How to Check Windows 10 ESU Eligibility and Enroll

Windows 10 ESU eligibility comes down to the short checklist below: Windows 10 version 22H2 with current updates, a personal PC that isn’t domain-joined, Entra-joined, or MDM-managed (Entra-registered PCs still qualify), and an adult Microsoft account that’s an administrator on the PC to sign in with during enrollment. If your PC passes, an Enroll now link appears in Settings > Update & Security > Windows Update. In most markets, Microsoft offers a no-cost enrollment option that requires syncing your PC settings, alongside Rewards and paid options.

What Is Windows 10 Consumer ESU?

Windows 10 stopped getting free security updates on October 14, 2025. Extended Security Updates (ESU) is Microsoft’s paid-or-free bridge program that keeps eligible home PCs patched for a limited time (Microsoft ESU page). It’s built into Windows Update. There’s no separate app and no license key to type in.

ESU is worth enrolling in if:

Your PC fails the Windows 11 hardware check (usually TPM 2.0 or an older CPU).
You plan to replace the PC soon but not right now.
You manage a parent’s or small office’s older PC and need it safe for another year.

What ESU covers: security patches Microsoft rates as Critical or Important.

What ESU doesn’t cover: new features, design changes, bug fixes that aren’t security-related, or technical support from Microsoft (Microsoft Learn ESU overview). ESU delivers security updates only, so keep Microsoft Defender or your security suite running.

Before You Begin: Eligibility Checklist

Tick off every box before you look for Enroll now:

Windows 10, version 22H2
Edition is Home, Pro, Pro Education, or Pro for Workstations
A security update released on or after October 14, 2025 installed first, then the ESU Licensing Preparation Package, which Windows Update installs automatically after it (<strong>KB5126256</strong>)
Microsoft’s requirement is met: “The Microsoft account used to sign in to the device must be an administrator account,” and it can’t be a child account. If you use Windows with a local account, you don’t have to convert it first; the enrollment wizard prompts you to sign in with a Microsoft account. On a child’s PC, an adult who is set up as an administrator user enrolls the device.
The PC isn’t joined to an Active Directory domain or Microsoft Entra ID and isn’t enrolled in mobile device management (MDM). A personal PC that is only Microsoft Entra registered (for example, you added a work or school account to it) can still use consumer ESU, according to Microsoft.
The PC isn’t running in kiosk mode, which Microsoft excludes from consumer enrollment.

Requirement	Details
OS version	Windows 10, version 22H2
Editions	Home, Pro, Pro Education, Pro for Workstations
Updates	Security update from October 14, 2025 or later, then KB5126256 (installed automatically)
Account	Per Microsoft, the Microsoft account used to sign in to the device must be an administrator account
Sign-in	Adult Microsoft account (not a child account); you can switch from a local account during enrollment
Management	Not domain-joined, Entra-joined or MDM-enrolled (Entra registered is OK); not in kiosk mode

Domain-joined, Entra-joined, MDM-managed and kiosk-mode PCs can’t use the consumer program, and Microsoft says consumer ESU can’t be used in commercial scenarios. If the PC belongs to a business or school, ask its IT administrator what options apply. This guide covers personal PCs only.

Compare the Three Enrollment Options

Microsoft lists three ways to enroll a personal PC in the consumer ESU program (Microsoft ESU page). They’re enrollment routes, not separate eligibility tests: your PC still has to meet the checklist above. Microsoft also says enrollment options and timing may vary by region, such as in the European Economic Area (EEA), so follow the choices your wizard actually shows.

Option	Cost	Catch
Windows settings backup	No cost in most markets	Your Windows settings sync to your Microsoft account
Microsoft Rewards	1,000 Rewards points	You need enough points banked
One-time purchase	$30 USD plus tax (or local equivalent)	Costs money, but no syncing required

Most people should pick the no-cost settings-sync option. Pay only if you don’t want your settings synced to your Microsoft account.

Microsoft’s ESU page says you can use your existing ESU license for up to 10 devices. For business questions, see the ESU FAQ.

Step-by-Step Guide

Step 1: Confirm Your Windows Version and Edition

Press Win + I to open Settings.
Go to Settings > System > About.
Scroll to Windows specifications.
Check that Edition shows a supported Windows 10 edition and Version shows 22H2.

Windows 10 Settings > System > About page scrolled to Windows specifications, with the Edition field (Windows 10 Home or Pro) and the Version field showing 22H2 highlighted

Prefer a command? Open PowerShell and run:

(Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion").DisplayVersion

Expected result: 22H2. Anything else means you need a feature update first (see Fix #2 below).

Step 2: Install Every Pending Update

Go to Settings > Update & Security > Windows Update.
Click Check for updates.
Install everything offered. Order matters: Microsoft says the ESU Licensing Preparation Package (KB5126256) must be installed after a Windows 10 22H2 security update released on or after October 14, 2025 (such as KB5066791), and that Windows Update downloads and installs the package automatically once that security update is present (Microsoft Support: KB5126256). You don’t need to hunt for it separately.
Restart when prompted. The PC also restarts automatically after the preparation package installs.
Repeat steps 2–4 until Windows reports You’re up to date.

Windows 10 Settings > Update & Security > Windows Update page with the Check for updates button highlighted

To confirm the ESU prep package landed, run this in PowerShell:

Get-HotFix -Id KB5126256

Expected result: one line showing the KB number and install date. If it returns an error, check View update history on the Windows Update page instead. Some packages don’t show up in Get-HotFix.

Step 3: Confirm You’re an Administrator

Go to Settings > Accounts > Your info.
Look under your name for Administrator.
Check whether it says Local account or shows an email address. An email address means you’re already on a Microsoft account.

Windows 10 Settings > Accounts > Your info page showing the account name with the Administrator label and the signed-in Microsoft account email

A local account is fine at this point — you don’t need to already be signed into a Microsoft account to check this. What matters is that whichever Microsoft account you use when you enroll is set up as an administrator on this PC; the enrollment wizard will prompt you to sign in with it.

Step 4: Find the Enroll Now Link

Return to Settings > Update & Security > Windows Update.
Look for the message about Windows 10 reaching end of support, with an Enroll now link below it.

Windows 10 Windows Update page showing the Extended Security Updates notice with the Enroll now link highlighted

Expected result: the Enroll now link is visible. If it’s missing, skip to the fixes below.

Step 5: Sign In With Your Microsoft Account

Click Enroll now.
If you’re on a local account, click Sign in and enter your Microsoft account email and password.
Confirm the account. This account now holds your ESU license.

Step 6: Choose an Enrollment Option

Pick one of the three options shown: Back up your PC settings (free), Redeem 1,000 Microsoft Rewards points, or one-time purchase ($30 USD).
Click Next.

ESU enrollment wizard screen listing the three enrollment choices: free Windows settings backup, 1,000 Microsoft Rewards points, and one-time purchase

Step 7: Finish the Wizard

Follow the remaining prompts. Approve the backup, confirm the points redemption, or complete payment.
Click Done when the wizard confirms enrollment.

Step 8: Verify Your Enrollment

Go back to Settings > Update & Security > Windows Update.
Look for a message confirming your PC is enrolled in Extended Security Updates.

Windows 10 Windows Update page showing the confirmation that the PC is enrolled in Extended Security Updates, with the status text highlighted

The Windows Update page is where Windows shows your consumer enrollment status (Microsoft Tech Community).

Configuration: Settings That Affect ESU

Windows version: must stay on 22H2. Don’t roll back to an older build after enrolling.
Settings backup: if you enrolled through the no-cost settings-sync option, that sync is your enrollment route. Leave it on.
Signed-in account: the ESU license is tied to the Microsoft account you used. Keep that account on the PC.
Windows Update: leave automatic updates on so ESU patches install each month.

Enroll Now Missing? Fixes in Order

Fix #1: Check for Updates Again and Restart

Go to Settings > Update & Security > Windows Update.
Click Check for updates and install everything.
Restart the PC, even if Windows doesn’t ask.
Check the Windows Update page for Enroll now again.

Windows Update can offer updates in stages, so check again after each restart until nothing new appears and KB5126256 shows in your update history.

Fix #2: Update to Windows 10 22H2

Open Settings > System > About and check Version.
If it’s older than 22H2, go to Settings > Update & Security > Windows Update.
Click Download and install under the feature update to Windows 10, version 22H2.
Restart, then repeat Fix #1.

Fix #3: Install KB5071959

This fix applies if the Enroll now wizard starts but then fails. Microsoft’s November 11, 2025 out-of-band update KB5071959 (OS Build 19045.6466) addresses an issue where the Windows 10 consumer ESU enrollment wizard may fail during enrollment, and Microsoft says it’s offered to consumer devices that aren’t enrolled in ESU (Microsoft Support: KB5071959). If Windows Update doesn’t offer it, your PC may not need it, so don’t download it from unofficial sites.

Go to Settings > Update & Security > Windows Update > View update history.
Look for KB5071959.
If it’s missing, click Check for updates and install it.
Restart and look for Enroll now again.

Fix #4: Check Your Account Type and Admin Rights

Go to Settings > Accounts > Your info.
If you see Local account, that alone doesn’t block you. Click Enroll now and sign in with your Microsoft account when the wizard asks.
If you’re signed in with a child account in a Microsoft family group, have an adult who is set up as an administrator user on the PC run the enrollment instead.
If you aren’t an administrator, have the PC’s admin go to Settings > Accounts > Family & other users, select your account, click Change account type, and choose Administrator.

Fix #5: Check for Work or School Management

Go to Settings > Accounts > Access work or school.
Select any connected account and look at how it’s attached. Connected to … Azure AD or Microsoft Entra ID (a joined device), a domain connection, or a device-management (MDM) entry means the PC is managed and can’t use consumer ESU. If it’s a work or school PC, ask that organization’s IT department what applies.
A work or school account that was only added for apps and email makes the PC Microsoft Entra registered, which Microsoft says can still use consumer ESU. Don’t disconnect it just for ESU.

Fix #6: Wait and Recheck

Microsoft rolled out the enrollment option gradually. If every box on the checklist is ticked, check Windows Update every few days. Don’t use third-party scripts or unofficial enrollment hacks. They can break licensing and aren’t supported.

Tips and Troubleshooting

Wizard closes with an error: check whether Windows Update offers KB5071959 (Fix #3), restart, and try again.
Free option not offered: options vary by region and account, so choose the Rewards or paid option your wizard shows instead.
Low disk space: ESU updates need room to install. If your C: drive is nearly full, an SSD upgrade is a cheap way to extend an older PC’s life alongside ESU.
Back up before big updates: copy your files to an external hard drive before installing the 22H2 feature update.

When Does ESU Coverage End?

Microsoft’s original consumer ESU end date was October 13, 2026. Microsoft’s ESU page, checked October 20, 2026, now says the program ends on October 12, 2027, and already-enrolled PCs continue automatically (Microsoft ESU page; PCMag). Check the official page for your enrollment’s exact end date, because Microsoft may change it again.

When coverage ends, you have three real choices:

<strong>Upgrade to Windows 11</strong> for free if your PC passes the hardware check.
Buy a new Windows 11 laptop or desktop if it doesn’t.
Retire the PC from online use. An unpatched PC shouldn’t handle banking or email.

Wrapping Up

For most people, the no-cost settings-sync option is the obvious choice where your wizard offers it. If Enroll now won’t show up, start with Fix #1 (update, restart, repeat) and work down the list. If the PC also crashes, runs hot, or shows pop-ups you didn’t trigger, ESU won’t help. Scan for malware and start pricing a replacement, because aging hardware or an infection is the real problem.