Windows 10 ESU

Question

Wondering if anyone knows how to access ESU for Windows 10. We have an outside company that we thought took care of this but have recently learned they did not. Now trying to sign up for the extended coverage but cannot register!

Answer 1

To access and enroll in Extended Security Updates (ESU) for Windows 10, first determine whether the scenario is consumer (home) or commercial/organization, then follow the appropriate path.

For home/individual Windows 10 PCs (Consumer ESU):

1. Confirm device eligibility
   • Must be running Windows 10, version 22H2 (Home, Pro, Pro Education, or Workstation).
   • Must have the latest cumulative updates installed.
   • Must sign in with a Microsoft account that is an administrator on the device and is not a child account.
   • Device must not be:
     • In kiosk mode
     • Joined to an Active Directory domain or Microsoft Entra joined (Microsoft Entra registered is allowed)
     • Enrolled in an MDM solution
     • Already holding an ESU license
2. Sign in correctly
   • In Settings → Accounts → Your info, ensure the account is a Microsoft account (not just a local account) and is the one to be used for ESU.
   • If previously using a local account, switch to sign in with a Microsoft account and then retry enrollment.
3. Enroll via Windows Update
   • Go to Settings → Update & Security → Windows Update.
   • Check for updates; eligible consumer devices will be offered ESU enrollment in the Windows Update experience.
   • During enrollment, choose one of the available options:
     • No additional cost if PC settings are syncing with the Microsoft account
     • Redeem 1,000 Microsoft Rewards points
     • One-time purchase of $30 USD (or local equivalent) plus tax
   • The ESU license is tied to the Microsoft account and can be used on up to 10 devices.

For organizations / commercial ESU:

If the PCs are domain-joined, Entra joined, or MDM-managed, they cannot use the consumer ESU flow. In that case:

1. Ensure devices meet ESU prerequisites
   • Must be running Windows 10, version 22H2.
   • For commercial ESU enablement, follow the prerequisites and steps in Enable Extended Security Updates (ESU), including required updates and the ESU Licensing Preparation Package.
2. Enroll using commercial ESU
   • Obtain ESU licenses through the appropriate commercial channel.
   • Enable ESU on devices using the documented commercial process (keys, activation, management tools) described in the ESU enablement documentation.

If registration/enrollment is failing:

• Verify the device is on Windows 10 22H2 and fully updated.
• Confirm it is not domain-joined, Entra joined, or MDM-managed if attempting consumer ESU.
• Ensure the signed-in Microsoft account is an administrator and not a child account.
• If an external company was expected to handle ESU and the devices are managed (domain/MDM), use the commercial ESU path rather than the consumer one.

---

References:

• Windows 10 Consumer Extended Security Updates (ESU) program
• Windows 10 Extended Security Updates (ESU) program
• Extended Security Updates (ESU) program for Windows 10
• Enable Windows 10 Extended Security Updates (ESU) for clients accessing cloud and virtual machines