.svg){kind=small}
Windows 10 will officially reach end-of-life on October 14, 2025. After that date, Microsoft will no longer provide technical support or regular security updates. For organizations still running Windows 10, whether due to legacy applications, hardware limitations, or slower refresh cycles, this introduces a real security concern.
To help bridge the gap, Microsoft is offering Extended Security Updates (ESUs) starting in November 2025. These updates will deliver critical and important security patches for three additional years, through October 2028.
What are Extended Security Updates?
Extended Security Updates, or ESUs, are a paid service from Microsoft that provides critical and important security patches for Windows 10 devices after the official end-of-life date. They are not a continuation of full support. There are no feature updates, no bug fixes, and no access to technical support. ESUs are strictly about maintaining security while you work through your upgrade or replacement plans.
Microsoft positions ESUs as a last resort for organizations that cannot move off Windows 10 in time. This could be due to legacy applications, hardware constraints, or other operational dependencies. The structure is similar to what was offered for Windows 7, and the updates are delivered through standard channels like any other Windows update.
How Pricing and Licensing Work
Extended Security Updates for Windows 10 will be available for purchase beginning in November 2025, with updates officially going live on November 11. The program will run for three years, ending in October 2028.
These updates are delivered like regular Windows updates and can be licensed through standard Microsoft channels. Pricing is structured annually per device, starting at $61 for the first year. The cost increases to $122 in the second year and $244 in the third.
This is a cumulative subscription model. If you enroll in the second or third year, you will still be required to pay for the previous years. This approach is consistent with how Microsoft handled Extended Security Updates for Windows 7 and is intended to encourage early planning.
Exceptions and Special Cases
There are a few scenarios where Extended Security Updates are either included at no cost or managed differently. These are worth considering as part of your planning:
- Azure Virtual Desktop and Windows 365
Devices running Windows 10 in these environments will receive ESUs at no additional cost. This benefit aligns with Microsoft’s approach in previous ESU programs and supports organizations moving toward cloud-based infrastructure. - Microsoft Intune and Windows Autopatch
If you are managing devices through Intune or Autopatch, Microsoft is offering a streamlined deployment process for ESUs. This can simplify rollout and reduce manual effort across your environment. - Windows 10 Home Edition
While not typically relevant in enterprise settings, ESUs will be available for Home Edition users at a reduced rate of $30 per year.
Build your ESU Plan with Guidance from the Sourcepass MCOE
Extended Security Updates are not a long-term solution, but they do offer a practical way to maintain security on Windows 10 devices that cannot be upgraded before the October 2025 deadline. With the program running through October 2028, now is the time to assess which systems need coverage and how you plan to manage them.
If you are considering ESUs or need help thinking through your options, our team of experts at the Sourcepass Center of Excellence for Microsoft is here to support you. Our Microsoft licensing consultants work with these scenarios every day and can help you evaluate your options and determine what makes the most sense for your business. Contact us today to get started.
