Windows 10 Consumer Extended Security Updates, or ESU, now runs through October 12, 2027 for eligible personal PCs in the United States. If your PC is already enrolled, coverage continues automatically through that date. You do not need to pay again, redeem more Microsoft Rewards points or repeat enrollment.
Windows 10 reached end of support on October 14, 2025. Consumer ESU is a temporary option for people who need more time to move to Windows 11 or replace an older computer. This article concerns personal PCs; workplace and school devices use separate commercial arrangements.
If your Windows 10 PC is already enrolled
Microsoft says that an existing Consumer ESU enrollment continues automatically through October 12, 2027. This applies whether you originally enrolled by syncing PC settings, redeeming Microsoft Rewards points or making the one-time purchase.
You do not need to buy another year, redeem another 1,000 points or run the enrollment process again. Be cautious about unexpected emails, pop-ups or websites asking you to renew Consumer ESU. Enrollment is managed from Windows Update, using the Microsoft account associated with the license.
To check a PC’s status:
- Select Start, then open Settings.
- Choose Update & Security.
- Select Windows Update.
- Review the ESU information shown on the Windows Update page.
- Select Check for updates and install available updates.
Keep Windows Update enabled. ESU security updates are delivered through Windows Update when Microsoft releases them.
One Consumer ESU license can be used on up to ten eligible PCs. Additional computers are not added automatically. On each eligible PC, open Settings > Update & Security > Windows Update, select Enroll now, then follow the prompts. If the computer uses the same Microsoft account as the first enrolled PC, select Add device when that option appears.
How to enroll a PC that is not covered
You can enroll in Consumer ESU until the program ends on October 12, 2027. However, a PC is more exposed to security risks during any period after October 14, 2025 when it is not enrolled and therefore does not receive applicable ESU updates.
For Consumer ESU, the device must meet these requirements:
- It runs Windows 10 version 22H2 in the Home, Pro, Pro Education or Pro for Workstations edition.
- It has the latest available Windows updates installed.
- The Microsoft account used for enrollment is an administrator account on the PC.
- The Microsoft account is not a child account.
- The PC is not operating in kiosk mode.
- The PC is not joined to an Active Directory domain, joined to Microsoft Entra or enrolled in mobile device management. A device that is only Microsoft Entra registered can still be eligible.
Open Settings > Update & Security > Windows Update. Eligible, unenrolled PCs should show an Enroll now option. If you normally sign in to Windows with a local account, Windows will prompt you to sign in with a Microsoft account.
In the United States, Microsoft offers three enrollment options:
- Sync PC settings at no additional cost. This uses Windows Backup to sync eligible Windows settings through the Microsoft account.
- Redeem 1,000 Microsoft Rewards points. You must have enough points and an eligible Microsoft Rewards account.
- Make a one-time purchase of $30. Applicable tax may be added.
Each option provides the same Consumer ESU security-update coverage through October 12, 2027. Paying for ESU does not provide broader Windows support than the settings-sync or Rewards option.
If Enroll now is missing, install all available Windows updates, restart the PC and check that it is running version 22H2. Press Windows key + R, type winver and select OK to see the installed version. Also confirm that the Microsoft account you plan to use is an administrator account and is not a child account.
A PC previously used for work or school may retain management settings that prevent consumer enrollment. Check Settings > Accounts > Access work or school before removing anything. Do not disconnect an account or change management settings on a computer owned or administered by an employer or school.
What KB5126256 does and does not do
Microsoft released KB5126256, the Windows 10 ESU Licensing Preparation Package, on September 8, 2026. It updates the licensing and enrollment components needed for a Windows 10 version 22H2 PC to enroll in ESU.
Installing KB5126256 does not enroll the PC, grant an ESU license or independently provide continuing security updates. It prepares an eligible device for the enrollment process. After it is installed, you must still complete enrollment in Windows Update.
Microsoft lists this installation order for a PC that is not yet enrolled:
- Install Windows 10 version 22H2 and a security update released on or after October 14, 2025, such as KB5066791.
- Install KB5126256 after that security update.
- Allow the PC to restart when prompted.
- Open Settings > Update & Security > Windows Update.
- Select Enroll now and complete an available Consumer ESU enrollment option.
- Return to Windows Update to confirm that the PC is enrolled.
The package may appear in update history as Extended Security Updates ESU Licensing Preparation Package for Windows 10 KB5126256. That proves the preparation package was installed, not that the PC has ESU coverage. If Windows Update still offers Enroll now, enrollment is not complete.
KB5126256 applies to devices that are not already enrolled in ESU. A PC with active Consumer ESU enrollment does not need the package to renew or extend its existing coverage.
What Consumer ESU includes through 2027
Consumer ESU provides eligible critical and important Windows 10 security updates through Windows Update. It is not a restoration of normal Windows 10 support.
Consumer ESU does not include:
- New Windows features or feature updates
- General product enhancements or design changes
- Routine non-security updates
- Technical support for ordinary Windows problems
- A guarantee that third-party apps, drivers or hardware will remain supported
Consumer ESU differs from commercial ESU licensing for organizations. Consumer coverage is associated with a personal Microsoft account and can be used on up to ten eligible personal PCs. Domain-joined, Microsoft Entra-joined and centrally managed workplace devices are generally outside the Consumer ESU program and should be handled by the organization’s information technology administrator.
Enrolling in ESU does not prevent a later upgrade to Windows 11. If Windows Update says your PC can upgrade, you can move to Windows 11 before Consumer ESU ends. If an expected Windows 11 release is not offered, follow this Windows 11 eligibility and update guide.
For an already enrolled PC, check the ESU status in Windows Update and continue installing monthly updates. If KB5126256 appears in update history but Windows Update offers Enroll now, complete the enrollment wizard rather than treating the package as proof of coverage.
