Microsoft has given Windows 10 users a narrow, conditional lifeline: if you plan to keep a Windows 10 PC beyond the platform’s formal end-of-support date, you must complete a specific enrollment flow — or enable a OneDrive backup path — before the October 14, 2025 cutoff to receive one additional year of security-only updates through October 13, 2026. (support.microsoft.com)
Windows 10 ships out of Microsoft’s mainstream lifecycle on October 14, 2025. After that date, Microsoft will stop delivering routine feature updates, quality updates, and free security fixes for consumer Windows 10 editions — unless the device is enrolled in the company’s consumer Extended Security Updates (ESU) program. The consumer ESU is a time-limited, security-only bridge: it delivers only security updates classified as Critical or Important by Microsoft’s Security Response Center, not new features, non-security reliability fixes, or broad technical support. (microsoft.com)
Microsoft designed the consumer ESU to be accessible to households and small users blocked from upgrading to Windows 11 by hardware or preference. Enrollment for eligible consumer devices is surfaced through a staged “Enroll now” experience inside Settings → Update & Security → Windows Update. Because the roll-out is phased and a pre-release cumulative update addressed early enrollment bugs, not every eligible PC will see the enrollment wizard at the same time. (support.microsoft.com)
The mainstream points covered in the consumer press — including the CNET article you provided — match Microsoft’s public guidance: update to Windows 10 version 22H2, install the August cumulative update (which corrects enrollment issues), sign in with a Microsoft Account (MSA), and use the "Enroll now" wizard or one of the free enrollment paths if you want the ESU year. (support.microsoft.com)
However, this program also serves Microsoft’s business and ecosystem interests in several ways. The MSA and OneDrive requirement nudges consumers deeper into Microsoft’s cloud and identity system, and the tiered enrollment options make it easier to consolidate entitlements across family devices — good for user convenience, but also beneficial to Microsoft. These incentives are not illicit, but they are strategic. Consumers should weigh the convenience against privacy and lock-in trade-offs. (microsoft.com)
There are also valid public-policy and sustainability considerations: if Windows 11’s hardware baseline leaves many PCs behind, consumer ESU can be seen as a stopgap that both reduces immediate security risk and indirectly encourages hardware replacement. That raises legitimate questions about e-waste, affordability, and fairness for lower-income households. Tech community coverage and vendor statements highlight those broader implications. (techradar.com)
Finally, operational risk remains. Staged rollout, enrollment bugs, and OneDrive quota limits mean last-minute action is risk-prone. The prudent course is to act early, verify entitlements, maintain independent backups, and use the ESU year to migrate strategic workloads rather than to postpone indefinitely. (support.microsoft.com)
Use the ESU year deliberately: back up your data independently, verify entitlements, and treat ESU as a migration window rather than an indefinite solution. Acting early is the safest, most reliable way to avoid last-minute enrollment failures and exposure to new vulnerabilities. (techradar.com)
Source: CNET Still Running Windows 10? Make Sure You Take This Step Before Oct. 14
Windows 10 ships out of Microsoft’s mainstream lifecycle on October 14, 2025. After that date, Microsoft will stop delivering routine feature updates, quality updates, and free security fixes for consumer Windows 10 editions — unless the device is enrolled in the company’s consumer Extended Security Updates (ESU) program. The consumer ESU is a time-limited, security-only bridge: it delivers only security updates classified as Critical or Important by Microsoft’s Security Response Center, not new features, non-security reliability fixes, or broad technical support. (microsoft.com)Microsoft designed the consumer ESU to be accessible to households and small users blocked from upgrading to Windows 11 by hardware or preference. Enrollment for eligible consumer devices is surfaced through a staged “Enroll now” experience inside Settings → Update & Security → Windows Update. Because the roll-out is phased and a pre-release cumulative update addressed early enrollment bugs, not every eligible PC will see the enrollment wizard at the same time. (support.microsoft.com)
The mainstream points covered in the consumer press — including the CNET article you provided — match Microsoft’s public guidance: update to Windows 10 version 22H2, install the August cumulative update (which corrects enrollment issues), sign in with a Microsoft Account (MSA), and use the "Enroll now" wizard or one of the free enrollment paths if you want the ESU year. (support.microsoft.com)
What Microsoft is offering — the facts you need to verify now
- End-of-support date for Windows 10 (consumer editions): October 14, 2025. (support.microsoft.com)
- Consumer ESU coverage window (if enrolled): Security-only updates through October 13, 2026. (microsoft.com)
- Eligible OS version (consumer): Windows 10, version 22H2 (Home, Pro, Pro Education, Workstation). Enterprise/managed scenarios use separate commercial ESU channels. (learn.microsoft.com)
- Critical servicing update to install: KB5063709 (August 12, 2025 cumulative update; OS builds noted as 19044.6216 and 19045.6216) — this update resolved issues with the ESU enrollment wizard and is a gating item for many users. (support.microsoft.com)
- Enrollment methods (consumer ESU):
- Free: enable Windows Backup / PC settings sync to OneDrive (MSA required).
- Free: redeem 1,000 Microsoft Rewards points.
- Paid: one-time purchase (approx. $30 USD) that can be used across up to 10 eligible devices tied to the same Microsoft Account. All enrollment routes require a Microsoft Account. (microsoft.com)
Eligibility, prerequisites, and the one thing you must do before Oct. 14, 2025
Minimum technical checklist
To be eligible for the consumer ESU and see the enrollment wizard, make sure you meet all of the following:- Your device is running Windows 10, version 22H2 (check Settings → System → About). (learn.microsoft.com)
- All pending Windows Updates are installed, and specifically the August 12, 2025 cumulative update KB5063709 (build 19044.6216 for 21H2 and 19045.6216 for 22H2). KB5063709 fixed enrollment wizard crashes and surfaced the ESU offer more broadly. (support.microsoft.com)
- You are signed in to the PC as an administrator using a Microsoft Account (MSA) — local Windows accounts are not accepted for ESU enrollment. (microsoft.com)
- You have a working Internet connection and access to Microsoft Store if you plan to purchase or manage the ESU license. (microsoft.com)
The single gating step
The single gating step for consumer ESU is simple in concept and urgent in timing: confirm your PC runs Windows 10 22H2, install KB5063709 (and any other pending updates), sign into a Microsoft Account with admin rights, and complete the ESU enrollment (or enable Windows Backup/OneDrive sync) before October 14, 2025. Completing that enrollment before the cutoff ensures you receive the maximum ESU coverage window. (support.microsoft.com)How to enroll — step-by-step
- Verify your Windows version: open Settings → System → About. Look for Windows 10, version 22H2. If you’re not on 22H2, upgrade to the latest 22H2 build. (learn.microsoft.com)
- Install all updates: Settings → Update & Security → Windows Update → Check for updates. Ensure KB5063709 (August 2025 cumulative) and servicing stack updates are applied, then reboot. (support.microsoft.com)
- Sign in with a Microsoft Account (MSA) that has administrator privileges on the PC. The ESU entitlement is tied to the MSA and can be reused on up to 10 eligible devices associated with that account. (microsoft.com)
- Open Settings → Update & Security → Windows Update and look for the top-right messaging that says something like, “Windows 10 support ends in October 2025” with an Enroll in Extended Security Updates link. Click Enroll now to launch the wizard. (microsoft.com)
- Choose an enrollment option:
- Back up your PC settings (OneDrive sync) — free, but limited by your OneDrive quota (5 GB free). This path ties your enrollment to OneDrive backups. (microsoft.com)
- Redeem 1,000 Microsoft Rewards points — free if you have the points available. Redemption paths have experienced intermittent issues for some users in early rollout. (support.microsoft.com)
- Purchase the ESU license — pay the one-time fee (roughly $30 USD) through the Microsoft Store; the entitlement can be used on up to 10 eligible devices tied to the same MSA. (windowscentral.com)
- After enrollment completes, confirm in View Update History that ESU-labeled security updates are being delivered. You should see security-only updates arriving during the ESU coverage window. (microsoft.com)
Troubleshooting and rollout reality
- If you don’t see the “Enroll now” option after meeting the prerequisites, do not panic. Microsoft rolled the wizard out in phases and published KB5063709 specifically to address early wizard crashes. Install the update, sign in with an MSA, reboot, and check again. (support.microsoft.com)
- Some users reported the enrollment button appearing but the wizard failing; those early errors were the precise problem KB5063709 aimed to fix. If you continue to see problems after installing the August cumulative, use the Windows Update Troubleshooter and check Microsoft’s support pages and Q&A forums for updates. (learn.microsoft.com)
- The OneDrive free tier (5 GB) can be a limiting factor for the free backup route. If your PC settings or backup payload exceed that quota, the enrollment path may require buying OneDrive storage or choosing a different enrollment option. Back up important files independently before choosing any cloud-based route. (microsoft.com)
What ESU does — and what it does not do
ESU does:
- Deliver security-only fixes designated Critical or Important during the ESU coverage year (through Oct. 13, 2026 for enrolled consumer devices). (microsoft.com)
- Give users and households a predictable, one-year window to plan and execute migration off Windows 10. (microsoft.com)
ESU does not:
- Provide new OS features, driver/firmware updates, or full quality updates and non-security reliability fixes. (microsoft.com)
- Replace a longer-term security posture: after Oct. 13, 2026 enrolled devices will be out of consumer ESU coverage and again exposed unless migrated or covered under commercial ESU for enterprises. (microsoft.com)
Risks, trade-offs, and what the CNET piece emphasizes
The CNET article summarizes the consumer ESU offer, the free enrollment options, and the practical steps most home users need to take — but it also glosses a few practical trade-offs that require scrutiny. Key risks and trade-offs:- Account and privacy trade-off: ESU enrollment is tied to a Microsoft Account, and the free path requires syncing settings to OneDrive. That nudges users into cloud-backed identity and storage, which some privacy-conscious people avoid. Consider whether you’re comfortable tying your ESU entitlement to an MSA and cloud backups. (microsoft.com)
- OneDrive storage limits and hidden costs: The free OneDrive route uses your OneDrive storage quota (5 GB free). If you lack free space, you may have to pay for additional OneDrive storage — at which point the “free” option incurs a cost. Factor OneDrive usage into your migration budget.
- Temporary nature and compliance risk: ESU coverage is time-limited. For regulated users and small businesses, running an unsupported OS—even under a consumer ESU—may not satisfy compliance or contractual obligations. Enterprise customers should evaluate commercial ESU pricing and options. (learn.microsoft.com)
- Ecosystem nudges and hardware churn: Critics argue the program accelerates vendor lock-in and hardware churn because Windows 11’s baseline excludes many older systems; ESU is positioned as a short-term cushion rather than a long-term solution. That is a legitimate sustainability and cost concern. (techradar.com)
- Rollout reliability: Staged rollouts and early bugs mean last-minute action can be risky. The safest approach is to act early — install KB5063709, sign in with an MSA, and complete enrollment well before October 14 rather than scrambling at the deadline. (support.microsoft.com)
Practical checklist you can use in the next 30–60 minutes
- Confirm Windows 10 version: Settings → System → About → look for 22H2. (learn.microsoft.com)
- Run Windows Update and install every pending update, then reboot (ensure KB5063709 is installed). (support.microsoft.com)
- Make an independent full backup of critical data to an external drive (do this before relying on OneDrive). Use disk-imaging tools (Macrium Reflect, Acronis) or verified file copies. (microsoft.com)
- Sign in as an administrator with a Microsoft Account (create one beforehand if needed). (microsoft.com)
- Check Settings → Update & Security → Windows Update for the “Enroll now” message and complete the wizard if present. Choose OneDrive backup, redeem Rewards, or pay for the paid ESU license as it fits your privacy and storage preferences. (microsoft.com)
Critical analysis — strengths, business incentives, and the public debate
Microsoft’s consumer ESU program has practical strengths: it prevents an immediate, wide-scale security cliff, it offers low-cost consumer routes (including a free route), and it gives households predictable time to migrate. For many families and small users with older but functional PCs, the program is an affordable and reasonable bridge. (microsoft.com)However, this program also serves Microsoft’s business and ecosystem interests in several ways. The MSA and OneDrive requirement nudges consumers deeper into Microsoft’s cloud and identity system, and the tiered enrollment options make it easier to consolidate entitlements across family devices — good for user convenience, but also beneficial to Microsoft. These incentives are not illicit, but they are strategic. Consumers should weigh the convenience against privacy and lock-in trade-offs. (microsoft.com)
There are also valid public-policy and sustainability considerations: if Windows 11’s hardware baseline leaves many PCs behind, consumer ESU can be seen as a stopgap that both reduces immediate security risk and indirectly encourages hardware replacement. That raises legitimate questions about e-waste, affordability, and fairness for lower-income households. Tech community coverage and vendor statements highlight those broader implications. (techradar.com)
Finally, operational risk remains. Staged rollout, enrollment bugs, and OneDrive quota limits mean last-minute action is risk-prone. The prudent course is to act early, verify entitlements, maintain independent backups, and use the ESU year to migrate strategic workloads rather than to postpone indefinitely. (support.microsoft.com)
What remains uncertain or unverifiable — cautionary notes
- Public figures about how many PCs remain on Windows 10 vary by tracker and by date. Headlines stating a specific percentage (for example, “nearly 43%”) should be treated cautiously unless they cite the data source and date; OS market-share figures fluctuate month to month across different telemetry services. Do not treat a single percentage without provenance as definitive.
- The exact user experience of the enrollment wizard can vary by country, device OEM customizations, and staged rollout timing. If the Enroll option doesn’t appear, that doesn’t necessarily mean you’re ineligible — it may mean the rollout hasn’t reached your device yet. Microsoft’s staged rollout approach introduces timing uncertainty. (learn.microsoft.com)
- Any anecdotal reports about enrollment hiccups, redemption problems with Rewards, or billing edge cases are real user reports but may not represent the entire population. If you encounter a problem, document it and contact Microsoft support; keep screenshots and update history entries. Treat anecdotal reports as signals, not universal facts. (learn.microsoft.com)
Practical recommendations — a prioritized action plan
- Immediately: verify version is 22H2 and install all Windows updates (confirm KB5063709 is present). Reboot. (support.microsoft.com)
- Within 24 hours: create an independent external backup (disk image + file-level copy). Store the disk image offline. (microsoft.com)
- Within 48 hours: sign in with a Microsoft Account and check Windows Update for the Enroll now wizard. If it appears, complete enrollment and confirm ESU-labeled updates show in Update History. (microsoft.com)
- If you prefer the free path and choose OneDrive backup, verify you have adequate OneDrive quota (5 GB free) or plan to purchase more storage before enrollment. (microsoft.com)
- Use the ESU year to execute a migration plan: test critical apps on Windows 11 (or evaluate alternatives like Linux distributions or ChromeOS Flex for unsupported hardware), budget for hardware refresh where needed, and retire devices responsibly. (learn.microsoft.com)
Conclusion
Microsoft’s consumer Extended Security Updates program offers a concrete, verifiable, and limited lifeline to Windows 10 users who cannot migrate immediately to Windows 11. The mechanics are straightforward — update to 22H2, install KB5063709, sign in with a Microsoft Account, and either enable OneDrive backup (free), redeem Rewards points, or pay a modest one-time fee — but the timing and prerequisites are strict. For uninterrupted protection, complete the enrollment steps before October 14, 2025. That one act preserves security-only patches through October 13, 2026, giving households and power users a defined window to migrate safely. (support.microsoft.com)Use the ESU year deliberately: back up your data independently, verify entitlements, and treat ESU as a migration window rather than an indefinite solution. Acting early is the safest, most reliable way to avoid last-minute enrollment failures and exposure to new vulnerabilities. (techradar.com)
Source: CNET Still Running Windows 10? Make Sure You Take This Step Before Oct. 14