DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
FREEDOM251

Freedom251 › Blog › ESU

How to Enroll a Windows 10 PC in Extended Security Updates (ESU)

By Freedom251 Team · · 11 min read

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For a personal Windows 10 PC, install the latest updates, then open Settings > Update & Security > Windows Update. If the computer qualifies, select the Windows 10 Extended Security Updates (ESU) enrollment link, choose Enroll now, and sign in with an administrator Microsoft account. A local-account user must sign in with a Microsoft account to complete enrollment. Organization-managed computers use a different commercial-licensing process.

What Windows 10 ESU provides

Windows 10 reached end of support on October 14, 2025. Extended Security Updates keep an eligible installation receiving critical and important security updates through Windows Update after that date. ESU is a security continuation program, not a return to full Windows support.

As an Amazon Associate I earn from qualifying purchases.

Consumer ESU does not add feature updates, product enhancements, nonsecurity fixes, or general Windows technical support. The computer continues to run after normal support ends, but without ESU Microsoft does not provide feature updates, quality updates (including security and reliability fixes), or general technical support for the ended version. See Microsoft’s Windows end-of-support information for that distinction.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Microsoft’s dedicated Windows 10 Consumer Extended Security Updates page says consumer enrollment is available through October 12, 2027, with coverage through that date. An older Microsoft end-of-support FAQ lists October 13, 2026, so use the dedicated consumer ESU page and the offer displayed on your PC for current availability. Enrollment timing and payment choices can vary by region, including in the European Economic Area.

Enrolling does not block a later upgrade to Windows 11. If the hardware meets Windows 11 requirements, you can upgrade while the ESU license is active.

Choose the correct enrollment path

Before changing settings, decide whether the PC is a personal computer or belongs to an organization. Microsoft’s consumer offer is account-based; commercial ESU is purchased by an organization and activated with a Multiple Activation Key (MAK).

PC situation Correct path Important eligibility detail
Personal, unmanaged Windows 10 PC Consumer enrollment in Settings Use an administrator Microsoft account that is not a child account.
Domain-joined, Microsoft Entra-joined, MDM-managed, or kiosk PC Commercial ESU through the organization Do not use the consumer workflow.
Microsoft Entra-registered personal PC Consumer enrollment may remain available Microsoft distinguishes Entra-registered devices from Entra-joined devices.
Windows 10 LTSB/LTSC release Its separate lifecycle and licensing program It is not covered by this standard Windows 10 ESU program.

If a PC enrolled as a consumer device later enters a commercial ESU scenario, Microsoft says the consumer enrollment is suspended while the computer is being used commercially.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Consumer eligibility checklist

The enrollment link appears only when the computer and account satisfy Microsoft’s prerequisites. Check each item before looking for the offer:

  • Windows edition and version: the PC must run Windows 10 version 22H2 in Home, Professional, Pro Education, or Workstations edition.
  • Current updates: install the latest Windows update offered by Windows Update.
  • Licensing preparation: install the Windows 10 ESU Licensing Preparation Package, KB5126256.
  • Account: use an administrator Microsoft account that is not a child account. The ESU license is associated with the Microsoft account used during enrollment.
  • Device state: the computer must not be a kiosk device, domain-joined device, Microsoft Entra-joined device, or MDM-enrolled device, and it must not already have an ESU license.
  • Region: the offer and payment choices can differ by location. Check the options shown in Windows rather than assuming that another country’s offer applies to you.

To identify the installed version and edition, open Settings > System > About and read the Windows specifications. The enrollment procedure itself remains in the Windows Update page described below.

Install prerequisites before enrollment

1. Bring Windows Update current

Open Settings > Update & Security > Windows Update, select Check for updates, and install every available update. Restart when Windows requests it, then return to the same page and check again. The ESU offer may not appear until the current update state is complete.

2. Confirm version 22H2 and an eligible edition

Windows 10 releases other than 22H2 do not meet the consumer prerequisite listed by Microsoft. Confirm that the edition is Home, Professional, Pro Education, or Workstations. If the About page shows a different edition, the consumer enrollment link is not expected to appear.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

3. Install KB5126256

The Windows 10 ESU Licensing Preparation Package is identified as KB5126256. Install it through Windows Update when offered, or use Microsoft’s update channels for your edition. Restart if required. This package prepares the installation for ESU licensing; it does not itself enroll the PC.

4. Prepare an administrator Microsoft account

Sign in to Windows with an administrator account, or be ready to provide administrator credentials when prompted. A local-account user can start the process, but Windows will request a Microsoft account. The account cannot be a child account because the ESU license is tied to that account.

How to enroll a personal Windows 10 PC

  1. Open Windows Update: go to Settings > Update & Security > Windows Update.
  2. Find the ESU offer: when the prerequisites are satisfied, select the link to enroll in Windows 10 ESU. No link means that at least one eligibility condition is not met, the offer is unavailable in your region, or the device is excluded.
  3. Start enrollment: select Enroll now.
  4. Authenticate: sign in with the administrator Microsoft account that will hold the ESU license. If you use a local Windows account, follow the prompt to sign in with a Microsoft account.
  5. Select an enrollment method: Windows presents the methods available for your account and region. You may be able to start backing up PC settings, redeem 1,000 Microsoft Rewards points, or make a one-time purchase.
  6. Complete the prompts: accept the displayed terms and finish the chosen method. Keep the same Microsoft account available because it is associated with the enrollment.
  7. Return to Windows Update: after enrollment, reopen the page to check the ESU status. The status shown there is the practical confirmation for that PC.

Microsoft may show an enrollment prompt when you already back up PC settings. That prompt is another entry point to the same consumer enrollment flow; it does not change the eligibility requirements.

Consumer ESU cost and enrollment methods

Microsoft lists three consumer choices. The exact selection can depend on region, account state, and the offer currently displayed in Windows.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Method Cost stated by Microsoft When it makes sense Qualification
Sync or start backing up PC settings No additional cost You are willing to use the settings-backup option associated with enrollment. Availability and prompts can vary by region.
Microsoft Rewards 1,000 Microsoft Rewards points You already have enough points and prefer not to make a payment. The points are redeemed during enrollment; the offer must be shown for your account.
One-time purchase $30 USD or local-currency equivalent, plus applicable tax You want a direct payment option and do not use the other methods. Price is not a recurring annual fee in the listed consumer offer, but local pricing and tax can differ.

Compare the options shown on your own PC before choosing. A no-cost option may require settings backup, while Rewards redemption requires 1,000 available points. The purchase amount is stated in US dollars as $30 plus applicable tax; the checkout amount may be converted to local currency.

Add another personal PC to the ESU license

Microsoft says an existing consumer ESU license can be used on up to 10 devices. Each additional computer must independently meet the Windows 10 22H2, edition, update, preparation-package, and account requirements.

  1. On the additional PC, install the latest Windows updates and KB5126256.
  2. Open Settings > Update & Security > Windows Update.
  3. Select the ESU enrollment link and sign in with the Microsoft account associated with the first enrollment, or choose Add device when that option is presented.
  4. Complete the prompts and return to Windows Update to confirm the device’s enrollment status.

The 10-device limit applies to the consumer ESU license described by Microsoft. It does not turn a company-managed fleet into a consumer enrollment; organizational computers must use commercial licensing.

Check whether enrollment succeeded

Use Settings > Update & Security > Windows Update on the enrolled computer. Microsoft identifies that page as the place to check enrollment status. If the status is not shown, first finish any pending restart or update, then reopen Windows Update.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Also verify that you are signed in with the Microsoft account used for enrollment. The license follows that account, so changing to a different account can make the enrollment look missing even when the PC was previously enrolled.

If the enrollment link is absent

  • Confirm the version is Windows 10 22H2 and the edition is Home, Professional, Pro Education, or Workstations.
  • Install all available Windows updates and verify that KB5126256 is installed.
  • Check whether the PC is a kiosk, domain-joined, Microsoft Entra-joined, or MDM-enrolled device. Any of those states excludes it from the consumer offer.
  • Make sure the computer does not already have an ESU license.
  • Use an administrator Microsoft account that is not a child account.
  • Allow for regional differences in enrollment timing and payment options.
  • Distinguish Microsoft Entra registration from Microsoft Entra joining: Microsoft says Entra-registered devices remain eligible for consumer ESU, while Entra-joined devices do not.

If the PC is managed by an employer, school, or another organization, stop troubleshooting the consumer link and contact the organization’s administrator. The commercial process requires different updates, licensing, and activation.

Compare the consumer choices before you enroll

The three consumer methods provide the same type of ESU protection; the practical differences are how you qualify and what you give up. Settings backup avoids a listed payment, but it requires accepting the backup option associated with enrollment. Rewards redemption is useful only if the Microsoft account already has at least 1,000 points and the offer is available in that region. The purchase option is simplest when you want a direct transaction, but the $30 USD figure is converted locally and increased by applicable tax.

Do not assume that a method shown on another PC will appear on yours. Microsoft can vary the offer by location, account state, and enrollment timing. Read the choices displayed in the enrollment window and keep a record of which method was accepted. The Microsoft account used for that transaction remains the account associated with the ESU license.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Account and device details that commonly cause confusion

A Microsoft account is required even when Windows is normally used with a local account. You can begin from the local session, but the enrollment prompt asks you to sign in with an administrator Microsoft account. A child account cannot hold the consumer ESU license. If several family members use the PC, complete enrollment with the eligible administrator account rather than switching accounts halfway through.

Microsoft Entra status also matters. An Entra-registered personal device can remain eligible, while an Entra-joined device is treated as organization-managed and is excluded from consumer enrollment. Domain joining, MDM enrollment, and kiosk configuration likewise remove the consumer offer. These are device-state rules, not payment problems, so buying ESU cannot bypass them.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Commercial activation checklist

For an organization-owned computer, the administrator should first inventory the device state and Windows edition, then apply the commercial prerequisites. The supported sequence is Windows 10 version 22H2, KB5066791 or later, and the commercial ESU Licensing Preparation Package KB5072653. Administrator privileges are required on the device.

The organization purchases commercial ESU through volume licensing rather than through Windows Settings. An authorized account retrieves the Multiple Activation Key from the Microsoft 365 admin center; that account needs the Product Key Reader or VL Administrator role. The MAK is then installed and activated on each applicable device using Microsoft’s licensing instructions. Consumer Rewards points, settings backup, and the $30 checkout do not apply to this process.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Commercial Year One pricing is listed as $61 USD per device. Each following year doubles in price, and purchasing Year Two requires purchasing Year One as well. Licenses are bought by year, not by partial periods. Microsoft also lists no-additional-cost ESU for Windows 10 virtual machines in Windows 365, Azure Virtual Desktop, Azure virtual machines, and Azure Dedicated Host. Windows 10 LTSB and LTSC releases follow separate lifecycles.

What ESU does and does not cover

Included

  • Critical and important security updates delivered through Windows Update.
  • Coverage for the enrolled consumer device during the consumer program’s stated period, currently through October 12, 2027 on Microsoft’s dedicated ESU page.

Not included

  • New Windows features or product enhancements.
  • Nonsecurity bug fixes and other quality improvements outside the security updates supplied by ESU.
  • General Windows technical support.

ESU reduces security exposure while you plan a supported operating-system upgrade, but it is not equivalent to ordinary Windows 10 support. Continue evaluating Windows 11 eligibility and application compatibility rather than treating ESU as a permanent replacement for migration.

Plan what happens after enrollment

Record which Microsoft account enrolled each personal computer, especially when several devices share one license. Keep the account accessible so you can verify status or add another eligible device without accidentally using a different account.

Install ordinary Windows updates when offered even after ESU enrollment. ESU is delivered through Windows Update, and a device that is not kept current may not receive the available protection. Restart when Windows requires it and revisit the Windows Update page to resolve pending actions.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use the ESU period to plan a supported destination. Check whether the hardware qualifies for Windows 11, test essential applications, and back up important files before any upgrade. ESU itself does not prevent an eligible Windows 11 upgrade, so you can move when the computer and your software are ready.

Frequently Asked Questions

How do I know whether my personal PC is eligible for consumer ESU?

It must run Windows 10 version 22H2 in Home, Professional, Pro Education, or Workstations edition, have the latest Windows update and KB5126256 installed, and use an administrator Microsoft account that is not a child account. The device cannot be kiosk-configured, domain-joined, Microsoft Entra-joined, MDM-enrolled, or already covered by an ESU license.

Can I enroll if I normally use a local Windows account?

Yes, you can start from the local-account session, but the enrollment flow requires you to sign in with an administrator Microsoft account. That Microsoft account becomes associated with the ESU license.

Is the consumer $30 ESU charge recurring?

Microsoft describes it as a one-time purchase of $30 USD or the local-currency equivalent, plus applicable tax. The amount and available methods can vary by region, so rely on the offer displayed on your PC.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How many computers can use one consumer ESU license?

Microsoft says an existing consumer ESU license can be used on up to 10 devices. Every added device must separately satisfy the Windows version, edition, update, preparation-package, and account requirements.

Why is my enrollment link missing?

Check that Windows 10 is version 22H2, install all offered updates and KB5126256, and verify that the account is an eligible administrator account. Also check for kiosk, domain-joined, Entra-joined, or MDM-managed status, an existing ESU license, and regional offer differences. An Entra-registered personal device is distinct from an Entra-joined device and may remain eligible.

Does ESU include new Windows features or technical support?

No. ESU supplies critical and important security updates through Windows Update. It does not provide feature updates, product enhancements, nonsecurity fixes, or general Windows technical support.

How is ESU different for a company-owned PC?

Organization-managed devices use commercial ESU. The organization needs Windows 10 22H2, KB5066791 or later, KB5072653, administrator privileges, volume licensing, and a Multiple Activation Key retrieved from the Microsoft 365 admin center by an appropriately authorized account.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Can I upgrade to Windows 11 after enrolling?

Yes. Consumer ESU does not block a later Windows 11 upgrade. Check hardware eligibility and application compatibility, and back up important files before upgrading.

When does consumer ESU coverage end?

Microsoft’s dedicated consumer ESU page states coverage through October 12, 2027. An older end-of-support FAQ shows October 13, 2026, so use the dedicated ESU page and the date shown in your current enrollment offer.

The Bottom Line

For an eligible personal PC, update Windows 10 to 22H2, install KB5126256, and enroll from Settings > Update & Security > Windows Update with an administrator Microsoft account. Choose the settings-backup, 1,000 Rewards-point, or $30-plus-tax option shown for your region. Managed and organization-owned PCs must use Microsoft’s commercial ESU licensing and MAK activation process instead.

Quick Recap

Bestseller No. 1

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

ESUExtended Security UpdatesMicrosoft licensingWindows 10Windows Update

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.