- ESU allows you to continue receiving critical patches on Windows 10 after the end of support, with one free year in the EEA.
- Update KB5071959 corrects enrollment errors that were blocking access to ESU.
- Outside the EEA, ESU is paid, with options such as Microsoft Rewards or Windows Backup in some countries.
- Companies can activate ESU with MAK, slmgr and VAMT keys by meeting requirements and connectivity.
Windows 10 has been out of mainstream support from Microsoft since mid-October, but it's not all over for those still relying on this system . The company has launched Extended Security Updates (ESU) to extend the system's lifespan with critical patches, and has released an emergency patch, KB5071959, which fixes the enrollment errors that were blocking many users.
If you're wondering how to continue receiving updates without paying, there's good news: in the European Economic Area (EEA), an additional year of free updates has been made available to consumers, and the KB5071959 patch is now being rolled out as a mandatory update to systems that were unable to enroll in ESU. Let's take a step-by-step look at how ESU works, what KB5071959 fixes, and what options you have whether you're a home user or manage a fleet of PCs in a company.
What is ESU in Windows 10 and why is it worth it?
ESU (Extended Security Updates) is an official Microsoft subscription that provides critical and important security patches for Windows 10 after the end of support . In the consumer channel, the program covers Windows 10 until October 13, 2026; it does not include new features or technical support, only security fixes.
In practical terms, this offers a "grace period" for those who cannot or do not want to migrate to Windows 11 yet : older PCs that do not comply with TPM 2.0, workstations that need continuity, or simply users satisfied with their current configuration.
The availability of ESU for consumers is being rolled out in phases to devices running Windows 10, version 22H2, provided the system is fully updated . This means you must first install all pending updates, and when the rollout reaches your device, you will see a link to enroll through Windows Update.
It's worth remembering the context: Windows 10 was launched in 2015 as a response to the awkward changes in Windows 8/8.1. It brought back the Start menu, improved the interface, added virtual desktops and an Action Center , and offered a free upgrade to Windows 7 and 8.1 users. Its adoption was enormous; in fact, it remained very popular years later, with a share of nearly half the Windows market at the time support ended.
For consumers, ESU also allows you to link up to 10 devices with the same license if your registration allows it: you can add extra devices from Windows Update using the same Microsoft account , with the "Add device" option when appropriate.
KB5071959: The emergency patch that fixes ESU enrollment
Many users, especially in Europe, encountered errors when trying to sign up for the program: messages like "Temporarily unavailable" or "Something went wrong" prevented them from completing the registration despite having the latest version of their computer and following the instructions. This problem wasn't part of a conspiracy to force a migration to Windows 11; it was simply another quality issue in the enrollment process.
To fix this, Microsoft released an out-of-band update: KB5071959 corrects the Windows 10 ESU enrollment wizard , allowing consumer devices to register correctly. If you were affected by the bug, you'll see this KB listed as a required update in Windows Update, as it unlocks access to essential security patches.
The company recommends installing it as soon as possible because, in addition, significant patches have been released in the same monthly cycle: 66 vulnerabilities and one active zero-day exploit have been addressed . Without operational registration, many teams would be left behind precisely when there is the greatest need to secure vulnerabilities.
Once KB5071959 is installed and registration is complete, your PC will receive security patches normally through Windows Update . If the registration button still doesn't appear, remember to restart and check for updates again to force detection.
How to activate ESU from Windows Update and keep updates free
In the EEA (European Union plus Iceland, Liechtenstein, and Norway), Microsoft has enabled an extra year of ESU for consumers at no cost, with one condition: you must remain signed in to your Microsoft account regularly (at least once every 60 days). If you fail to do so, your device may be removed from the program, and you will have to re-enroll.
Basic steps on computers that meet the prerequisites (fully updated Windows 10 22H2): Settings > Update & Security > Windows Update . If your PC is eligible, you'll see a link to "Enroll now" in ESU; clicking it will prompt the wizard to sign in with a Microsoft account if you're using a local user account.
After completing the wizard, check for updates again and apply any available patches. If you're logged in with the same account you used on your first computer, you can "Add Device" to cover more PCs (up to 10 if your subscription allows it). If you opted for a one-time payment in regions outside the EEA, that account may not be linked to the PC in the same way as the "Keep Signed In" option.
Outside the EEA, the consumer program is paid (approx. $30) or redeemable with benefits: in countries like Mexico and others in Latin America, you can avoid the charge by activating Windows Backup or redeeming 1.000 Microsoft Rewards points , according to information released by Microsoft and specialized media.
Troubleshooting: Common registration errors and how to fix them
If you see messages like "Temporarily unavailable," "Coming soon," "Something went wrong," or "Something didn't work," don't worry: most of these issues are fixed by update KB5071959 . Install it when it appears as required and restart your computer to try the process again.
Before attempting to enroll again, please verify the following: your system must be running Windows 10 version 22H2, have all cumulative updates installed, and be connected to the internet . In some cases, signing out and signing back in with your Microsoft account may help the wizard recover its correct state.
If you're using only a local account, the assistant may ask you to sign in with your MSA to complete registration . In the EEA, maintaining that sign-in at least every 60 days is part of the ESU free year conditions; without this verification, you will stop receiving patches.
Once registration is complete, return to Windows Update and click "Check for updates." The ESU patches will arrive through the usual channel , just as they did before the end of support.
Guide for businesses: Activate ESU with MAK keys and automate administration
Organizations can enable ESU through MAK key volume licensing and per-computer activation. First, review the requirements: Windows 10 version 22H2 with KB5066791 (or later) installed , and the ESU Licensing Preparation Package for Windows 10 KB5072653, which must be applied after KB5066791.
Important: Long-Term Servicing Editions (Windows 10 LTSB/LTSC) have their own lifecycle and are not included in this Consumer ESU program . Confirm the lifecycle of your edition before planning.
To obtain the MAK key, access the Microsoft 365 admin center: Billing > Your products > Volume licensing > View contracts . Locate the license ID where you purchased ESU, click "More actions," and then "View product keys." The keys associated with that contract will appear there.
Devices must be able to reach Microsoft activation points. Verify connectivity to these endpoints during client activation: https://go.microsoft.com/, https://login.live.com, https://activation.sls.microsoft.com/, http://crl.microsoft.com/, https://validation.sls.microsoft.com/ and v2 variants, as well as the Microsoft Store catalog and licensing endpoints.
Installation and activation with slmgr (online mode): Open an elevated command prompt and install the ESU MAK key with the following command:
slmgr.vbs /ipk <ESU_MAK>After installing the key, activate using the activation identifier corresponding to your ESU year. Available identifiers for Windows 10 ESU :
| ESU Program | Activation ID |
|---|---|
| Win10 ESU Year 1 | f520e45e-7413-4a34-a497-d2765967d094 |
| Win10 ESU Year 2 | 1043add5-23b1-4afb-9a0f-64343c8f3f8d |
| Win10 ESU Year 3 | 83d49986-add3-41d7-ba33-87c7bfb5c0fb |
With the correct ID, run the activation: use /ato with the Activation ID to complete the process.
slmgr.vbs /ato <Activation_ID>Check the status with: /dlv should show the program name and "Licensed" for that ESU program.
slmgr.vbs /dlvIf the device cannot access the internet, telephone activation is required. First, install the MAK as before and obtain the Installation ID (IID) with /dti using the corresponding Activation ID:
slmgr.vbs /dti <Activation_ID>Call the Microsoft Activation Center, provide the IID and note the Confirmation ID . Then, activate with /atp:
slmgr.vbs /atp <Confirmation_ID> <Activation_ID>For large-scale deployments without direct internet access, use VAMT (Volume Activation Management Tool) as a proxy . Install the version of VAMT included in the latest ADK and apply the update available on the Microsoft website to incorporate updated PkeyConfig files intended for Windows 10 ESU with MAK keys.
Regional conditions, accounts and costs: what you need to know
In the EEA, the additional year of ESU for consumers is free, but you must remain signed in to your Microsoft account at least every 60 days . If you miss this deadline, your device may be removed from the program, and you'll need to sign in and enroll again.
Outside the EEA, consumer ESU is a paid service, although there are alternative ways in several countries: redeem 1.000 Microsoft Rewards points or activate Windows Backup to avoid the charge, according to the options mentioned by Microsoft for its consumer channel.
If you chose to stay signed in on your first device, additional devices will need to use the same Microsoft account to continue receiving ESU . If you chose to pay once without staying signed in, that account may not be associated with that PC in the same way, and subsequent management will be different.
And just to be clear, simply using a local account isn't enough : enrollment and maintenance depend on verification with a Microsoft account (MSA). You can continue using your local user account for everyday tasks, but you'll need to sign in with your MSA periodically.
Impact of the end of support and alternatives if you can't (or don't want to) upgrade to Windows 11
Working with an outdated system increases the risk of malware, ransomware, and other threats, with consequences ranging from data loss to legal issues in corporate environments. ESU mitigates this risk with critical and important patches , but it is not a substitute for a planned migration to a system with long-term support.
If your PC doesn't meet the Windows 11 requirements (for example, because it lacks TPM 2.0), there are unofficial methods like Tiny11, Flyoobe, or NTLite that remove requirements and bloatware to lighten installations . However, these methods are not endorsed by Microsoft, and their use is at the discretion and responsibility of each user.
Another very reasonable option today is Linux: distributions like Ubuntu, Linux Mint or Zorin OS offer familiar environments, frequent support and good compatibility to extend the life of older computers without investing in new hardware.
Meanwhile, in the short term, keeping ESU active on Windows 10 is key: patch KB5071959 unlocks enrollment and puts you back on track with updates , just as important fixes have appeared, including an exploitable 0-Day vulnerability.
Essential steps and requirements to make everything work
To recap the operational details: your computer must be running Windows 10 22H2 and up-to-date with Windows Update . ESU enablement will be rolled out gradually, and you'll see a link in Windows Update when it becomes available.
Go to Settings > Update & Security > Windows Update, tap "Enroll now" if prompted, and sign in with your Microsoft account when prompted . Signing out and signing back in with that account periodically will prevent account deactivation due to inactivity.
If you were affected by the wizard error, install KB5071959 as soon as Windows Update offers it as mandatory. Then, restart your computer and check for updates again to begin downloading the ESU patches.
For those who manage multiple devices at home or in the office, remember that you can cover more devices from the same registration (up to 10 where applicable): use the "Add device" option as long as the device is on the same Microsoft account you used when registering the first one.
Quick questions that clear up the most common doubts
How long does ESU for consumers last? It covers until October 13, 2026, providing an additional year after the end of general support.
Does it include new features or technical support? No; only security patches classified as critical or important, with no new features or support.
How many devices can I link? For consumer use, the license allows up to 10 devices when the registration includes it and depending on the chosen plan.
How do I check if I have KB5071959 installed? Go to Windows Update > Update History and look for the reference to that KB to confirm it.
What do I do if I'm using a local user account and don't want to change? You can continue using your local user account, but you'll need to sign in with a Microsoft account to enroll and periodically to maintain access.
What if "Sign up now" doesn't appear? Apply all available updates, restart, and check again; availability is being rolled out in phases and may take some time to reach all eligible devices.
For those who prefer external support, there are providers that offer assistance with the registration process, profile migration, and smooth transition— especially useful for small and medium-sized businesses with limited resources . If you find yourself stuck, consulting a specialist can save you time and headaches.
Windows 10 remains a solid foundation for millions of users: its maturity, improvements over Windows 8/8.1, and widespread adoption explain why so many people keep it running. With ESU and the KB5071959 patch, you can buy time and enhance security while you consider upgrading to Windows 11 or an alternative like Linux, avoiding vulnerability at a time when digital threats are relentless.