Outcome: Confirm whether your Windows 10 PC is enrolled in Microsoft’s consumer Extended Security Updates (ESU) program, enroll for free (or paid) if needed, and know what happens next through October 12, 2027.

Who this is for: Home users still on Windows 10 who want critical and important security updates after mainstream support ended on October 14, 2025.

Time required: About 5–15 minutes (plus download time if Windows Update still has pending patches).

Last verified: October 2026. Steps and dates below follow Microsoft’s official consumer ESU documentation. Regional options (for example in the EEA) can differ—always check the Microsoft page for your locale if something looks different.

Quick Answer

Open Settings → Update & Security → Windows Update. If you see a message that your PC is enrolled in Extended Security Updates, you’re covered through October 12, 2027—no further action needed for coverage. If you see an Enroll now link, enroll with a Microsoft administrator account using one of three paths: sync PC settings (no extra cost), redeem 1,000 Microsoft Rewards points, or a one-time purchase (about $30 USD or local equivalent plus tax). One ESU license can cover up to 10 devices on the same Microsoft account.

Official overview: Windows 10 Extended Security Updates (Microsoft).

What ESU Is (and Isn’t)

Windows 10 mainstream support ended on October 14, 2025. Consumer ESU is Microsoft’s bridge so eligible PCs can keep getting critical and important security updates (as defined by the Microsoft Security Response Center) while you plan a move to Windows 11 or a new PC.

ESU does not include:

  • New features or non-security quality improvements
  • Design changes or product enhancements
  • Technical support from Microsoft for everyday help questions

You can enroll any time until the consumer program ends on October 12, 2027. Devices not enrolled stay more exposed to malware and other threats. After you enroll, Windows Update delivers eligible security updates as Microsoft releases them. Sources: Microsoft ESU page and Windows 10 support has ended.

Who Is Eligible

Per Microsoft, consumer ESU enrollment typically requires all of the following:

  • Windows 10 version 22H2 on Home, Professional, Pro Education, or Workstations
  • The latest Windows updates installed
  • The Windows 10 ESU Licensing Preparation Package (KB5126256) installed (prepares licensing/enrollment; it does not enroll you by itself)
  • A Microsoft account that is an administrator on the PC (not a child account)

Consumer ESU is not offered for commercial-style setups such as:

  • Kiosk mode
  • Active Directory domain–joined or Microsoft Entra–joined devices, and/or devices enrolled in MDM
  • Devices that already have an ESU license

Note: Microsoft states that Microsoft Entra registered devices can still use consumer ESU. Work/school PCs often need the separate commercial ESU path—see Microsoft’s IT guidance if that applies to you.

Licensing prep package details: KB5126256 – ESU Licensing Preparation Package.

Cost: Free vs Paid

Microsoft lists three consumer enrollment options. All of them provide coverage through October 12, 2027:

  1. No additional cost if you are syncing your PC settings (Windows Backup / settings backup to your Microsoft account).
  2. Redeem 1,000 Microsoft Rewards points.
  3. One-time purchase of about $30 USD (or local currency equivalent) plus applicable tax.

Sign in with a Microsoft account during enrollment. The license ties to that account for up to 10 devices. Prices and free-path rules can vary by region (including the EEA)—use Microsoft’s page for your country if the wizard differs.

How to Check If You’re Already Enrolled

  1. Open Settings.
  2. Go to Update & Security → Windows Update.
  3. Look for an enrollment status message. Microsoft says enrolled devices show that the PC is enrolled to receive Extended Security Updates. If you paid, you can also review the order in your Microsoft account Order History.

Expected result: A clear enrolled status, or an Enroll now / add-device prompt if you’re not covered yet.

If you’re already enrolled, Microsoft says coverage continues through October 12, 2027 with no extra enrollment step for that same coverage period.

How to Enroll (Verified Steps)

These steps match Microsoft’s consumer “How to get Windows 10 ESU” instructions. Do not skip pending updates first—enrollment often appears only after prerequisites are met.

  1. Confirm you’re on 22H2.
    Settings → System → About (or search “About your PC”). Version should read 22H2. If you’re on an older Windows 10 feature update, install available feature/quality updates first, or follow Microsoft’s guidance to reach 22H2 before expecting ESU enrollment.
  2. Install all pending updates.
    Settings → Update & Security → Windows Update → Check for updates. Install everything offered, including the ESU Licensing Preparation Package (KB5126256) if listed. Restart when asked.
    Expected result: Windows Update reports you’re up to date, and KB5126256 appears under Update history / installed updates if it was needed.
  3. Open the enrollment link.
    Still on Windows Update, look for the ESU notice and select Enroll now. If you use a local account, Windows will prompt you to sign in with a Microsoft account.
  4. Choose how to enroll.
    If settings backup/sync is already on, you may get a direct enroll prompt. Otherwise choose one of: start backing up / syncing PC settings (no extra cost path), redeem Rewards points, or complete the one-time purchase.
    Expected result: The wizard finishes without an eligibility error.
  5. Confirm enrollment.
    Return to Windows Update and verify the enrolled status message. Later, after Patch Tuesday, you should see security updates continue to install on that PC.

Official enrollment steps: microsoft.com/windows/extended-security-updates.

Enrolling Additional PCs (Same Account)

After the first device is enrolled, you can apply the same ESU license to more eligible Windows 10 PCs (up to 10 total) with that Microsoft account:

  1. On the next PC, open Settings → Update & Security → Windows Update.
  2. Select Enroll now.
  3. If you’re already signed in with the same Microsoft account, choose Add device when prompted. If not, sign in with the account used on the first PC.

Microsoft notes that once any user enrolls a PC, other accounts on that same PC are protected too. Separate PCs still need their own enrollment.

What to Do Next After You’re Enrolled

  • Keep checking Windows Update monthly. ESU only helps if updates actually install.
  • Plan your Windows 11 path. ESU enrollment does not block upgrading to Windows 11 if the hardware qualifies. Use Microsoft’s PC Health Check / upgrade guidance when you’re ready.
  • Treat ESU as temporary. Coverage ends October 12, 2027. After that, consumer ESU security updates stop—budget time for an upgrade or replacement PC before then.
  • Keep basic hygiene. Updates help; they don’t replace browser updates, phishing caution, and backups.

If This Fails (Troubleshooting)

No “Enroll now” link

  • Confirm edition and version (22H2 Home/Pro/Pro Education/Workstations).
  • Install all updates again, including KB5126256, then reboot and recheck Windows Update.
  • Sign in with an admin Microsoft account (not a child account).
  • If the PC is domain-joined, Entra-joined, MDM-managed, or in kiosk mode, consumer ESU may not be offered—ask IT or see Microsoft’s commercial ESU docs.

Enrollment says you can’t enroll / permissions error

  • Switch to (or create) an administrator Microsoft account on that PC, then retry. For a child’s PC, Microsoft’s FAQ says an adult admin account on that device must complete enrollment.

You already paid or redeemed, but another PC won’t add

  • Use the same Microsoft account, stay under the 10-device limit, and ensure the second PC meets the same prerequisites.

Updates still don’t appear after enrollment

  • Enrollment alone doesn’t invent updates on demand—wait for Microsoft’s release cycle, then Check for updates. If nothing installs for weeks, confirm enrolled status again and that you’re online via Windows Update (not a blocked corporate WSUS policy).

If anything conflicts with this article, trust Microsoft’s live pages. UI labels can change after cumulative updates.

Related Reads

Sources