Microsoft’s consumer Extended Security Updates for Windows 10 can be enrolled in until October 12, 2027, and the price of entry runs from nothing to $30. The company’s ESU page lists three routes: no extra cost for a PC that is syncing its settings, 1,000 Microsoft Rewards points, or a one-time $30 payment plus applicable tax.
The free route is the one that carries a condition, and it is easy to overstate. Settings sync is one of three ways to get the same updates, not a gate on the program, so a household that keeps sync off can still enroll by paying or redeeming points. The page’s wording ties the free route to syncing PC settings on the device, and the other two routes carry no such tie.
Three enrollment routes and what each costs
On the Windows 10 Extended Security Updates page, Microsoft words the free option as available at no additional cost for a device that is syncing its PC settings. The two alternatives sit beside it: 1,000 Rewards points, or $30 once, with a local-currency equivalent where the $30 price does not apply. Microsoft states that enrollment stays open any time until the program ends on October 12, 2027.
A single ESU license can be used on up to 10 devices, according to the same page, which makes the one-time $30 option the cheaper path for a household with several Windows 10 PCs that do not sync settings. The page also requires that the Microsoft account used to sign in to the device be an administrator account, so a PC that signs in with a standard-user account has to switch to an administrator one before enrollment can proceed. Enrollment starts from the Windows Update settings on an eligible device, where an enrollment link appears.
Spread across a full set of 10 devices, the $30 payment works out to $3 per machine, which is the comparison that matters for a household weighing the three routes. The free route assumes the settings sync is already running on the PC being enrolled, and the administrator requirement means the account that signs in to that device is the one that must hold the license.
Devices that cannot enroll
The program is built for personal machines, and Microsoft’s page rules out three kinds of device: those joined to an Active Directory domain or to Microsoft Entra, or enrolled in a Mobile Device Management solution; those in kiosk mode; and those that already have an ESU license. The first group covers machines managed by an employer or school, which are expected to use organizational licensing, and the kiosk exclusion removes single-purpose public terminals from the household program.
That list separates the consumer program from the commercial one. Microsoft’s ESU lifecycle FAQ says the editions that qualify for commercial Windows 10 ESU are Enterprise, Education and Pro in commercial use, and it gives a year-three end date of October 10, 2028.
The patch scope: critical and important fixes only
What enrolled machines receive is limited. Microsoft says ESU includes critical and important security updates only, using the severity ratings assigned by the Microsoft Security Response Center. The program does not add new features, customer-requested non-security updates or design changes, and it provides no technical support for Windows 10 apart from help with activating and installing the ESU license.
The baseline it builds on is the product’s own end date. Windows 10 reached the end of support on October 14, 2025, as Microsoft’s end-of-support page records, and the Windows 10 Home and Pro lifecycle page lists version 22H2 as the final version for the Home, Pro, Pro Education and Pro for Workstations editions. Version 22H2 started on October 18, 2022, and everything the ESU program delivers sits on top of it. The lifecycle page applies the same end date to all four editions.
Measured from the end-of-support date, the consumer window is just under two years, October 14, 2025 to October 12, 2027, against a commercial schedule that Microsoft’s FAQ stretches to three. The two programs also differ in how access is gated. The consumer page sets a settings-sync, points or payment choice, an administrator-account rule and a 10-device cap, while the commercial FAQ restricts eligibility by edition and use, listing Enterprise, Education and Pro in commercial settings.
Windows 11 as the alternative Microsoft keeps pointing to
Microsoft’s Windows lifecycle FAQ frames ESU as a bridge. After the Windows 10 end-of-support date, the FAQ says, individual consumers and organizations can enroll in the paid ESU program, and it recommends Windows 11 for the best security experience.
The Windows 11 option also has dates attached. Microsoft’s FAQ describes Home and Pro versions as serviced for 24 months from release, so a PC that moves to Windows 11 lands on a version with its own servicing clock, while ESU enrollment buys time on Windows 10 22H2, a version whose regular support is already over. The newest Windows 11 release listed on Microsoft’s pages, version 26H2, started on September 29, 2026.
The extended runway has a fixed edge, and Microsoft’s ESU page puts it at October 12, 2027: the final day on which enrollment is open and the program ends. Anything past that date would be a decision for Microsoft to announce, and the page lists no further extension or successor option.
This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.
More from Morning Overview
- Common allergy, bladder and sleep pills tied to sharply higher dementia odds
- The second-largest U.S. reservoir just fell to its lowest level ever recorded
- Security experts still urge phone owners to switch off one location-tracking setting
- The FBI warns a new phishing trick can hijack your account without your password
