Microsoft's one-year security lifeline for Windows 10 households has lurched into a chaotic rollout, with enrollment bugs, a staggered appearance of the critical 'Enroll now' button, and a mandatory Microsoft Account requirement stoking frustration just weeks before the operating system's October 14, 2025 end-of-support date.
The Extended Security Updates (ESU) program for consumers is now shipping through Windows Update as a phased "Enroll now" experience. It promises security-only patches from October 15, 2025 through October 13, 2026, but the path to enrollment has been anything but smooth. Microsoft says the toggle will reach all eligible devices before the cutoff, yet many users still see no button, and the company's fix for early crashes—shipped in the August 2025 cumulative update KB5063709—has only partially restored confidence.
What the ESU program actually offers
For households and small businesses that cannot upgrade to Windows 11 before support ends, ESU is a targeted stopgap. It delivers only Critical and Important security updates as defined by the Microsoft Security Response Center. There are no feature enhancements, no driver updates, and no general technical support. The consumer plan covers Windows 10 version 22H2 (Home, Pro, Pro Education, and Workstation) and requires that devices be fully updated with the latest cumulative patches before enrollment.
Key enrollment paths all demand a Microsoft Account:
- Free via OneDrive sync: Enable Windows Backup to sync PC settings to the cloud.
- Free via Rewards: Redeem 1,000 Microsoft Rewards points.
- Paid one-time purchase: $30 (local taxes may apply).
One paid license can cover up to 10 devices tied to the same Microsoft account, a welcome concession for multi-PC families.
How the enrollment wizard works—and why it’s missing for many
The enrollment wizard lives directly in Windows Update. When a device receives the phased rollout, users see an "Enroll now" link beneath the familiar "Check for updates" button in Settings > Update & Security. Clicking it launches a prerequisite check, demands a Microsoft Account sign-in, and then offers the three enrollment options.
But the staged deployment has meant that millions of eligible PCs still show no toggle at all. Microsoft began the rollout through the Windows Insider channel and extended it to general consumers starting in July and August 2025, yet the pace has been glacial. Early adopters reported the wizard crashing immediately after launch. KB5063709, the August 2025 Patch Tuesday update, specifically addressed enrollment instability, but the visibility of the button remains tethered to Microsoft’s wave-based delivery. There is no manual override to force its appearance.
"With a little over a month until Microsoft cuts support for Windows 10, there seems to be plenty of users who have yet to gain access to the ESU program," Windows Central noted, citing Microsoft’s confirmation that the toggle will appear for everyone before the deadline. Some outlets have speculated that a broader rollout may coincide with the September 9, 2025 cumulative update, but that remains unconfirmed.
Advocacy backlash and environmental pressure
The ESU program quieted some immediate political noise, but advocacy groups continue to hammer Microsoft on sustainability and consumer rights. The Public Interest Research Group (PIRG) has gathered thousands of petition signatures warning that ending free support for Windows 10 could trigger "the single biggest jump in junked computers" ever. They argue that forcing hardware upgrades—especially when many perfectly functional PCs fail Windows 11’s TPM 2.0 and Secure Boot requirements—will accelerate e-waste.
The Restart Project and the “End of 10” campaign have turned their efforts toward Linux migration. Both groups offer toolkits and community workshops to help users install lightweight Linux distributions on older hardware, pitching privacy, reduced telemetry, and extended device lifespans as benefits over Microsoft’s ESU route. Their campaigns frame ESU as a “last-minute snooze button” that buys time but doesn’t address the obsolescence problem.
Privacy and account lock-in: a forced trade-off
Perhaps the most contentious element of the consumer ESU is the blanket requirement for a Microsoft Account—even when paying the $30 fee. Privacy-minded users who have long avoided online accounts on Windows now face a bitter choice: stay secure by surrendering local-only control, or remain unsupported.
Microsoft justifies the requirement as necessary for license management and cross-device reuse. But critics see an opportunistic nudge toward cloud services, particularly with the free enrollment path that activates Windows Backup to OneDrive. For households that value local autonomy, the trade-off is real and jarring.
Practical recommendations for Windows 10 users
If you’re still on Windows 10, act now:
- Confirm eligibility: Ensure your device runs Windows 10 22H2 and install all pending updates—especially KB5063709, which fixes enrollment bugs.
- Watch for the button: Open Windows Update frequently. If the "Enroll now" link appears, decide which enrollment route you will take before clicking through.
- Back up everything: ESU patches only security flaws. Keep an offline system image and file backups independent of OneDrive.
- Decide on account strategy: If you avoid Microsoft accounts, weigh whether to create one solely for ESU, and whether to use the Rewards or paid path to avoid sync.
- Explore alternatives: If you cannot upgrade to Windows 11, test Linux distributions on non-critical hardware or investigate cloud PC options. Campaigns like End of 10 provide guides.
Strengths, weaknesses, and the bigger picture
The consumer ESU is a pragmatic safety valve. It costs little or nothing, covers multiple devices, and prevents a hard security cliff for millions of machines that cannot move to Windows 11. For families, the $30-for-10-devices model is generous compared to the enterprise ESU pricing.
Yet the program is riddled with friction points. The phased rollout and initial bugs created unnecessary anxiety; the mandatory Microsoft Account alienates privacy advocates; and the security-only scope leaves older PCs vulnerable to non-security issues that can still break workflows. Moreover, the one-year limit means ESU is not a destination—it’s a countdown timer. Environmental critics are correct that it amounts to a stay of execution for hardware that could otherwise run for years with community-supported Linux.
Microsoft’s recent use of full-screen upgrade banners after installing the August 2025 update underscores the company’s real priority: moving users to Windows 11. ESU exists to ease the transition, not to enable indefinite Windows 10 use.
What comes next
For Windows 10 holdouts, the clock is ticking. ESU enrollment will unlock a year of security breathing room, but only if the toggle appears and the account hurdles are navigated. Users should enroll as soon as possible, plan their migration strategy now, and maintain robust local backups. The one-year bridge is a rare concession from Microsoft, but it’s a temporary fix—not a long-term answer—for the 400 million PCs estimated to be left behind when the October deadline hits.