
Windows 10 reaches end of support on October 14, 2025. After that date, devices that stay on Windows 10 won’t receive the normal monthly security updates unless you move to Windows 11 or use Microsoft’s Extended Security Updates (ESU) program.
Here’s the confusing part: even if you’re on Windows 10 version 22H2 and fully up to date, the “Enroll now” link might not show yet. That’s usually not an error—Microsoft is rolling ESU enrollment out in phases, so eligible devices can appear at different times.
This guide explains what Windows 10 ESU is, what must be true for the link to appear, and what to check (and fix) when it doesn’t.
- 1 What is Windows 10 ESU?
- 2 First: Check the Requirements (Quick Checklist)
- 3 If “Enroll now” appears: How to enroll (safe, simple steps)
- 4 “Enroll now” is missing: Why it happens and what to do
- 4.1 1) Confirm Windows 10 is really 22H2 (and fully patched)
- 4.2 2) Make sure Windows Update isn’t “blocked” (paused, metered, wrong time)
- 4.3 3) Verify you can sign in with a Microsoft account (and you’re an admin)
- 4.4 4) Confirm the PC is not work/school managed
- 4.5 5) Run Windows Update Troubleshooter (quick health check)
- 4.6 6) Do a “servicing refresh” (SFC/DISM) if updates are acting weird
- 4.7 7) Understand the phased rollout (the most common “non-problem”)
- 4.8 8) Regional differences (sometimes real)
- 5 FAQ
- 6 Summary – Quick Reference (Do this in order)
- 7 Related Articles (Internal Links)
What is Windows 10 ESU?
Extended Security Updates (ESU) is an optional program that continues delivering important and critical security updates for Windows 10 after the official support end date. It’s meant to be a bridge—a little extra time to upgrade hardware, plan a migration, or avoid rushing.
- What you get: Important/Critical security patches for Windows 10
- What you don’t get: New features, major improvements, or “normal” consumer support like an actively supported OS
- Coverage period (consumer ESU): From end of support (October 14, 2025) through October 13, 2026 for the consumer ESU program Microsoft describes on its ESU page
How ESU enrollment works (and why the link matters)
For consumer devices, Microsoft’s ESU enrollment is designed to start from Settings → Update & Security → Windows Update. When your device is eligible and has been included in the rollout, Windows Update shows an “Enroll now” link that launches the enrollment reminder/wizard.
Enrollment generally requires signing in with a Microsoft account (even if you normally use a local account), and you may be offered multiple ways to enroll (free option tied to backup/settings sync, Rewards points, or paid). Exact options can vary by region and Microsoft may adjust the offering over time.
Because the entry point is controlled by Windows Update, no link = no consumer enrollment path yet (for most users). That’s why your first goal is to confirm you’re eligible and that Windows Update is healthy—then understand the rollout reality.
💡 Tip – Prepare safely first
Before enrolling in ESU (or doing any major Windows change), back up what you can’t replace. A USB drive or external SSD is cheap insurance.
First: Check the Requirements (Quick Checklist)
If any item below is missing, Windows Update may not offer ESU enrollment yet. Microsoft also states that ESU availability is expanding gradually as part of a phased rollout.
| Requirement | How to check | Why it matters |
|---|---|---|
| Windows 10 Version 22H2 | Settings → System → About or Win+R → winver | Consumer ESU is described as rolling out to eligible devices running Windows 10, version 22H2. |
| Latest Windows updates installed | Settings → Update & Security → Windows Update → Check for updates | Out-of-date systems often won’t get new enrollment UI until servicing is current. |
| Microsoft account available | Settings → Accounts → Your info | Microsoft’s ESU flow prompts local-account users to sign in with a Microsoft account. |
| Administrator rights | Settings → Accounts → Your info / Family & other users | Enrollment and system changes can fail from a standard account. |
| Not managed by work/school IT | Settings → Accounts → Access work or school | Work/school managed environments often use separate (commercial) paths and policies; consumer enrollment may not appear. |
| Included in the phased rollout | Re-check Windows Update periodically | Even eligible devices can wait days/weeks as Microsoft expands availability. |
Important: Even if everything above is perfect, you still may not see “Enroll now” immediately because of the staged rollout. Start by making Windows Update “ready,” then check again later.
If “Enroll now” appears: How to enroll (safe, simple steps)
- Open Settings → Update & Security → Windows Update.
- Click Enroll now (the ESU enrollment link).
- If you’re signed in with a local account, follow the prompt to sign in with a Microsoft account.
- Follow the on-screen steps and choose an enrollment option that’s offered to you (options can vary by region and may change over time).
- Repeat on other PCs if needed (Microsoft describes enrolling multiple devices under one Microsoft account).
✅ Good news: If you enroll later, you typically won’t “miss” protection—security updates released since ESU began will still be offered once your device is enrolled (as long as the device remains eligible and able to receive updates).
“Enroll now” is missing: Why it happens and what to do
Most cases fall into one of two buckets:
- You’re not eligible yet (version/update/account/device management conditions aren’t met)
- You are eligible, but your device hasn’t been reached in the phased rollout yet
1) Confirm Windows 10 is really 22H2 (and fully patched)
Open Win+R → type winver. You should see Version 22H2.
Then go to Settings → Update & Security → Windows Update and:
- Click Check for updates
- Install everything offered (including servicing stack / cumulative updates)
- Restart when prompted (even if it feels annoying)
Why this helps: Enrollment UI is delivered through servicing and Windows Update experiences. If you’re behind on updates, you’re often behind on eligibility checks too.
2) Make sure Windows Update isn’t “blocked” (paused, metered, wrong time)
These simple settings can quietly delay update-driven UI like enrollment offers:
- Paused updates: Windows Update → make sure updates aren’t paused
- Metered connection: Settings → Network & Internet → check if your Wi-Fi/Ethernet is set as metered
- Date/Time: Settings → Time & Language → enable “Set time automatically” (a badly skewed clock can break update and sign-in flows)
3) Verify you can sign in with a Microsoft account (and you’re an admin)
Microsoft’s ESU steps for consumer devices include prompting local-account users to sign in with a Microsoft account. So if Microsoft account sign-in is blocked or broken, ESU enrollment can’t start normally.
Check account type
- Settings → Accounts → Your info
- If you see an email address (Microsoft account), good.
- If you only see a local username, you may still be able to enroll—but expect a prompt to sign in during the ESU flow.
Check Administrator rights
- Settings → Accounts → Family & other users
- Select your account → Change account type → set to Administrator (if appropriate for your home PC)
⚠️ If this is a shared family PC, changing account types affects security—make sure at least one admin account is protected with a strong password.
4) Confirm the PC is not work/school managed
Consumer ESU is aimed at personal devices. If the device is managed by a company or school (policies, MDM/Intune, domain join), your Windows Update experience may be controlled by your organization, and the consumer enrollment link may never appear.
- Settings → Accounts → Access work or school
- If you see an organization connected, that’s a clue the PC is managed.
If this is a work PC, ask IT what they’re doing for Windows 10 post-support (many organizations use commercial ESU paths instead of consumer enrollment).
5) Run Windows Update Troubleshooter (quick health check)
When Windows Update components are partially broken, devices can miss “offer” UI like enrollment prompts.
- Settings → Update & Security → Troubleshoot → Additional troubleshooters → Windows Update
After the troubleshooter runs, reboot and check Windows Update again.
6) Do a “servicing refresh” (SFC/DISM) if updates are acting weird
If Windows Update fails frequently, shows errors, or won’t install cumulative updates reliably, the ESU link may not show because the update stack isn’t healthy.
Run these in an Administrator Command Prompt / Windows Terminal (Admin):
sfc /scannow
DISM /Online /Cleanup-Image /RestoreHealth
Then reboot and run Check for updates again.
7) Understand the phased rollout (the most common “non-problem”)
Microsoft explicitly says ESU enrollment is rolling out gradually and availability is expanding as the phased rollout progresses. That means two identical Windows 10 PCs can show different options on the same day—even when both are eligible.
What to do: if your PC is 22H2, fully updated, and Windows Update is healthy, the practical move is to check periodically (for example: after Patch Tuesday updates, after restarts, or once a week).
8) Regional differences (sometimes real)
Some reporting suggests the exact enrollment requirements and offers can vary by region (for example, differences tied to regulatory environments). If your PC is eligible but you don’t see the link for an extended period, region-based availability may be part of the reason.
Still, in most cases, it’s simply rollout timing—so focus on eligibility + update health first.
FAQ
Q1. If I enroll in ESU, can I still upgrade to Windows 11 later?
Yes. ESU is designed as a bridge so you can move to Windows 11 when you’re ready. ESU doesn’t block upgrading—it just keeps Windows 10 security patches flowing for a limited time.
Q2. Do I need a Microsoft account?
Microsoft’s consumer ESU instructions describe prompting local-account users to sign in with a Microsoft account during enrollment, and coverage details commonly reference Microsoft account-based enrollment.
Q3. How long will ESU security updates continue for Windows 10?
Microsoft’s consumer ESU description states Windows 10 support ends on October 14, 2025 and consumer ESU coverage extends security updates for a limited period (commonly described through October 13, 2026 for consumer ESU).
Q4. Will Microsoft 365 (Office) keep getting security updates on Windows 10?
Microsoft states it will continue providing security updates for Microsoft 365 Apps on Windows 10 until October 10, 2028 (even though Windows 10 itself ends support in 2025), while recommending upgrading to Windows 11 for best reliability and feature support.
Summary – Quick Reference (Do this in order)
- Confirm you’re on Windows 10 Version 22H2 (
winver) - Install all updates and reboot (Windows Update must be healthy)
- Make sure updates aren’t paused and your connection/time settings aren’t blocking update services
- Be ready to sign in with a Microsoft account during enrollment
- Confirm the PC is personal (not work/school managed)
- If the link still doesn’t show, it’s usually rollout timing—check again periodically
If you’ve checked eligibility and made Windows Update healthy but still don’t see “Enroll now,” don’t panic—this is common during a phased rollout. Your best move is to stay updated, keep backups, and re-check Windows Update periodically.
✔️You might also find these helpful:
Related Articles (Internal Links)
▶︎ C Drive Space Disappearing on Windows 11? 10 Real Causes and Fixes
▶︎ Common Windows 11 Issues and Easy Fixes You Can Do Yourself
▶︎ What Is a Windows Installation Media? A Beginner’s Guide (Windows 10 & 11)

