Update: The ESU program for European Economic Area [EEA] will be offered for free. This change comes as a consequence of consumer defense action of organizations like Euroconsumers [PDF file].
Every application and operating system have its date until which the vendor declares to support the product and provide the updates. After that date, you will no longer receive support and/or updates, and you will have to update your OS or app to a newer version. Microsoft Windows operating systems and applications are no different here – however, this blogpost will focus on Microsoft Windows 10 operating system, and something called extended support. Let’s take a closer look at what that is.
You may recall Windows 7 Extended Security Updates [or Windows Server 2008/R2] offered extended support of Windows 7 for three years. The Extended Security Updates [ESU] had to be purchased individually for each of three years. Certain prerequisites had to be met like installation of SHA-2 code signing, Servicing Stack Update, and the ESU licensing preparation package. Next, there was special activation key installation which allowed the operating system to receive the ESUs. When all of that was completed, the system was applicable to receive the updates.
For Windows 10, the ESU installation is easier than it was for Windows 7, nevertheless there are certain steps that need to be taken to be able to use the extended support.
Windows 10, originally released in July 2015. Whether you are an individual or an organization, its support, in both instances, concludes on 14 October 2025. This is in less than three weeks!
Extended Security Updates provide only critical and important security updates, not new features. And they are intended to help you stay secure and give you more time to complete transition to Windows 11. It is a temporary “workaround” to keep legacy systems updated with security fixes, not a long-term solution. Moreover, ESU do not extend the technical support for Windows – here, the technical support only covers potential issues with ESU activation, installation or actions that the updates itself may have caused.
For the enterprise customers, the extended security updates are available if certain prerequisites are met.
Windows 10 devices must be on version 22H2 [latest and last version of Windows 10], with the November 12, 2024 [KB5046613] or newer cumulative update installed. You then have to allow specific URLs.
If you are using some cloud and virtualizations platforms like AVD, Azure virtual machines, Windows 365 and more, then ESU are already enabled, and no further actions are needed.
Please beware of some gotchas while using Windows 10 for accessing Windows 365 cloud PC – for example, Windows 10 devices must be Entra ID joined, or hybrid joined [Entra registered or on-prem AD joined won’t work here], or user must sign in to Windows 10 device once every 22 days using the same Entra ID account they use for Windows 365.
Other virtualization platforms like Citrix require manual ESU activation.
For applicable Windows 10 devices, you then need to obtain the product keys in the admin center and install and activate the keys.
The cost is 61$ per device for the first year of the ESU program, and the price doubles in second year of the ESU program, and doubles again in the third year of the program. Therefore, organizations should assess program participation costs. Minimum licenses required is one license.
Only that much or as much as that 😊
Individual customers have a bit easier path. To enroll into Windows 10 ESU, the device needs to be running on Windows 10 22H2 with latest updates installed. Account used to sign in to the device must be an administrator, plus you will be asked to sign in with a Microsoft account if you normally use a local account. The device cannot be managed by MDM solution, cannot be AD domain joined or Entra ID joined, however it may be Entra registered.
ESU enrollment is possible using one of three options:
- Enable syncing your files and settings on OneDrive – only note that the free OneDrive size is 5GB. For more, you may need to purchase Microsoft 365 Personal or Microsoft 365 for Home.
- You may redeem 1000 Microsoft Rewards points.
- Or make one-time purchase worth 30$ plus tax.
When your device is eligible, navigate to Settings > Update & Security > Windows Update. Should your device meet the prerequisites, there will be a link to enroll in ESU.
The extended support program for individual consumers will end on 13th October 2026.
Update: The ESU program for European Economic Area [EEA] will be offered for free. This change comes as a consequence of consumer defense action of organizations like Euroconsumers [PDF file].
“We are pleased to learn that Microsoft will provide a no-cost Extended Security Updates (ESU) option for Windows 10 consumer users in the European Economic Area (EEA). We are also glad this option will not require users to back up settings, apps, or credentials, or use Microsoft Rewards.”
Windows 11 was released almost 4 years ago, and it was clear that the clock for Windows 10 started ticking. If you haven’t migrated to Windows 11 already [as individual or as an organization] the ESU should really be the last resort for you. Transitioning from Windows 10 to Windows 11 is way easier, smoother and there is higher application compatibility than it was while migrating from Windows 7 to Windows 10. The majority of upgrades and migrations simply work seamlessly and only very few may face issues. Actually, the only reason to that can block you from migrating to Windows 11 might be the hardware requirements, and more specifically, supported CPU‘s with TPM capabilities.
Less than three weeks left to upgrade to Windows 11, or to stay with legacy Windows 10 for at least another year 🙂
