Microsoft has quietly opened its Extended Security Updates (ESU) program to all Windows 10 consumers, providing a way to keep receiving critical security patches long after the operating system’s official retirement. In a surprise move, the company has also extended the program’s lifespan well beyond the initially promised one-year window — enrolled devices will now receive updates through October 12, 2027.

The Consumer ESU Program: What’s New

When Windows 10 support expired on October 14, 2025, users who couldn’t or wouldn’t move to Windows 11 were left facing an unpatchable security landscape. Microsoft’s answer is the consumer ESU, a stopgap that delivers only security updates rated “Critical” or “Important” — no feature improvements, no performance fixes, and no standard technical support.

Access to the program breaks down into three enrollment routes, each with its own trade-offs:

  • OneDrive Backup Sync – The free path. You must sync your Windows Backup settings to a Microsoft OneDrive account. The catch? The default free tier offers just 5 GB of storage; if your system settings, credentials, and files exceed that, you’ll need to purchase additional OneDrive space.
  • Microsoft Rewards – Another free option. Redeem 1,000 Microsoft Rewards points to claim one year of ESU coverage. This is viable for anyone already accruing points through Bing searches, Xbox activity, or Microsoft Store purchases.
  • One-Time Purchase – The straightforward paid route. For $30, you get ESU coverage linked to your Microsoft Account. A single license can cover up to 10 eligible devices signed into the same account — a generous provision for families with multiple older PCs.

Crucially, the program previously only trickled out to Windows Insiders. As first reported by PCMag, the enrollment wizard is now live for all individual users, though the rollout remains phased. Even if your device meets every prerequisite, you might not see the “Enroll now” option immediately.

Who Qualifies — and the Snags to Watch For

Not every Windows 10 machine makes the cut. The technical checklist is narrow:

  • The device must run Windows 10, version 22H2 (Home, Pro, Pro Education, or Workstation editions). Older versions are out of luck.
  • You need the August 2025 cumulative update (KB5063709) and its related servicing stack updates. This patch fixed enrollment visibility bugs; machines that missed it may never show the enrollment link.
  • A Microsoft Account (MSA) is mandatory. Local Windows accounts won’t work. You’ll also need administrative privileges under that MSA.
  • The device cannot be domain-joined, Entra-joined, Azure AD-joined, kiosk-mode, or managed under enterprise mobility management. Those scenarios require enterprise ESU channels.

Even with the correct software stack, patience is required. Microsoft insists the enrollment wizard is “staged,” meaning compliant systems might not surface the button right away. The only certain accelerator is installing KB5063709 and waiting for the server-side rollout to reach your account.

What This Means for Home Users, Power Users, and IT Pros

The extension through 2027 changes the calculus for each audience differently.

Home users clinging to hardware that can’t meet Windows 11’s TPM 2.0 and Secure Boot requirements now have a dependable, if limited, security cushion. The free OneDrive or Rewards routes remove the immediate financial sting, but they do nudge you deeper into Microsoft’s ecosystem. If you dread linking a Microsoft Account or refuse cloud backups, the $30 fee is the only consumer path that preserves a degree of local control. Either way, you’re buying time — not a permanent solution.

Power users who maintain multiple devices or family PCs will find the single-license-up-to-10-devices model attractive. The paid option becomes roughly $3 per machine. However, ESU is strictly security-only. Drivers, application compatibility patches, and general reliability improvements stop arriving. Over two years, that can create a brittle system, especially if you rely on cutting-edge hardware or software that expects a modern Windows kernel.

IT professionals must treat consumer ESU as separate from the enterprise track. Domain-joined workstations will not see the consumer enrollment. Organizations need to procure ESU through volume licensing. Still, for unmanaged field devices or consultant laptops, the consumer program offers a lightweight band-aid while migration plans solidify. Just don’t expect centralized monitoring or deployment tools.

Across all groups, one point demands emphasis: ESU does not cover Microsoft 365 (Office) feature updates. Those apps follow their own lifecycle. They’ll keep working on Windows 10, but Microsoft has confirmed that Office support on the old OS will gradually restrict access to new features.

A Short History of Windows 10’s Twice-Extended Life

Windows 10 arrived in 2015 with a promise of a 10-year support runway. That timeline held steady until Windows 11 launched in 2021, raising the hardware floor significantly. Millions of PCs — many still perfectly functional for everyday tasks — were suddenly locked out of the upgrade path.

Microsoft first tested consumer ESU waters in early 2025, offering a time-limited preview to Windows Insiders. The original deal granted one year of security patches, ending October 13, 2026. The $30 price point and OneDrive linkage were there from the start, but the enrollment process sputtered: missing the August 2025 cumulative update left even qualified users without the “Enroll now” button.

Now, with the general release and the surprise extension to October 2027, Microsoft is acknowledging the protracted transition. The company ships about 16 additional months of coverage, roughly aligning with the lifecycle of a Windows 11 feature update. It’s a pragmatic concession to a user base that still numbered in the hundreds of millions at the original cutoff.

Your 7-Step ESU Enrollment Checklist

Acting sooner rather than later eliminates any window of vulnerability between the original end-of-support date and the moment your ESU kicks in. Here’s how to lock in coverage:

  1. Verify your edition and version. Open Settings → System → About. You must see “Windows 10” and “Version 22H2.”
  2. Install all pending updates. Head to Settings → Update & Security → Windows Update and apply every available patch. Confirm that KB5063709 (the August 2025 cumulative) appears in your update history.
  3. Create a full system backup. Before you tinker with enrollment or OneDrive settings, make an independent disk image or copy your data to an external drive.
  4. Sign in with a Microsoft Account. If you’re on a local account, switch via Settings → Accounts → Your info. Make sure the account has administrator rights.
  5. Choose your enrollment route.
    • OneDrive: In Settings → Accounts → Windows backup, enable “Remember my apps” and “Remember my preferences.” Check your OneDrive storage at onedrive.live.com and upgrade if needed.
    • Rewards: Confirm you have at least 1,000 points at rewards.microsoft.com.
    • Paid: Have a payment method linked to your Microsoft Account. The $30 fee is one-time and non-recurring.
  6. Find the Enroll now button. Go to Settings → Update & Security → Windows Update. If you see “Enroll now,” click it and follow the wizard. If it’s missing, wait 24–48 hours and check again; the rollout is phased.
  7. Verify enrollment. After completing the wizard, the Windows Update page should show your ESU status. If you enrolled via Rewards or purchase, open Settings → Accounts → “ESU license” to see your covered devices.

Even if you miss the ideal pre-cutoff window, enrollment remains available until the program ends on October 12, 2027. But every unenrolled day between October 14, 2025 and your enrollment is a day your PC sits without security patches.

Beyond the Patch: What Comes After 2027

The ESU bridge is finite. When October 2027 arrives, Microsoft has given no signal that further extensions will follow. That means every Windows 10 device left standing will need a concrete plan: an upgrade to Windows 11 (if the hardware supports it), a move to a new PC, a switch to an alternative operating system like ChromeOS Flex or a Linux distribution, or a migration to cloud-hosted Windows via Windows 365 or Azure Virtual Desktop.

For now, the consumer ESU does its job — it turns a sudden deadline into a manageable runway. The $30 price tag, the Rewards redemption, and even the OneDrive trade-off are all tools designed to keep you secure while you decide what comes next. The clock, however, is ticking louder than ever.