On October 14, 2025, Microsoft will pull the plug on free security updates for Windows 10, leaving an estimated 240 million PCs—many still perfectly functional—without a safety net unless their owners pay up or pivot to a new strategy. The move, long telegraphed but now imminent, has crystallized into a messy three-way fork: subscribe to the Extended Security Updates (ESU) program, migrate to Windows 11, or risk running an unsupported operating system. And the numbers are staggering: by one projection, enterprise payments alone could net Microsoft up to $7.3 billion.
Microsoft set the end-of-support date for Windows 10 Home and Pro in stone years ago, but the hardware gate for Windows 11—TPM 2.0, Secure Boot, and specific CPUs—locked out millions of devices. In response, the company expanded ESU beyond its traditional enterprise boundaries. Now consumers can buy one extra year of critical security patches for $30, or get it free by syncing settings to a Microsoft account or redeeming 1,000 Microsoft Rewards points. Enterprises, meanwhile, face a per-device bill that starts at $61 and doubles each year for up to three years.
This article unpacks exactly what Microsoft is offering, why so many users are angry, and how IT leaders should calculate the real cost of clinging to Windows 10.
The consumer safety net: $30, free options, and strings attached
The consumer ESU program covers security updates only—no feature improvements, no driver updates, no technical support. Enrollment is rolling out in waves through a wizard in Windows Update, and devices must be on Windows 10 version 22H2 with the latest patches. The key details:
- Cost: A one-time $30 payment (local currency; taxes may apply) extends support for one year, until October 13, 2026.
- Free paths: Link Windows Backup settings to a Microsoft account, or spend 1,000 Microsoft Rewards points. Both require a Microsoft account sign-in.
- Multi-device: A single $30 license covers up to 10 devices tied to the same Microsoft account.
- Enrollment window: The option will appear gradually for eligible PCs via Windows Update. Microsoft says everyone should have access before the deadline.
Early feedback has been mixed. Some users report not seeing the enrollment link, which Microsoft attributes to the phased rollout. Others balk at the Microsoft account requirement—a dealbreaker for privacy-conscious households that run local accounts. “It feels like they’re holding security hostage to get my data,” one user posted on social media. The backlash has drawn attention from advocacy groups, with the Public Interest Research Group (PIRG) filing a petition demanding free extended support for all.
Enterprise ESU: doubling fees and cloud carve-outs
For businesses and organizations, ESU is a volume-licensing product sold per device. The pricing mirrors the model Microsoft used for Windows 7 ESU:
| Year | Cost per device |
|---|---|
| 1 | $61 |
| 2 | $122 |
| 3 | $244 |
Discounts apply for devices managed via Microsoft Intune or Windows Autopatch, and for Windows 10 virtual machines running in Windows 365, Windows 11 Cloud PCs, or Azure Virtual Desktop. In many cloud-hosted scenarios, ESU coverage comes at no additional charge—a deliberate nudge toward Microsoft’s cloud desktop offerings.
The math gets daunting quickly. An enterprise with 1,000 stubborn Windows 10 machines would pay $61,000 in year one, $122,000 in year two, and $244,000 in year three—a total of $427,000 over three years. That sum often rivals the cost of a hardware refresh or migration project, especially when factoring in the productivity drag of an aging OS.
The $7.3 billion question
A widely circulated projection from digital employee experience firm Nexthink put a massive number on the table. Based on an assumption that Windows 10 customer endpoints would drop by 33% by the cutoff date—mirroring a previous decline rate—and that 30% of the global Windows install base of 1.4 billion PCs belongs to enterprises or public entities, the analysis estimated 121 million Windows 10 PCs would remain in business environments. Multiply by $61 for year-one ESU fees, and you get $7.3 billion.
That figure is a scenario-driven estimate, not a Microsoft revenue disclosure. It depends heavily on how many organizations actually choose to pay, the mix of first-year versus multi-year commitments, and the discounting from cloud pathways. Still, it illustrates the financial lever Microsoft is pulling: even a modest adoption rate translates into billions.
Tim Flower, a strategist at Nexthink, framed ESU not as a threat but as a planning opportunity. “Upgrading shouldn’t feel like a disruption,” he said. “It should be an opportunity to improve how employees work every day.”
Why users are pushing back
The technical merits of Windows 11 aside, several forces are fueling the resistance:
- Hardware restrictions: TPM 2.0 and CPU requirements leave perfectly capable PCs stranded. Organizations with custom or legacy peripherals face additional validation hurdles.
- Privacy and account lock-in: The consumer free ESU requires a Microsoft account, alienating those who value local accounts and minimal cloud ties.
- Perceived obsolescence: Critics, including The Restart Project, which co-developed the “End of 10 Toolkit,” call ESU a “last-minute snooze button” that benefits Microsoft more than users. They argue it does nothing to address the up to 400 million PCs that can’t upgrade.
- Enrollment friction: The wave-based rollout and occasional bugs have left some users unable to enroll, stoking frustration when the clock is ticking.
- E-waste and equity: Upgrading millions of functional PCs creates environmental waste and disproportionately affects lower-income users. While ESU buys time, it doesn’t resolve the underlying hardware cliff.
Practical alternatives to ESU
Before writing a check, users and IT leaders should weigh other paths:
- Upgrade to Windows 11: If hardware meets requirements, this is the simplest long-term fix. Pilot it first, validate line-of-business apps, and check driver compatibility.
- Switch to Linux: Lightweight distros can extend hardware life and avoid Microsoft’s lifecycle altogether. This works for users who don’t rely on Windows-only software.
- Third-party micropatching: Services like 0patch offer critical vulnerability fixes for EOL systems, but they aren’t a full substitute for official updates and introduce vendor dependency.
- Manual patching via Microsoft Update Catalog: Free but labor-intensive and unsuitable for fleets.
- Cloud-hosted Windows desktops: Windows 365 and Azure Virtual Desktop move the OS to the cloud, often including ESU at no extra cost, but they introduce ongoing subscription fees and network dependencies.
For enterprises, the most rational approach combines a migration roadmap with targeted ESU coverage: apply ESU only to legacy systems that can’t move yet, while accelerating the rest of the fleet to Windows 11 or cloud desktops.
What to do now: a decision framework
The right move depends on scale, risk appetite, and budget. Here’s a quick triage:
Consumers:
- If your PC supports Windows 11, upgrade now.
- If not, and you’re comfortable with a Microsoft account, the free ESU via settings sync is a no-cost stopgap.
- If privacy is paramount, the $30 one-time fee might be worth a year of breathing room while you plan a hardware refresh or OS switch.
Small businesses:
- Audit all Windows 10 devices. Identify which can upgrade and which cannot.
- Pilot Windows 11 with a handful of users; iron out app compatibility before wide deployment.
- Buy ESU only for mission-critical machines that need more time, and budget for replacement within 12 months.
Enterprises:
- Run a cost-benefit analysis: compare escalating ESU fees against migration expenses (new hardware, deployment tools, user training).
- Prioritize legacy application modernization or containerization to break the dependency on old OS builds.
- Leverage cloud pathways (Windows 365, Azure Virtual Desktop) for workloads that can shift, often saving on upfront hardware costs.
The bridge that won’t hold forever
Microsoft’s ESU program is a pragmatic pressure-release valve—not a generous extension. It gives organizations and individuals a finite window to adapt, but the economics are designed to nudge everyone toward Windows 11 or the cloud. The $30 consumer option feels affordable, but it covers only one year; after that, the cliff returns. For enterprises, the doubling pricing makes a fourth year of Windows 10 support nonexistent by design.
Public trust, however, is leaking. The combination of hardware mandates, paid security patches, and account-tied enrollment has fueled accusations of programmed obsolescence. Whether those claims are fair or not, they reflect a genuine erosion of goodwill that Microsoft must weigh against short-term ESU revenue. The real test will come in 2026, when the consumer ESU expires and millions of households once again face a choice: finally move on, or hold out and hope for another reprieve.
In the end, ESU is not a third way but a timed detour. Use it if you must, but start the clock on your migration plans today. The bill only grows larger the longer you wait.