Windows 10 ESU Explained: Cost, Enrolment and Deadlines

What is ESU in Windows? ESU (Extended Security Updates) is Microsoft's paid or free-with-conditions programme that keeps sending critical and important security patches to Windows 10 PCs after Windows 10 support ended on 14 October 2025. Home users can enrol free by syncing settings to a Microsoft account, with 1,000 Microsoft Rewards points, or for a one-time $30, and coverage now runs to 12 October 2027.

What Is ESU in Windows?

ESU in Windows is a time-limited programme that delivers security fixes, and only security fixes, to a Windows version that has reached end of support. It exists to give people and businesses extra time to move to a supported version without leaving their PCs exposed in the meantime.

It helps to be clear about what ESU does not include. Microsoft states that ESU provides critical and important security updates, but no new features, no non-security fixes and no technical support. Your Windows 10 PC will be protected against newly found vulnerabilities, but apps and hardware makers will gradually stop supporting it. For the full picture of what end of support means, see our guide to Windows 10 end of life.

How Much Does Windows 10 ESU Cost and When Does It End?

For home users, Windows 10 ESU can cost nothing, 1,000 Microsoft Rewards points or a one-time $30 (plus tax, or the local equivalent), and it ends on 12 October 2027 for every option. Microsoft originally set the consumer end date as 13 October 2026 and extended it by a year in 2026; PCs already enrolled carry on automatically.

One consumer ESU licence covers up to 10 PCs signed in with the same Microsoft account. All prices and dates above come from Microsoft's Windows 10 Consumer ESU page and its ESU guidance for organisations.

Who Is Eligible for Windows 10 ESU?

A PC is eligible for consumer ESU if it runs Windows 10 version 22H2 in the Home, Pro, Pro Education or Pro for Workstations edition and is used personally rather than managed by an organisation.

• The PC must have the latest Windows updates installed.
• You must enrol with a Microsoft account that is an administrator on the PC, and it cannot be a child account.
• PCs joined to an Active Directory domain or Microsoft Entra, enrolled in mobile device management (MDM), or set up as kiosks are not offered consumer ESU. Those devices use the commercial programme instead.

The version requirement has a practical effect: if your PC is still on an older Windows 10 version such as 21H2, the enrolment option will not appear until Windows Update has moved it to 22H2.

How Do I Enrol in Windows 10 ESU?

You enrol in Windows 10 ESU from Windows Update; the option appears automatically on eligible PCs.

1. Open Settings → Update & Security → Windows Update.
2. Select Check for updates and install everything offered, restarting if asked.
3. Back on the Windows Update page, select Enroll now under the Extended Security Updates notice.
4. If you normally sign in with a local account, sign in with your Microsoft account when prompted.
5. Choose your option: sync your PC settings (free), redeem 1,000 Rewards points, or pay the one-time fee.
6. Confirm. Windows Update will show that the PC is enrolled, and ESU updates arrive through the normal monthly Patch Tuesday cycle.

Can I Get Windows 10 ESU Without a Microsoft Account?

No, you cannot enrol in Windows 10 ESU without a Microsoft account, because the ESU licence is tied to the account used to enrol. What varies is whether you must keep signing in with it afterwards.

In the European Economic Area (EEA), Microsoft offers ESU at no extra cost as long as you keep signing in to Windows with the Microsoft account you enrolled with. If you stop, updates can be discontinued after up to 60 days, and you would need to re-enrol. EEA users who prefer a local account can instead pay the one-time fee and only sign in to make the purchase. Outside the EEA, Microsoft's page does not set out the same local-account rule, so the safest assumption is to stay signed in with the enrolling account.

What Is KB5068781 and How Do I Fix an ESU Registration Error?

KB5068781 was the first Windows 10 ESU update, released on 11 November 2025 for builds 19044 and 19045. Each later monthly ESU update follows the same pattern and arrives through Windows Update on enrolled PCs.

Early enrolment problems were caused by a fault in the enrolment wizard itself. Microsoft released an out-of-band fix, KB5071959, and folded that fix into later cumulative updates. If enrolment fails or the Enroll now button does not appear, work through these checks:

1. Install all pending updates in Settings → Update & Security → Windows Update and restart.
2. Confirm the version is 22H2 in Settings → System → About.
3. Make sure you are signed in with an adult Microsoft account that has administrator rights.
4. Check that the PC is not joined to a work domain or managed by your employer's MDM.
5. Try enrolling again after a restart.

Is There ESU for Windows 7 in 2026 or Windows 10 LTSB 2016?

There is no Windows 7 ESU in 2026. Microsoft's lifecycle page shows the final Windows 7 ESU year ended in January 2023, and it was only ever sold to businesses through volume licensing. A Windows 7 PC today receives no security updates at all.

Windows 10 Enterprise 2016 LTSB is different. LTSB (Long-Term Servicing Branch) is a special business edition with its own lifecycle, and its extended support ends on 13 October 2026. Organisations can buy ESU for it through volume licensing or a Microsoft Cloud Solution Provider. Home users never had LTSB, so consumer ESU does not apply to it.

A Common Mistake We See

The mistake we see most is treating ESU as a permanent fix. It buys time, and the time now runs to October 2027, but it does not stop apps, drivers and browsers from gradually dropping Windows 10. People who wait until the final month then discover their PC fails a Windows 11 check because TPM is switched off in the firmware, a problem that takes five minutes to solve with our guide on how to enable TPM 2.0.

A better approach is to enrol in ESU now and use the extra year to check your hardware against the Windows 11 requirements, back up your files and plan the move.

Frequently Asked Questions

What is ESU in Windows 10?

ESU in Windows 10 is the Extended Security Updates programme. It delivers critical and important security patches to Windows 10 version 22H2 PCs after support ended on 14 October 2025. It does not add features, fix non-security bugs or include Microsoft technical support. Consumer coverage now runs until 12 October 2027.

Is Windows 10 ESU free?

Windows 10 ESU is free for home users who sync their PC settings to a Microsoft account. Alternatively, you can redeem 1,000 Microsoft Rewards points or pay a one-time $30 plus tax. In the EEA, it is free as long as you keep signing in with the Microsoft account used to enrol.

Do I need to re-enrol after Microsoft extended ESU to 2027?

No. Microsoft states that PCs already enrolled in consumer ESU continue automatically until the new end date of 12 October 2027. You only need to keep the PC updated and, where your option depends on it, stay signed in with the Microsoft account you enrolled with.

Can I use one Windows 10 ESU licence on several PCs?

Yes. A consumer ESU licence covers up to 10 Windows 10 PCs signed in with the same Microsoft account. Each PC still needs to meet the eligibility rules: version 22H2, latest updates installed, a supported edition and no domain, Entra join or MDM management.

Can I get Windows 10 ESU without a Microsoft account?

You need a Microsoft account to enrol, because the ESU licence is attached to that account. In the EEA, choosing the one-time purchase lets you keep using a local account afterwards. Outside the EEA, the safest approach is to stay signed in with the account you used to enrol.

What happens after Windows 10 ESU ends in 2027?

After 12 October 2027, consumer Windows 10 PCs stop receiving security updates. Windows will keep working, but each newly discovered vulnerability will stay unpatched, so risk increases over time. Moving to Windows 11 on compatible hardware, or replacing the PC, is the long-term solution.

Conclusion

So, what is ESU in Windows? It is a bridge, not a destination: up to two extra years of security patches for Windows 10, free or low-cost for home users and ending on 12 October 2027. Enrol now, then use the time to plan your move to Windows 11. If you are still setting up or repairing a Windows 10 PC in the meantime, our Windows 10 collection has genuine keys, and our Windows 11 licences are ready when you upgrade.

Useful Links