Keep Your Windows 10 Secure with Extended Security Updates

If you’re not ready to upgrade to Windows 11 or migrate to a new device, The ESU program offers a lifeline for those who want to keep Windows 10 secure. ESU provides critical security patches to protect your Windows 10 system from vulnerabilities, giving you time to plan your transition. Windows 10 reached its official end-of-support date on October 14, 2025, meaning Microsoft no longer provides free security updates or technical support for most users.

In this post, we’ll walk through what ESU is, who’s eligible, how to enroll, and the steps to get those vital updates flowing. Note that ESU is a paid option and temporary—it’s designed as a bridge, not a permanent solution.

What is Windows 10 ESU?

ESU extends Windows 10 secure updates beyond the end-of-support phase. Starting October 2025, Microsoft will deliver monthly security-only updates to mitigate high-risk vulnerabilities. These aren’t full feature updates or bug fixes—just the essentials to keep your PC safe from exploits.

Key details:

• Duration: Up to three years of updates (2025–2028), purchasable year by year.
• Coverage: Applies to Windows 10 versions like 22H2, but check compatibility.
• Not Free: Pricing starts at $30 per device for the first year (for consumers), rising annually. Businesses and education editions have different tiers—enterprise pricing can reach $61+ per user/year.
• Limitations: No new features, non-security fixes, or free support. ESU doesn’t guarantee compatibility with third-party software.

ESU is available for both consumer and enterprise users, but the process differs slightly.

Who Qualifies for ESU?

• Consumers: Anyone with a valid Windows 10 license can purchase ESU through the Microsoft Store or authorized resellers.
• Businesses: Organizations can buy via volume licensing agreements, Microsoft support, or Cloud Solution Providers (CSPs).
• Education: Similar to businesses, with potential discounts.
• OEM Devices: If your PC came with Windows 10 from a manufacturer like Dell or HP, they might offer ESU as part of extended support.

ESU isn’t automatic—you must actively enroll and possibly pay.

How to Purchase and Enroll in ESU

For Consumers

1. Check Eligibility: Ensure your Windows 10 is activated and up to date. Go to Settings > Update & Security > Activation to verify.
2. Purchase ESU:

• Visit the Microsoft Store or search for “Windows 10 ESU” in the Store app on your PC.
• Select the one-year ESU license for your edition (Home, Pro, etc.).
• Complete payment. The key will be delivered digitally.

1. Activate the Key:

• Open Settings > Update & Security > Activation.
• Click Change product key and enter your ESU key.
• Restart your PC if prompted.

For Businesses and Enterprises

1. Contact Microsoft: Work with your IT admin or Microsoft account representative to purchase via the Volume Licensing Service Center (VLSC) or CSP.
2. Deploy Keys: Use tools like Microsoft Endpoint Manager or Group Policy to distribute ESU keys across devices.
3. Enable via Registry or Script: IT pros can automate activation using PowerShell scripts provided by Microsoft.

After enrollment, Windows Update will begin delivering ESU patches automatically.

Make Windows 10 secure

Steps to Get ESU Updates on Your PC

Once enrolled:

1. Enable Windows Update:

• Go to Settings > Update & Security > Windows Update.
• Click Check for updates. ESU security patches will appear as optional or cumulative updates.

1. Install Updates:

• Download and install any available updates.
• Restart your PC to apply them. Updates are delivered monthly, typically on Patch Tuesday.

1. Verify Installation:

• In Windows Update, view Update history to confirm ESU patches (they’ll be labeled with KB numbers specific to ESU).
• Use the command winver in Run (Win + R) to check your Windows version—ESU maintains support for the last serviced build.

1. Troubleshoot Issues:

• If updates fail, run the Windows Update Troubleshooter (Settings > Update & Security > Troubleshoot).
• Clear the update cache: Stop the Windows Update service via Services.msc, delete contents of C:\Windows\SoftwareDistribution, then restart.
• For enterprises, ensure WSUS or SCCM is configured to approve ESU updates.

Important Considerations and Best Practices

• Cost and Renewal: The first year is cheapest; subsequent years cost more (e.g., $60 for year 2, $122 for year 3 for consumers). Renew annually to avoid gaps.
• Upgrade Path: Use ESU time to test Windows 11 compatibility. Check your PC with the PC Health Check app.
• Security Beyond ESU: Keep antivirus updated, enable BitLocker, and avoid risky downloads. ESU doesn’t cover everything.
• End of ESU: After three years, no more updates—plan to upgrade by 2028.
• Alternatives: Consider Windows 11 (if hardware compatible), Linux, or new hardware with Windows 11 pre-installed.

Why should I make Windows 10 Secure?

Don’t risk your business’s security in the post-Windows 10 end-of-support era—let Salt Lake City IT Pros make your Windows 10 secure by expertly handle your Extended Security Updates (ESU) enrollment and deployment. With over 15 years of Microsoft expertise, our certified team activates ESU licenses on one computer and across businesses ensuring compliance with volume licensing Avoid costly downtime or DIY headaches—partner with Salt Lake City IT Pros today for worry-free ESU management and fortified defenses that let you focus on growth, not patches.

Microsoft recommends ESU only as a stopgap—upgrading to Windows 11 is the long-term goal for better performance and features.

For official details, pricing, and support, visit Microsoft’s Windows 10 ESU page. If you’re in IT, check the docs for enterprises.

Stay secure, and transition wisely!