Microsoft has thrown a lifeline to the tens of millions of PCs still running Windows 10: a one‑year extension of critical and important security patches, available for free or a modest fee. But the offer is strictly time‑boxed, requires advance enrollment, and comes with significant privacy and account trade‑offs. Any Windows 10 user who wants to keep their device protected after the platform’s official October 14, 2025 end‑of‑support date must act before that deadline—and meet a set of prerequisites that are easy to overlook.

The Windows 10 end‑of‑support crunch

On October 14, 2025, Microsoft stops shipping all standard updates to consumer editions of Windows 10, including Home, Pro, Pro Education, and Workstation. No new features, no quality‑of‑life fixes, and—crucially—no regular security patches. An unenrolled machine will still boot and run, but every month without security updates adds risk from newly discovered vulnerabilities. The company’s official advice is to upgrade eligible devices to Windows 11, yet strict hardware requirements—TPM 2.0, Secure Boot, and a short list of compatible CPUs—lock out a huge number of otherwise functional PCs.

To bridge this gap, Microsoft created a consumer Extended Security Updates (ESU) program. Originally announced as a paid‑only option, the company later added two free enrollment paths. The coverage window is fixed: enrolled devices receive Critical and Important security updates monthly from October 15, 2025 through October 13, 2026. After that, the spigot is turned off. ESU is explicitly a stopgap—a way to buy a year of breathing room, not a permanent maintenance model.

What the ESU program actually delivers

ESU is laser‑focused on security. It supplies monthly patches for vulnerabilities rated Critical or Important, delivered through Windows Update just like any other update. What it does not include is equally vital: no feature updates, no non‑security reliability fixes, no driver updates, no firmware patches, and only extremely limited technical support. If a driver conflict or a software incompatibility arises during the ESU year, you’ll have to solve it yourself. The program’s sole job is to keep your PC from becoming an easy target for attackers.

Enrollment is tied to a Microsoft Account—there is no way around this, even if you pay the fee. The license covers up to 10 devices associated with the same account, which makes it cost‑effective for families or small households with multiple aging machines. Both the original source (PCMag UK) and extensive community reports confirm these mechanics, and Microsoft has now opened the enrollment wizard to all users running Windows 10 version 22H2.

Three paths to enrollment: free and paid

Microsoft offers three distinct routes into the consumer ESU program. All require a Microsoft Account and a device that has been updated to version 22H2 with the latest cumulative patches.

1. Sync Windows Backup to OneDrive (free)

Enabling Windows Backup—which syncs your PC settings and certain files to Microsoft’s OneDrive cloud—is the quickest zero‑dollar option. The wizard will walk you through the setup, and once the backup is active, your machine is enrolled. The catch: Five gigabytes of free OneDrive storage may not be enough if you have a large user profile or lots of application data. You might need to purchase additional storage, turning a “free” entry into a recurring cost.

2. Redeem 1,000 Microsoft Rewards points (free)

If you regularly use Bing, Edge, or other Microsoft services, you may already have points banked in the Microsoft Rewards program. One thousand points covers ESU for a single device. Earning points takes time—downloading the Bing app alone nets 500 points—so this route requires some foresight if your balance is low. It’s a genuine free ride for those who have already been participating in the ecosystem.

3. One‑time $30 purchase (paid)

For users who want a straightforward transaction without strings, Microsoft still offers the $30 license. This one‑off fee (taxes may apply depending on region) protects up to 10 devices signed into the same Microsoft Account. It’s the simplest choice for people who prefer not to fiddle with backups or rewards points and is especially attractive for households running several Windows 10 PCs that can’t upgrade.

Prerequisites: what you must do now

Before you can even see the enrollment option, there’s a checklist:

  • Confirm you’re on Windows 10 22H2. The wizard is gated to this version; older builds won’t show the link. Run winver to verify.
  • Install all pending cumulative updates. Microsoft patched early enrollment bugs via KB5063709 and subsequent updates, so a fully up‑to‑date system is mandatory.
  • Create or sign in with a Microsoft Account. Local account holders will be prompted to switch or add an account during enrollment. There is no local‑only ESU path.
  • Back up your data. Whether you choose the OneDrive route or not, make an external, full‑system image backup before enrolling. Relying solely on cloud sync for critical data is risky.
  • Check OneDrive storage (if using the backup method). The free tier caps at 5GB; ensure you have enough room for what you intend to sync, or budget for a storage plan.
  • Accumulate Rewards points early (if using that method). Don’t wait until the last week—you might not hit 1,000 points in time.

Step‑by‑step enrollment

  1. Open Settings > Update & Security > Windows Update.
  2. Ensure your system is fully patched; if updates are pending, install them and restart.
  3. Look for the “Enroll now (ESU)” link under the Check for updates button. Microsoft rolled this out in stages, so if it’s missing, give it a few days, check for updates again, and reboot.
  4. Select Enroll now and follow the wizard. When prompted, choose one of the three methods: enable Windows Backup, redeem Rewards points, or pay $30.
  5. Complete the chosen path (backup sync, points redemption, or payment) and confirm the enrollment success.
  6. In the following months, verify that monthly security updates appear in your Update history—they will be labeled as ESU updates.

If the option never appears despite meeting every prerequisite, installing the latest cumulative updates (including KB5063709 where applicable) and rebooting usually clears the blockage. Some devices needed multiple days for the staged rollout to activate.

The cost equation: money, time, and points

The $30 paid route is remarkably affordable when split across up to 10 devices—$3 per PC, essentially. The OneDrive backup path is cash‑free but can sneak in storage subscriptions; a 100GB plan costs a few dollars per month. Rewards points require sustained engagement with Microsoft’s ecosystem, which may be a deal‑breaker for privacy‑conscious users. From a pure dollars‑and‑cents view, the paid option is the most predictable, but the free routes exist for those willing to invest time or accept cloud integration.

Privacy and control trade‑offs

Consumer ESU pushes users deeper into Microsoft’s account‑based ecosystem. Even if you pay the $30, you must link a Microsoft Account to the device and its ESU license. This eliminates the purely local‑account experience that many Windows 10 holdouts value. The OneDrive backup route further ties identity, settings, and potentially files to Microsoft’s servers, raising concerns about vendor lock‑in and data control. For some, the convenience and low cost outweigh these concerns; for others—especially those in regulated industries or who treasure offline autonomy—ESU may feel like an unacceptable compromise.

There is a longer‑term strategic angle as well. By designing the free route around OneDrive and Rewards, Microsoft creates an incentive structure that encourages users to remain within its cloud and services orbit after the ESU year ends, potentially smoothing the path toward a future Windows 11 or cloud‑PC migration.

Risks and limits you must accept

  • Security‑only scope: If a non‑security bug breaks your workflow, ESU won’t fix it. Driver and firmware issues remain unresolved unless the hardware vendor independently supplies a patch.
  • One‑year sunset: On October 14, 2026, coverage stops cold. There is no announced extension for consumers. Use the year to plan your next move.
  • Enrollment friction: The staged rollout and early bugs caused confusion. Build in time to troubleshoot.
  • Compliance exposure: Even small businesses handling sensitive data should treat ESU as a temporary bridge, not a compliance solution. Regulators may view an unsupported OS skeptically.
  • Policy volatility: Microsoft’s consumer ESU program is a response to a specific lifecycle event. While facts here reflect current guidance, the company could alter terms or availability; verify details at the time you enroll.

Why some users are sticking with Windows 10

Three main reasons drive the holdout:

  1. Hardware compatibility: Windows 11 demands TPM 2.0, UEFI Secure Boot, and specific CPU generations. Millions of perfectly capable computers fail these checks, and while workarounds exist, they aren’t officially supported.
  2. Application and driver stability: Long‑running workflows, legacy line‑of‑business apps, or specialized peripherals often work better under Windows 10. For users who prioritize uptime, “if it ain’t broke” is a powerful argument.
  3. Privacy and control preferences: Some users object to Windows 11’s deeper cloud integration, mandatory Microsoft Account features, and AI‑driven additions. Staying on 10, even with ESU, preserves a more traditional desktop environment.

These are legitimate motivations, but they don’t erase the security clock. ESU buys time; it doesn’t restore feature parity or guarantee indefinite maintenance.

Migration alternatives: use ESU as a bridge

ESU is most valuable as a carefully planned transition period. During the coverage year, consider these options:

  • Upgrade to Windows 11 (if eligible): Run the PC Health Check tool. If your hardware passes, the upgrade is free and provides long‑term support. Test critical apps on a pilot machine first.
  • Replace aging hardware: For PCs that can’t run Windows 11, a new device may be the most straightforward path. Trade‑in and recycling programs can offset costs and reduce e‑waste.
  • Switch to Linux: Lightweight distributions can revitalize older hardware with strong security updates and low resource demands. This requires application compatibility checks and some learning.
  • Cloud virtual desktops: Services like Windows 365 Cloud PC let you access a fully supported Windows environment from an old local machine. Subscription fees apply, but it’s an option for productivity‑focused users.
  • Windows 10 LTSC (specialized cases): Long‑Term Servicing Channel editions offer longer support but are aimed at specialized devices and require volume licensing—not practical for general consumers.

A practical timeline: what to do and when

  • Immediately: Verify you’re on 22H2, back up everything, and set up a Microsoft Account.
  • Within days: Install all pending updates, reboot, and check for the “Enroll now” link. If missing, stay patient and keep checking daily after applying patches.
  • Before October 14, 2025: Enroll every device you intend to keep protected. Complete the OneDrive sync (and address storage), accumulate Rewards points, or finalize the $30 purchase.
  • October 15, 2025 – October 13, 2026: Treat ESU as a migration window. Upgrade hardware, test Windows 11, evaluate Linux, or adopt a cloud PC. Do not assume a further extension beyond October 2026.

Final assessment

Microsoft’s consumer ESU program is a pragmatic, if imperfect, answer to a stubborn problem: too many serviceable PCs face a hard support drop. The enrollment options are flexible—free via OneDrive or Rewards, or $30 for a simple, multi‑device license. The $30 ticket covering up to 10 devices is particularly family‑friendly. Yet the program’s design requires a Microsoft Account for every enrollee, pushes cloud backup on the free tier, and delivers security patches only. It buys time, but it does not solve the underlying hardware or platform challenges.

If your Windows 10 machine handles sensitive data or critical tasks, do not gamble with the October 14 cutoff. Enroll in ESU or migrate immediately. Choose the enrollment path that fits your constraints: OneDrive backup for zero cash (watch storage limits), Rewards points if you already have them, or the $30 option for a quick, clean transaction. Then use the ESU year to execute a responsible migration plan. Microsoft’s offering is narrow but real: you can stay on Windows 10 beyond the deadline, but only if you understand the limits, accept the trade‑offs, and act before the enrollment window closes.