How can I verify my ESU enrollment?

Question

Dear madams, dear sirs,

I have enrolled for the ESU and wanted to check on my machine if its still active. I could not find anything even in the registry. Please tell me if I am correctly enrolled to be sure that machine stays safe.

Kind regards,

Torsten Claussen

Answer 1

Hi,

Follow the procedure below:**

1.** Open administrative Command Prompt.

2. Paste this command and press Enter key:

JSON

reg.exe query "HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\ConsumerESU"

Take a screenshot and post the result here.

The result should be 3 x 1 or 5 x 1, which means it's active.

Oh yes, if by chance Windows Update is showing that Windows support has ended and this isn't a bug, Microsoft has already acknowledged it and is sending a patch to fix it.

https://learn.microsoft.com/en-us/windows/release-health/status-windows-10-22h2#3706msgdesc

ESUEligibility value indication	ESUEligibilityResult value indication
0: Unknown/feature is not enabled	1: Success
1: Ineligible	3: Non-Consumer edition
2: Eligible	4: Commercial device
3: DeviceEnrolled	5: Non-Admin account
5: MSAEnrolled	6: Child account
8: LoginWithPrimaryAccountToEnroll	7: User Region is Embargoed
—	8: Azure device
—	11: Unknown/feature is not enabled

Credits.: kapilarya (https://www.kapilarya.com/fix-windows-10-esu-enroll-option-missing)

Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Give feedback if the information was useful or not.

Thanks

Answer 2

Unfortunately Registry values are 0 and Event viewer does not show Event ID 113. How shall I proceed?

Answer 3

To verify your ESU (Extended Security Updates) enrollment on your Windows machine, you can check for specific registry entries. Here are the steps you can follow:

1. Open the Registry Editor by typing regedit in the Start menu search and pressing Enter.
2. Navigate to the following registry key:
   • HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\ESU
3. Look for the following entries:
   • Name: EnableESUSubscriptionCheck
     • Type: REG_DWORD
     • Value: 1 (This indicates that the ESU subscription check is enabled)
   • Name: Win10CommercialW365ESUEligible
     • Type: REG_DWORD
     • Value: 1 (This indicates that the device is eligible to receive ESU updates)
4. Additionally, you can check the Event Viewer for confirmation:
   • Go to Event Viewer > Applications and Services Logs > Microsoft > Windows > ClipESU and look for Event ID 113, which indicates that the Windows 365 ESU license was successfully installed.

If these entries are present and correctly set, your machine is enrolled in the ESU program and should be safe.