Windows 10 Extended Support: ESU Guide, Requirements, and Activation

Informatec Digital » Resources » Windows 10 Extended Support: ESU Guide, Requirements, and Activation

Windows 10 is nearing the end of its lifecycle, and with it comes the fear of losing access to security patches. The good news is that the Extended Security Updates (ESU) program allows you to continue receiving critical fixes even after the end of support. If you're concerned about security and haven't yet upgraded to Windows 11 , here's a complete guide on how to activate it, how long it lasts, and under what conditions you can use it.

For years, Microsoft has been preparing for the transition, and many users must decide whether to migrate from Windows 10 to Windows 11. However, millions of computers are still running Windows 10. To address this need, Microsoft offers Enterprise Service (ESU) in different formats : a paid option for organizations and, in the European consumer channel, a free option subject to certain requirements. Below, you'll find exactly what's included, how to enroll through Windows Update, the role of your Microsoft account, regional variations, and answers to frequently asked questions.

What is ESU and what exactly does it include?

Extended Security Updates (ESU) is a subscription that keeps your Windows 10 updated with security patches after the end of official support, without adding new features or design changes. It only covers security updates classified as critical or important , according to the severity defined by the Microsoft Security Response Center.

This means you will not receive new features, regular quality improvements, or general technical support for the system once the end-of-support date is reached. ESU's scope is limited to license activation, installation, and remediation of any regressions within the ESU itself ; an active support plan is required for assistance with these issues in organizational environments.

In the home market, the program is designed to fill the gap for those who cannot or do not yet wish to migrate to Windows 11. The goal is for you to continue using your Windows 10 PC more securely for an additional period, at the cost of accepting that there will be no new features and complying with certain usage conditions.

One important detail is that ESU is being rolled out gradually. Microsoft began its phased implementation on devices running version 22H2 before October 14, 2025 , so the enrollment notification may have appeared in stages and not all devices may have seen it at the same time.

Availability, regions, price and duration

In organizations and educational institutions, ESU is purchased per device per year through volume licensing. The first year has a suggested price of $61 USD per device , and the cost doubles each subsequent year, up to a maximum of three years. Furthermore, the program is cumulative: if you purchase the second year, you must also pay for the first.

In that enterprise channel, ESU Multiple Activation Keys (MAKs) appear in the licensing portal, but cannot be used until Windows 10 officially reaches end of support. ESU coverage begins when mainstream support ends , and the first year of a commercial subscription is considered to begin in November 2025.

For consumers, there are two realities depending on the region. Outside the European Economic Area (EEA), consumer ESU is either paid or redeemable with Microsoft Rewards points , and requires linking the device to a Microsoft account. In some countries, the price has been close to $30 for the first year.

In the EEA (which includes Spain), Microsoft has enabled an additional year of ESU at no cost for consumers , provided you link the device to a Microsoft account and maintain a certain level of activity. The key condition is to sign in at least once every 60 days; if this period is exceeded without check-in, the device may be removed from the program and you would have to re-enroll it.

The documented consumer coverage extends until October 13, 2026. Various sources indicate that the process could be renewed annually until 2028 ; meanwhile, in the business sector, up to three years of ESU with a paid subscription are available. In any case, no new features are added, only security patches.

Device and account prerequisites

To receive ESU updates, your system must be running Windows 10 version 22H2 and fully updated through Windows Update. You can verify this in Settings > System > About and by applying all available updates.

On the home channel, a Microsoft account (MSA) is required for enrollment and periodic verification. If you are in the EEA and choose the free option, you will need to stay signed in or log in at least every 60 days to prevent ESU access from being deactivated.

If the computer belongs to a corporate domain, the conditions change, and organizational environment criteria apply. For the typical home user, it's preferable not to be joined to a domain and to use an MSA with administrator privileges for enrollment.

It's possible to have both local accounts and an MSA account on the same PC. The key is that the device is linked to the Microsoft account you use for ESU and that you meet the minimum activity requirements to maintain your eligibility to receive patches.

Internet connectivity is required to verify your program membership and download updates. Without a connection, Windows Update will not be able to validate your enrollment or apply the latest updates.

How to enroll from Windows Update (step by step)

The most direct route is through Settings > Update & Security > Windows Update. If your computer is eligible, you'll see an end-of-support notice and a "Sign up now" link or button to join the ESU program.

Clicking that link will start the wizard. If you're using a local Windows account, the wizard will ask you to sign in with your Microsoft account to link the device. Complete the process and accept the terms displayed on the screen.

After registration, you'll see a confirmation message and, if applicable, be prompted to restart. Return to the Windows Update section and click "Check for updates" to ensure that the security patches covered by ESU are downloaded.

If the enrollment button doesn't appear, install all pending Windows 10 22H2 updates and restart. Keep in mind that Microsoft rolls out this option in waves , so it may take some time to become available on your computer.

Once enrolled, you can use your existing ESU license on up to 10 consumer channel devices. On each additional PC, go to Settings > Update & Security > Windows Update and select "Enroll now" ; if you're already signed in with the same MSA, simply select "Add device."

Payment options, Microsoft Rewards and specifics in Spain

If you initially signed up and remained logged in to receive free ESU, you must keep that session active on any other added devices to continue receiving patches. However, if you opted for a one-time payment and chose not to remain logged in, the MSA used to sign up will not be linked to that PC.

In markets outside the EEA, some users see the option to pay around $30 or redeem the subscription with Microsoft Rewards points. Alternatives such as logging in and linking data to the cloud have also been mentioned , although the requirements vary by country and channel.

In Spain and other European countries, local regulations and agreements have relaxed the conditions in the consumer channel. Obtaining the free ESU is linked to linking a Microsoft account and meeting the minimum activity requirement , without any obligation to use OneDrive.

In some scenarios, if you don't use an MSA, Windows may offer a payment option in euros (for example, €31,99) to cover the first year. If you want to avoid the cost and your region offers a free option, sign in with an MSA on your computer and restart the enrollment process.

Keep in mind that this extra year for consumers doesn't include new features. Its purpose is to address critical vulnerabilities while you decide whether to migrate to Windows 11 , upgrade your computer, or switch platforms.

Alternative method using Windows Backup

Some users report that simply using the Windows Backup app is enough to activate the additional free year. The process involves signing in with your MSA (Settings > Accounts > Your info) and then opening the Windows Backup app.

Within the app, configure and run a backup of your items (device settings, credentials, installed apps, and folders). Customize each section to suit your needs and run the backup to record the activity.

After this, Microsoft may recognize that the device is eligible for the free ESU and keep you covered during the grace period. The notification doesn't always appear immediately ; if necessary, repeat the process after some time or wait for the notification.

This approach does not replace the visible enrollment in Windows Update if it appears for you. Consider Windows Backup as a helpful add-on that assists in meeting the linking and activity requirements with your MSA.

Remember that, in the EEA consumer channel, the key criterion is regular activity with your account. Even if you continue to use your local session daily, it's advisable to log in with your MSA at least every 60 days to maintain access to the program.

Local accounts, Microsoft session and the 60-day "trick"

Can I continue using a local account and still receive ESU? The practical answer is yes, with some caveats. The computer must be associated with an MSA, and that MSA must log in periodically so the system can verify that you still meet the requirements.

A useful "trick" is to create or use an administrator account with MSA for enrollment and log in to that account at least once every 60 days . Meanwhile, you can work daily with your local (even standard) account and continue receiving patches, as long as you don't exceed that timeframe.

If you stop signing in for more than 60 days, Microsoft may deactivate extended support without notice. In that case, you would need to re-enroll or, in regions without a free option, pay or redeem points to regain coverage.

This approach balances privacy and security: you keep your local account for day-to-day use , but you meet the MSA activity requirement so you don't miss out on critical patches.

In any case, make sure the MSA account has administrator privileges and that Windows 10 is running version 22H2 with all updates installed. An outdated system or one without sufficient permissions may block enrollment or prevent newsletter downloads.

A real-life example: Dell OptiPlex 7050 with i7-7700 and local accounts

Imagine a computer like a Dell OptiPlex 7050 with an Intel Core i7-7700, 32 GB of RAM, and a 1 TB SSD, fully updated on Windows 10 Pro, but without official support for Windows 11. If you don't see the "Enroll now" button in Windows Update , it's usually because you're missing the step of signing in with your MSA or because an update is pending.

Go to Settings > Accounts > Your info and sign in with your Microsoft account as an administrator. Return to Windows Update and check again. By linking your MSA, the system should offer you ESU enrollment if it's already available in your region and on your computer.

Once enrolled, the device will continue to receive ESU security patches until at least October 13, 2026, on the EEA consumer channel. The standard local account will continue to receive updates through Windows Update because eligibility is checked at the device level, not the user level, in each session.

To maintain your free membership, stay logged in with your MSA or log in to that administrator account at least once every 60 days. If you don't want to use your MSA daily, you can alternate with your local account and meet the activity requirement periodically.

If the registration still doesn't appear, make sure you're on version 22H2, install any missing components, restart, and try again in a few days. Remember that the rollout is phased and doesn't always reach all devices at once , even if they're up to date.

Program limitations, best practices, and alternatives

ESU does not include new features, non-security-related quality improvements, or design changes. It also does not provide general technical support for Windows 10 beyond the end-of-support date , except for matters strictly related to ESU activation and installation.

As a user, it's advisable to maintain good security practices: use an updated browser, avoid unsupported software, and activate Microsoft antivirus or a reputable solution. ESU protects you against critical system vulnerabilities , but it doesn't cover errors in third-party applications or risky habits.

If your computer can't be upgraded to Windows 11 and you'd prefer to extend its lifespan, there are unofficial options like Tiny11 or tools like NTLite to create lighter installations. These methods can remove bloatware and improve performance , although they require technical expertise and are not supported by Microsoft.

Another option is to give Linux a try with Windows-like environments or different desktops. For older computers, a lightweight distribution can offer a very respectable second life , provided your key applications have equivalents or run in compatibility mode.

In environments where cloud services are used, Windows 365 offers cloud PCs with ESU-related rights for up to three years while the subscription is active. This is an option to consider if you want access to a modern desktop from older hardware without sacrificing security patches.

Key FAQs

How long does ESU last? For consumers within the EEA, there is one free year with coverage until October 13, 2026. For organizations, up to three years are available with an annual subscription (paying for year 1, then years 2 and 3 if desired).

How much does it cost? In the enterprise channel, the first year costs around $61 USD and doubles each subsequent year. For consumers outside the EEA, options have been seen for around $30 USD or redemption through Microsoft Rewards. Within the EEA, there is a free option with MSA and regular activity.

Can I buy just half a year? No. The program is purchased for full years and is cumulative : if you enter the second year, you must also pay for the first (applies to the volume licensing channel).

When are ESU keys available? For volume licenses, MAKs are displayed on the portal but are activated when Windows 10 reaches end of support . The first year of coverage begins from that date.

How many PCs does my consumer ESU cover? After signing up, you can use your existing ESU license on up to 10 devices by signing in with the same Microsoft account and adding each computer from Windows Update.

Notes for businesses and educational environments

Organizations can acquire ESU through its licensing channel and manage it with tools like Intune or services like Autopatch. Microsoft recommends migrating to Windows 11 or Windows 365 to ensure long-term experience and security.

General technical support is not offered outside of ESU coverage, beyond activation, installation, and rollbacks of the program itself. Any issues related to ESU require an active technical support plan that covers that area.

For virtual machines on certain cloud services, Microsoft has indicated the availability of ESU at no additional cost during the specified period. Check the eligibility of your specific service if your deployment relies on VMs.

Please note that the minimum purchase for ESU Enterprise is one license per device. Purchases and management are handled for full years , and the price increases with each consecutive year, up to a maximum of three years.

If you manage a large fleet, plan your version inventory, patching, and phased transition to Windows 11. ESU is a temporary safety net, not a replacement for platform upgrades , so it's wise to map out your exit strategy from day one.

Third-party assistance and communications

There are integrators and providers that offer assistance with registration and transferring profiles between accounts. For example, Integra Información y Comunicación, SL announced on October 10, 2025, that it was providing support to users experiencing difficulties during the ESU registration process.

In addition, various media outlets have published practical guides, date reminders, and end-of-support warnings. It's advisable to follow official Microsoft communications and Windows Update notes , as the phased rollout may introduce regional changes or variations.

With all of the above, the core idea remains the same: if you stay on Windows 10, you need ESU to keep your computer protected against critical vulnerabilities, especially when standard support no longer covers your version.

Those who aren't yet ready to upgrade to Windows 11 have some leeway thanks to ESU, but it's a temporary solution. The right approach is to enroll (free in the EEA or with payment/trade-in in other regions), participate in the MSA session every 60 days , and maintain sound security practices. This way, your Windows 10 will continue to receive essential patches while you decide on your next step.