With a firm deadline of October 14, 2025 looming, Microsoft is presenting Windows 10 users with an ultimatum: enroll in the consumer Extended Security Updates (ESU) program before that date, or be left without any official security patches for the aging operating system. The move marks a stark departure from the company’s traditional long-term support rhythms, and it forces millions of households to make a time-sensitive, technically specific choice. For those still relying on Windows 10—whether due to hardware incompatibility, budget constraints, or simple preference—the path to another year of safety is narrow but navigable.
Once the sun sets on routine support, Windows 10 will no longer receive monthly quality updates, feature enhancements, or the standard stream of vulnerability fixes that have kept it a viable platform since 2015. The ESU program, however, does not rescue the entire experience. Instead, it delivers only security updates designated Critical or Important by Microsoft’s Security Response Center from October 15, 2025 through October 13, 2026. New features, non-security bug fixes, and general technical support are explicitly excluded. It’s a bridge, not a destination, and Microsoft has been clear about its temporary nature.
What the ESU Program Actually Covers—And What It Skips
The consumer ESU licensing is a stripped-down safety net. Devices that enroll will continue receiving monthly patches that close off dangerous zero-day exploits and known attack vectors, but nothing more. If a non-security bug crashes your printer driver or slows down Windows Explorer, don’t expect a fix. The program is laser-focused on shielding users from the most severe threats while they plan a permanent migration to Windows 11 or another supported environment.
Crucially, the license is tied to a Microsoft Account (MSA) and can be reused on up to 10 eligible devices. That makes it family-friendly from a cost perspective, but it also locks users into Microsoft’s authentication ecosystem. If you’ve been running a local account for privacy reasons, you’ll need to convert—there’s no way around it. The MSA must be an adult account, not a child’s, and it must hold administrator privileges on the machine.
The Device Eligibility Checklist: Not Every Windows 10 PC Qualifies
Only Windows 10 version 22H2 on Home, Pro, Pro Education, and Workstation editions can enroll. Enterprise, Education, and devices joined to Active Directory, Entra-joined (but not Entra-registered), kiosk-mode, or managed via enterprise MDM are excluded; those must use separate volume licensing channels. For consumers, the first mandatory step is confirming your build number by heading to Settings → System → About. If you’re not already on 22H2, you must upgrade before the enrollment option appears.
Microsoft published a critical cumulative update on August 12, 2025, tracked as KB5063709 (OS builds 19044.6216 and 19045.6216). This update does two things: it formally declares the end of support, and it fixes early crashes in the ESU enrollment wizard. Many users who tried to enroll during the initial staged rollout found the wizard would open and then vanish. Installing KB5063709 resolves that bug and improves the likelihood of seeing the “Enroll now” prompt. Without it, you might be locked out of the enrollment process even if your hardware is otherwise ready.
Step-by-Step: How to Enroll Before the Deadline
The enrollment window remains open until October 13, 2026, but practical access depends on completing the wizard before the October 14, 2025 cutoff to avoid a gap in protection. Here’s what you need to do right now:
- Confirm your version: Open Settings → System → About. Verify you’re on Windows 10 version 22H2.
- Install all pending updates: Go to Settings → Update & Security → Windows Update and check for updates. Ensure KB5063709 and any preceding patches are installed. Reboot when prompted.
- Sign in with a Microsoft Account: If you’re using a local account, navigate to Settings → Accounts → Your info and select “Sign in with a Microsoft account instead.” Follow the prompts to link an MSA.
- Open the enrollment wizard: After installing updates and signing in, return to Windows Update. Look for the “Enroll now” link. If it’s not visible, the rollout may not have reached your device yet, or you may need to restart again.
- Choose your enrollment option: The wizard presents three paths:
- Free via OneDrive: Enable Windows Backup (PC Settings sync) to OneDrive.
- Free via Microsoft Rewards: Redeem 1,000 Microsoft Rewards points.
- Paid: A one-time $30 USD fee (or local equivalent) covering up to 10 devices on the same MSA. - Complete the wizard: Follow the on-screen instructions. Once enrolled, you’ll continue to receive monthly security patches through Windows Update.
The Free Routes: What You Need to Know About OneDrive and Rewards
The OneDrive option requires turning on Windows Backup, which syncs your settings, app list, and some files to the cloud. Microsoft provides 5 GB of free OneDrive space—enough for many, but not if you have large photo libraries or system backups. Should you exceed that limit, you’ll need to either trim your content or purchase additional storage, creating a potential hidden cost. The Microsoft Rewards path is straightforward if you’ve been accumulating points through Bing searches, the Microsoft Store, or Xbox activities. Even if you’re short, Microsoft notes that simply downloading the Bing mobile app can earn you 500 points quickly, making the 1,000-point goal attainable.
Privacy and Vendor Lock-In: The Real Trade-Off
The mandatory Microsoft Account requirement is a sticking point for privacy-conscious users. By linking extended security support to an MSA, Microsoft deepens its telemetry and identity management reach on Windows 10 devices—devices that, until now, could operate entirely offline with local accounts. The free OneDrive path further cements this tie, as it pings your system settings to the cloud. For those who have deliberately avoided Microsoft’s ecosystem, there’s no opt-out: if you refuse an MSA, you forgo ESU entirely. That decision leaves your system open to future exploits, so the calculus is stark.
Consumer advocacy groups have also raised concerns about e-waste. Windows 11’s strict hardware floor—requiring TPM 2.0, Secure Boot, and specific CPU generations—brands many otherwise functional PCs as ineligible for upgrade. ESU provides a temporary reprieve, but critics argue that the scheme nudges users toward new hardware purchases, fueling a cycle of electronic waste. Estimates of the remaining Windows 10 install base range wildly, from hundreds of millions to over a billion devices, making the environmental impact non-trivial. These figures remain contested, but the policy pressure is clear.
How to Use the ESU Year Wisely: A Migration Roadmap
The extra 12 months of security patches are a strategic pause, not a solution. Here’s how to turn that buffer into a smooth transition:
- Inventory your devices: Document the CPU model, TPM state, Secure Boot status, and Windows 10 edition of every PC in your household or small office. This tells you which machines can be upgraded to Windows 11 and which must be replaced.
- Test Windows 11 on a spare machine: Before upgrading primary systems, validate that your critical software and peripherals work under the new OS. Use virtual machines or a dedicated test PC to identify incompatibilities early.
- Plan replacements for non-upgradeable devices: Research refurbished Windows 11-ready hardware or consider trade-in programs. Factor in recycling options to minimize waste.
- Harden remaining Windows 10 systems: For devices that stay on ESU, tighten security: enable the built-in firewall, limit administrative accounts, segment them on your network, and install robust anti-malware tools. ESU reduces risk but doesn’t eliminate it.
- Back up rigorously: ESU doesn’t replace a backup strategy. Use an external drive or a cloud service you control, not just OneDrive, to protect important files before, during, and after the migration.
Common Questions and Objections
“Can I just keep using Windows 10 without enrolling?”
Technically, yes—but after October 14, 2025, your system will no longer receive monthly security fixes. Running an unsupported OS makes you a sitting duck for ransomware, credential stealers, and browser-based exploits. If you use your PC for banking, work, or storing personal data, the risk escalates quickly.
“Is the $30 paid option necessary?”
Not for most people. The two free options cover the vast majority of consumers. The $30 route is a convenience for those who don’t want to sync settings to OneDrive or use Rewards points, and it covers all eligible devices on one MSA.
“Will ESU keep my PC usable forever?”
No. After October 2026, the security updates stop, and third-party software vendors will increasingly drop Windows 10 support. You must have an exit plan—whether that’s upgrading to Windows 11, switching to another operating system, or buying new hardware.
The Business Incentive Behind Microsoft’s Approach
Microsoft’s consumer ESU program is a recognition that the Windows 10 installed base is too large to abandon overnight without reputational damage. Offering free and low-cost paths keeps users inside the Microsoft ecosystem while pushing their telemetry and cloud service engagement. The enterprise side of ESU has historically been a lucrative revenue stream, and the consumer version, while modest by comparison, serves to condition users for eventual migration. The program’s short duration nudges the market toward hardware refresh, but for households wrestling with tighter budgets, it at least provides breathing room.
Final Call to Action
The enrollment window is open now, but the deadliest mistake is waiting until the last week of September 2025. The rollout is phased, and technical glitches can arise. Install KB5063709 today, sign into your Microsoft Account, and look for the “Enroll now” prompt in Windows Update. Once you’re enrolled, build your migration timeline immediately. The year of ESU is a gift of time—use it deliberately, or risk facing October 14, 2026 with no more patches and no plan.