Windows 10 ESU Now Runs to October 2027: A Practical Guide for Whoever Manages the PCs
If you're the person who "does IT" for your family, a small office, or a pile of lab machines, there's a Windows 10 date you probably had circled on the calendar: the consumer Extended Security Updates (ESU) program was
If you're the person who "does IT" for your family, a small office, or a pile of lab machines, there's a Windows 10 date you probably had circled on the calendar: the consumer Extended Security Updates (ESU) program was set to end on October 13, 2026. That date no longer applies. Microsoft has pushed consumer ESU out a full year, to October 12, 2027.
Here's what changed, which machines qualify, and how I'd use the extra year if I were looking after a handful of Windows 10 boxes.
Quick recap of the timeline
- October 14, 2025: Windows 10 reached end of support. After that, regular Windows 10 PCs get no feature updates, no technical support and no security updates unless they're enrolled in ESU.
- October 13, 2026: the original end date for consumer ESU.
- October 12, 2027: the new end date for consumer ESU.
The extension wasn't announced with any fanfare. According to BleepingComputer, it showed up as an editor's note dated June 25, 2026 on a Windows Experience Blog post and in Microsoft's ESU documentation. Microsoft's statement to the site was: "We understand that moving to a new PC can take time."
Microsoft's ESU page now says you can "enroll in ESU any time until the program ends on October 12, 2027", and that existing enrollees' coverage "will automatically continue through that date". So if you already enrolled your machines, you don't need to do anything.
Eligibility: check this before you plan anything
This is where people managing several machines get tripped up. The consumer program has specific requirements:
- The PC must run Windows 10, version 22H2. Anything older needs to be updated to 22H2 first.
- It must be a personal-use device. PCs joined to Active Directory, Microsoft Entra, or managed by MDM are not eligible for the consumer program. (Entra-registered devices are fine; joined ones are not.)
- You enroll by signing in with a Microsoft account.
If you're running domain-joined or MDM-managed machines, the consumer extension doesn't help you. Businesses use the separate commercial ESU program, which Microsoft's lifecycle FAQ lists in yearly terms, with Year 3 running to October 10, 2028. Treat that as a separate budget and planning track.
A practical first step for a mixed fleet: make a quick list of every Windows 10 machine with three columns, version (22H2 or not), join state (personal / AD / Entra-joined / MDM), and ESU enrolled (yes/no). That list tells you which program each machine falls under and which ones are quietly unpatched.
Enrollment options and cost
On eligible PCs, enrollment lives under Settings > Update & Security > Windows Update. Microsoft lists three options:
| Option | Cost | Notes |
|---|---|---|
| Sync your PC settings | $0 | Uses Windows Backup with your Microsoft account |
| Microsoft Rewards | 1,000 points | Redeemed once |
| One-time purchase | $30 USD + tax | Or local currency equivalent |
Two details worth knowing if you look after several devices:
- One ESU license covers up to 10 devices on the same Microsoft account.
- BleepingComputer notes that users in the European Economic Area can get ESU free by signing in with a Microsoft account.
For most home and small-office setups, the free settings-sync route is the obvious choice.
What ESU does and doesn't give you
ESU delivers critical and important security updates only. It doesn't add new features, it doesn't include non-security fixes, and it doesn't come with technical support. Think of it as keeping the lights on, not as continued product development. If a Windows 10 bug breaks something you depend on, ESU won't fix it.
Your four options
- Stay on Windows 10 with ESU. Reasonable for hardware that can't run Windows 11 but still does its job. Just remember it's security-only.
- Upgrade to Windows 11. Free on PCs that meet the Windows 11 requirements, which include TPM 2.0 and UEFI Secure Boot. Run the PC Health Check app to see where each machine stands.
- Replace the PC sometime in the next year, using the extension as breathing room.
- Do nothing. Not recommended. An unpatched, internet-connected PC becomes an easier target for malware over time, and on a shared network it's a risk to everything else on that LAN.
How I'd use the extra year
- Now: enroll every eligible personal-use machine in ESU (free for most people). It costs nothing and closes the security gap right away.
- Next few months: run PC Health Check across the fleet and sort machines into "can upgrade to Windows 11" and "needs replacing".
- Before mid-2027: do the Windows 11 upgrades in batches, and budget for replacements so you're not buying hardware in a panic right before October 12, 2027.
The extension is good news, especially if you have older hardware, but it's a delay, not a reprieve. Enroll, then plan your move to Windows 11 or new hardware before the new deadline.
Sources
- Microsoft: Windows 10 Extended Security Updates
- BleepingComputer: Microsoft quietly extends free Windows 10 ESU support to October 2027 (June 25, 2026)
- Microsoft Learn: Lifecycle FAQ รขโฌโ Extended Security Updates
- Microsoft: Windows 11 specifications
Originally published at infinityme.dev.
Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes โ full credit and traffic to the original publisher.