Windows 10 users gained two completely free paths to an extra year of security patches today, as Microsoft opened a consumer Extended Security Updates (ESU) program that also accepts Microsoft Rewards points or a cloud sync as payment. The move comes as the October 14, 2025 support deadline approaches for an operating system still running on hundreds of millions of devices that cannot officially upgrade to Windows 11.
Microsoft executive vice president Yusuf Mehdi framed the push in stark terms: “2025 continues to emerge as the year of the Windows 11 PC refresh.” But for the vast installed base stuck on older hardware lacking TPM 2.0 or supported CPUs, ESU represents a critical safety valve—one the company is making remarkably cheap, and in many cases, entirely cost-free.
A Lifeline for Holdouts: Why ESU Now?
Windows 10’s end-of-support date has been circled on IT calendars for years. After October 14, 2025, the OS will no longer receive routine security patches, leaving unpatched vulnerabilities open to exploitation. With Windows 11’s strict hardware requirements eliminating many perfectly functional PCs from a supported upgrade path, Microsoft faced the prospect of millions of exposed home and small business machines. The Consumer ESU program is a direct response to that risk.
But it’s also a strategic move. By tying free ESU enrollment to a Microsoft account and OneDrive backup, the company gently nudges users deeper into its cloud ecosystem while keeping them safe. And for those who simply don’t want to move yet, the program buys a full year of breathing room—through October 13, 2026.
The Three Enrollment Routes: Two Free, One Paid
The enrollment wizard, rolling out now in Windows Update for version 22H2 devices, presents three distinct options. All require signing in with a Microsoft account that has administrator rights on the PC.
1. Sync Windows Backup (OneDrive) — Free
This path lets you enroll by turning on Windows Backup to sync your settings, apps, and files to OneDrive. Microsoft verifies that your device is backed by a Microsoft account, and enrollment is granted. The free tier includes 5 GB of storage; heavy users may need to purchase additional space, but the ESU itself costs nothing.
2. Redeem 1,000 Microsoft Rewards Points — Free
If you’ve been earning points through Bing searches, Microsoft Store purchases, or other Rewards activities, you can cash in 1,000 points for one year of ESU coverage. It’s effectively a loyalty perk—easy to qualify for anyone actively using Microsoft’s services.
3. One-Time Purchase ($30) — Paid
The traditional route remains: a single $30 license tied to your Microsoft account. That license can cover up to 10 eligible devices registered to the same account, making it a bargain for multi-PC households.
All three paths deliver the exact same security patches. The wizard is surfaced through Settings → Update & Security → Windows Update, where an “Enroll now” link will appear if your device meets prerequisites. Enrollment can be completed any time through October 13, 2026; if you join after October 14, 2025, you’ll receive any past patches you missed.
What ESU Actually Covers
Consumer ESU is explicitly a security-only program. You’ll get:
- Monthly critical and important security updates as rated by Microsoft’s Security Response Center
- Patches for Windows 10 version 22H2 (Home, Pro, Pro Education, Workstation)
You will not get:
- New features, quality improvements, or performance enhancements
- Non-security bug fixes
- Technical support for Windows 10 issues (beyond help with ESU enrollment itself)
The program runs from October 15, 2025 through October 13, 2026. It’s a bridge, not a permanent extension.
Eligibility and Prerequisites
Before attempting enrollment, confirm these details on every PC you want covered:
- Windows 10 version 22H2 with the latest cumulative updates installed (early rollout bugs have been fixed via patches; update now to avoid issues)
- Signed in with a Microsoft account (local accounts won’t work; the ESU license is account-based)
- Not domain-joined or MDM-managed—consumer ESU excludes enterprise-managed devices. Entra-registered (formerly Azure AD registered) devices may work, but domain-joined machines must use corporate ESU programs.
- Install all pending updates and reboot. If the enrollment wizard isn’t visible yet, it may appear after a cumulative update; Microsoft expects broad availability by mid-August 2025.
Enterprise and Cloud Options: A Quick Look
For businesses, Microsoft is offering a separate $61-per-device ESU subscription through Cloud Solution Provider (CSP) partners, available September 1. Organizations can renew annually for up to three years, with costs rising each subsequent year. Volume licensing customers can also access ESU via traditional channels.
A more significant carrot: Windows 365 Cloud PCs and Windows 11 virtual machines accessed from a Windows 10 device automatically receive ESU at no additional charge. Microsoft is even offering 20% off Windows 365 plans for the first 12 months to new customers—a clear push toward cloud desktops as a migration alternative.
Partners like CDW, Connection, and SHI are also rolling out purchase, trade-in, and recycling programs to ease hardware refreshes. Yusuf Mehdi’s Copilot+ PC vision is unmistakable: “With AI becoming a more natural and helpful part of everyday life, 2025 continues to emerge as the year of the Windows 11 PC refresh.”
Microsoft 365 and Defender: Extended Lifelines
Even after Windows 10 support ends, Microsoft 365 Apps will continue working. Security updates for Office apps on Windows 10 will be delivered through October 10, 2028—three extra years. Feature updates for the Current Channel will arrive through August 2026. However, Microsoft warns that support for incidents may be limited if the issue occurs only on Windows 10. Microsoft Defender Antivirus will also keep receiving security intelligence updates through October 2028. These commitments mean Office and basic antimalware protections don’t vanish when the OS goes out of support, but they don’t replace the need for platform-level patching.
Strengths, Risks, and the Road Ahead
ESU is a pragmatic solution, but it’s not without drawbacks.
Strengths:
- No-cost enrollment removes financial barriers for millions of users.
- One license, ten devices simplifies multi-PC households.
- Low friction: enrollment happens right in Windows Update, no product keys to track.
- Buys time to plan a proper upgrade, test Windows 11 compatibility, or budget a replacement.
Risks and Caveats:
- Security-only means performance and compatibility drift will accelerate as apps and drivers evolve.
- Limited technical support—if something breaks on Windows 10 after October 2025, you’re largely on your own.
- Microsoft account requirement free options force a cloud tie-in; privacy-conscious users must weigh the tradeoff.
- Regulatory compliance—consumer ESU may not satisfy business or industry regulations; enterprise versions exist for that reason.
- Patching reliability—cumulative updates have occasionally regressed on niche hardware; maintain full system backups.
Alternatives to Weigh
Before enrolling in ESU, consider these parallel paths:
- Upgrade to Windows 11: Free for eligible devices; run PC Health Check to confirm.
- Replace hardware: OEM trade-in and recycling deals can offset costs, and new Copilot+ PCs integrate AI features.
- Windows 365 Cloud PC: Access Windows 11 from your aging device; the 20% discount sweetens the deal for early adopters.
- Move critical workloads: Off-load sensitive tasks to a supported OS while keeping the old PC for offline legacy use.
Practical Checklist
- Verify version: Settings → System → About → Windows 10 22H2 with latest patches.
- Microsoft account: Ensure it’s adult and has admin rights; sign in if currently local.
- Backup everything: Full system image and file backup before any major change.
- Choose path: OneDrive sync (free), Rewards (free if you have 1,000 points), or $30 purchase.
- Enroll: Settings → Update & Security → Windows Update → Enroll now. If missing, update Windows and reboot.
- Confirm: After enrollment, check update history for ESU-labeled patches. Plan migration before October 13, 2026.
FAQ
How long does consumer ESU last?
Coverage runs October 15, 2025 – October 13, 2026; enrollment can happen anytime in that window.
Can I use one license on multiple PCs?
Yes, up to 10 eligible devices tied to the same Microsoft account.
Will Office keep getting updates on Windows 10?
Microsoft 365 Apps will receive security updates until October 10, 2028, but feature updates end sooner (August 2026).
What if my PC is domain-joined?
Consumer ESU is not for business devices; use corporate ESU via Volume Licensing or CSP.
Microsoft’s consumer ESU program is the softest possible landing for one of the largest forced OS migrations in PC history. It’s free for anyone willing to sync a few settings or spend loyalty points, covers multiple machines under a single account, and keeps critical vulnerabilities at bay while you plan your next move. Just don’t mistake it for a permanent solution. Use the year to test Windows 11, explore cloud options, or budget a new AI-powered PC—because come October 14, 2026, the safety net vanishes.