Microsoft has subtly altered the trajectory of Windows 10’s lifecycle, particularly for the millions of users still relying on this venerable operating system. While many resources continue to cite October 13, 2026, as the final date for support, the reality is that the cutoff has been extended to October 12, 2027, thanks to a one-year extension of the consumer security program announced in June.
Continuity for Enrolled Devices
For those PCs already enrolled in the Extended Security Updates (ESU) program, the upcoming October Patch Tuesday will proceed as scheduled, ensuring that coverage continues seamlessly. Microsoft’s documentation reassures users that devices in the program will receive updates automatically, requiring no additional action from them.
A Second Chance for Unenrolled Machines
The situation is more pressing for devices that have not enrolled in the program. With support for Windows 10 officially ending on October 14, 2025, these machines have been operating without security patches for nearly a year. However, Microsoft is keeping the enrollment window open until October 12, 2027, allowing unenrolled devices to retroactively receive critical and important updates released since the end of support. It’s worth noting that the longer a device remains unenrolled, the more vulnerable it becomes.
Options for Consumers
For consumers within the European Economic Area, ESU can be accessed at no extra cost, but there’s a catch. Microsoft stipulates that if users do not maintain a Microsoft account on their PC, they risk losing access to updates after 60 days. This requirement particularly impacts those who prefer local accounts or revert to them after enrollment. As an alternative, Microsoft offers a one-time purchase option of , allowing users to keep their local accounts while still receiving updates. Both paths remain available until the October 2027 deadline.
Eligibility Criteria
To qualify for the ESU program, devices must meet specific criteria, including running Windows 10 version 22H2 in one of the supported editions—Home, Pro, Pro Education, or Workstations—with the latest updates installed. Additionally, a licensing preparation package identified as KB126256 is necessary, and the signed-in account must have administrator privileges, excluding child accounts.
- Devices in kiosk mode, Active Directory domains, or Microsoft Entra are not eligible.
- Devices managed through mobile device management are also excluded.
For families, the process is simplified: once a single user enrolls a PC, all other users on that device are automatically covered. However, a child’s PC must be enrolled by a parent using their administrator account.
Addressing Known Issues
Microsoft’s history with ESU reporting has had its challenges. Users have reported discrepancies in ESU status displays, particularly after the October 2025 update, which led to some enrolled devices showing incorrect end-of-support messages. Microsoft addressed this with a fix in November, though it inadvertently introduced new issues for some users attempting to install the ESU license. Fortunately, as of 2026, there have been no new ESU-related problems reported.
Updates Beyond ESU
Interestingly, certain software on Windows 10 continues to receive updates irrespective of ESU status. Microsoft 365 Apps will receive feature updates until version 2608 and security updates until October 10, 2028. Similarly, the OneDrive app on Windows 10 22H2 is supported until the same date, along with Microsoft Edge and the WebView2 runtime.
However, it’s crucial to note that the operating system itself remains unprotected without ESU; patches for Office or browsers do not address vulnerabilities in the underlying OS. According to StatCounter, a significant portion of users—25.15 percent of Windows desktops in Germany—were still utilizing Windows 10 as of August 2026. For these users, the focus should be on verifying Windows Update settings and ensuring the correct Microsoft account is signed in.
Users can check their ESU status under Settings, Update & Security, Windows Update. If a device is eligible but not yet enrolled, a link to sign up will be available in that same section.
