Extended Security Updates (ESU) are a time-limited way to keep receiving security patches for certain Microsoft products after their regular support has ended. They are not a lifecycle extension, a feature channel or general technical support. Microsoft’s Product Lifecycle FAQ describes them as “not intended as a long-term solution, but rather as a temporary bridge to stay secure while one migrates to a newer, supported platform.”
The definition in plain terms
Microsoft calls ESU a last-resort, temporary option for customers who must keep running a legacy product after its End of Extended Support date. When Microsoft ships a qualifying security fix for that product, enrolled customers can receive it. Nothing else about the product’s support changes.
As an Amazon Associate I earn from qualifying purchases.
For some products, Microsoft’s lifecycle FAQ says Critical and/or Important security updates may be offered for up to three years after the End of Extended Support date. That is a ceiling for certain programs, not a rule for every product. Each ESU offering has its own terms.
Recommended Free Tools
What ESU includes and what it leaves out
Included
- Security updates that Microsoft makes available under that product’s ESU terms.
Not included
- New features.
- Customer-requested non-security updates.
- Design change requests.
- An extension of the product lifecycle.
- Standard troubleshooting and technical guidance beyond the original support timeline.
Which severity levels count as “security updates” depends on the product. Microsoft’s Windows 10 ESU documentation says that program covers Critical and Important updates, using Microsoft Security Response Center (MSRC) severity ratings. Microsoft’s SQL Server ESU FAQ says SQL Server ESU includes Critical security updates. Never assume one program’s coverage matches another’s.
#1 Best Overall
How ESU differs by product
These dates come from Microsoft’s published ESU documentation and show how much the details vary.
| Product | ESU end date or range | Source |
|---|---|---|
| Windows 10 (consumer, version 22H2) | Enrollment open until October 12, 2027; enrolled coverage stated to continue through that date | Microsoft Windows 10 consumer ESU page |
| Windows 10 (commercial and education) | Up to three years after the October 14, 2025 end of support; licensing terms and pricing can change | Microsoft Windows 10 ESU documentation |
| Windows Server 2012 / 2012 R2 | October 13, 2026 | Microsoft Product Lifecycle FAQ |
| SQL Server 2014 | July 14, 2026 (already passed) | Microsoft SQL Server ESU FAQ |
| SQL Server 2016 | Can run to July 17, 2029 | Microsoft SQL Server ESU FAQ |
Windows 10 as a worked example
Windows 10 reached end of support on October 14, 2025. Microsoft runs two separate tracks.
Consumer ESU
The consumer program applies to eligible Windows 10 version 22H2 devices. Requirements include a supported edition, the latest Windows update installed and an administrator Microsoft account. Microsoft says consumer ESU cannot be used in commercial scenarios and excludes certain managed or domain-joined devices.
Commercial and education ESU
Qualifying enrolled organizational PCs can receive updates for a maximum of three years after end of support. This track is governed by commercial licensing, and pricing can change. Consumer enrollment steps and dates do not apply to managed fleets.
Rank #3
Enrolling does not lock a PC into Windows 10. A device in ESU can still upgrade to Windows 11 if it meets the hardware requirements.
Where a server is hosted can change the route
Microsoft says eligible Windows Server ESUs are free for Azure virtual machines. On-premises and hybrid servers instead use the specified licensing or Azure Arc routes. The same operating system can therefore carry different costs and enrollment steps depending on where it runs.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to evaluate an ESU option
Name the exact product, version and environment first. Then check five things:
- Which severity levels are covered (Critical only, or Critical and Important).
- Which versions and editions are eligible.
- When coverage ends, and whether enrolling late requires paying for earlier years.
- What it costs and how it is purchased or hosted.
- What support is excluded, such as troubleshooting for unrelated issues.
ESU is a bridge, so pair it with a dated migration plan. Microsoft publishes no figures quantifying how much risk ESU removes, and this article makes no such claim.
Best Value
ESU is specific to Microsoft products. Other vendors’ extended-support offerings have their own terms. Consumer deadlines and commercial pricing are the details most likely to change, so confirm them on Microsoft’s current ESU pages before enrolling.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
