If you continue to use Windows 10 and you are worried about what will happen after the end of support date, the Extended Security Updates (ESU) Program It can be your temporary lifeline. This Microsoft service allows you to continue receiving security patches on computers that, for whatever reason, aren't going to immediately upgrade to Windows 11.
In the following lines we tell you, in great detail, What does ESU include, who can sign up, how much does it cost, how is it enabled? for both individuals and organizations, and what particularities exist in cloud and virtualization environments. In addition, we review the state of the consumer deployment (that “Sign Up” button in Windows Update that not everyone sees yet) and we resolve frequently asked questions.
What is the Windows 10 ESU Program and what exactly does it cover?
The Windows 10 ESU Program provides the option to continue receiving critical and important security updates in registered teams, once the product reaches its end of support (EOL). This is a paid subscription that allows you to extend your use of Windows 10 more securely beyond the October 14, 2025, deadline.
It should be noted that ESU is not general support: does not add new features, does not deliver design improvements or fix non-security issues. Microsoft, through its Security Response Center, classify the severity of patches, and ESU focuses on those that mitigate vulnerabilities that could be exploited.
Windows 10 will continue to work even if you don't opt in, but starting at EOL you will not receive security updates And there won't be any feature updates, quality updates, or free technical support. Therefore, ESU acts as a temporary safety net while you consider alternatives such as upgrading to Windows 11 or migrating to the cloud with Windows 365.
Device and connectivity prerequisites
In order to install patches via ESU, computers must be running Windows 10, version 22H2. In commercial environments, it is also specified that the system has installed KB5046613 or a later update, and that the account used has administrator privileges.
If you manage activations in a corporate environment, devices need Internet access and Microsoft activation servers. For client connectivity, be sure to allow the following activation and validation endpoints:
https://go.microsoft.com/https://login.live.comhttps://activation.sls.microsoft.com/http://crl.microsoft.com/https://validation.sls.microsoft.com/https://activation-v2.sls.microsoft.com/https://validation-v2.sls.microsoft.com/https://displaycatalog.mp.microsoft.com/https://licensing.mp.microsoft.com/https://purchase.mp.microsoft.com/https://displaycatalog.md.mp.microsoft.com/https://licensing.md.mp.microsoft.com/https://purchase.md.mp.microsoft.com/
In organizations, management of MAK keys and licenses is done from the Microsoft 365 admin center, which centralizes contracts, products, and activation keys needed to register devices in ESU.
June 23, 06 Windows 2021 Desktop
POLICY
MICROSOFT
What is not included in ESU: limitations to keep in mind
ESU does not cover new features, nor requested non-security enhancements, nor system design changes. It also does not provide general technical support for versions of Windows that have reached EOL.
In terms of support, the coverage that ESU does contemplate is limited to that related to the license activation, installation of the program itself and possible regressions attributable to the ESU package. To obtain help in these areas, organizations need a active support plan with Microsoft.
Dates, duration and availability
Starting October 14, 2025, affected editions of Windows 10 will no longer receive updates. any quality update (including security patches). If you enroll in ESU, business or educational computers can receive updates up to a maximum of three years after the end of support.
For volume licensing, ESU keys appear in the Microsoft 365 admin center, but cannot be used until the official end of support date arrives, at which point the coverage period defined by ESU begins.
In addition, it is noted that the first year of the business program begins in November 2025, and that the purchase period must be a full year. If you enter the second year, you must also pay for the first year because the ESU are cumulative.
Prices and modalities: companies and consumers
For organizations, ESU pricing on Windows 10 is purchased via Volume Licensing and starts in $61 per device for the first yearThe cost is doubles every consecutive year (up to a maximum of three years), a structure designed to encourage migration to supported versions.
For individual users (Home/Pro), Microsoft offers a subscription of one yearThe indicative price is $30 and registration must be made before the deadline of October 13, 2026. There is also the possibility of pay with 1.000 Microsoft Rewards points or opt for the free option if certain synchronization conditions with Windows Backup (OneDrive) are met.
There are scenarios with the right to ESU Without aditional costs: Windows 10 virtual machines in environments hosted by Microsoft or integrated with Azure (e.g., Windows 365, Azure Virtual Desktop, and the like). Additionally, Windows 10 devices accessing a Windows 365 Cloud PC are automatically covered for the duration of the offer if the user has a active license and identity and use requirements are met.
Consumer Sign-Up: Windows Update, Microsoft Account, and OneDrive
For individuals, Microsoft is enabling a sign-up wizard directly from Settings > Update & Security > Windows UpdateOn eligible Windows 10 22H2 computers, you'll see an end-of-support notice and a link to "Sign Up" or "Enroll Now."
The deployment is progressive and Microsoft acknowledged that some users experienced an initial crash (the wizard window would close automatically). That issue has since been fixed, although the company says the deployment is progressing very slowly, so it may take a while to appear on all computers.
Consumer registration requires login with a microsoft account. Local accounts are not allowed in this mode, not even if you choose to pay. In the case of the free option, you are asked to have your settings synchronized using the Windows backup application (OneDrive), and an additional login may be required during the process.
The modes available in the wizard include single payment, exchange of points Microsoft Rewards and the backup-based synchronization option. If you choose the latter, the system will guide you through enabling OneDrive backup from the "Windows Backup" tool.
From a practical point of view, this extension allows users to keep their computer protected. until October of 2026, buying time to evaluate a hardware change or a full migration to Windows 11 when feasible.
Virtualization and Cloud Scenarios: Rights and Requirements
In environments hosted by Microsoft or integrated with Azure, such as Windows 365 or Azure Virtual Desktop, Windows 10 virtual machines are covers at no additional cost and do not require additional keys or extra configuration for ESU.
For Windows 10 devices accessing a Windows 365 Cloud PC, there is automatic entitlement to ESU for up to three years if the user has a active Windows 365 license and these requirements are met:
- The Windows 10 computer must be joined to Microsoft Enter (Azure AD) or Hybrid Entra. Devices registered only in Entra, without corporate management, are not suitable for commercial law.
- The user must log in with his/her Microsoft Access ID At least once every 22 days to maintain the validity of the license. The license is issued for 30 days, and the system attempts to renew it starting on the 22nd day.
On other virtualization platforms (Nutanix, Citrix, Omnissa Horizon on Azure VMware Solution, etc.), the manual activation of the ESU key. Your Microsoft account team can provide a 5x5 key; activation is managed with the Volume Activation Management Tool (VAMT) or by script.
Businesses: Obtaining MAK keys and activating with slmgr
If you have purchased ESU volume licenses, MAK keys are obtained from the Microsoft 365 admin centerTo locate them: Billing > Your Products > Volume Licensing tab > View Contracts > choose the contract and click on View product keys.
With the MAK in hand, installation and activation on each computer can be done with slmgr.vbs from an elevated console. The device must have connectivity to the activation servers (if not, use the phone method):
- Install the ESU key:
slmgr.vbs /ipk <ESU MAK>(you should see a confirmation box that the key was installed successfully). - Identify the Activation ID of the corresponding program (Year 1/2/3) and active:
slmgr.vbs /ato <Activation ID> - Check the status with
slmgr.vbs /dlvand check that the ESU program name appears as Licensed.
| ESU Program | Activation ID |
|---|---|
| Win10 ESU Year 1 | f520e45e-7413-4a34-a497-d2765967d094 |
| Win10 ESU Year 2 | 1043add5-23b1-4afb-9a0f-64343c8f3f8d |
| Win10 ESU Year 3 | 83d49986-add3-41d7-ba33-87c7bfb5c0fb |
If your computer cannot access the Internet or Microsoft servers, activation can be performed by phone with slmgr:
- Install the MAK:
slmgr.vbs /ipk <ESU MAK>and confirms that it was added correctly. - Get the Installation ID (IID) for the corresponding Activation ID:
slmgr.vbs /dti <Activation ID>. - Call the Microsoft Licensing Activation Center for your region, provide the IID and obtain the Confirmation ID (You can receive a link via SMS to enter the IID and retrieve the CID; the link supports up to two devices at a time.)
- Complete activation:
slmgr.vbs /atp <Confirmation ID> <Activation ID>. - Check the status with
slmgr.vbs /dlvand check that it appears as Licensed.
Large-Scale Offline Activation: VAMT and ADK
For fleets without internet access, use the proxy activation scenario with the Volume Activation Management Tool (VAMT). Install the latest version of the Windows ADK to ensure compatibility and apply the update available at https://www.microsoft.com/download/details.aspx?id=106364, which incorporates updated PkeyConfig files for Windows 10 ESU MAKs.
If you need more activations than allowed by your MAK, request a Microsoft increase in limits MAK activation to cover your equipment fleet.
Key FAQs and Recommendations
Is there a minimum purchase requirement for ESU in companies? The minimum requirement is a license. Can it be purchased for partial periods? No, ESU is purchased for Whole year, and if you enter the second, you must also pay the first.
Is support included? No. The program does not include general technical supportMicrosoft only addresses issues related to activation, installation, and regressions arising from the ESU itself.
What happens if I don't sign up for ESU? Your Windows 10 PC will still be running. functioning normally, but without security patches or quality updates, which increases the risk of future threats and vulnerabilities.
Alternatives? If your hardware isn't compatible with Windows 11, you might consider Windows 365 (Cloud PC) or evaluate systems such as Linux or ChromeOS Flex, which fit well on older equipment. In corporate environments, Long Term Servicing Channel (LTSC) editions are also considered under specific licensing conditions.
Practical Tips for Consumers: Deployment Status and Eligibility
If you don't see the Windows Update sign-up button yet, that's normal: Microsoft confirmed a slow deployment and initial problems already solved. The important thing is to meet the requirements: to have Windows 10 22H2, sign in with your Microsoft account and, if you choose the free option, activate the backup with OneDrive from the “Windows Backup” application.
In the wizard, you can choose between the three modalities (Paid, Rewards, or Sync). The backup option enrolls you at no cost, as long as you complete the sync flow and your device is eligible.
Protect your data: recovery from unforeseen events
Whatever your path (ESU, migration, or cloud), have a plan in place to avoid data loss. In the event of version upgrades, reinstallations, or system errors, it can be helpful to have specialized recovery software.
Solutions like Wondershare Recovery They are designed to restore files after accidental deletion, formatting, OS failures, or infections. They are compatible with a wide variety of devices (HDD/SSD, USB, SD cards, and cameras), and allow preview what is recoverable and, although no one can guarantee 100% success, they boast of very high rates (for example, up to 99,5% depending on the provider).
The typical process is simple: you select the location to analyze (disk, folder or drive), start the Scan And finally, you review the results to recover the desired files. Avoid saving recovered files to the same affected location to avoid overwriting data.
ESU is a temporary patch to buy time: Keeps critical threats at bay while you plan your upgrade. Knowing pricing, requirements, limits, and activation options—including consumer enrollment through Windows Update—will help you make informed decisions about how to extend the life of your PC while keeping security in mind.