With fewer than 60 days until Windows 10’s mainstream support collapses, Microsoft is flashing an unavoidable full-screen banner at an estimated 700 million devices—and, crucially, has patched a nagging enrollment glitch that prevented many users from grabbing the $30 lifeline. The company’s August cumulative update, KB5063709, resolves a crash in the Extended Security Updates enrollment wizard just as the final countdown begins. This confluence of a stark deadline and a last-minute technical fix forces every Windows 10 household and small business to make a binary decision: upgrade, pay up, or face an unpatched operating system after October 14, 2025.

The 60-Day Shock and the Fix You Didn’t See

Starting in mid-August, Windows 10 Home and Pro users began seeing a prominent notification inside Windows Update: “End of mainstream support is approaching.” It is not a gentle suggestion. The alert spells out that after October 14, the device will stop receiving monthly security and preview updates. For many, that warning arrived alongside a broken enrollment button. The KB5063709 cumulative update, released on August 14, targets two issues: it delivers critical security fixes and, more quietly, restores the ESU enrollment flow that had been crashing on a subset of machines. Users who had seen the “Enroll in Extended Support Updates” banner but couldn’t proceed now find the wizard functioning after applying the patch.

Microsoft’s own bulletin confirms the scope of the problem. The update “addresses an issue that might prevent some users from completing the Extended Security Updates enrollment wizard,” the notes read. The fix is already rolling out through Windows Update, and devices that have not installed it may still encounter enrollment failures. IT administrators and power users should immediately verify that KB5063709—or any superseding cumulative update—is applied, especially on boxes that will rely on ESU.

Why This Matters: The Hardware Wall and the Numbers

The numbers are staggering. StatCounter’s July 2025 snapshot shows Windows 10 holding 43% of Windows version traffic, while Windows 11 sits in the low 50s. That translates to roughly 700 million PCs worldwide still running the older OS. Many of those machines cannot upgrade to Windows 11 because of Microsoft’s uncompromising hardware requirements: TPM 2.0, Secure Boot, and a narrow list of supported processors. Even capable PCs from 2017 or earlier often fail the check. The result is a forced fork: either buy new hardware, limp along with ESU for one more year, or switch to an alternative operating system.

For enterprises, the commercial ESU program offers up to three years of security patches at escalating prices (starting around $61 per device for the first year). But for consumers and non-domain-joined small businesses, the only official route is the consumer ESU—a one-year bridge that Microsoft never described as permanent.

Consumer ESU: Price, Prerequisites, and the Fine Print

Here is the unvarnished deal for home users.

  • One-year coverage: The consumer ESU runs from October 15, 2025, to October 13, 2026. It delivers security updates classified as Critical or Important. It does not include new features, design changes, non-security fixes, or technical support.
  • Three enrollment paths:
    1. Free via Windows Backup: Enable settings sync to a Microsoft account (OneDrive) and enroll without a cash payment. The price is your data linked to a Microsoft cloud account.
    2. Microsoft Rewards: Redeem 1,000 Rewards points per device.
    3. Paid consumer license: $30 (USD) for one year. A single purchase can cover up to ten devices signed into the same Microsoft account. This is a one-time payment, not a subscription—but it is strictly tied to that account.
  • Hard prerequisites: The device must run Windows 10 version 22H2 (the final feature update), have all current cumulative updates installed, and be signed in with a Microsoft account that has administrator privileges. Domain-joined machines, MDM-enrolled devices, and kiosk-mode PCs are explicitly excluded from the consumer enrollment path.
  • Enrollment window: The wizard is already live for most users, but the option will disappear after the program ends. There is no grace period; if you miss enrollment, you will not receive patches after October 14, 2025.

Step-by-Step: How to Enroll Right Now

  1. Check your build. Open Settings → System → About. Confirm you are on Windows 10 22H2. If not, run Windows Update until you are fully current.
  2. Install KB5063709. Open Windows Update and install all pending updates, especially the latest cumulative rollup. Reboot if prompted.
  3. Sign in with a Microsoft account. If you use a local account, switch to a Microsoft account under Settings → Accounts → Your info. You will need admin rights.
  4. Navigate to the ESU banner. Settings → Update & Security → Windows Update. Look for the “Enroll in Extended Support Updates” prompt and click it.
  5. Choose your enrollment option. The wizard will offer the free (Backup sync) route, the Rewards option, or the $30 purchase. Follow the on-screen instructions. Keep a record of the account used—if you lose access, the ESU license cannot be transferred.
  6. Verify enrollment. After completion, Windows Update should show a confirmation. Monthly security patches should continue arriving after October 14, 2025.

The Lawsuit and the Politics of Forced Upgrades

The timing of the 60-day notice coincides with a federal lawsuit filed earlier this year. Plaintiff Lawrence Klein alleges Microsoft is deliberately withdrawing free support for Windows 10 while maintaining hardware requirements that block upgrades on otherwise functional machines—effectively forcing consumers to buy new devices. The complaint frames this as a strategy to drive sales of Copilot-bundled Windows 11 hardware. The suit seeks injunctive relief, not monetary damages, and its legal merit is uncertain. Courts typically grant vendors wide latitude in product lifecycle decisions, but the case amplifies a growing public debate about planned obsolescence and e-waste. For now, the litigation does not alter the October 14 cutoff, but it may influence future regulatory or corporate policy.

Security, Privacy, and the Real Cost of ESU

ESU is a narrow safety net, not a parachute. It patches only vulnerabilities Microsoft classifies as Critical or Important. Application incompatibilities, driver breakages, and architectural decay will continue unfixed. Users clinging to Windows 10 after support ends without ESU will face an exponentially growing attack surface—every newly discovered flaw becomes a permanent zero-click risk on unpatched machines.

Privacy-conscious users face a dilemma that Microsoft does not loudly advertise. All consumer ESU paths require a Microsoft account. The free option ties enrollment to OneDrive settings sync, an arrangement that some will find intrusive. The paid route also demands account linkage; there is no anonymous or local-account ESU. For households that have deliberately avoided Microsoft accounts, that is a significant tradeoff.

Businesses must look beyond the consumer sticker price. The $30 household license is explicitly for personal, non-domain devices. Organizations attempting to use it at scale will run into compliance and management gaps. Commercial ESU, purchased through volume licensing, costs $61 per device for the first year and escalates in subsequent years. Cyber-insurance policies increasingly mandate that endpoints run supported operating systems; a lapse could void coverage.

Migration Strategies: Act Now or Accept Risk

The calendar leaves no room for delay. The following timeline can help individuals and IT planners.

  • By mid-September 2025 (0–4 weeks): Install KB5063709 and any follow-on updates. Enroll in ESU for every device that cannot be upgraded immediately. Back up critical data to an external drive or cloud service. If you plan to replace hardware, begin shopping.
  • October 2025–February 2026 (1–5 months): Deploy replacement PCs where necessary. Test Windows 11 compatibility for line-of-business applications, printers, and peripherals. Use the PC Health Check tool to identify precisely which devices meet requirements. Migrate data using Windows Backup or a third-party tool.
  • By October 2026: All Windows 10 machines must either be retired, upgraded to Windows 11, or migrated to a supported alternative (Linux, ChromeOS Flex, or Windows 365). ESU expires on October 13, 2026, with no consumer extension.

For those who refuse Microsoft’s ecosystem altogether, alternatives exist. Many older PCs run Linux distributions like Ubuntu or Linux Mint reliably, though application compatibility and learning curves apply. Cloud desktops (Windows 365) offer pay-as-you-go access to supported Windows environments but introduce ongoing subscription costs and bandwidth dependencies.

The Uncomfortable Truth

Microsoft’s 60-day warning is not a bluff. The October 14 deadline is absolute, and the consumer ESU is a one-year-only deal. The fix for the enrollment bug in KB5063709 removes a frustrating roadblock, but it does not alter the fundamental mismatch between Windows 10’s installed base and Windows 11’s hardware bar. That tension—between a secure software lifecycle and the environmental cost of discarded hardware—will not resolve itself in eight weeks.

The prudent path for most households is immediate enrollment in ESU, followed by a deliberate migration plan. Staring at the warning banner without acting is the worst possible choice. Unpatched Windows 10 will not just be unsupported; it will quickly become a target. The time to download the update, click “Enroll,” and begin planning a hardware refresh is now.