Contents

• Windows 10 Extended Security Updates (ESU)
• Accessing and Activating ESU Keys
  1. Confirm OS & Updates
  2. Access ESU Product Keys
  3. Confirm ESU has been correctly activated
• Support
   

Windows 10 Extended Security Updates (ESU)

As of October 2025, Microsoft is no longer providing support, including security updates, for Windows 10 operating systems. Organizations who wish to extend their security updates may be eligible to request the following offers:

• Windows 10 Extended Security Updates, Year 1 – No Software Assurance
• Windows 10 Extended Security Updates, Year 2 – No Software Assurance
• Windows 10 Extended Security Updates, Year 3 – No Software Assurance
   

Accessing and Activating ESU Keys

1.  Confirm OS & Updates

Your device will need to be running the Windows 10 version 22H2 with update KB5046613 or later to complete the activation.

• Run winver → Must show Windows 10, version 22H2.
• Check Windows Update → Ensure the latest cumulative update (e.g., KB5046613 or later) is installed.
   

2.  Access ESU Product Keys

1. Go to the Microsoft 365 admin center and sign in with the Microsoft account you created. If you have trouble logging in, please submit a case on the Contact Us page under “How can we help” and you will receive support within two business days.  
    
2. Choose Billing > Your Products in the left navigation menu. Under Software, select “Windows 10 ESU Year 1 (2025-2026)".    
   • Don't see your product listed?  Follow all of the instructions and troubleshooting in TechSoup Support article, How to locate and access your products in Microsoft 365 Admin Center, to resolve the issue.
      
3. Select View product keys. The Product keys details page includes contract details and a list of all keys for that contract.  
    
4. To install the ESU key on clients, use the steps detailed on the Microsoft Learn page starting with Install and activate the ESU key. You will need to manage licensing and activation on devices using {DOMAIN}. The device needs access to the internet and to Microsoft Activation Servers. If the device can't access either the internet or the Microsoft Activation Servers, see Activate ESU keys by phone. 
   • NOTE: While customers will see a download button, it will be “greyed” out and not clickable, since there is no product to download.
      

3. Confirm ESU has been correctly activated

Verify ESU Enrollment for Windows 365 Users and Devices

Windows 365 Enterprise

To confirm ESU enrollment for Windows 365 Enterprise users:

1. Go to Microsoft 365 admin center → Billing → Licenses.
2. Select Windows 365 Enterprise → Assign licenses.
3. Confirm the user has the Windows 10 ESU Commercial license.

Windows 365 Frontline

To confirm ESU enrollment for Windows 365 Frontline users:

1. In Microsoft 365 admin center: Billing → Your Products → Windows 365 Frontline.
2. In Intune admin center: Devices → Windows 365 → All Cloud PCs → Filter by Frontline Type = Dedicated.

Verify ESU Enrollment on Devices

To verify if a device is enrolled in the ESU program:

• Deploy a PowerShell script via Intune to query the following registry key: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\ESU
• EnableESUSubscriptionCheck should be set to 1.

Verify ESU Eligibility and Update Readiness

To confirm that a device has completed enrollment and is eligible to receive ESU updates:

• Use PowerShell via Intune to query: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\ESU
• Win10CommercialW365ESUEligible should be set to 1.
• Check for Event ID 113 in Event Viewer → Applications and Services Logs → Microsoft → Windows → ClipESU. This event indicates that the W365 ESU license was successfully installed.

Support

For assistance accessing and activating your ESU keys, contact Microsoft Support.  You will need to sign into Microsoft.  Review Microsoft's “sign-in helper” information if you are unable to sign in.