Windows 10 Extended Security Updates (ESU) can buy eligible PCs more time, but it is a limited security bridge—not an extension of ordinary Windows support. In the U.S., consumer enrollment costs no additional charge with the qualifying settings-sync option, 1,000 Microsoft Rewards points, or a one-time $30 purchase plus applicable tax. Consumer coverage ends October 13, 2026. Microsoft currently lists commercial Year One ESU at $61 per device. If your PC can move safely to Windows 11, migration is usually the more durable choice.
What Windows 10 ESU covers—and what it does not
Windows 10 ESU means Extended Security Updates: a limited post-support security-maintenance program for eligible, enrolled devices. Microsoft provides critical and important security updates through Windows Update during the applicable ESU period. ESU does not restore normal Windows 10 support.
| ESU provides | ESU does not provide |
|---|---|
| Critical and important security updates, as classified by Microsoft’s Security Response Center | New features, feature upgrades, design changes, or customer-requested nonsecurity fixes |
| Limited assistance for ESU activation, installation, or an ESU-related regression | General Windows technical support or broad troubleshooting unrelated to ESU |
ESU can reduce exposure to vulnerabilities addressed by those updates, but it does not make a Windows 10 PC equivalent to a fully supported Windows 11 installation. It also does not replace antivirus or endpoint detection, application and browser updates, backups, account security, or a supported operating system.
Which Windows 10 devices and dates are covered?
Standard Windows 10 support ended October 14, 2025, for the releases and editions covered by that lifecycle. Windows 10 PCs do not stop working on that date, but ordinary security fixes, feature updates, and general technical support ended. See Microsoft’s Windows end-of-support information.
#1 Best Overall
- 1.1 GHz (boost up to 2.4GHz) Intel Celeron N5030 Quad-Core
The consumer ESU program covers eligible Windows 10 version 22H2 devices through October 13, 2026, regardless of enrollment date. Commercial and educational ESU can extend coverage for up to three years after the standard end-of-support date, subject to licensing and enrollment. Microsoft describes commercial Year One as beginning in November 2025; organizations should verify purchase and activation timing in their licensing portal.
Do not assume every Windows 10 edition shares these dates. LTSC and specialized releases can have separate lifecycle schedules; check the applicable Microsoft lifecycle documentation for those devices.
Consumer ESU: eligibility, cost, and enrollment
Who is eligible?
Microsoft’s consumer program is for qualifying personal devices, not commercially managed PCs. The device must run Windows 10 version 22H2 in Home, Pro, Pro Education, or Pro for Workstations edition, have the latest Windows updates, and use an administrator Microsoft account that is not a child account. Microsoft’s consumer ESU page lists current requirements and regional availability.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
Consumer enrollment is unavailable or unsuitable for a device in kiosk mode, joined to an Active Directory domain or Microsoft Entra, enrolled in MDM, or already covered by another ESU license. Microsoft Entra-registered devices may remain eligible where fully joined or MDM-managed devices are not. If a consumer-enrolled PC later becomes part of a commercial ESU scenario, the consumer enrollment may be suspended.
Free tools Windows power users keep installed
One-click scans. No signup required.
What does consumer ESU cost?
| Enrollment route | Published U.S. cost | Qualification |
|---|---|---|
| Qualifying PC settings sync | No additional charge | Requires the applicable settings-sync condition |
| Microsoft Rewards | 1,000 points | Requires sufficient Rewards points |
| Direct purchase | $30 one time, plus applicable tax | U.S. price; regional terms and pricing may differ |
These routes provide consumer coverage through October 13, 2026; the $30 is not an annual subscription. The enrolling Microsoft account matters: its license can cover up to 10 associated devices under Microsoft’s rules. Multiple users on one enrolled PC do not each need separate enrollment, while other PCs require enrollment under the permitted account and device rules.
How to enroll
- Check the Windows version by entering
winverin Start search or the Run dialog. Confirm that it reports Windows 10 version 22H2. - Install available Windows updates and restart if prompted.
- Sign in using an administrator Microsoft account.
- Open Settings > Update & Security > Windows Update.
- Select Enroll now if the offer appears, then choose the available settings-sync, Rewards, or purchase route.
- Complete the Microsoft account or payment flow, then return to Windows Update and confirm enrollment status and any pending updates.
Enrollment may not appear if the edition or account is ineligible, updates are pending, the PC is organization-managed, availability has not reached the device or region, or another ESU license is active. If the offer is missing, check the edition under Settings > System > About, finish Windows Update and restart, verify the account type, and determine whether the PC is domain-joined, Entra-joined, or MDM-managed. Do not try to bypass the eligibility checks on a business-managed PC.
Rank #3
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
Commercial and education ESU: pricing and licensing
Commercial and educational ESU is a separate program from consumer enrollment. Microsoft’s current ESU licensing FAQ lists Year One at $61 USD per device through Volume Licensing, with the price doubling in each consecutive year. It lists a minimum purchase of one license; ESU is purchased by year, not for a partial year.
| Commercial ESU year | Planning figure per device |
|---|---|
| Year One | $61 |
| Year Two | $122 |
| Year Three | $244 |
| Three-year total | $427 |
The later-year figures and three-year total are arithmetic based on Microsoft’s published doubling rule, not a quote. Agreement terms, reseller pricing, taxes, currency, discounts, eligibility, and purchase timing can change the actual amount. An older Microsoft education migration guide refers to a $1 Year One figure in a special or earlier context; it is not the general current commercial price. Organizations should confirm terms through their licensing agreement or authorized partner rather than use that older figure.
How organizations should enroll
- Inventory Windows 10 devices and confirm edition, version, ownership, and whether each device qualifies for this ESU path.
- Acquire the appropriate commercial ESU entitlement through Volume Licensing or an authorized licensing partner.
- Retrieve the applicable key or entitlement from the organization’s licensing channel and activate eligible devices using its current Microsoft deployment guidance.
- Deploy updates through the organization’s existing management infrastructure, then track activation and update compliance by device and ESU year.
- Assign each covered device a Windows 11 migration, replacement, or retirement date and remove it from the ESU plan as it exits.
Microsoft says ESU keys shown in the Microsoft 365 admin center are not usable until the Windows 10 end-of-support date, when the defined coverage period begins. The activation and deployment workflow can vary across Volume Licensing, cloud entitlement, Intune, Configuration Manager, WSUS, and Windows 365. Use the guide for the organization’s specific licensing and management channel rather than applying a universal command or registry procedure.
Rank #4
- EFFORTLESS EVERYDAY PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 Home system, delivering reliable, low-power efficiency for daily tasks like document editing, email, online classes, and web browsing
- 15.6-INCH FULL HD DISPLAY: Enjoy immersive visuals on the 15.6" FHD (1920x1080) anti-glare screen with micro-edge bezels. Delivers clear details and comfortable viewing for long study sessions, working on spreadsheets, and video playback
- RESPONSIVE MULTITASKING & STORAGE: Built with 4GB LPDDR4 RAM and 128GB eMMC storage for smooth daily essential use. Expand your storage by up to 1TB via the integrated TF card slot to easily store movies, photos, and working files
- ADVANCED CONNECTIVITY: Outfitted with 2x Full-Featured Type-C ports for data transfer, fast charging, and dual-monitor output, alongside 2x USB 3.2 Gen1 ports and a 3.5mm audio jack for complete peripheral compatibility
- LIGHTWEIGHT & SILENT OPERATION: Slim and portable for effortless travel or commuting. Features a 1MP HD webcam for remote meetings, 38Wh battery with 45W Type-C fast charging, and a fanless silent design for peaceful work environments.
When cloud desktops have no additional ESU license charge
Microsoft lists no additional ESU license charge for eligible Windows 10 virtual machines or relevant endpoints in scenarios including Windows 365, Azure Virtual Desktop, Azure virtual machines, Azure Dedicated Host, Azure VMware Solution, Azure Local, Azure Stack Hub, and Azure Stack Edge. That does not make the cloud service free: the applicable subscription and compute, storage, networking, management, and support costs still apply.
For Windows 365-connected local endpoints, ESU entitlement can depend on an active Windows 365 subscription and specific eligibility, licensing, policy, sign-in, and connectivity requirements. Administrators may need to enable the relevant policy or registry configuration, and devices must connect regularly to Microsoft services to maintain eligibility. See Microsoft’s Windows 365 ESU implementation guidance.
A cloud desktop can suit organizations with incompatible local hardware, centralized desktop needs, and reliable connectivity, provided their applications work in that environment. Model recurring subscription, identity, storage, networking, latency, data governance, and support costs; for a small fleet, replacing PCs may be simpler or less expensive.
Recommended Free Tools
Best Value
- 【Efficient Performance】 Powered by Intel Core i3 processor (2 cores, 4 threads, up to 3.4GHz) with 12GB RAM and 256GB SSD. Handles multitasking, office software, online classes, and HD video streaming smoothly. Integrated Intel UHD Graphics 620
- Backlit Keyboard & Complete Package】Comes with a cool backlit keyboard. Comes with awebcam, dual stereo speakers (8Ω/1.0W each), DC charger, and user manual – ready for late-night studying, online classes, video conferencing, and daily productivity
- 【Vibrant Display】 15.6-inch Full HD (1920x1080) anti-glare screen with 16:9 aspect ratio delivers crisp images and vivid colors – perfect for studying, watching lectures, or entertainment. Thin-bezel design maximizes viewing area
- 【Fast Connectivity & Expansion】 Equipped with WiFi 6 (802.11ax) and Bluetooth 5.2 for stable, high-speed wireless. Features 3 x USB 3.0, HDMI 2.1, Type-C (supports PD3.0 fast charging), and a TF card slot expandable up to 2TB – easily connect external monitors, mice, drives, or expand storage for all your files
- 【Long Battery Life & Portable】 Built-in 11.55V 5000mAh/57.75Wh high-capacity battery delivers approximately 7 hours of mixed-use battery life – enough for a full day of classes and assignments. Lightweight at just 1.63kg (3.6 lbs) and 19.5mm thin, plus a compact packing size – easily slips into a backpack for campus, library, or coffee shop
Check whether a PC can move to Windows 11
For an individual PC
- Install or open Microsoft’s PC Health Check application.
- Under the Windows 11 eligibility section, select Check now.
- Review the result and any stated reason the PC is ineligible; check whether a firmware, security, or hardware setting can resolve it.
- Test important applications, drivers, peripherals, and workflows, then back up important data before upgrading.
Microsoft’s PC Health Check instructions explain the assessment and how it identifies eligibility issues. A passing result does not guarantee every application or device will work as expected. A compatibility safeguard hold can also temporarily delay an upgrade when a known driver or application issue could disrupt the experience.
Eligibility is not determined by one specification alone. Consider processor support, TPM 2.0, Secure Boot and firmware configuration, memory and storage, graphics and display requirements, drivers, OEM support, and any organization-specific security baseline. Use Microsoft’s Windows 11 upgrade eligibility information and minimum hardware requirements as the authorities for current requirements. Installing Windows 11 on unsupported hardware is not a sound default for business or security-sensitive use because it can create lifecycle, driver, compliance, and support problems.
For an organization
Organizations using Intune, co-management, or Configuration Manager with tenant attach can use Endpoint analytics for device-by-device Windows 11 readiness information. Microsoft’s Intune Windows 11 deployment guidance covers feature-update policies and deployment planning. Microsoft also notes that incorrectly targeting an ineligible device with a Windows 11 policy may prevent it from receiving expected Windows 10 feature updates until it is removed from that policy.
Choose the least costly safe bridge—not just the lowest sticker price
| Option | Better fit when | Cost and trade-off to weigh |
|---|---|---|
| Upgrade the existing PC to Windows 11 | The device passes readiness checks and application and driver testing is complete | Deployment and testing effort; it preserves the existing hardware if it has enough service life |
| Consumer ESU | An eligible personal PC needs a short runway for replacement, testing, or migration | U.S. routes are settings sync at no additional charge, 1,000 Rewards points, or $30 one time plus tax; coverage ends October 13, 2026 |
| Commercial ESU | A controlled, inventoried business fleet cannot finish migration before support ends | Published Year One is $61 per device, with the price doubling each year; creates an additional deadline and compliance-tracking work |
| Replace the PC | CPU, TPM, firmware, performance, battery, or service-life limitations make migration impractical | Hardware, deployment, data migration, and downtime costs; buys a supported platform when appropriately selected |
| Windows 365 or Azure Virtual Desktop | Local hardware is unsuitable and the organization needs a centrally hosted desktop | Recurring cloud, identity, network, storage, and management costs; requires reliable connectivity and compatible workloads |
| Retire or isolate the device | The PC cannot be supported safely and no viable upgrade or replacement is ready | May disrupt work, but continued use without applicable security updates leaves a growing exposure |
For budgeting, consumer direct-purchase cost can be estimated as the number of eligible PCs enrolled at the U.S. one-time price, subject to the account’s 10-device limit and regional terms. A commercial first-year estimate is eligible devices multiplied by $61; a three-year planning estimate is devices multiplied by $427 if the published doubling rule applies without discounts or special terms. These calculations exclude applicable taxes and agreement-specific pricing. Replacement budgeting should include the device, deployment, data migration, and downtime; cloud desktop budgeting should include subscription, identity, management, storage, network, and support.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →For a business fleet, create a device-level inventory before buying: identifier, edition and version, hardware readiness, owner, critical applications, ESU status, planned migration or replacement date, and retirement date. That helps avoid paying for machines that can migrate now and turns ESU into a dated exception rather than a substitute for a migration plan.
Quick Recap
Decision checklist
- Upgrade now: The PC passes Windows 11 readiness checks, critical applications and peripherals have been tested, and you can back up and deploy safely.
- Use ESU temporarily: The device qualifies, migration or replacement has a defined near-term date, and the cost of a short bridge is lower than the disruption of rushing.
- Replace the PC: Hardware limits cannot be remediated, the machine is near end of service life, or its battery, storage, memory, or performance would remain a problem after an OS upgrade.
- Consider a cloud desktop: The organization can support the recurring cost and connectivity needs, and its applications and data-governance requirements fit a hosted environment.
- Retire or isolate: No supported path is feasible and continued use would put important data or operations at unacceptable risk.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
