A lot of people I help with computers think Windows 10 stopped getting security updates in October 2026. That was the date everyone quoted for the free extended updates, and when it passed, plenty of home PCs here in Kathmandu just carried on without anyone checking. But Microsoft quietly moved that date. Free security updates for home Windows 10 PCs now run to 12 October 2027, and enrollment is open again for PCs that never joined.
This post covers how to check whether your PC is covered, how to enroll it for free, and the handful of reasons the "Enroll now" link doesn't show up. That last part is where most people get stuck.
Quick answer
Microsoft has extended the Windows 10 consumer Extended Security Updates (ESU) program to 12 October 2027. PCs already enrolled carry on automatically. To enroll a new one, it must run Windows 10 22H2 (Home, Pro, Pro Education or Workstations) with the latest updates, including the licensing preparation package KB5126256. Sign in with a Microsoft account that is an administrator, go to Settings > Update & Security > Windows Update and click Enroll now. Choosing to back up your PC settings makes it free. The other options are 1,000 Microsoft Rewards points or a one-time US$30. Domain-joined and work-managed PCs can't use it.
What actually changed
Windows 10 support ended on 14 October 2025. To give home users more time, Microsoft ran a one-year consumer ESU program that kept security patches coming until 13 October 2026. Most articles you'll find still say that date.
In late June 2026 Microsoft added a year. An editor's note dated 25 June 2026 on the Windows Experience Blog says the program for personal devices "is being provided for an additional year". Microsoft's ESU page now says you can enroll "any time until the program ends on October 12, 2027".
| Date | What happened |
|---|---|
| 14 October 2025 | Windows 10 end of support. No more free updates without ESU |
| 13 October 2026 | The original end of consumer ESU (the date most guides still quote) |
| 25 June 2026 | Microsoft adds a year for personal devices |
| 12 October 2027 | New end of consumer ESU. Enrollment open until then |
If your PC was already enrolled, you don't need to do anything. Coverage continues to the new date on its own. The rest of this post is for PCs that never enrolled, or that you aren't sure about.
Step 1: Check the PC can enroll
ESU is picky, and the enroll link simply doesn't appear if anything is off. Check these first:
| Requirement | How to check |
|---|---|
| Windows 10 version 22H2 | Press Win+R, type winver. It should say Version 22H2 |
| Home, Pro, Pro Education or Workstations edition | Settings > System > About > Edition |
| Latest updates, including KB5126256 | Settings > Update & Security > Windows Update > View update history |
| A Microsoft account with admin rights (not a child account) | Settings > Accounts > Your info |
| Not joined to a domain, Microsoft Entra or MDM, not a kiosk | See the PowerShell check below |
If you'd rather check everything at once, open PowerShell (right-click Start, then Windows PowerShell) and run:
Get-ComputerInfo -Property WindowsProductName, OsDisplayVersion, OsBuildNumber
Get-HotFix -Id KB5126256
(Get-CimInstance Win32_ComputerSystem).PartOfDomain
dsregcmd /status | findstr /i "AzureAdJoined DomainJoined"What you want to see: 22H2 as the display version, the KB5126256 line found (an error means it isn't installed yet), False for PartOfDomain, and NO for both AzureAdJoined and DomainJoined. Don't worry if the product name looks odd on some machines; the version and build are what matter.
Step 2: Install every pending update first
This is the step people skip. The enroll option depends on the licensing preparation package (KB5126256) and the latest cumulative update. On a PC that's been ignoring Windows Update for months, there's a queue to get through.
- Go to Settings > Update & Security > Windows Update and click Check for updates.
- Install everything, including the optional quality update if one is listed.
- Restart, then check again. Keep going until it says you're up to date.
On an older laptop with a hard disk this can take an hour or more, so do it when nobody needs the machine. Plug it in, too. A laptop that dies halfway through a cumulative update is a bad evening.
Step 3: Enroll
Once the PC is up to date and you're signed in with an admin Microsoft account:
- Go to Settings > Update & Security > Windows Update.
- Click Enroll now. If you're on a local account, Windows asks you to sign in with a Microsoft account at this point.
- Pick how you want to pay for it.
| Option | Cost | My take |
|---|---|---|
| Back up your PC settings (Windows Backup) | Free | The one most people should pick. It syncs settings to your Microsoft account |
| Redeem 1,000 Microsoft Rewards points | Free if you have the points | Rewards isn't available in every country, so this may not show for you |
| One-time purchase | US$30 or local equivalent, plus tax | Only if you don't want settings synced. In Nepal you'll need a card that works for international payments |
If you already back up your settings, Windows skips the choice and just enrolls you. When it's done, the Windows Update page says the PC is enrolled in Extended Security Updates.
Got more than one PC?
One ESU license covers up to 10 devices on the same Microsoft account. On each extra PC, sign in with that account, open Windows Update, and use Enroll now, then Add device. For a family with an old desktop and two old laptops, that's one account and no extra cost.
Why "Enroll now" isn't showing
This is the part that eats the most time. In rough order of how often I'd expect to see it:
- Updates aren't finished. If KB5126256 or the latest cumulative update is missing, there's no link. Go back to Step 2 and keep checking until Windows says it's up to date.
- Wrong version. 21H2 or older can't enroll. Update to 22H2 through Windows Update first. If 22H2 won't offer itself, Microsoft's Windows 10 download page has the Update Assistant.
- Local account. Usually Windows prompts you to switch, but on some PCs the link only appears after you're signed in with a Microsoft account. The account also has to be an administrator, so a standard family member's account won't work.
- It's an office PC. If the laptop came from work and is still joined to the company domain, Microsoft Entra or Intune, consumer ESU isn't for it. Businesses buy ESU through their volume licensing instead. Ask your IT team before you leave the domain, because that can break access to company files and Wi-Fi.
- The rollout hasn't reached you yet. If everything above checks out, restart, wait a day and look again. Microsoft shows the link in notifications and in Settings, and it doesn't appear on every PC at the same moment.
Is this the right move, or should you upgrade?
ESU is a delay, not a fix. It gives you security patches only: no new features, no bug fixes beyond security, and after 12 October 2027 nothing at all. Here's how I'd decide:
- The PC meets Windows 11's requirements: upgrade. It's free, and you won't be doing this again next year. My guide to installing Windows 11 without a Microsoft account helps if you want a clean install.
- The PC can't run Windows 11 but works fine: enroll in ESU now, and use the year to save for a replacement or try Linux on it.
- The PC is an office or domain machine: this program isn't for it. Talk to whoever manages your licences.
How to undo it
There isn't much to undo. Enrolling doesn't change Windows itself, it just lets the PC receive the extra security updates. If you picked the free option and later want to stop syncing settings, you can turn off settings sync in Settings > Accounts > Windows backup. Microsoft's page doesn't say whether turning sync off later affects an existing enrollment, so if you want to stay covered, I'd leave it on until October 2027.
A few things I learned
- Check dates against Microsoft, not old articles. Most guides still say October 2026 because they were written before the extension. Microsoft's own ESU page is the one to trust.
- Updates first, enroll second. Nearly every "the button isn't there" problem is a PC that's behind on updates.
- Work laptops are a different program. Consumer ESU deliberately excludes anything domain-joined or managed, so don't try to force it.
- One account, ten PCs. Enroll the whole family's old machines under one Microsoft account and you only do the paperwork once.
If you're planning the move to Windows 11 instead, these may help: installing Windows 11 over the network with Serva, and why Windows 11 23H2 Enterprise and Education updates ended this month. If you look after an office full of old Windows 10 PCs and want help planning the upgrade, that's exactly the kind of work my IT services cover.
Frequently asked questions
Does Windows 10 still get security updates after October 2026?
Yes, if the PC is enrolled in consumer Extended Security Updates. Microsoft extended the program for personal devices to 12 October 2027. PCs that were already enrolled continue automatically, and unenrolled PCs running Windows 10 22H2 can still join for free.
How do I get Windows 10 ESU for free?
Sign in with an administrator Microsoft account, install all updates, then go to Settings, Update and Security, Windows Update and click Enroll now. Choose the option to back up your PC settings with Windows Backup. That option costs nothing. Redeeming 1,000 Microsoft Rewards points is also free if available.
Why is the Enroll now button missing in Windows Update?
Usually the PC is missing updates, especially the licensing preparation package KB5126256, or it isn't on Windows 10 22H2. It also won't appear for child accounts, non-admin accounts, or PCs joined to a domain, Microsoft Entra or MDM. Install everything, restart and check again.
Can I use Windows 10 ESU with a local account?
Enrollment needs a Microsoft account with administrator rights, because the ESU license is attached to that account. If you use a local account, Windows asks you to sign in with a Microsoft account when you click Enroll now. Child accounts cannot enroll.
How many PCs does one Windows 10 ESU license cover?
Up to 10 devices. Sign in to each extra PC with the same Microsoft account, open Windows Update, choose Enroll now and then Add device. This works whether you enrolled the first PC for free or paid the one-time fee.
Can a work or domain-joined PC use consumer ESU?
No. Consumer ESU excludes PCs joined to Active Directory, Microsoft Entra or MDM, and kiosk devices. Organisations get Windows 10 ESU through volume licensing instead. Leaving a company domain to enroll can break access to work resources, so ask your IT team first.