How do I enroll my child’s Windows 10 PC in ESU?

If your child’s device shows a message saying it can’t be enrolled in ESU, it likely means they don’t have the necessary permissions. In that case, you’ll need to enroll the device for them. To do that, you must be set up as a user on that PC. If you aren’t already, your child will need to add you as a user before you can complete the enrollment. Follow these steps to enroll your child's device: Switch to your user account on your child's device by selecting Start and select the account name icon (or picture) of your account. If you are not a user on their device, your child will need to add you as a user on your Microsoft account and configure it as an administrator following the steps here: Manage user accounts in Windows . Once you are signed into your user account, follow the steps to enroll in ESU .

An office with a desk, chair, lamp and office supplies, with a window, hanging clothes and a potted plant on either side

Windows 10 Consumer Extended Security Updates (ESU)

Find out how the Windows 10 Extended Security Updates (ESU) program helps keep your device secure.

What is Windows ESU?

The Extended Security Updates (ESU) program for Windows 10 provides customers with a more secure option to continue using their Windows 10 PCs after 14 October, 2025, while they transition to Windows 11. The ESU program helps reduce the risk of malware and cybersecurity attacks by providing access to critical and important security updates as defined by the Microsoft Security Response Centre (MSRC) for devices running Windows 10, version 22H2. ESU enrollment does not provide other types of fixes, feature improvements, or product enhancements. It also does not come with technical support.

The last day of support for Windows 10 is 14 October, 2025. If you need more time to move to Windows 11, we recommend you enroll your Windows 10 device in ESU. You can enroll in ESU any time until the program ends on 13 October, 2026.

Windows 10 ESU prerequisites

To enroll in the consumer Windows 10 ESU program, make sure your device meets the following requirements:

Devices need to be running Windows 10, version 22H2 Home, Professional, Pro Education, or Workstations edition.
Devices need to have the latest Windows update installed. Learn how to install Windows updates.
The Microsoft account used to sign in to the device must be an administrator account.
- The ESU license will be associated with the Microsoft account used to enroll. You may be prompted to sign in with a Microsoft account if you typically sign into Windows with a local account.
The Microsoft account can’t be a child account.

The consumer ESU program can’t be used by commercial devices. Consumer ESU enrollment won’t be offered to devices in the following scenarios:

Devices in kiosk mode.
Devices joined to an Active Directory domain or that are Microsoft Entra joined.
- However, devices that are Microsoft Entra registered can use the Consumer ESU program.
Devices enrolled in a Mobile Device Management (MDM) solution.
Devices that already have an ESU license.

If a device is enrolled in the Consumer ESU program and then participates in one of the Commercial ESU scenarios listed above, the Consumer ESU enrollment on the device will be suspended until it is no longer being used as a Commercial device.

If you're an IT professional and need to enable ESU for your organisation, see Enable Extended Security Updates (ESU).

How much does Windows 10 ESU cost?

You can enroll in ESU in one of the following three ways:

At no additional cost if you are syncing your PC Settings.
Redeem 1,000 Microsoft Rewards points.
One-time purchase of $30 USD or local currency equivalent plus applicable tax.

All enrollment options provide extended security updates through 13 October, 2026. You can enroll in ESU any time until the program ends on 13 October, 2026, however devices will be more vulnerable and susceptible to viruses and malware before enrollment. You will need to sign into your Microsoft account in order to enroll in ESU. You’ll be given these options to choose from when you enroll in the ESU program. You can use your existing ESU license on up to 10 devices.

How to get Windows 10 ESU

ESU is rolling out to eligible devices running Windows 10, version 22H2 prior to the end of support date on 14 October, 2025, with availability expanding gradually as the phased rollout progresses.

To get ESU on your Windows 10 device:

Go to Settings > Update & Security > Windows Update. If your device meets the prerequisites, you’ll see a link to enroll in ESU.
Once you select Enroll now you’ll start the ESU enrollment. If you are signed into Windows with a local account, you will be prompted to sign into your Microsoft account. If you are already backing up your PC Settings, you will see a prompt to enroll your device.
If you aren’t backing up your Windows settings, you can choose if you want to begin backing up your settings, redeem Rewards, or make a one-time purchase to enroll in ESU.

You can use your existing ESU license on up to 10 devices once you enroll in ESU. Just go to Settings > Update & Security > Windows Update and select enroll now on those additional devices. If you are already signed into the device with the same Microsoft account used to enroll your first device, select Add device. If you are not signed into the device with a Microsoft account, you will be prompted to sign in to the Microsoft account used to enroll the first device.

Extended Security Updates (ESU) program enrollment screen

Frequently asked questions

If you need more time to move to Windows 11, and plan on using your Windows 10 PC after 14 October, 2025, enrolling in ESU can give you peace of mind by helping protect your Windows 10 device until the program ends on 13 October, 2026.

You can enroll in ESU any time until the program ends on 13 October, 2026, however devices will be more vulnerable and susceptible to viruses and malware before enrollment. If you enroll after the ESU program launches, you will receive any previous updates as well as any future updates.

The ESU program delivers critical and important security updates for enrolled Windows 10 PCs after the last day of support for Windows 10. These security updates will be delivered through Windows Update as they're made available.

Yes! Enrolling in ESU does not prevent you from upgrading your PC to Windows 11 if it meets the hardware eligibility requirements. Explore the advanced features in Windows 11.

If you enrolled in ESU by completing a one-time purchase, you can cancel your order any time before 14 October, 2025. To learn more about how to cancel an order or pre-order, see Cancel an order or pre-order from Microsoft Store.

If you cancel a pre-order after it's billed but before it's released, we'll process it as a refund. To find out about the status of your refund, see Get the status of your return and refund from Microsoft Store.

If you use money in your Microsoft account, we'll charge you right away. If you use any other payment option, including payment backup, we may charge you up to 10 days before the release date.

After 14 October, 2025, any refunds would follow our policy for digital purchases for your country. For complete details on how to return eligible products, see our Returns and Refunds page.

If you enrolled in ESU at no additional cost by backing up your PC settings, you were not charged for ESU, so there would not be any refunds. If you enrolled in ESU by redeeming Microsoft Rewards points, Rewards orders are final and are not eligible for return or exchange.

No—once any user on a Windows 10 PC enrolls in ESU, any additional users on that PC will also be protected. However, if any users have other Windows 10 PCs they will need to enroll those devices in ESU.

You can use your ESU license on up to 10 devices once you enroll in ESU. Any additional Windows 10 PC you wish to enroll in ESU must meet the eligibility requirements. To enroll a different PC, navigate to Settings > Update & Security > Windows Update. Select enroll now, then follow the prompts to add the device to ESU.

If your child’s device shows a message saying it can’t be enrolled in ESU, it likely means they don’t have the necessary permissions. In that case, you’ll need to enroll the device for them. To do that, you must be set up as a user on that PC. If you aren’t already, your child will need to add you as a user before you can complete the enrollment. Follow these steps to enroll your child's device:

Switch to your user account on your child's device by selecting Start and select the account name icon (or picture) of your account.
If you are not a user on their device, your child will need to add you as a user on your Microsoft account and configure it as an administrator following the steps here: Manage user accounts in Windows.
Once you are signed into your user account, follow the steps to enroll in ESU.

To ensure you have the most modern and secure computing experience, your first step is to check if your device can upgrade to Windows 11. If your device is unable to upgrade, we encourage you to explore Windows 11 and Copilot+ PCs. This way, you’ll continue receiving the latest security updates, features, and innovations from Microsoft. Together with our partners, we offer a range of Windows 11 PCs to support how you live, work, and create. Find a PC that is right for you here.

You can check your enrollment status anytime by navigating to Settings > Update & Security > Windows Update. If you purchased ESU, you will also be able to see your order in your Order History.

If you're an IT professional and need to enable ESU for your organisation, see Enable Extended Security Updates (ESU).