Support for Windows 10 ended on October 14, 2025. To keep receiving critical and important security updates, Microsoft offers consumers the ESU (Extended Security Updates) program, until October 12, 2027. Enrollment is done in Windows Update, but the "Enroll now" link only appears if the PC meets every requirement. Here is how to check each one, according to Microsoft.
Problem
- The "Enroll now" link doesn't appear in Settings > Update & Security > Windows Update.
- A message says the device can't be enrolled in ESU.
- ESU updates stopped after a first enrollment.
Requirements set by Microsoft
| Requirement | Details |
|---|---|
| Version | Windows 10, version 22H2 |
| Edition | Home, Professional, Pro Education or Workstations |
| Updates | Latest update installed (a security update released on or after October 14, 2025, for example KB5066791), then the KB5126256 preparation package |
| Account | Administrator account on the PC; enrollment with a Microsoft account that isn't a child account |
| Exclusions | PC in kiosk mode, joined to an Active Directory or Microsoft Entra domain, enrolled in an MDM solution, or already holding an ESU license |
Step 1: check the Windows 10 version and edition
When to use it: always first.
Suggested solution
- Press Windows + R, type the command below, then confirm:
winver
- Check that the window shows Version 22H2 and a compatible edition (Home, Professional, Pro Education or Workstations).
Expected result: the PC is on 22H2 in an eligible edition. An older version isn't eligible for consumer ESU: the PC must first move to 22H2.
Step 2: install the latest update, then KB5126256
When to use it: the version is correct, but the enrollment link doesn't appear.
Suggested solution
- Open Settings > Update & Security > Windows Update and install all offered updates.
- Microsoft requires an order: first a security update released on or after October 14, 2025 (for example KB5066791), then the ESU licensing preparation package KB5126256.
- Once the security update is installed, KB5126256 is normally downloaded and installed automatically by Windows Update. The PC restarts automatically after it is installed.
- Check the update history: it should show "Extended Security Updates (ESU) Licensing Preparation Package for Windows 10 (KB5126256)".
- If the package doesn't arrive, Microsoft also offers it as a standalone download from the Microsoft Update Catalog.
Expected result: after the restart, the enrollment link appears in Windows Update. Note: this package doesn't enroll the PC on its own; it only prepares it.
If Windows Update gets stuck while downloading, see our guide Windows Update stuck at 0% on Windows 10: solutions (French guide).
Step 3: check the account used
When to use it: updates are installed, but enrollment is refused.
Suggested solution
- Check that the Windows session you're using is an administrator account.
- If you use a local account, Windows will ask you to sign in with a Microsoft account during enrollment.
- The Microsoft account must not be a child account.
Expected result: enrollment starts after selecting "Enroll now".
A child's PC: if the device says it can't be enrolled, Microsoft explains that a parent must enroll it from their own user account on that PC, set up as an administrator. If the parent isn't yet a user on the PC, the child must add them first.
Step 4: check that the PC isn't managed by an organisation
When to use it: PC supplied by an employer or school, or previously used in a business.
Suggested solution
- Consumer ESU is not offered for devices in kiosk mode, joined to an Active Directory or Microsoft Entra domain, or enrolled in an MDM management solution.
- Devices that are merely registered with Microsoft Entra remain eligible.
- For a work PC, ESU must be enabled by the organisation's IT department.
Expected result: you know whether the PC falls under consumer ESU or business ESU.
Step 5: choose the enrollment option (European Economic Area)
When to use it: the link is visible and you start enrollment.
Suggested solution
According to Microsoft's French page, two options are offered in the European Economic Area:
| Option | Conditions |
|---|---|
| At no additional cost | Stay signed in to Windows with the Microsoft account used for enrollment |
| One-time purchase of USD 30 (or the local currency equivalent, plus taxes) | Lets you keep a local account; the Microsoft account is only used for the purchase |
- Select Enroll now and follow the prompts.
- Then check the enrollment status in Settings > Update & Security > Windows Update.
Expected result: Windows Update shows that the PC is enrolled. It then receives the critical and important updates released since October 14, 2025.
Special cases
- ESU updates stopped: with the no-cost option, if you no longer sign in to Windows with the Microsoft account used for enrollment, ESU updates stop after a period of time (up to 60 days). You then need to re-enroll.
- Several PCs: one ESU license covers up to 10 devices. On each eligible PC, select "Enroll now", or "Add device" if you're already signed in with the same Microsoft account.
- Several users: one enrollment is enough to protect all users of the PC.
- Moving to Windows 11: enrolling in ESU doesn't prevent you from later upgrading to Windows 11 if the PC is compatible.
- Outside the European Economic Area: Microsoft states that enrollment options may vary by region.
Final check
- ☐
winvershows Windows 10 version 22H2 in an eligible edition. - ☐ A security update from October 14, 2025 or later is installed, followed by KB5126256.
- ☐ The session is an administrator account; the Microsoft account isn't a child account.
- ☐ The PC isn't domain-joined, MDM-managed or in kiosk mode.
- ☐ Windows Update shows that the PC is enrolled in ESU.
Sources
- Microsoft: Windows 10 Extended Security Updates (French page, EEA options) and English page
- Microsoft Support: Extended Security Updates (ESU) Licensing Preparation Package for Windows 10 (KB5126256)
- Microsoft Support: Windows 10 support has ended on October 14, 2025
Still having the problem?
Reply to this topic with:
- The version and edition shown by
winver. - The latest updates visible in the Windows Update history (KB numbers).
- The type of account used (local or Microsoft, administrator or standard).
- The exact message shown, if any.
Do not post your email address, product key or passwords.