are not part of consumer ESU. Support is limited to activation and installation issues for ESU itself. (support.microsoft.com)
  • Office and apps: Microsoft has separate timelines for Microsoft 365 and Office support on Windows 10. Those timelines may differ; users should consult Microsoft’s lifecycle pages for Office compatibility if they rely on specific Office releases. (support.microsoft.com)
These limits matter. ESU reduces immediate exposure to new vulnerabilities, but it does not fix aging drivers, firmware problems, or compatibility regressions that require feature/quality updates.

Who is eligible (checklist)​

Before attempting enrollment, confirm each of these items — ESU enrollment will be blocked unless the device meets the prerequisites:
  • Windows 10, version 22H2 (Home, Pro, Pro Education, or Workstation). Devices must be updated to the latest cumulative updates for 22H2. (support.microsoft.com)
  • The device must be activated with a legitimate copy of Windows and be up to date (including an August 2025 cumulative that addressed ESU enrollment issues). Installing the related August 2025 patch makes the enrollment UI appear reliably. (support.microsoft.com, techradar.com)
  • A Microsoft Account (MSA) is required for enrollment — local accounts are not eligible. The ESU license is tied to the MSA used during enrollment, so expect sign‑in prompts even if you normally use a local account. Child accounts are excluded. (windowscentral.com, support.microsoft.com)
  • Consumer ESU is not available to machines that are domain‑joined, fully managed by enterprise MDM, or configured as kiosks. Entra‑registered (but not joined) personal devices may qualify. (support.microsoft.com)
If you don’t see the Enroll option in Windows Update, ensure you have all pending updates installed, reboot, and check again — Microsoft rolled the feature out gradually and fixed early wizard bugs with a specific August patch. (windowslatest.com, support.microsoft.com)

How to get the ESU: three consumer enrollment paths​

Microsoft designed three consumer routes to obtain the one‑year ESU:
  • Cash option: Pay $30 USD (or local equivalent) one time through the enrollment wizard in Settings. That purchase can cover multiple devices tied to the same Microsoft Account (see device‑count section below). (support.microsoft.com, windowscentral.com)
  • Microsoft Rewards: Redeem 1,000 Microsoft Rewards points to cover the ESU. If you already participate in Microsoft Rewards, this can be the easiest non‑cash route. (support.microsoft.com)
  • OneDrive/Windows Backup: Enable Windows Backup and sync your PC settings to OneDrive. That option provides ESU at no cash cost, though it may require additional OneDrive storage purchases if your current quota is insufficient. This route requires an MSA and active backup settings. (support.microsoft.com, techradar.com)
All three routes require signing into a Microsoft Account during enrollment. For households with multiple PCs, the paid license can be reused up to a limit (see below). (support.microsoft.com)

Step‑by‑step: where the enrollment UI lives​

  • Open Settings → Update & Security → Windows Update.
  • Look for the new header that notes Windows 10 support ends on October 14, 2025 and an Enroll now link beneath it. If available, click Enroll now. (windowslatest.com)
  • Sign in with the Microsoft Account you want to tie to ESU (the account must be an administrator on the device if prompted). (support.microsoft.com)
  • Choose one of the three enrollment options: Windows Backup, redeem Rewards points, or pay $30. Follow the prompts to complete enrollment. (support.microsoft.com)
If the option is missing, update the device (especially the August 2025 cumulative series) and retry; Microsoft confirmed the enrollment control is rolled out in stages. (windowslatest.com, techradar.com)

Device coverage and licensing details​

  • A single consumer ESU license tied to your Microsoft Account can be used on up to 10 eligible Windows 10 PCs. You still need to enroll each device individually through Settings > Windows Update, but additional enrollments under the same MSA will not require a new payment or extra Rewards points up to that 10‑device limit. This makes the $30 payment family‑friendly for households with multiple older PCs. (support.microsoft.com, thurrott.com)
  • If you enroll late during the ESU year (for example, in mid‑2026) your device should receive cumulative ESU patches that were released since the start of the ESU window — the updates are applied retroactively so you won’t be left missing earlier security patches. (gigxp.com)

Technical caveats and critical patches to install first​

Microsoft shipped an August 2025 cumulative update (KB5063709) that both enabled the “Enroll now” UI for many users and fixed an early crash bug in the ESU wizard. If your machine can’t see the enrollment flow, install all pending Windows updates, including that August cumulative, then reboot and check Windows Update again. Multiple independent reports confirm KB5063709 was the rollout enabler and stabilizer for ESU enrollment. (support.microsoft.com, techradar.com)
Also be mindful of servicing stack updates (SSUs) and the general Windows update pipeline: cumulative updates may include other fixes or known‑issue workarounds you should apply prior to attempting enrollment. Microsoft’s cumulative KB notes and the Windows Update history pages are the authoritative guidance. (support.microsoft.com)

Privacy and ecosystem trade‑offs​

The free OneDrive/Windows Backup route is attractive, but it has implications:
  • Microsoft Account requirement. All enrollment paths require signing in with an MSA; local accounts are excluded. That ties ESU licenses to an account controlled by Microsoft and can be uncomfortable for privacy‑conscious users. (windowscentral.com)
  • Cloud backup coupling. The zero‑cash route asks you to sync settings (and possibly backups) to OneDrive. Even if you don’t upload large files, the signals and metadata of sync activity create a stronger integration with Microsoft services and long‑term dependence on cloud storage quotas. Expect that free storage may be insufficient for full PC backups and that additional storage might incur costs. (techradar.com)
  • Vendor lock‑in concerns. The ESU policy nudges users toward Microsoft’s ecosystem in exchange for a modest price or free coverage. That’s a strategic trade: short‑term security for deeper account‑centric dependency. Critics have flagged the approach as pushing consumers away from local account choices. (techradar.com)
These trade‑offs aren’t universal blockers — for many households the benefits outweigh the costs — but the account and cloud dependencies are real decisions users should weigh before enrolling.

Risks and practical advice for home users​

  • ESU is not an indefinite safety net. The updates stop on October 13, 2026. Treat the ESU year as a planned migration window, not a reason to postpone indefinitely. (support.microsoft.com)
  • Security posture still degrades without feature/driver updates. ESU will close critical vulnerability vectors, but driver/firmware gaps, compatibility with new apps, or hardware‑level mitigations are not covered. For devices used for sensitive tasks (banking, remote access, work from home), migrating to Windows 11 or a supported environment is the prudent long‑term choice. (support.microsoft.com)
  • Backup first. Before enrolling or paying, make a full disk image and verify recovery media. ESU enrollment ties to accounts and settings; don’t rely solely on the enrollment wizard for your backup strategy.
  • If your device can run Windows 11: test it with Microsoft’s PC Health Check and consider moving to Windows 11 to get feature updates and longer support; the free Windows 11 upgrade is still available for eligible 22H2 devices. Upgrading often yields better security, performance, and future compatibility. (support.microsoft.com)

For power users and small IT shops: alternatives and budgets​

If you manage multiple devices or care about longer support windows:
  • Consider the ESU $30 license if you need the extra year across a household; it’s cost‑effective for up to 10 devices tied to a single account. (thurrott.com)
  • Evaluate Windows 365 Cloud PC or Azure Virtual Desktop as a stopgap for sensitive or business workloads; Microsoft’s enterprise ESU options differ in pricing and scope. (gigxp.com)
  • Test Linux or other supported OS options for legacy hardware that will never meet Windows 11 requirements. A well‑chosen Linux distro can extend useful life for web and productivity tasks with much lower security risk than an unsupported Windows 10 install. (techradar.com)

Wider context: hardware, AI PCs, and the cost of standing still​

Windows 11’s evolution toward on‑device AI (Copilot+ PCs) has hardened hardware expectations: Copilot+ PCs require an NPU capable of 40+ TOPS, 16 GB RAM, and 256 GB storage for full on‑device AI experiences. For users drawn to local AI features, that often means buying new hardware, not just upgrading the OS. This hardware shift partly explains Microsoft’s decision to limit long‑term Windows 10 support and offer a one‑year ESU bridge. If on‑device AI matters, the ESU year is exactly the time to budget and migrate to a Copilot+ or Windows 11‑compatible machine. (support.microsoft.com, learn.microsoft.com)
Some reports and analyses cite large counts of potentially affected PCs (hundreds of millions), but raw estimates vary and are sensitive to geography and sampling methodology — treat large “X million devices” figures as approximations rather than precise counts. Those figures highlight scale but are not precise forecasts. (Unverifiable as a single exact number.)

Practical checklist — what to do today (if you plan to stay on Windows 10)​

  • Update Windows to the latest cumulative release (install KBs such as the August 2025 cumulative that enables ESU enrollment). Reboot. (support.microsoft.com)
  • Confirm you’re on Windows 10 version 22H2 and that activation is valid. (support.microsoft.com)
  • Make a full disk image and verify recovery media. Don’t rely solely on cloud sync for disaster recovery.
  • Decide your ESU route: enable Windows Backup/OneDrive sync (free), redeem 1,000 Microsoft Rewards points, or pay $30. Prepare a Microsoft Account and decide which MSA you’ll use for license coverage (one account can cover up to 10 PCs). (support.microsoft.com)
  • Open Settings → Update & Security → Windows Update and look for Enroll now; follow the wizard. If it’s not visible, ensure Windows is fully updated and try again. (windowslatest.com)

Final assessment and recommendation​

Microsoft’s consumer ESU is a narrowly focused but effective safety valve: it offers one more year of security updates for Windows 10, delivered in a way that minimizes friction for most home users while steering people toward Microsoft accounts and cloud backups. The program’s major strengths are accessibility (two non‑cash routes), clarity (single, one‑year window), and cost efficiency for multi‑PC households (one license can cover up to 10 devices). (support.microsoft.com, thurrott.com)
The principal weaknesses are equally stark: limited scope (security‑only), account and cloud lock‑in, and a hard deadline that forces migration choices sooner rather than later. For anyone who uses their PC for work, banking, or stores sensitive information locally, the safest path is to either upgrade to a supported Windows 11 configuration or replace aging hardware during the ESU year. (support.microsoft.com, techradar.com)
If you choose to stay on Windows 10 for the ESU year, act now: verify 22H2, apply all updates (including the August 2025 cumulative), secure reliable backups, sign in with a Microsoft Account, and enroll before October 14, 2025 to ensure your device receives security updates through October 13, 2026. Treat the ESU period as exactly what it is — time to plan and complete a migration, not a chance to delay indefinitely. (support.microsoft.com)

Microsoft’s one‑year bridge is real, useful, and limited. Use it deliberately: patch, back up, enroll, and then use the year to move to a supported, secure platform.

Source: Mashable SEA You can stay on Windows 10 for another year for free — if you act by Oct. 14