Windows 10 ESU Extended to October 2027: What Changed and How to Enroll

Windows 10 was supposed to go without security patches for most consumers once Microsoft’s one-year, no-cost consumer Extended Security Updates (ESU) window closed on October 13, 2026. Instead, on June 25, 2026, Microsoft quietly updated its support page: consumer ESU coverage now runs through October 12, 2027, with no new sign-up step for anyone already enrolled. Given how many PCs are still running Windows 10 well after its official October 14, 2025 end-of-support date, here is what actually changed and how to make sure you are covered.

What ESU Actually Is (and Is Not)

Extended Security Updates is not Windows 10 support coming back. Microsoft’s own framing is blunt: Windows 10 “support has ended,” and ESU simply rents more time on security patches specifically. The program delivers critical and important security fixes, newer Secure Boot certificates, and limited support for enrollment issues or ESU-related regressions. It does not include new features, nonsecurity fixes, design changes, or general technical support.

What Changed, and What Did Not

Only the end date moved — the enrollment process itself is unchanged. Windows 10 consumers can still activate ESU for free or paid, three ways:

1. Sync your PC settings to a Microsoft account through Windows Backup — no extra cost.
2. Redeem 1,000 Microsoft Rewards points.
3. Pay a one-time $30 fee, tied to your Microsoft account rather than the device.

One enrolled license covers up to 10 devices linked to the same Microsoft account. Residents of the European Economic Area (EEA) get ESU at no cost simply by signing in with a Microsoft account, without needing the backup-sync workaround or rewards points. If you enrolled before this announcement, you were rolled into the extra year automatically — there is nothing to redo.

Eligibility to Check Before You Assume You Qualify

The consumer program only covers Windows 10 version 22H2. Confirm your version under Settings > System > About, and install all pending Windows Updates first — an out-of-date machine can simply fail to show the ESU enrollment option under Settings > Windows Update. Devices joined to Active Directory, managed through Microsoft Entra, or controlled via mobile device management (MDM) are not eligible for the consumer program at all; it is strictly for personal, unmanaged devices. A personal device that happens to be signed into Entra in a non-managed way can still qualify — the distinction is about who manages the device, not whether Entra is involved.

Business ESU Is a Separate, Pricier Program

Organizations buying ESU for managed fleets face escalating, per-device pricing rather than the consumer options above: Year 1 is $61 per device (through October 13, 2026), Year 2 is $122 (through October 12, 2027), and Year 3 is $244 (through October 10, 2028) — the price doubles each year specifically to discourage long-term reliance on ESU instead of migrating. Businesses cannot buy a later year without having paid for the earlier one; coverage is cumulative, not a pick-your-year menu.

A Common Misconception

Some people read “ESU extended to 2027” as Microsoft reversing course on retiring Windows 10. It has not. This is additional runway on security patches only, aimed at the long tail of users (and, notably, EU consumers, where regulatory pressure around the free EEA carve-out played a documented role) who had not moved to Windows 11 by the original cutoff. It is not a sign that feature development, new builds, or general support are resuming.

What Not to Do

Do not treat ESU as a long-term plan. It buys exactly one more year of security-only coverage and nothing else. If your hardware can run a current Windows 11 version, migrating is still the only path back to full support, including feature updates and complete technical assistance. And do not assume ESU means you can skip other protective basics: ESU only patches vulnerabilities Microsoft chooses to disclose and fix, it is not a substitute for keeping a real-time antivirus engine current on an aging operating system.

If You Don’t See the ESU Option

Confirm you are on version 22H2, fully updated, and signed in with a Microsoft account rather than a local account, and that the device is not domain- or MDM-managed. If all of that checks out and the enrollment option still is not appearing, Microsoft has rolled this out regionally in stages, so waiting a few days and restarting is a more realistic next step than assuming your device was excluded for good.

FAQ