What Is Extended Security Updates (ESU) Program for Windows 10?

As of 14 October 2025, Microsoft has officially ended support for Windows 10. This means no more free security updates, patches, or technical support — leaving any devices still running Windows 10 potentially vulnerable to new cyber threats.

To help businesses that need more time to upgrade, Microsoft has introduced the Windows 10 Extended Security Updates (ESU) programme. It’s a temporary bridge that allows continued access to essential security updates while you plan your transition to Windows 11.

Here’s what your business needs to know, and how Impact IT Solutions can help you stay protected.

What is Microsoft’s Extended Security Updates (ESU) Programme?

The Windows 10 ESU programme provides critical and important security updates (as defined by Microsoft’s Security Response Center) for eligible devices, helping to reduce exposure to known vulnerabilities even after official support has ended.

However, ESU only includes security patches, there are no feature updates, enhancements, or technical support as part of this service. It’s a stopgap solution designed to keep businesses safe while completing their migration plans.

Who Can Use Windows 10 ESU?

The ESU programme applies to devices running Windows 10, version 22H2, including Home, Professional, Pro Education and Workstations. To be eligible, devices must:

• Have the latest Windows updates installed
• Be linked to a Microsoft account with administrator access
• Not be joined to Active Directory or Entra ID (unless only registered)
• Not be managed via MDM or operating in kiosk mode

If a device later becomes part of a managed enterprise environment, consumer ESU access may be suspended until it no longer meets those conditions.

What’s Included – and What’s Not

Included:

• Ongoing security updates rated critical or important
• Automatic delivery through Windows Update
• Coverage for up to 10 devices per Microsoft account

Not included:

• Feature or performance updates
• Non-security fixes
• Technical support from Microsoft

Why ESU Matters for Businesses

If your organisation still relies on Windows 10 due to legacy software, hardware constraints, or operational dependencies, enrolling in ESU ensures you remain protected from newly discovered vulnerabilities.

However, ESU is not a long-term solution. It’s designed to give you breathing space while completing your migration to Windows 11 or another supported operating system. Once the ESU period ends, no further protection will be available.

Our Recommendation

At Impact IT Solutions, we advise all businesses to:

• Audit your devices – identify which systems still run Windows 10
• Plan your migration roadmap – schedule upgrades to Windows 11 where feasible
• Enrol eligible devices in ESU – maintain security during the transition
• Work with your IT provider – ensure compliance, updates, and licensing are managed correctly

We can help assess your upgrade readiness, manage ESU enrolment, and design a secure migration plan that fits your business needs and budget.