Key Takeaways

  • Microsoft has extended Windows 10 Consumer Extended Security Updates for an additional year, through October 12, 2027.
  • Existing consumer ESU participants will receive the additional coverage automatically, with no action required.
  • The extension applies to eligible personal-use devices, not commercially managed Windows 10 endpoints.
  • ESU provides critical and important security updates, but no new features, general bug fixes, product improvements, or technical support.
  • Businesses should continue planning their migration to Windows 11, Windows 365, or Azure Virtual Desktop rather than treating ESU as a permanent solution.

Microsoft has quietly given Windows 10 users more time.

The company's updated Extended Security Updates page now states that eligible personal devices can receive Windows 10 security updates through October 12, 2027. The consumer program had originally been presented as a one-year bridge ending in October 2026.

Microsoft has also confirmed that people already enrolled in Consumer ESU will receive the additional year automatically. No new registration or payment is currently required for those devices.

This is welcome news for home users whose PCs cannot immediately move to Windows 11. For businesses, however, the distinction between consumer and commercial ESU remains important.

What Changed in the Windows 10 ESU Program?

Windows 10 reached end of support on October 14, 2025. Devices that were not enrolled in an ESU program stopped receiving the normal monthly security updates available during the supported product lifecycle.

Microsoft originally offered consumers one additional year of protection. An official Microsoft update published in June 2026 confirmed that personal-use devices would receive another year, extending Consumer ESU coverage through October 12, 2027.

Microsoft's current Windows 10 Consumer ESU page now states:

  • New users can enroll until October 12, 2027.
  • Existing participants continue automatically through the new date.
  • One ESU license can cover up to ten eligible devices associated with the same Microsoft account.
  • Devices receive critical and important security updates released after the end of standard Windows 10 support.

This extension gives users more time to evaluate hardware, prepare data, and plan a controlled transition to Windows 11.

It does not return Windows 10 to full support.

What Does Windows 10 ESU Include?

ESU is designed to reduce security exposure while a device is awaiting replacement or migration.

It includes security updates classified as Critical or Important by the Microsoft Security Response Center. These updates are delivered through Windows Update after the device has been successfully enrolled.

ESU does not include:

  • New Windows features
  • Product enhancements
  • General non-security fixes
  • Design changes
  • Standard Windows 10 technical support

This means an ESU-enrolled computer can continue receiving important security patches, but the operating system itself remains a retired platform.

Compatibility problems, application failures, hardware limitations, and non-security defects may remain unresolved.

Which Personal Devices Are Eligible?

According to Microsoft, a consumer device must meet the following requirements:

  • Run Windows 10 version 22H2
  • Use the Home, Professional, Pro Education, or Pro for Workstations edition
  • Have the latest available Windows updates installed
  • Be enrolled by an adult Microsoft account with administrator permissions
  • Not be operating in kiosk mode
  • Not be joined to Active Directory or Microsoft Entra ID
  • Not be managed through a Mobile Device Management platform

Microsoft Entra-registered personal devices may still qualify, but domain-joined, Entra-joined, and MDM-managed endpoints must use the commercial ESU route.

Enrollment options and pricing can also vary by region, particularly within the European Economic Area.

How Can Consumers Enroll?

Eligible users can check for enrollment from the Windows 10 settings interface:

  1. Open Settings.
  2. Select Update & Security.
  3. Open Windows Update.
  4. Select Enroll now under the Extended Security Updates section.
  5. Sign in with an eligible Microsoft account and choose an available enrollment option.

Microsoft currently lists three possible routes:

  • Enroll at no additional cost by synchronizing PC settings
  • Redeem 1,000 Microsoft Rewards points
  • Make a one-time purchase of $30 USD or the local-currency equivalent, plus applicable taxes

Regional availability and enrollment conditions may differ. Users should verify the options displayed directly on their device rather than assuming that every method is available in every country.

Does the Extension Apply to Business Computers?

The newly announced automatic extension applies specifically to the Consumer ESU program for personal-use devices.

A computer managed by a company through Active Directory, Microsoft Entra ID, or an MDM platform such as Microsoft Intune cannot use the consumer enrollment process. Organizations must obtain and activate commercial Windows 10 ESU licenses.

Commercial ESU follows a separate three-year schedule:

Coverage year Coverage period
Year 1 October 15, 2025-October 13, 2026
Year 2 October 14, 2026-October 12, 2027
Year 3 October 13, 2027-October 10, 2028

Microsoft's commercial ESU documentation lists a Year One price of $61 USD per device, with the price doubling in each consecutive year. Commercial coverage is also cumulative: an organization entering the program in Year Two must pay for Year One as well.

For organizations with a large Windows 10 estate, delaying migration can therefore become progressively more expensive.

Cloud Desktops May Provide Another Route

Some Microsoft-hosted desktop scenarios include Windows 10 ESU entitlement without a separate ESU charge.

Eligible environments include services such as:

  • Windows 365
  • Azure Virtual Desktop
  • Azure Virtual Machines
  • Azure Dedicated Host
  • Azure VMware Solution

Microsoft also provides ESU entitlement for certain managed Windows 10 endpoints used to access Windows 365 Cloud PCs, subject to identity, licensing, and sign-in requirements.

For organizations already evaluating desktop modernization, this can make Windows 365 or Azure Virtual Desktop more attractive than purchasing multiple years of standalone ESU licenses. Read our guide to cloud desktops and VDI for a closer look at these options.

The right choice depends on application compatibility, endpoint age, user location, identity architecture, and the cost of maintaining the existing estate.

ESU Is a Bridge, Not a Migration Strategy

The additional year reduces immediate pressure for consumers, but it does not change the strategic direction of Windows.

Windows 10 is no longer receiving feature development, broad technical support, or the security improvements built into current Windows 11 hardware. ESU addresses known vulnerabilities classified at specific severity levels; it does not eliminate the operational risk of remaining on an aging platform.

Businesses should use the ESU period to:

  1. Inventory all remaining Windows 10 devices.
  2. Identify which endpoints can upgrade to Windows 11.
  3. Test business-critical applications and peripheral compatibility.
  4. Replace hardware that does not meet Windows 11 requirements.
  5. Evaluate Windows 365 or Azure Virtual Desktop for legacy workloads.
  6. Establish a phased migration deadline before ESU costs increase again.

Organizations that wait until the final ESU deadline risk combining hardware procurement, application remediation, user training, and security migration into one expensive emergency project.

Conclusion

Microsoft's extension gives personal Windows 10 users until October 12, 2027, to complete their transition while continuing to receive critical and important security updates.

For businesses, the message is different. Commercial ESU remains a paid, temporary safety net with increasing annual costs. It can protect systems that cannot move immediately, but it should support a migration plan—not replace one.

If your organization still operates Windows 10 devices, Computer On Site can assess your endpoint estate, confirm ESU eligibility, identify Windows 11 compatibility issues, and design a phased migration to Windows 11, Windows 365, or Azure Virtual Desktop.